$ rpki-client -vvf repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.mft File: 5B558AD01277C8212C974318B6352FB28BF683AD.mft (raw, json) Hash identifier: IVkpySFXu9SB3V3guE77UBdsJm5S3Jc771/MRCpRvLo= Subject key identifier: 96:0A:B9:CB:19:EB:20:F5:81:14:A8:D1:40:FB:2E:1B:5B:5D:77:27 Authority key identifier: 5B:55:8A:D0:12:77:C8:21:2C:97:43:18:B6:35:2F:B2:8B:F6:83:AD Certificate issuer: /CN=5B558AD01277C8212C974318B6352FB28BF683AD Certificate serial: 5324A14B6FBA0A15FEC8829B30C020C45E3880AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B558AD01277C8212C974318B6352FB28BF683AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.mft Manifest number: 01D4 Signing time: Tue 04 Nov 2025 20:10:52 +0000 Manifest this update: Tue 04 Nov 2025 20:05:52 +0000 Manifest next update: Fri 07 Nov 2025 23:10:52 +0000 Files and hashes: 1: 5B558AD01277C8212C974318B6352FB28BF683AD.crl (hash: FhsXNYq2sKupcBZsnPDL9npxdx6+dRfZr5mpDilNbok=) 2: 3130332e3139362e34302e302f32332d3233203d3e20313530323030.roa (hash: cCo2j3DaRw7ST6xKRFKIc+Fk9WAeawaQpPCFHRoRW38=) 3: 3130332e3139362e34302e302f32342d3234203d3e20313530323030.roa (hash: IAfCc36b+ZuLfkNXk9UGXWqhcIrd0+kkw00XJdFWpic=) 4: 3130332e3139362e34312e302f32342d3234203d3e20313530323030.roa (hash: ZDqeHH9c3Ge8DQKLptNu9Fe3zE45Y025wBi0fQHXBeg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.crl rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B558AD01277C8212C974318B6352FB28BF683AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:24:a1:4b:6f:ba:0a:15:fe:c8:82:9b:30:c0:20:c4:5e:38:80:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B558AD01277C8212C974318B6352FB28BF683AD Validity Not Before: Nov 4 20:05:52 2025 GMT Not After : Nov 7 23:10:52 2025 GMT Subject: CN=960AB9CB19EB20F58114A8D140FB2E1B5B5D7727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4a:da:92:8b:2c:0c:a1:7e:82:07:37:f1:ee: 01:ab:00:2d:32:ce:aa:8d:7a:9b:d1:91:d3:1d:e1: 2b:83:82:82:e6:07:44:51:7b:de:f7:47:b8:8f:40: fd:db:75:af:96:c6:e5:79:7a:d8:a3:5a:03:4e:8b: c4:53:a3:94:ac:9a:fe:1a:fd:12:f7:0c:91:7a:4d: 1a:d6:c5:08:1a:27:86:9c:a4:ad:d6:a7:51:dd:e1: b4:91:cc:93:32:24:59:19:65:38:ee:b8:3b:67:5c: 87:64:80:3d:d6:8d:96:cd:e5:a1:d8:d0:a3:65:da: 65:d0:d6:09:15:be:a7:4d:82:2c:f0:e3:a7:a5:08: dd:19:51:f5:30:ad:05:86:c2:d2:f8:b5:ac:46:fb: 58:bf:67:81:bd:0b:a8:0a:1e:88:88:9d:3e:a6:05: 87:16:79:93:1b:18:79:35:a5:4f:35:e6:29:9a:e6: a0:2c:79:e0:10:b3:5a:99:41:81:54:0c:df:73:74: 8b:62:ec:e6:a6:6f:82:a9:b4:2d:4c:61:6e:d2:bf: 86:5a:0c:62:76:26:4b:d1:6a:a4:24:80:26:e7:07: ff:4a:1e:84:4b:8a:ea:79:72:01:55:84:8a:31:ae: 46:2f:7f:ee:a3:00:52:d8:21:45:ce:a7:94:c9:ef: 2f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:0A:B9:CB:19:EB:20:F5:81:14:A8:D1:40:FB:2E:1B:5B:5D:77:27 X509v3 Authority Key Identifier: keyid:5B:55:8A:D0:12:77:C8:21:2C:97:43:18:B6:35:2F:B2:8B:F6:83:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B558AD01277C8212C974318B6352FB28BF683AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:5a:1b:25:f8:b9:bf:97:f4:a2:26:02:7b:2c:2f:74:ec:e5: fc:67:50:53:50:1e:47:bf:52:45:84:0a:8b:9f:a8:13:4d:fe: 62:16:dd:07:27:f9:9b:2a:72:22:28:8f:7b:f3:16:4f:53:e8: 91:7d:68:b0:b4:2f:6a:7f:3a:ed:88:86:9d:f5:81:ec:e9:b3: 16:17:d0:7e:e6:68:cf:32:12:67:ee:8a:cd:6c:0a:45:da:5d: bb:b0:9a:93:07:00:17:0b:84:8f:49:cc:95:da:1b:47:52:99: b1:5c:c2:57:6b:b8:a9:00:da:db:d5:51:bd:9d:ac:00:4f:03: cb:ee:b4:30:5b:2b:d8:3b:a9:5e:98:b9:e7:cc:d0:33:e3:90: f5:6b:89:4a:71:40:ee:89:d8:84:0e:4c:65:b5:84:9b:88:29: 59:ef:f2:b3:31:9c:5d:e3:d4:18:4a:dc:fc:10:99:c8:1d:c1: df:c2:08:ae:51:96:61:ce:fc:ee:1a:6e:ea:4c:3c:10:51:70: 53:d6:73:43:36:35:6d:f4:20:73:34:dc:40:e8:c9:c7:83:af: 28:ad:6f:96:b8:46:13:69:01:6a:1b:65:b4:69:c2:64:27:78: 33:dc:79:6f:f2:08:d7:61:f2:7d:74:cb:c8:9b:83:7b:7b:2b: 52:e6:95:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUyShS2+6ChX+yIKbMMAgxF44gKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI1NThBRDAxMjc3QzgyMTJDOTc0MzE4QjYzNTJGQjI4 QkY2ODNBRDAeFw0yNTExMDQyMDA1NTJaFw0yNTExMDcyMzEwNTJaMDMxMTAvBgNV BAMTKDk2MEFCOUNCMTlFQjIwRjU4MTE0QThEMTQwRkIyRTFCNUI1RDc3MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjStqSiywMoX6CBzfx7gGrAC0y zqqNepvRkdMd4SuDgoLmB0RRe973R7iPQP3bda+WxuV5etijWgNOi8RTo5Ssmv4a /RL3DJF6TRrWxQgaJ4acpK3Wp1Hd4bSRzJMyJFkZZTjuuDtnXIdkgD3WjZbN5aHY 0KNl2mXQ1gkVvqdNgizw46elCN0ZUfUwrQWGwtL4taxG+1i/Z4G9C6gKHoiInT6m BYcWeZMbGHk1pU815ima5qAseeAQs1qZQYFUDN9zdIti7Oamb4KptC1MYW7Sv4Za DGJ2JkvRaqQkgCbnB/9KHoRLiup5cgFVhIoxrkYvf+6jAFLYIUXOp5TJ7y+dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlgq5yxnrIPWBFKjRQPsuG1tddycwHwYDVR0j BBgwFoAUW1WK0BJ3yCEsl0MYtjUvsov2g60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YTViNGZhNC0zMjhjLTRjZjItYWRlMy1jODY4MTMxZDRlMGQvMC81QjU1OEFEMDEy NzdDODIxMkM5NzQzMThCNjM1MkZCMjhCRjY4M0FELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUI1NThBRDAxMjc3QzgyMTJDOTc0MzE4QjYzNTJGQjI4QkY2 ODNBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmE1YjRmYTQtMzI4Yy00Y2YyLWFk ZTMtYzg2ODEzMWQ0ZTBkLzAvNUI1NThBRDAxMjc3QzgyMTJDOTc0MzE4QjYzNTJG QjI4QkY2ODNBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA5aGyX4ub+X9KImAnssL3Ts5fxnUFNQHke/ UkWECoufqBNN/mIW3Qcn+ZsqciIoj3vzFk9T6JF9aLC0L2p/Ou2Ihp31gezpsxYX 0H7maM8yEmfuis1sCkXaXbuwmpMHABcLhI9JzJXaG0dSmbFcwldruKkA2tvVUb2d rABPA8vutDBbK9g7qV6YuefM0DPjkPVriUpxQO6J2IQOTGW1hJuIKVnv8rMxnF3j 1BhK3PwQmcgdwd/CCK5RlmHO/O4abupMPBBRcFPWc0M2NW30IHM03EDoyceDryit b5a4RhNpAWobZbRpwmQneDPceW/yCNdh8n10y8ibg3t7K1LmlQ4= -----END CERTIFICATE-----Generated at Tue Nov 4 23:03:07 2025 by rpki-client