$ rpki-client -vvf repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft File: 0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft (raw, json) Hash identifier: Cwd94lPm19k4M3vnruQ0QmN6T7VzgypQeriANoPjN6Q= Subject key identifier: CC:91:E6:74:CE:E9:83:4D:24:DA:93:AF:1C:13:CE:84:93:04:CA:D2 Authority key identifier: 0D:5D:CD:54:46:94:BB:E8:DB:99:D2:D8:DA:B9:83:14:74:5C:D9:7F Certificate issuer: /CN=0D5DCD544694BBE8DB99D2D8DAB98314745CD97F Certificate serial: 6758F56C23DC20DB26862CB723E782993FE99D46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft Manifest number: 0519 Signing time: Mon 20 Oct 2025 07:40:04 +0000 Manifest this update: Mon 20 Oct 2025 07:35:04 +0000 Manifest next update: Thu 23 Oct 2025 16:22:04 +0000 Files and hashes: 1: 3130332e3134302e3130392e302f32342d3234203d3e203538333639.roa (hash: BUjAtiDKImhm44uw2SFH6kSw2t9lwdf9XIcal9kQ1mg=) 2: 3130332e3134302e3130382e302f32342d3234203d3e203538333639.roa (hash: TU9zvXhzWTJdHe9aJGaZ4ESWd+R9UnSTLhOnKf2ldQw=) 3: 0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl (hash: uFLgEnXbdGSBd4T4qJS57ql521FjVxUKh2oF9RQHM/k=) 4: 3130332e3134302e3130382e302f32332d3233203d3e203538333639.roa (hash: 3sAJshp+EPOwtrV5/4YJuemXpZyIihe64Jp+iK5G1jY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:58:f5:6c:23:dc:20:db:26:86:2c:b7:23:e7:82:99:3f:e9:9d:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D5DCD544694BBE8DB99D2D8DAB98314745CD97F Validity Not Before: Oct 20 07:35:04 2025 GMT Not After : Oct 23 16:22:04 2025 GMT Subject: CN=CC91E674CEE9834D24DA93AF1C13CE849304CAD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:37:f3:b9:1a:3f:9a:79:ec:86:72:07:77:36: c2:0d:da:7a:d1:4a:a3:15:ec:a9:f8:ca:18:85:71: db:50:56:9a:94:c1:d7:b8:16:4f:97:da:9a:20:bc: 5c:5c:24:2a:f1:8c:a1:63:88:42:25:75:1f:39:8d: dd:d1:5e:69:66:52:47:1b:35:34:58:46:68:24:ca: e6:d3:ee:74:19:75:5e:2d:da:16:ae:2c:9c:22:86: 1d:50:78:f7:76:c0:17:54:65:cc:62:b4:fb:63:56: e6:80:62:e9:3c:b8:30:a5:86:11:69:0e:53:a6:18: cf:e3:e8:77:25:0c:0d:8e:d4:4c:7d:99:5d:40:33: 0c:05:75:e6:e8:3e:64:dc:36:64:40:73:d1:8a:da: d7:bc:8f:d0:b8:61:36:94:2e:40:de:ec:3d:50:65: b5:a5:ab:b1:83:d1:a5:c6:fb:50:86:26:15:ce:4c: 77:af:49:c2:66:fc:72:c8:fa:77:10:d9:f3:7c:81: de:1c:0d:5e:53:37:c9:ce:0d:53:12:a8:86:9d:ad: e4:a9:5c:e2:f3:18:97:8b:34:1f:22:bf:ae:3b:ce: 50:02:9d:87:1e:cf:65:b8:b7:e5:87:b3:a4:d5:ce: 06:6e:19:c0:a8:3b:b4:98:90:bc:cc:83:c0:de:81: 9f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:91:E6:74:CE:E9:83:4D:24:DA:93:AF:1C:13:CE:84:93:04:CA:D2 X509v3 Authority Key Identifier: keyid:0D:5D:CD:54:46:94:BB:E8:DB:99:D2:D8:DA:B9:83:14:74:5C:D9:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:a6:1a:30:3e:24:e1:59:17:ef:c8:80:e4:ce:9b:e0:d4:ae: 6f:88:e7:65:ea:ef:89:38:62:cd:a7:2d:4d:58:f5:54:36:b4: 3a:1c:55:c1:7e:56:f2:eb:84:b3:93:04:3a:df:2a:79:10:f7: ae:3f:99:df:8e:f7:4c:b2:21:a0:32:c1:16:49:32:b1:84:37: d4:24:61:b3:d3:eb:17:6a:74:4d:07:26:99:5c:df:d6:33:83: 9c:d8:e5:20:50:ae:71:26:b2:a2:1d:e4:6c:93:88:af:92:6b: ea:f3:10:e1:79:c0:84:38:e2:8a:63:08:ba:bd:f3:4b:71:86: 4d:6c:fb:55:fe:0f:68:6d:e8:33:47:e6:13:69:e6:aa:12:b6: 54:4e:c4:71:4a:99:d2:80:2e:40:fa:1b:60:41:12:b7:2b:b6: 21:7a:d0:4b:99:c7:cf:f4:e2:2f:c1:1e:89:40:e0:7d:11:03: 13:fc:1d:35:5c:16:9f:fb:ff:c0:62:64:21:fa:02:90:67:50: 93:2d:f1:42:04:32:e3:c1:a0:b1:f4:31:44:9c:05:92:83:26: 59:54:55:39:54:5d:e1:62:88:d7:b2:a8:d8:f1:44:74:e5:9f: ef:c6:d9:df:e0:b8:12:4e:6c:4a:93:e3:a4:66:9f:77:a4:f7: ce:fa:22:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ1j1bCPcINsmhiy3I+eCmT/pnUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgzMTQ3 NDVDRDk3RjAeFw0yNTEwMjAwNzM1MDRaFw0yNTEwMjMxNjIyMDRaMDMxMTAvBgNV BAMTKENDOTFFNjc0Q0VFOTgzNEQyNERBOTNBRjFDMTNDRTg0OTMwNENBRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQN/O5Gj+aeeyGcgd3NsIN2nrR SqMV7Kn4yhiFcdtQVpqUwde4Fk+X2pogvFxcJCrxjKFjiEIldR85jd3RXmlmUkcb NTRYRmgkyubT7nQZdV4t2hauLJwihh1QePd2wBdUZcxitPtjVuaAYuk8uDClhhFp DlOmGM/j6HclDA2O1Ex9mV1AMwwFdeboPmTcNmRAc9GK2te8j9C4YTaULkDe7D1Q ZbWlq7GD0aXG+1CGJhXOTHevScJm/HLI+ncQ2fN8gd4cDV5TN8nODVMSqIadreSp XOLzGJeLNB8iv647zlACnYcez2W4t+WHs6TVzgZuGcCoO7SYkLzMg8DegZ+XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzJHmdM7pg00k2pOvHBPOhJMEytIwHwYDVR0j BBgwFoAUDV3NVEaUu+jbmdLY2rmDFHRc2X8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTRhMjFiOS1mOTEyLTQxZjMtYjYyYy0xMjE3NTgxYzk0OGEvMC8wRDVEQ0Q1NDQ2 OTRCQkU4REI5OUQyRDhEQUI5ODMxNDc0NUNEOTdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgzMTQ3NDVD RDk3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE0YTIxYjktZjkxMi00MWYzLWI2 MmMtMTIxNzU4MWM5NDhhLzAvMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgz MTQ3NDVDRDk3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANSmGjA+JOFZF+/IgOTOm+DUrm+I52Xq74k4 Ys2nLU1Y9VQ2tDocVcF+VvLrhLOTBDrfKnkQ964/md+O90yyIaAywRZJMrGEN9Qk YbPT6xdqdE0HJplc39Yzg5zY5SBQrnEmsqId5GyTiK+Sa+rzEOF5wIQ44opjCLq9 80txhk1s+1X+D2ht6DNH5hNp5qoStlROxHFKmdKALkD6G2BBErcrtiF60EuZx8/0 4i/BHolA4H0RAxP8HTVcFp/7/8BiZCH6ApBnUJMt8UIEMuPBoLH0MUScBZKDJllU VTlUXeFiiNeyqNjxRHTln+/G2d/guBJObEqT46Rmn3ek9876Ikc= -----END CERTIFICATE-----Generated at Mon Oct 20 14:38:56 2025 by rpki-client