$ rpki-client -vvf repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft File: 5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft (raw, json) Hash identifier: ydKK6JiLeJj0P7BXjgGOY+oMx7ZDyqw2Cf8MiG7PW80= Subject key identifier: DB:01:31:AC:62:F2:98:01:69:7F:4C:80:F7:8C:2A:5B:03:94:22:40 Authority key identifier: 5F:49:C4:BD:5D:3F:04:F6:32:DC:CC:6F:C8:B6:54:53:52:0D:93:AD Certificate issuer: /CN=5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD Certificate serial: 786EA0A291B9394A16B70020466EBC97671FC190 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft Manifest number: 01EC Signing time: Mon 20 Oct 2025 15:20:45 +0000 Manifest this update: Mon 20 Oct 2025 15:15:45 +0000 Manifest next update: Thu 23 Oct 2025 22:34:45 +0000 Files and hashes: 1: 3130332e35322e362e302f32342d3234203d3e20313530323032.roa (hash: F9qmx8mRsXj/bhLj6hMv0pUBqNdy6+XhyHWthGgCRak=) 2: 5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.crl (hash: Be3lruGC0nlNrLkkAmTcLueb7h37yODBcYnYqTmkdZA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.crl rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:6e:a0:a2:91:b9:39:4a:16:b7:00:20:46:6e:bc:97:67:1f:c1:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD Validity Not Before: Oct 20 15:15:45 2025 GMT Not After : Oct 23 22:34:45 2025 GMT Subject: CN=DB0131AC62F29801697F4C80F78C2A5B03942240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ec:5b:c3:76:c9:4d:af:ed:8d:a5:2c:dd:32: 35:f5:a2:b8:05:e4:8e:4e:e2:1d:f8:b9:64:02:5d: c4:c4:56:20:74:a8:b7:57:93:8a:a6:e8:21:6b:08: 8b:2c:a2:1a:14:63:d6:0b:f5:17:ab:49:e4:c3:65: 7e:f4:03:20:fe:3e:10:04:40:7e:df:13:38:ff:55: 49:24:c6:82:8b:fd:bc:c2:42:a8:d9:0f:77:a9:e8: 2e:d8:22:e2:13:8b:a5:79:60:0d:ae:aa:0a:5d:35: 61:9d:3b:8a:b5:c5:7a:26:0b:d0:63:0e:8d:42:09: 0e:6c:21:62:58:83:05:f3:a7:57:d8:c3:c4:43:9b: 48:fb:86:d1:f1:e6:51:aa:b9:23:cc:c4:b5:76:24: b8:fc:b3:39:24:18:7d:c5:17:a3:8b:a5:b7:01:a4: 71:2b:d4:63:3d:12:09:64:e9:32:4d:66:8c:8b:bb: e8:5a:82:e9:58:5e:18:a8:1e:7e:8a:4e:2e:05:05: 4b:f8:40:56:ee:bc:53:86:35:bb:61:77:e7:c9:4d: bc:4a:21:9f:48:9b:41:91:9b:e2:d7:db:28:3e:ca: d4:c1:15:75:17:79:4b:c2:e8:58:f7:a0:2f:14:d6: 9e:38:13:5a:3d:e2:be:27:3a:b6:4a:0e:08:fc:6b: cd:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:01:31:AC:62:F2:98:01:69:7F:4C:80:F7:8C:2A:5B:03:94:22:40 X509v3 Authority Key Identifier: keyid:5F:49:C4:BD:5D:3F:04:F6:32:DC:CC:6F:C8:B6:54:53:52:0D:93:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:65:3a:7f:83:b5:28:97:df:b0:4c:21:dd:37:8a:4d:84:cb: a4:e1:a2:31:45:1d:fe:ae:93:5c:6d:96:4c:eb:f0:96:ce:6c: 28:88:87:59:a0:22:17:9d:ef:83:17:62:5b:06:84:ff:0a:2f: 4d:0b:3b:0d:81:81:9d:99:b0:51:da:df:6d:22:d2:73:31:a3: 4e:70:4a:1a:b0:4a:b2:ce:bb:cf:30:27:31:cb:08:fa:39:26: 12:86:13:ba:05:94:e3:72:31:46:9c:15:1c:a8:0f:65:8e:74: 47:5c:61:5e:37:c8:7e:8e:69:28:b1:fb:7b:e2:c6:df:ab:06: 02:ee:35:73:16:66:f7:c8:2a:c5:a5:41:6d:74:e6:11:30:86: ed:1c:cf:eb:38:ca:6f:d4:09:a8:c3:36:95:20:63:2a:dd:f5: 54:68:07:c4:f8:19:46:e3:53:db:de:93:92:ec:26:07:2e:95: d2:ba:a6:76:66:4c:73:a7:01:2c:ad:1a:ef:32:4c:86:5a:d9: 60:74:c1:2b:f1:31:9e:3c:c2:a2:16:4f:43:b0:d2:64:b6:d8: cf:bc:0b:e7:1f:bb:f3:9d:d0:d7:e0:5d:a2:f1:a0:a2:40:b4: 73:5e:64:df:3e:7a:9c:09:fb:4f:e7:be:00:7e:5c:e2:34:c6: fb:54:bd:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeG6gopG5OUoWtwAgRm68l2cfwZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY0OUM0QkQ1RDNGMDRGNjMyRENDQzZGQzhCNjU0NTM1 MjBEOTNBRDAeFw0yNTEwMjAxNTE1NDVaFw0yNTEwMjMyMjM0NDVaMDMxMTAvBgNV BAMTKERCMDEzMUFDNjJGMjk4MDE2OTdGNEM4MEY3OEMyQTVCMDM5NDIyNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC07FvDdslNr+2NpSzdMjX1orgF 5I5O4h34uWQCXcTEViB0qLdXk4qm6CFrCIssohoUY9YL9RerSeTDZX70AyD+PhAE QH7fEzj/VUkkxoKL/bzCQqjZD3ep6C7YIuITi6V5YA2uqgpdNWGdO4q1xXomC9Bj Do1CCQ5sIWJYgwXzp1fYw8RDm0j7htHx5lGquSPMxLV2JLj8szkkGH3FF6OLpbcB pHEr1GM9Eglk6TJNZoyLu+hagulYXhioHn6KTi4FBUv4QFbuvFOGNbthd+fJTbxK IZ9Im0GRm+LX2yg+ytTBFXUXeUvC6Fj3oC8U1p44E1o94r4nOrZKDgj8a80JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2wExrGLymAFpf0yA94wqWwOUIkAwHwYDVR0j BBgwFoAUX0nEvV0/BPYy3MxvyLZUU1INk60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OTU1OTFiNC0yMTk4LTRiNDAtYWRmMi0xMmNlZjNiZjQzYTIvMC81RjQ5QzRCRDVE M0YwNEY2MzJEQ0NDNkZDOEI2NTQ1MzUyMEQ5M0FELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUY0OUM0QkQ1RDNGMDRGNjMyRENDQzZGQzhCNjU0NTM1MjBE OTNBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDk1NTkxYjQtMjE5OC00YjQwLWFk ZjItMTJjZWYzYmY0M2EyLzAvNUY0OUM0QkQ1RDNGMDRGNjMyRENDQzZGQzhCNjU0 NTM1MjBEOTNBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJNlOn+DtSiX37BMId03ik2Ey6ThojFFHf6u k1xtlkzr8JbObCiIh1mgIhed74MXYlsGhP8KL00LOw2BgZ2ZsFHa320i0nMxo05w ShqwSrLOu88wJzHLCPo5JhKGE7oFlONyMUacFRyoD2WOdEdcYV43yH6OaSix+3vi xt+rBgLuNXMWZvfIKsWlQW105hEwhu0cz+s4ym/UCajDNpUgYyrd9VRoB8T4GUbj U9vek5LsJgculdK6pnZmTHOnASytGu8yTIZa2WB0wSvxMZ48wqIWT0Ow0mS22M+8 C+cfu/Od0NfgXaLxoKJAtHNeZN8+epwJ+0/nvgB+XOI0xvtUvfM= -----END CERTIFICATE-----Generated at Mon Oct 20 19:02:46 2025 by rpki-client