$ rpki-client -vvf repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft File: C453630F1ABE5FF992F948A75DB4587776AD02EC.mft (raw, json) Hash identifier: ZLByDU7lqK+brTqL0QsYsqhoi/MzPcZ2mRy4Y7E28tc= Subject key identifier: 01:5E:77:A0:F8:2A:4B:88:CE:97:14:D5:8C:23:68:D3:40:99:69:7A Authority key identifier: C4:53:63:0F:1A:BE:5F:F9:92:F9:48:A7:5D:B4:58:77:76:AD:02:EC Certificate issuer: /CN=C453630F1ABE5FF992F948A75DB4587776AD02EC Certificate serial: 1998530A26B7779AF2D73D781E3F180A729EE6B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft Manifest number: F5 Signing time: Tue 04 Nov 2025 04:01:03 +0000 Manifest this update: Tue 04 Nov 2025 03:56:03 +0000 Manifest next update: Fri 07 Nov 2025 08:38:03 +0000 Files and hashes: 1: 3135372e32302e3230392e302f32342d3234203d3e20313532343136.roa (hash: 5QnTSlvCk726GieVYJxHVbjFxqMGOnNRBgYZOV3yvc0=) 2: C453630F1ABE5FF992F948A75DB4587776AD02EC.crl (hash: OA3e6n8h1nZaegPBevtPDCptZVR+9Dt/WMtOfJOA65w=) 3: 3135372e32302e3230382e302f32332d3233203d3e20313532343136.roa (hash: 3018KqaCeIgQPe+mGEUAX9QQkpcPilw0dwx6vwsisv4=) 4: 3135372e32302e3230382e302f32342d3234203d3e20313532343136.roa (hash: 5HrjYhzGl966YcRXgphYt2j/Sbh0/oaXfGdM2Fz9Phg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.crl rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 08:38:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:98:53:0a:26:b7:77:9a:f2:d7:3d:78:1e:3f:18:0a:72:9e:e6:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C453630F1ABE5FF992F948A75DB4587776AD02EC Validity Not Before: Nov 4 03:56:03 2025 GMT Not After : Nov 7 08:38:03 2025 GMT Subject: CN=015E77A0F82A4B88CE9714D58C2368D34099697A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:36:92:7c:e2:11:0c:9d:67:a0:77:1f:79:8a: 17:9e:89:43:be:c0:d4:72:6d:65:a0:bf:1a:b4:06: e6:ac:42:0c:a0:2a:bf:9b:0b:92:ca:d3:4e:f0:ae: f3:85:99:bf:b9:fc:17:dc:8b:0d:9d:cb:61:aa:f8: 1e:2a:aa:1b:37:6e:d4:23:f1:62:3d:4b:09:59:fe: 64:a6:57:b4:01:45:03:3b:29:0c:4f:f2:e0:6d:b7: be:84:67:02:34:35:91:c3:5d:39:c2:18:ef:ea:a5: 64:95:56:0c:d7:7b:92:68:9a:2e:4c:f9:64:3e:99: 3f:30:4f:b0:35:52:ae:25:c9:71:03:88:48:90:25: cc:75:d7:b7:08:02:fc:90:ac:7c:93:56:d8:ec:f6: a9:5d:00:56:56:49:de:72:5b:e1:c8:93:59:01:e2: 6e:07:59:eb:f6:b3:64:0a:80:cf:2f:b2:87:b6:98: b9:0b:0c:6b:97:7c:07:e3:19:0f:e6:a1:4f:65:6d: 00:05:7d:f6:d3:0e:fe:ef:44:f5:b9:05:db:b1:16: be:df:e7:8d:cf:a3:17:e4:f3:a4:4e:f7:7c:f5:66: de:09:82:5a:12:a1:4b:05:00:1d:43:0d:35:c2:a0: cd:f2:2b:4f:cb:0b:33:d0:d0:d7:a2:fd:02:8b:b7: aa:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5E:77:A0:F8:2A:4B:88:CE:97:14:D5:8C:23:68:D3:40:99:69:7A X509v3 Authority Key Identifier: keyid:C4:53:63:0F:1A:BE:5F:F9:92:F9:48:A7:5D:B4:58:77:76:AD:02:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:bf:86:cf:0b:9d:23:c5:c1:56:0c:8b:12:1c:ca:b7:37:87: c2:f3:a4:9e:2d:6e:f7:f0:3a:fe:87:0d:d1:59:87:db:32:21: 74:74:60:06:6f:76:8f:6c:95:8d:11:6d:2b:cc:d1:56:f3:36: 55:6f:9d:bb:1c:55:fa:51:fa:24:37:10:a4:a6:a5:33:8f:1d: 78:d0:9c:f4:55:07:f2:c6:42:e5:98:a0:07:e9:58:6c:36:4b: ee:e9:a2:7c:13:1c:30:1e:da:5d:7d:19:52:df:d6:2a:e5:35: fe:4a:73:12:8c:cf:3f:0e:b8:91:b7:1b:bc:a5:60:3e:a4:5b: 71:9b:f0:7e:b2:4a:c3:57:c3:67:23:5d:16:f4:3b:d6:91:85: e9:e3:df:54:4b:83:b3:06:9d:4c:5f:1f:0a:95:3b:86:c2:a7: d4:6a:0b:65:bd:a5:93:15:57:72:b0:0c:fd:27:0e:b9:49:0e: 29:3f:ef:92:e5:cf:0d:c3:b6:a5:b7:e9:6b:b3:42:6f:ea:10: 31:22:08:9d:b0:42:35:dc:23:46:86:95:fe:41:f6:f3:8b:0d: 16:c5:b3:d0:d6:5f:bd:89:3b:31:87:46:9a:08:82:7d:c6:74: 02:26:00:5c:f4:93:da:19:1a:45:da:2f:0b:e9:e9:4f:05:92: 12:94:cd:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGZhTCia3d5ry1z14Hj8YCnKe5rQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1MzYzMEYxQUJFNUZGOTkyRjk0OEE3NURCNDU4Nzc3 NkFEMDJFQzAeFw0yNTExMDQwMzU2MDNaFw0yNTExMDcwODM4MDNaMDMxMTAvBgNV BAMTKDAxNUU3N0EwRjgyQTRCODhDRTk3MTRENThDMjM2OEQzNDA5OTY5N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmNpJ84hEMnWegdx95iheeiUO+ wNRybWWgvxq0BuasQgygKr+bC5LK007wrvOFmb+5/Bfciw2dy2Gq+B4qqhs3btQj 8WI9SwlZ/mSmV7QBRQM7KQxP8uBtt76EZwI0NZHDXTnCGO/qpWSVVgzXe5Jomi5M +WQ+mT8wT7A1Uq4lyXEDiEiQJcx117cIAvyQrHyTVtjs9qldAFZWSd5yW+HIk1kB 4m4HWev2s2QKgM8vsoe2mLkLDGuXfAfjGQ/moU9lbQAFffbTDv7vRPW5BduxFr7f 543Poxfk86RO93z1Zt4JgloSoUsFAB1DDTXCoM3yK0/LCzPQ0Nei/QKLt6ovAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAV53oPgqS4jOlxTVjCNo00CZaXowHwYDVR0j BBgwFoAUxFNjDxq+X/mS+UinXbRYd3atAuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzQwOTRkMi1lMThkLTQ4NDAtODRmYS1jNTc1N2FmNTgwZjEvMC9DNDUzNjMwRjFB QkU1RkY5OTJGOTQ4QTc1REI0NTg3Nzc2QUQwMkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzQ1MzYzMEYxQUJFNUZGOTkyRjk0OEE3NURCNDU4Nzc3NkFE MDJFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGM0MDk0ZDItZTE4ZC00ODQwLTg0 ZmEtYzU3NTdhZjU4MGYxLzAvQzQ1MzYzMEYxQUJFNUZGOTkyRjk0OEE3NURCNDU4 Nzc3NkFEMDJFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKm/hs8LnSPFwVYMixIcyrc3h8LzpJ4tbvfw Ov6HDdFZh9syIXR0YAZvdo9slY0RbSvM0VbzNlVvnbscVfpR+iQ3EKSmpTOPHXjQ nPRVB/LGQuWYoAfpWGw2S+7ponwTHDAe2l19GVLf1irlNf5KcxKMzz8OuJG3G7yl YD6kW3Gb8H6ySsNXw2cjXRb0O9aRhenj31RLg7MGnUxfHwqVO4bCp9RqC2W9pZMV V3KwDP0nDrlJDik/75Llzw3DtqW36WuzQm/qEDEiCJ2wQjXcI0aGlf5B9vOLDRbF s9DWX72JOzGHRpoIgn3GdAImAFz0k9oZGkXaLwvp6U8FkhKUzdU= -----END CERTIFICATE-----Generated at Wed Nov 5 02:32:21 2025 by rpki-client