$ rpki-client -vvf repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft File: 5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft (raw, json) Hash identifier: byP6LOu9ogTAZJKo4JvACcPphhd4JLKwTQuqc+gnnWk= Subject key identifier: 57:E3:60:A2:0B:10:11:7E:8C:72:3E:55:DC:EB:10:54:35:97:38:76 Authority key identifier: 5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F Certificate issuer: /CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F Certificate serial: 23AFE78AAFAE1DB303B61FC8EE46087657D04ABB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft Manifest number: 0351 Signing time: Sun 19 Oct 2025 03:21:17 +0000 Manifest this update: Sun 19 Oct 2025 03:16:17 +0000 Manifest next update: Wed 22 Oct 2025 08:54:17 +0000 Files and hashes: 1: 3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (hash: UdMMuDzVeoO8FHRaQDUzSG3siVMxaIJM4SzGz06W/gA=) 2: 3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (hash: AdQ+JO/REhdDwDAu63+KE7Cs+bTRN78/P47D5a5DoZI=) 3: 5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl (hash: Su3/ZOnEpTG2+0GqvZ99o5OtioBKljvUbao7ceT/s5w=) 4: 3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (hash: MsMpPPcpIZuSudoMMepNN+ZazUOetlA5JvcEYSzR82g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 08:54:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:af:e7:8a:af:ae:1d:b3:03:b6:1f:c8:ee:46:08:76:57:d0:4a:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F Validity Not Before: Oct 19 03:16:17 2025 GMT Not After : Oct 22 08:54:17 2025 GMT Subject: CN=57E360A20B10117E8C723E55DCEB105435973876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:2d:d0:7f:5d:40:68:b4:10:f4:f3:37:41:eb: a6:9c:c4:f2:a7:50:8e:f5:df:cb:8f:3b:95:e3:21: 28:a4:36:2c:43:58:b1:34:03:29:a3:2b:e6:9f:53: 25:18:14:ec:ee:7a:10:ce:9e:69:89:45:86:9d:60: c9:63:85:30:9e:85:df:c3:39:05:c0:c4:82:bb:4c: 07:12:e9:f8:d8:61:3e:54:7f:dd:09:ef:5d:7f:87: 61:c3:6d:d7:7a:78:17:2e:36:9a:d7:53:24:02:a6: ee:02:7d:b5:78:a0:b4:c0:56:cd:aa:3e:7b:b8:5f: 27:02:c5:01:e3:4e:c3:89:08:e3:5b:0c:57:d3:46: 68:09:bd:70:f0:41:4a:7d:3c:a9:5e:7b:1f:ef:2a: fc:59:a7:9d:64:6a:f9:0a:77:97:da:de:5e:75:30: ee:12:9c:1a:6a:b8:04:34:80:52:24:28:00:8a:e9: 45:59:11:3c:9e:0c:5e:9d:2d:cf:f9:c6:18:28:2c: 2f:48:aa:eb:f7:eb:77:f5:1b:6f:ac:f2:a0:cd:70: e3:04:36:cb:45:10:2e:08:39:23:52:71:e1:d3:fc: af:f4:57:e8:b4:1d:d8:3e:cc:72:ad:52:32:be:b8: 73:ee:41:d0:9e:02:b1:1f:85:ba:0b:80:98:10:be: 14:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E3:60:A2:0B:10:11:7E:8C:72:3E:55:DC:EB:10:54:35:97:38:76 X509v3 Authority Key Identifier: keyid:5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:f4:a0:80:23:55:91:01:4c:31:02:b4:1d:36:c5:63:e8:b4: 38:57:18:2e:93:e7:c8:b6:ac:0a:c3:e7:59:84:20:90:79:61: f0:66:e6:bd:0f:8e:96:9f:ea:8e:ca:8a:f6:32:43:28:1e:f6: da:97:8f:b2:27:ae:15:86:d0:18:f5:1d:d5:b2:b7:90:1f:e7: 31:fb:84:0e:ae:dc:6d:fb:81:8c:a0:68:5d:09:17:57:9b:d5: 94:09:7b:cf:e8:57:c6:43:a7:66:7e:08:f2:c4:1d:ac:59:29: ec:36:44:0a:c6:49:90:43:5e:1a:a1:2b:53:cf:19:dc:a6:e9: fd:5b:65:9e:23:b9:4f:7b:cc:85:4e:80:27:d5:ba:f4:56:0a: 68:24:f6:41:a9:15:c8:84:f2:d1:10:af:90:d6:fb:ca:b5:75: ac:59:d3:64:f2:48:3d:72:18:5a:1e:41:88:bf:5a:e1:1c:9c: 19:79:0a:ab:80:e2:00:0d:f2:df:7a:a8:b9:07:16:60:7f:60: 08:3b:cd:1b:66:08:75:d5:5c:78:35:38:78:a5:17:0c:42:de: 64:ef:4a:41:57:7d:50:69:e3:28:8f:a6:30:d4:c2:75:11:ae: 4c:39:a0:29:a3:30:31:d1:26:c5:f6:8b:6f:0f:e9:86:7c:eb: 2c:56:80:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI6/niq+uHbMDth/I7kYIdlfQSrswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJCQ0My RTZCM0Q4RjAeFw0yNTEwMTkwMzE2MTdaFw0yNTEwMjIwODU0MTdaMDMxMTAvBgNV BAMTKDU3RTM2MEEyMEIxMDExN0U4QzcyM0U1NURDRUIxMDU0MzU5NzM4NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuLdB/XUBotBD08zdB66acxPKn UI7138uPO5XjISikNixDWLE0AymjK+afUyUYFOzuehDOnmmJRYadYMljhTCehd/D OQXAxIK7TAcS6fjYYT5Uf90J711/h2HDbdd6eBcuNprXUyQCpu4CfbV4oLTAVs2q Pnu4XycCxQHjTsOJCONbDFfTRmgJvXDwQUp9PKleex/vKvxZp51kavkKd5fa3l51 MO4SnBpquAQ0gFIkKACK6UVZETyeDF6dLc/5xhgoLC9Iquv363f1G2+s8qDNcOME NstFEC4IOSNSceHT/K/0V+i0Hdg+zHKtUjK+uHPuQdCeArEfhboLgJgQvhQbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV+NgogsQEX6Mcj5V3OsQVDWXOHYwHwYDVR0j BBgwFoAUXB3H6HRXqR81kVrx3j+7zC5rPY8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yzg4NDQyYi1jNDhlLTRiYTAtOGFkNy01OGUxMjYzYzZkYzcvMC81QzFEQzdFODc0 NTdBOTFGMzU5MTVBRjFERTNGQkJDQzJFNkIzRDhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJCQ0MyRTZC M0Q4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M4ODQ0MmItYzQ4ZS00YmEwLThh ZDctNThlMTI2M2M2ZGM3LzAvNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJC Q0MyRTZCM0Q4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIb0oIAjVZEBTDECtB02xWPotDhXGC6T58i2 rArD51mEIJB5YfBm5r0Pjpaf6o7KivYyQyge9tqXj7InrhWG0Bj1HdWyt5Af5zH7 hA6u3G37gYygaF0JF1eb1ZQJe8/oV8ZDp2Z+CPLEHaxZKew2RArGSZBDXhqhK1PP Gdym6f1bZZ4juU97zIVOgCfVuvRWCmgk9kGpFciE8tEQr5DW+8q1daxZ02TySD1y GFoeQYi/WuEcnBl5CquA4gAN8t96qLkHFmB/YAg7zRtmCHXVXHg1OHilFwxC3mTv SkFXfVBp4yiPpjDUwnURrkw5oCmjMDHRJsX2i28P6YZ86yxWgKI= -----END CERTIFICATE-----Generated at Mon Oct 20 18:15:53 2025 by rpki-client