$ rpki-client -vvf repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft File: 5CC6B0489E576BC0D642B626195A0AA0560DC792.mft (raw, json) Hash identifier: 2EP2GWbuFegrXiTNcnLPS0sESBUqf6ORetAIOb4DdHk= Subject key identifier: B9:18:84:6A:A9:FA:8C:CD:28:6F:6C:67:D2:26:BA:D9:1D:74:50:4C Authority key identifier: 5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92 Certificate issuer: /CN=5CC6B0489E576BC0D642B626195A0AA0560DC792 Certificate serial: 481EAA8882BBE1CE5ADDDC222D31E7C4E0A0C09D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft Manifest number: 01BC Signing time: Sat 18 Oct 2025 17:40:36 +0000 Manifest this update: Sat 18 Oct 2025 17:35:36 +0000 Manifest next update: Wed 22 Oct 2025 00:24:36 +0000 Files and hashes: 1: 3130332e3132312e3133382e302f32332d3234203d3e20313335343738.roa (hash: IYSPzv0ipkmDqn5ZyXeN0f328BkzkZ8Pmn6bIzAKtQc=) 2: 5CC6B0489E576BC0D642B626195A0AA0560DC792.crl (hash: yJAiILr9+GMxEizQ46jRpjec/WvhzAb2263nUfBTJVQ=) 3: 3130332e3132312e3133362e302f32332d3234203d3e20313335343738.roa (hash: XTHSvGcaRTEV+p1Y+pj9uwCkeA4dOjhqgF5dBEY4xig=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.crl rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 00:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:1e:aa:88:82:bb:e1:ce:5a:dd:dc:22:2d:31:e7:c4:e0:a0:c0:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CC6B0489E576BC0D642B626195A0AA0560DC792 Validity Not Before: Oct 18 17:35:36 2025 GMT Not After : Oct 22 00:24:36 2025 GMT Subject: CN=B918846AA9FA8CCD286F6C67D226BAD91D74504C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f6:e5:04:67:af:60:42:db:d6:b4:2e:78:ae: 4c:d2:7e:e9:ac:d8:cf:0f:2c:05:c6:b2:a7:34:1e: d3:28:37:39:c4:6c:3d:f3:be:06:b2:13:b4:b2:16: 29:37:bc:4b:56:1f:eb:ac:97:58:76:e8:3b:d2:4d: 89:38:eb:9d:46:4a:07:38:a0:96:e7:d4:4e:e0:ba: 1e:6e:84:33:c5:b3:5d:3d:28:8a:40:f9:59:26:c4: 77:b1:b8:bd:03:80:c9:5a:cb:1e:90:69:dc:98:c2: 92:da:43:3f:2a:64:f8:31:82:85:17:fe:89:f1:12: 2a:f1:1a:c7:f6:6c:2c:a5:31:ee:62:27:9c:57:f8: 99:c6:de:37:e0:c3:23:be:fb:ce:61:7f:6d:11:c7: 84:8d:4a:a4:d2:bd:6f:91:ff:51:73:ec:95:24:7e: 5e:22:d4:db:9c:fa:99:20:0c:b6:d1:58:d0:a9:e0: 7a:44:c0:a2:e2:64:e9:be:b2:a2:88:01:f9:0b:9b: 62:52:a8:6e:4e:cc:99:5b:7f:f3:4a:53:9a:02:ab: 4c:50:27:ff:7e:18:58:87:d7:91:5b:68:24:50:46: 26:54:cc:f2:f4:e4:63:cf:39:9f:77:39:a9:5e:1b: fd:42:54:f5:bd:cb:24:02:d0:a1:eb:cd:22:10:e9: 07:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:18:84:6A:A9:FA:8C:CD:28:6F:6C:67:D2:26:BA:D9:1D:74:50:4C X509v3 Authority Key Identifier: keyid:5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:df:81:2b:18:10:c4:27:8f:de:08:fe:7b:3b:1d:9c:79:42: 8f:ed:53:43:6c:b9:18:76:46:e2:3d:bd:f4:35:59:7a:5a:b5: af:80:f4:e3:12:84:15:b0:4f:20:4d:e1:c1:41:36:4a:6b:13: 79:94:7c:7f:8f:2e:90:69:96:fb:d0:33:6d:b5:5f:3c:a2:e0: a5:64:b9:03:88:b8:4d:08:77:fb:ef:a3:3a:87:b6:53:72:ed: 1f:8c:1a:06:02:b7:c8:ff:9b:68:3c:b6:44:74:08:b4:08:af: b6:3e:b0:6c:63:e0:cb:05:a8:ca:e7:0b:89:d1:e0:3c:f9:08: 5b:06:68:bd:86:ed:4f:fe:d5:48:e3:21:00:17:c7:c0:13:34: 38:23:d1:ec:b7:e4:74:05:d3:dd:f9:7e:37:4c:d9:f9:24:24: a7:08:f4:13:dc:06:32:19:35:9f:ec:98:48:82:95:17:f1:2a: 5e:96:63:2a:1c:cb:4b:80:f3:29:98:1d:95:e1:8f:81:2c:01: 1e:0b:a1:f8:00:d5:dc:1f:46:17:0c:be:39:18:07:05:7c:7d: ca:8e:b0:3a:55:09:68:ff:00:15:48:a3:ca:64:15:64:cc:ea: b0:1f:c2:1e:de:cf:f6:f1:ae:4f:51:7e:86:d0:5c:12:e2:e0: 0a:36:83:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSB6qiIK74c5a3dwiLTHnxOCgwJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBBQTA1 NjBEQzc5MjAeFw0yNTEwMTgxNzM1MzZaFw0yNTEwMjIwMDI0MzZaMDMxMTAvBgNV BAMTKEI5MTg4NDZBQTlGQThDQ0QyODZGNkM2N0QyMjZCQUQ5MUQ3NDUwNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB9uUEZ69gQtvWtC54rkzSfums 2M8PLAXGsqc0HtMoNznEbD3zvgayE7SyFik3vEtWH+usl1h26DvSTYk4651GSgc4 oJbn1E7guh5uhDPFs109KIpA+VkmxHexuL0DgMlayx6QadyYwpLaQz8qZPgxgoUX /onxEirxGsf2bCylMe5iJ5xX+JnG3jfgwyO++85hf20Rx4SNSqTSvW+R/1Fz7JUk fl4i1Nuc+pkgDLbRWNCp4HpEwKLiZOm+sqKIAfkLm2JSqG5OzJlbf/NKU5oCq0xQ J/9+GFiH15FbaCRQRiZUzPL05GPPOZ93OaleG/1CVPW9yyQC0KHrzSIQ6QdDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuRiEaqn6jM0ob2xn0ia62R10UEwwHwYDVR0j BBgwFoAUXMawSJ5Xa8DWQrYmGVoKoFYNx5IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjRmYTdiOC01MzAyLTQ5MGItOTJlNC0yN2YyOGM2NjU3NWMvMC81Q0M2QjA0ODlF NTc2QkMwRDY0MkI2MjYxOTVBMEFBMDU2MERDNzkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBBQTA1NjBE Qzc5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY0ZmE3YjgtNTMwMi00OTBiLTky ZTQtMjdmMjhjNjY1NzVjLzAvNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBB QTA1NjBEQzc5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKXfgSsYEMQnj94I/ns7HZx5Qo/tU0NsuRh2 RuI9vfQ1WXpata+A9OMShBWwTyBN4cFBNkprE3mUfH+PLpBplvvQM221Xzyi4KVk uQOIuE0Id/vvozqHtlNy7R+MGgYCt8j/m2g8tkR0CLQIr7Y+sGxj4MsFqMrnC4nR 4Dz5CFsGaL2G7U/+1UjjIQAXx8ATNDgj0ey35HQF0935fjdM2fkkJKcI9BPcBjIZ NZ/smEiClRfxKl6WYyocy0uA8ymYHZXhj4EsAR4LofgA1dwfRhcMvjkYBwV8fcqO sDpVCWj/ABVIo8pkFWTM6rAfwh7ez/bxrk9RfobQXBLi4Ao2g/Y= -----END CERTIFICATE-----Generated at Mon Oct 20 19:08:41 2025 by rpki-client