$ rpki-client -vvf repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft File: 405E466852C38FD4CD20BA6115840947D5D24F5D.mft (raw, json) Hash identifier: qaOA4UCG2DXvW4bSA6gu+aMgq2OmUTa4sl4wzduugts= Subject key identifier: 6E:5F:FF:1D:32:7A:7D:AB:45:CA:08:C5:18:23:56:2C:C8:BA:A9:90 Authority key identifier: 40:5E:46:68:52:C3:8F:D4:CD:20:BA:61:15:84:09:47:D5:D2:4F:5D Certificate issuer: /CN=405E466852C38FD4CD20BA6115840947D5D24F5D Certificate serial: 639194DF15B1879F830139F3F1108B4075E92F0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft Manifest number: C3 Signing time: Mon 20 Oct 2025 07:01:10 +0000 Manifest this update: Mon 20 Oct 2025 06:56:10 +0000 Manifest next update: Thu 23 Oct 2025 11:06:10 +0000 Files and hashes: 1: 3136302e32352e3230332e302f32342d3234203d3e20313533313038.roa (hash: jF9/a6Jp1M+je5Rsp2up/n4DNy0dv/N5PQgKJQwfemc=) 2: 405E466852C38FD4CD20BA6115840947D5D24F5D.crl (hash: /2nazwe9OxobVokLBLLk3RXpAPc6tJBM8nZnX01q0HM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.crl rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:91:94:df:15:b1:87:9f:83:01:39:f3:f1:10:8b:40:75:e9:2f:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=405E466852C38FD4CD20BA6115840947D5D24F5D Validity Not Before: Oct 20 06:56:10 2025 GMT Not After : Oct 23 11:06:10 2025 GMT Subject: CN=6E5FFF1D327A7DAB45CA08C51823562CC8BAA990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b4:9c:d2:eb:a4:18:fe:3e:c7:f3:13:11:68: 8b:5c:a1:69:42:3f:7c:50:b7:33:ec:01:7f:4c:78: 5b:df:ce:a7:df:c5:a3:4f:7f:9b:c0:bd:78:a6:65: 0b:f3:cf:34:05:39:34:c6:d8:da:64:9f:48:fc:e8: 6f:fd:e5:fa:1b:f7:57:08:18:9e:ad:4f:4b:10:61: 1f:bd:93:6f:a2:18:1a:fd:6e:96:c4:af:05:23:4e: 2f:57:85:6f:58:a7:33:21:89:29:a8:84:69:85:5a: 34:66:18:19:37:76:12:7f:54:cb:ba:34:fd:0d:ae: f4:31:9b:43:d4:97:53:62:4e:89:51:a9:fc:9a:f7: 8b:e9:1b:77:91:7d:f1:f1:33:76:5d:52:5b:d4:5e: ed:47:6b:49:60:98:39:33:e3:f5:96:d8:4b:2f:a3: 44:16:9f:4c:60:c1:69:5e:a5:07:60:74:a6:b1:61: 6d:45:0e:36:70:99:fd:92:36:31:ab:f2:19:2f:5a: ed:14:f3:16:22:76:0c:c1:2d:91:48:cc:3b:73:44: a7:9d:49:b1:e5:5b:f2:f5:89:d9:65:50:fd:28:20: 21:7c:c8:43:69:b7:f5:ee:44:35:95:f9:a1:f0:83: d6:51:86:c3:b1:a6:d7:72:e0:5f:6e:e8:59:f3:48: c1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:5F:FF:1D:32:7A:7D:AB:45:CA:08:C5:18:23:56:2C:C8:BA:A9:90 X509v3 Authority Key Identifier: keyid:40:5E:46:68:52:C3:8F:D4:CD:20:BA:61:15:84:09:47:D5:D2:4F:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/405E466852C38FD4CD20BA6115840947D5D24F5D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ac6155e-2d2f-4f9e-b218-eb525b3a1119/0/405E466852C38FD4CD20BA6115840947D5D24F5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:d8:b5:15:19:15:8a:cd:9e:e5:41:87:42:97:37:b0:ee:de: 6f:71:bb:c2:ee:b0:de:ca:13:b8:60:db:58:b0:70:f5:5a:e0: 99:53:3b:74:30:7d:03:3d:7f:ee:54:5b:f4:64:36:fa:3e:e7: 69:44:56:da:31:a5:ae:19:cb:b5:c1:a7:37:10:78:cd:56:76: fd:87:d3:73:14:f3:d0:2b:5f:81:61:af:9e:89:f3:c1:32:fb: c3:a0:bc:c3:18:90:30:10:70:0d:e7:59:29:19:73:d4:c1:8b: f5:16:ad:1e:32:cb:c5:8c:9c:d9:53:32:e3:1a:64:4a:01:7d: 4a:03:43:94:83:d4:74:bd:67:4d:76:9c:ef:49:e3:da:f9:a2: 5f:d7:86:ef:bf:88:96:5f:c4:c9:c9:c2:fa:e0:76:24:6a:d9: ff:33:6b:cd:5f:35:a1:8b:64:e8:d8:6e:1c:d4:23:f5:0c:3d: 30:5d:29:80:bb:13:f8:f9:bb:e4:b6:5c:63:42:53:cb:c5:05: 0f:13:42:56:ca:d0:67:ce:3e:a8:33:d2:1f:30:9c:6b:8b:3d: 7d:d2:50:0e:a2:63:78:63:09:f0:3d:2e:06:59:32:fb:0b:f7: 22:6e:cb:4e:97:4f:bc:b1:e5:de:ba:13:ab:fa:95:83:86:f8: b4:62:b3:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY5GU3xWxh5+DATnz8RCLQHXpLw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA1RTQ2Njg1MkMzOEZENENEMjBCQTYxMTU4NDA5NDdE NUQyNEY1RDAeFw0yNTEwMjAwNjU2MTBaFw0yNTEwMjMxMTA2MTBaMDMxMTAvBgNV BAMTKDZFNUZGRjFEMzI3QTdEQUI0NUNBMDhDNTE4MjM1NjJDQzhCQUE5OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjtJzS66QY/j7H8xMRaItcoWlC P3xQtzPsAX9MeFvfzqffxaNPf5vAvXimZQvzzzQFOTTG2Npkn0j86G/95fob91cI GJ6tT0sQYR+9k2+iGBr9bpbErwUjTi9XhW9YpzMhiSmohGmFWjRmGBk3dhJ/VMu6 NP0NrvQxm0PUl1NiTolRqfya94vpG3eRffHxM3ZdUlvUXu1Ha0lgmDkz4/WW2Esv o0QWn0xgwWlepQdgdKaxYW1FDjZwmf2SNjGr8hkvWu0U8xYidgzBLZFIzDtzRKed SbHlW/L1idllUP0oICF8yENpt/XuRDWV+aHwg9ZRhsOxptdy4F9u6FnzSME5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbl//HTJ6fatFygjFGCNWLMi6qZAwHwYDVR0j BBgwFoAUQF5GaFLDj9TNILphFYQJR9XST10wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWM2MTU1ZS0yZDJmLTRmOWUtYjIxOC1lYjUyNWIzYTExMTkvMC80MDVFNDY2ODUy QzM4RkQ0Q0QyMEJBNjExNTg0MDk0N0Q1RDI0RjVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDA1RTQ2Njg1MkMzOEZENENEMjBCQTYxMTU4NDA5NDdENUQy NEY1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFjNjE1NWUtMmQyZi00ZjllLWIy MTgtZWI1MjViM2ExMTE5LzAvNDA1RTQ2Njg1MkMzOEZENENEMjBCQTYxMTU4NDA5 NDdENUQyNEY1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHnYtRUZFYrNnuVBh0KXN7Du3m9xu8LusN7K E7hg21iwcPVa4JlTO3QwfQM9f+5UW/RkNvo+52lEVtoxpa4Zy7XBpzcQeM1Wdv2H 03MU89ArX4Fhr56J88Ey+8OgvMMYkDAQcA3nWSkZc9TBi/UWrR4yy8WMnNlTMuMa ZEoBfUoDQ5SD1HS9Z012nO9J49r5ol/Xhu+/iJZfxMnJwvrgdiRq2f8za81fNaGL ZOjYbhzUI/UMPTBdKYC7E/j5u+S2XGNCU8vFBQ8TQlbK0GfOPqgz0h8wnGuLPX3S UA6iY3hjCfA9LgZZMvsL9yJuy06XT7yx5d66E6v6lYOG+LRis3k= -----END CERTIFICATE-----Generated at Mon Oct 20 21:33:09 2025 by rpki-client