$ rpki-client -vvf repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft File: 5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft (raw, json) Hash identifier: bNlInbfbeq8cgso4I0Iw51VtFcjLAL5A+6p4AO1Y02c= Subject key identifier: 09:A2:80:0C:96:B1:56:91:CB:1B:40:D0:C2:E7:7D:AB:7D:52:A0:2C Authority key identifier: 5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48 Certificate issuer: /CN=5B122103D3C1C730AECE59A7ED28A79DD0C79948 Certificate serial: 1B1AF06A75111D9028B707B9F1B5A1F0E64B6D73 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft Manifest number: 0514 Signing time: Sat 18 Oct 2025 10:20:43 +0000 Manifest this update: Sat 18 Oct 2025 10:15:43 +0000 Manifest next update: Tue 21 Oct 2025 21:36:43 +0000 Files and hashes: 1: 5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl (hash: Qkg7hE7a37dMiSK/xJdaDW0Gy01uhsHZVsXqCpMz0xc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 21:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:1a:f0:6a:75:11:1d:90:28:b7:07:b9:f1:b5:a1:f0:e6:4b:6d:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B122103D3C1C730AECE59A7ED28A79DD0C79948 Validity Not Before: Oct 18 10:15:43 2025 GMT Not After : Oct 21 21:36:43 2025 GMT Subject: CN=09A2800C96B15691CB1B40D0C2E77DAB7D52A02C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:75:07:8d:27:58:21:71:03:c4:7b:d8:51:7c: 1a:54:99:1c:d6:26:14:eb:1c:3a:a2:d8:97:02:d0: 9b:94:0d:2d:b1:f8:80:26:c8:c8:78:53:b1:73:a1: e4:01:d2:53:2c:03:52:ad:a4:ab:4f:26:a2:98:62: 84:67:62:36:27:db:81:ea:ab:41:5d:c2:88:24:70: b1:3e:06:84:ca:a6:13:ba:93:df:8e:4c:a3:c8:7e: da:b9:b2:b4:f7:ec:2c:b6:20:b4:08:d7:37:08:fb: a4:b2:11:33:54:66:35:f7:3f:75:17:0c:b5:62:95: 93:b2:f5:f9:55:a7:3d:30:af:50:d1:ed:f3:73:e8: 1e:48:74:12:92:da:aa:13:84:80:c2:4d:31:15:9e: 27:09:37:b2:69:31:52:b0:dc:ce:b9:99:a3:22:34: d1:05:e8:7e:d0:08:43:14:1e:b3:03:f6:dc:21:bc: 2c:5c:dd:e6:05:fc:ad:75:e1:5c:22:37:35:3e:d1: 74:b8:6f:2f:63:4f:8e:93:dc:b0:95:8c:bb:2c:a0: 50:ff:0b:69:cf:ab:07:d9:c4:02:92:f3:50:be:78: b2:d6:89:da:4e:67:6b:4d:a0:bf:ed:d7:5e:ef:5e: d3:b6:8c:0d:01:98:84:94:49:8b:9a:92:6a:06:75: 8c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A2:80:0C:96:B1:56:91:CB:1B:40:D0:C2:E7:7D:AB:7D:52:A0:2C X509v3 Authority Key Identifier: keyid:5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:bb:be:fa:9d:04:08:ba:13:7b:32:91:b2:fa:91:bc:a5:84: e9:e0:b6:b6:ec:58:0a:06:a6:bc:b7:f2:fe:5c:be:09:e3:45: 1c:c4:64:55:1d:25:94:7f:ab:fc:14:64:b3:64:79:90:58:a3: 64:3c:97:0c:25:aa:4e:e6:8e:cc:a8:85:22:22:70:02:b6:71: 47:b4:22:52:a2:17:5b:72:de:c7:e9:17:1a:c8:8a:b1:86:cd: a6:70:54:58:93:3e:ce:03:ae:bc:48:f9:8e:63:b1:a0:74:51: 8f:72:33:e2:76:7b:a2:fc:d9:47:50:c5:2e:7a:9d:aa:b6:bd: 4a:d5:94:2b:e4:9e:82:d4:9a:c1:df:3a:7b:3d:7b:e5:a4:69: 50:7b:b2:58:c2:e3:11:c2:06:7e:f5:55:8a:a3:7c:f3:14:6b: 4a:bc:49:c3:1b:25:bf:bb:12:fc:86:80:77:c9:08:b0:a6:85: ed:2a:a9:c4:71:1e:ba:13:cf:36:99:e3:bc:aa:7d:74:a9:68: 99:78:60:4e:52:31:58:9c:b2:d8:32:3a:00:12:3c:64:bc:30: a3:1e:93:3d:4c:46:68:6f:42:ad:94:79:6f:a6:71:be:ae:dc: 4a:92:fc:7f:72:77:9c:fb:d1:9e:07:2d:14:55:1c:71:a4:61: 72:92:58:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGxrwanURHZAotwe58bWh8OZLbXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3OURE MEM3OTk0ODAeFw0yNTEwMTgxMDE1NDNaFw0yNTEwMjEyMTM2NDNaMDMxMTAvBgNV BAMTKDA5QTI4MDBDOTZCMTU2OTFDQjFCNDBEMEMyRTc3REFCN0Q1MkEwMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+dQeNJ1ghcQPEe9hRfBpUmRzW JhTrHDqi2JcC0JuUDS2x+IAmyMh4U7FzoeQB0lMsA1KtpKtPJqKYYoRnYjYn24Hq q0FdwogkcLE+BoTKphO6k9+OTKPIftq5srT37Cy2ILQI1zcI+6SyETNUZjX3P3UX DLVilZOy9flVpz0wr1DR7fNz6B5IdBKS2qoThIDCTTEVnicJN7JpMVKw3M65maMi NNEF6H7QCEMUHrMD9twhvCxc3eYF/K114VwiNzU+0XS4by9jT46T3LCVjLssoFD/ C2nPqwfZxAKS81C+eLLWidpOZ2tNoL/t117vXtO2jA0BmISUSYuakmoGdYz3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCaKADJaxVpHLG0DQwud9q31SoCwwHwYDVR0j BBgwFoAUWxIhA9PBxzCuzlmn7SinndDHmUgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTcyZWVmOS1lYzZhLTQ1NTgtODE4MS1hMTFmZTY1YjhmZjgvMC81QjEyMjEwM0Qz QzFDNzMwQUVDRTU5QTdFRDI4QTc5REQwQzc5OTQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3OUREMEM3 OTk0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjE3MmVlZjktZWM2YS00NTU4LTgx ODEtYTExZmU2NWI4ZmY4LzAvNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3 OUREMEM3OTk0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIO7vvqdBAi6E3sykbL6kbylhOngtrbsWAoG pry38v5cvgnjRRzEZFUdJZR/q/wUZLNkeZBYo2Q8lwwlqk7mjsyohSIicAK2cUe0 IlKiF1ty3sfpFxrIirGGzaZwVFiTPs4DrrxI+Y5jsaB0UY9yM+J2e6L82UdQxS56 naq2vUrVlCvknoLUmsHfOns9e+WkaVB7sljC4xHCBn71VYqjfPMUa0q8ScMbJb+7 EvyGgHfJCLCmhe0qqcRxHroTzzaZ47yqfXSpaJl4YE5SMVicstgyOgASPGS8MKMe kz1MRmhvQq2UeW+mcb6u3EqS/H9yd5z70Z4HLRRVHHGkYXKSWG0= -----END CERTIFICATE-----Generated at Mon Oct 20 19:08:14 2025 by rpki-client