$ rpki-client -vvf repo-rpki.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/C5E0183A7142717E23D90AF4650F1E14418D85C3.mft File: C5E0183A7142717E23D90AF4650F1E14418D85C3.mft (raw, json) Hash identifier: +bW1sfuEope+z7BKq3pPooMFAq4R1aGb/nQvknEi/Dc= Subject key identifier: 30:64:BC:DB:45:49:26:10:F5:99:FC:DF:0F:C9:24:A7:3F:55:EB:D8 Authority key identifier: C5:E0:18:3A:71:42:71:7E:23:D9:0A:F4:65:0F:1E:14:41:8D:85:C3 Certificate issuer: /CN=C5E0183A7142717E23D90AF4650F1E14418D85C3 Certificate serial: 5F990CB88642A01C9FEF77BE7181666B26B7D906 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5E0183A7142717E23D90AF4650F1E14418D85C3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/C5E0183A7142717E23D90AF4650F1E14418D85C3.mft Manifest number: 0519 Signing time: Mon 20 Oct 2025 07:30:47 +0000 Manifest this update: Mon 20 Oct 2025 07:25:47 +0000 Manifest next update: Thu 23 Oct 2025 15:17:47 +0000 Files and hashes: 1: C5E0183A7142717E23D90AF4650F1E14418D85C3.crl (hash: y0FRPMXT+xJB9BwvCO/MoCKPwg4VoHVwxEmkqRLcRZg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/C5E0183A7142717E23D90AF4650F1E14418D85C3.crl rsync://repo-rpki.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/C5E0183A7142717E23D90AF4650F1E14418D85C3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5E0183A7142717E23D90AF4650F1E14418D85C3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:99:0c:b8:86:42:a0:1c:9f:ef:77:be:71:81:66:6b:26:b7:d9:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5E0183A7142717E23D90AF4650F1E14418D85C3 Validity Not Before: Oct 20 07:25:47 2025 GMT Not After : Oct 23 15:17:47 2025 GMT Subject: CN=3064BCDB45492610F599FCDF0FC924A73F55EBD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:df:b1:b2:cc:51:37:0a:9e:73:4d:d9:25:76: 53:71:2e:82:cd:33:22:4b:1b:9b:99:fa:79:ed:31: c6:5c:e6:1d:e1:e8:f7:c1:cb:fd:0d:99:68:9e:64: c5:f3:f3:84:65:80:e8:1e:be:04:9d:d1:0a:55:09: ed:30:1a:60:a3:37:ed:db:24:0b:12:18:d8:a9:60: 8a:9e:c3:b1:e2:bd:ce:2a:bb:32:78:4c:41:57:8f: 48:d2:b5:f5:ec:e9:a0:3d:7d:56:6e:e5:ef:8f:e9: 33:a5:ba:20:63:57:ab:05:b8:ce:d6:e1:e0:41:0f: 23:2a:10:19:d1:ea:d7:ce:ea:fc:e1:9d:c8:b0:68: d7:eb:73:32:19:eb:a5:a4:32:d6:ad:c1:cb:eb:b8: 16:4a:ce:e8:e3:60:b4:c6:8c:92:03:c4:fd:2c:cd: 09:42:df:ba:0a:89:85:3d:ca:92:09:17:3e:3f:94: 5f:cb:7c:9c:ab:12:47:6a:7c:65:48:4d:e1:77:74: b6:b4:88:8c:05:0f:8e:f3:d9:2f:4a:c0:88:15:02: d8:2d:89:a6:af:83:62:42:4a:2b:05:aa:35:b3:b4: cf:99:6e:c9:5d:73:6f:59:83:42:32:c6:c5:53:6b: a0:21:09:6b:b6:df:b3:7c:f9:9d:9d:36:10:33:20: dc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:64:BC:DB:45:49:26:10:F5:99:FC:DF:0F:C9:24:A7:3F:55:EB:D8 X509v3 Authority Key Identifier: keyid:C5:E0:18:3A:71:42:71:7E:23:D9:0A:F4:65:0F:1E:14:41:8D:85:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/C5E0183A7142717E23D90AF4650F1E14418D85C3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5E0183A7142717E23D90AF4650F1E14418D85C3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/C5E0183A7142717E23D90AF4650F1E14418D85C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:1f:3d:a8:1d:64:d2:c3:63:23:59:18:41:d5:89:8b:88:f1: 24:76:61:0d:fe:ff:d1:3f:81:ce:ed:c6:97:43:8f:43:84:c3: c9:ae:32:50:7f:cd:18:b1:9d:fa:a6:55:a4:ce:84:e3:5d:a6: da:bd:75:1f:fa:47:8e:78:a2:49:e3:73:8e:31:bb:60:4a:37: 87:ae:bc:5b:7a:52:0c:bd:7b:85:57:eb:6a:8e:09:be:0d:3d: e5:fe:2c:34:d4:bc:dd:d5:08:67:87:93:6a:16:dc:44:0c:fc: 04:3f:c9:50:0e:ff:20:49:96:fb:38:c9:07:bf:0d:b1:c6:9c: b9:3a:88:24:15:a2:87:19:60:4e:1d:73:f1:08:32:a6:a8:18: e1:c7:67:21:7e:83:4c:cb:8d:8c:ae:9a:a4:cf:63:90:37:d3: ab:c7:96:94:3a:ed:eb:bc:de:68:cd:0f:7e:12:e3:75:01:58: 0d:f9:4a:c9:b5:4c:bb:92:d6:4d:da:e2:ca:46:4a:92:b6:15: 6c:1f:db:b0:59:60:87:16:01:e9:f2:fc:6a:f6:bb:61:a4:da: 88:9f:2c:5f:57:1a:bc:be:c0:73:af:d6:5c:aa:cd:3e:d3:e4: 5c:48:9a:ff:92:da:67:3f:f0:58:dc:c5:23:6b:5b:83:1a:c3: 37:07:d7:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX5kMuIZCoByf73e+cYFmaya32QYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVFMDE4M0E3MTQyNzE3RTIzRDkwQUY0NjUwRjFFMTQ0 MThEODVDMzAeFw0yNTEwMjAwNzI1NDdaFw0yNTEwMjMxNTE3NDdaMDMxMTAvBgNV BAMTKDMwNjRCQ0RCNDU0OTI2MTBGNTk5RkNERjBGQzkyNEE3M0Y1NUVCRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv37GyzFE3Cp5zTdkldlNxLoLN MyJLG5uZ+nntMcZc5h3h6PfBy/0NmWieZMXz84RlgOgevgSd0QpVCe0wGmCjN+3b JAsSGNipYIqew7Hivc4quzJ4TEFXj0jStfXs6aA9fVZu5e+P6TOluiBjV6sFuM7W 4eBBDyMqEBnR6tfO6vzhnciwaNfrczIZ66WkMtatwcvruBZKzujjYLTGjJIDxP0s zQlC37oKiYU9ypIJFz4/lF/LfJyrEkdqfGVITeF3dLa0iIwFD47z2S9KwIgVAtgt iaavg2JCSisFqjWztM+Zbsldc29Zg0IyxsVTa6AhCWu237N8+Z2dNhAzINwbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMGS820VJJhD1mfzfD8kkpz9V69gwHwYDVR0j BBgwFoAUxeAYOnFCcX4j2Qr0ZQ8eFEGNhcMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDRmMjQ2MC1mZTUwLTQ4MDAtYWUwMi01N2NiM2U4MTVkNWUvMC9DNUUwMTgzQTcx NDI3MTdFMjNEOTBBRjQ2NTBGMUUxNDQxOEQ4NUMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVFMDE4M0E3MTQyNzE3RTIzRDkwQUY0NjUwRjFFMTQ0MThE ODVDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ0ZjI0NjAtZmU1MC00ODAwLWFl MDItNTdjYjNlODE1ZDVlLzAvQzVFMDE4M0E3MTQyNzE3RTIzRDkwQUY0NjUwRjFF MTQ0MThEODVDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANUfPagdZNLDYyNZGEHViYuI8SR2YQ3+/9E/ gc7txpdDj0OEw8muMlB/zRixnfqmVaTOhONdptq9dR/6R454oknjc44xu2BKN4eu vFt6Ugy9e4VX62qOCb4NPeX+LDTUvN3VCGeHk2oW3EQM/AQ/yVAO/yBJlvs4yQe/ DbHGnLk6iCQVoocZYE4dc/EIMqaoGOHHZyF+g0zLjYyumqTPY5A306vHlpQ67eu8 3mjND34S43UBWA35Ssm1TLuS1k3a4spGSpK2FWwf27BZYIcWAeny/Gr2u2Gk2oif LF9XGry+wHOv1lyqzT7T5FxImv+S2mc/8FjcxSNrW4MawzcH1wU= -----END CERTIFICATE-----Generated at Mon Oct 20 15:20:44 2025 by rpki-client