$ rpki-client -vvf repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft File: 5DC5D36558922295B85E7AE3A79178FB430FD34B.mft (raw, json) Hash identifier: 4r5g/QJXkg4iTmXwn8XJ14LViSTD0UUDzG5ZjTygCyY= Subject key identifier: 48:C0:C1:88:16:2E:34:83:EB:93:30:47:5B:60:2F:97:DC:1A:C9:EA Authority key identifier: 5D:C5:D3:65:58:92:22:95:B8:5E:7A:E3:A7:91:78:FB:43:0F:D3:4B Certificate issuer: /CN=5DC5D36558922295B85E7AE3A79178FB430FD34B Certificate serial: 322BB7D3FE45B1E4452158EA6F07EA1D73783338 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DC5D36558922295B85E7AE3A79178FB430FD34B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft Manifest number: 04CD Signing time: Sun 19 Oct 2025 01:34:10 +0000 Manifest this update: Sun 19 Oct 2025 01:29:10 +0000 Manifest next update: Wed 22 Oct 2025 06:28:10 +0000 Files and hashes: 1: 3130332e3135362e3233342e302f32342d3234203d3e20313431303939.roa (hash: 2Ij3trthgvVTDLtbPd9soaDl21FzUqm6uc+fi+je0/U=) 2: 5DC5D36558922295B85E7AE3A79178FB430FD34B.crl (hash: sGEgTtLsUKPTZsKIA33ZnOk/0ZPiWcp6Q+pC+lhLZjs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.crl rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DC5D36558922295B85E7AE3A79178FB430FD34B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 06:28:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:2b:b7:d3:fe:45:b1:e4:45:21:58:ea:6f:07:ea:1d:73:78:33:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DC5D36558922295B85E7AE3A79178FB430FD34B Validity Not Before: Oct 19 01:29:10 2025 GMT Not After : Oct 22 06:28:10 2025 GMT Subject: CN=48C0C188162E3483EB9330475B602F97DC1AC9EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e9:d6:ef:57:0b:38:79:b8:db:2e:3a:6a:1f: dc:0b:e2:dd:ff:3a:61:55:d7:62:2d:5e:29:e4:61: 06:2c:44:c2:3d:6d:a4:0d:06:5a:85:c5:19:09:9a: 1b:fa:a5:19:19:32:22:66:68:ed:70:5e:6e:3d:ec: a3:e0:c4:e0:99:6d:c0:47:29:c3:ba:1a:17:45:9a: 8a:36:7c:89:ee:c4:af:56:4f:60:26:3e:57:7e:4a: dc:eb:b1:b9:cf:c8:90:0a:3b:b0:ed:e9:3a:9b:33: 68:3b:8e:f6:aa:32:de:6a:f1:7c:52:12:fd:48:bd: d5:d0:5e:c9:3d:d2:29:79:38:32:03:67:7b:4f:4b: 15:44:61:2b:1d:19:30:46:c9:9e:d0:0f:77:3d:8d: a5:7e:48:40:fe:2e:c8:70:6b:ae:bc:fe:61:9e:03: 46:cc:09:18:b8:fa:96:d1:0a:1f:5c:90:51:59:bc: 9a:e2:74:08:23:84:a1:96:6b:c8:45:ac:86:e4:48: ed:a9:7f:d5:2d:7a:c8:1b:28:a6:01:d4:dd:a2:84: ff:f9:f2:b9:81:39:d5:4a:9a:2e:43:dd:a8:1d:40: 6e:7f:8f:36:99:2e:91:f6:14:93:31:f4:a1:72:9e: 08:2e:8b:47:e2:a7:bb:0f:49:de:cc:e4:85:78:2a: 5f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C0:C1:88:16:2E:34:83:EB:93:30:47:5B:60:2F:97:DC:1A:C9:EA X509v3 Authority Key Identifier: keyid:5D:C5:D3:65:58:92:22:95:B8:5E:7A:E3:A7:91:78:FB:43:0F:D3:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DC5D36558922295B85E7AE3A79178FB430FD34B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:52:7b:79:95:d7:f1:d6:ac:13:ab:7f:3b:a9:6c:cf:f0:86: 68:6a:22:73:9d:c5:39:dc:fc:50:46:e2:2b:7c:d2:6f:2d:6a: f3:7f:8a:3e:79:a6:14:f6:f4:72:79:90:b2:96:de:86:bc:50: 77:e8:93:1d:46:3a:fa:27:cb:f3:93:43:7a:d9:16:d1:eb:7f: aa:b2:9a:f0:7e:cf:58:0a:28:49:ab:17:1d:80:31:41:4f:e2: 76:49:bc:aa:fe:2c:b2:d5:d4:78:9a:b6:94:9f:de:1f:3e:36: 55:0a:e2:48:35:38:94:56:b7:a9:87:a9:77:67:2a:7e:21:83: 63:05:8e:e3:ce:92:f2:31:9d:65:1e:1c:52:19:cc:02:08:a3: 5a:66:3b:50:fd:5c:ea:ae:69:71:70:d5:9a:cc:47:c7:67:8a: 26:bd:7d:fd:c6:d8:82:19:7f:41:cf:13:a1:67:5f:2d:71:d2: 72:da:a9:35:15:33:d6:01:68:3b:8a:2a:da:3c:f7:1d:3f:84: a5:e6:ea:47:2b:20:bb:fb:6e:b3:d7:70:d5:d4:59:e8:34:1e: cb:77:51:54:55:38:e6:ee:41:a4:35:d3:b4:01:80:5b:42:8b: c0:86:a3:64:1c:ce:64:46:59:14:1f:bb:9e:01:92:e4:20:96: f4:43:7a:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMiu30/5FseRFIVjqbwfqHXN4MzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURDNUQzNjU1ODkyMjI5NUI4NUU3QUUzQTc5MTc4RkI0 MzBGRDM0QjAeFw0yNTEwMTkwMTI5MTBaFw0yNTEwMjIwNjI4MTBaMDMxMTAvBgNV BAMTKDQ4QzBDMTg4MTYyRTM0ODNFQjkzMzA0NzVCNjAyRjk3REMxQUM5RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC06dbvVws4ebjbLjpqH9wL4t3/ OmFV12ItXinkYQYsRMI9baQNBlqFxRkJmhv6pRkZMiJmaO1wXm497KPgxOCZbcBH KcO6GhdFmoo2fInuxK9WT2AmPld+StzrsbnPyJAKO7Dt6TqbM2g7jvaqMt5q8XxS Ev1IvdXQXsk90il5ODIDZ3tPSxVEYSsdGTBGyZ7QD3c9jaV+SED+Lshwa668/mGe A0bMCRi4+pbRCh9ckFFZvJridAgjhKGWa8hFrIbkSO2pf9UtesgbKKYB1N2ihP/5 8rmBOdVKmi5D3agdQG5/jzaZLpH2FJMx9KFynggui0fip7sPSd7M5IV4Kl9nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSMDBiBYuNIPrkzBHW2Avl9wayeowHwYDVR0j BBgwFoAUXcXTZViSIpW4Xnrjp5F4+0MP00swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZTNhMTM4ZS1hMmIyLTQ2MDQtYWQ1MC0zY2FiNzUwYTc1ZTcvMC81REM1RDM2NTU4 OTIyMjk1Qjg1RTdBRTNBNzkxNzhGQjQzMEZEMzRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNURDNUQzNjU1ODkyMjI5NUI4NUU3QUUzQTc5MTc4RkI0MzBG RDM0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmUzYTEzOGUtYTJiMi00NjA0LWFk NTAtM2NhYjc1MGE3NWU3LzAvNURDNUQzNjU1ODkyMjI5NUI4NUU3QUUzQTc5MTc4 RkI0MzBGRDM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADBSe3mV1/HWrBOrfzupbM/whmhqInOdxTnc /FBG4it80m8tavN/ij55phT29HJ5kLKW3oa8UHfokx1GOvony/OTQ3rZFtHrf6qy mvB+z1gKKEmrFx2AMUFP4nZJvKr+LLLV1HiatpSf3h8+NlUK4kg1OJRWt6mHqXdn Kn4hg2MFjuPOkvIxnWUeHFIZzAIIo1pmO1D9XOquaXFw1ZrMR8dniia9ff3G2IIZ f0HPE6FnXy1x0nLaqTUVM9YBaDuKKto89x0/hKXm6kcrILv7brPXcNXUWeg0Hst3 UVRVOObuQaQ107QBgFtCi8CGo2QczmRGWRQfu54BkuQglvRDes0= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:55 2025 by rpki-client