$ rpki-client -vvf repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft File: 5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft (raw, json) Hash identifier: CJhT7EMUHgSvtizo+gKiLMxKtzx4GVWuHMmuHTwRx3w= Subject key identifier: 4F:43:BC:4A:6D:A2:20:54:77:F4:06:EC:A0:7C:9F:9A:D2:70:D3:A6 Authority key identifier: 5D:DD:CC:DF:3A:FC:49:2F:6C:C4:87:1D:60:72:A5:AF:A9:73:A0:60 Certificate issuer: /CN=5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060 Certificate serial: 7E8D2278D587EF33EDE41110B2DDEC70F8E75976 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft Manifest number: 01DB Signing time: Mon 20 Oct 2025 04:01:26 +0000 Manifest this update: Mon 20 Oct 2025 03:56:26 +0000 Manifest next update: Thu 23 Oct 2025 07:05:26 +0000 Files and hashes: 1: 34392e3135362e35362e302f32342d3234203d3e203535363637.roa (hash: QTtjZwFvhIv1xSth/5URjOWWXMaKhYuFu5hw4Cr+XZk=) 2: 34392e3135362e35362e302f32332d3233203d3e203535363637.roa (hash: Pm/YE5XlZI4a5R3H7gW8azydouGoRXTsVjZR6IqTpxU=) 3: 34392e3135362e36302e302f32342d3234203d3e203535363637.roa (hash: CLKzrlH5ZLBoCsg4iE8SZwFFCQ/Se+D5xuiONrmRN40=) 4: 34392e3135362e35372e302f32342d3234203d3e203535363637.roa (hash: PyngY50Jc6jfJpjhLI7AvXD7abuw+Cb9szwCdvvMqIM=) 5: 5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.crl (hash: zz9iuG5hizB7PKfXyEO0Wc0fQ4XYgvIBAFB0vxPGlBI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.crl rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 07:05:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:8d:22:78:d5:87:ef:33:ed:e4:11:10:b2:dd:ec:70:f8:e7:59:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060 Validity Not Before: Oct 20 03:56:26 2025 GMT Not After : Oct 23 07:05:26 2025 GMT Subject: CN=4F43BC4A6DA2205477F406ECA07C9F9AD270D3A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:02:89:4b:34:8a:e2:19:69:d2:b1:dd:a4:90: c0:e5:52:85:27:c1:d2:07:a8:bc:90:c0:65:c7:30: 8a:f5:08:47:4e:8d:4c:a9:30:da:ba:06:2d:77:f7: a2:e6:b4:a1:cf:d2:37:18:e7:16:1f:5e:2b:f7:81: 62:73:b6:a2:66:fe:28:52:4a:2b:de:91:e5:4f:8d: 91:9f:ce:61:e4:31:b5:c1:41:88:a5:90:49:75:52: 07:6b:f9:75:5e:8d:02:5c:dc:6a:5e:9d:e0:ac:5d: b3:9f:da:86:b0:dd:fe:94:a1:89:f9:9e:f1:e4:50: 40:ff:6a:b1:07:c3:32:5b:ca:94:aa:63:de:e2:a4: 93:da:c7:5d:19:8d:9e:7e:b0:d1:1f:1b:05:f0:00: 59:1d:a8:a4:b0:a5:4e:cf:a7:70:57:bd:df:74:4a: 0b:04:e8:08:57:94:35:14:8b:3b:5e:ac:b0:c6:66: 79:d2:1b:92:29:41:e9:80:9a:f2:1a:70:ea:ef:c4: d2:f1:9e:29:8c:98:74:5c:41:91:d4:18:38:75:cf: 83:40:84:43:65:19:8b:bb:23:a5:37:f2:e0:22:1d: a9:99:3e:85:33:07:96:f4:4a:e8:63:35:82:d7:86: f3:d1:c3:6e:ad:18:b1:26:4c:cf:27:a3:fc:4d:40: c3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:43:BC:4A:6D:A2:20:54:77:F4:06:EC:A0:7C:9F:9A:D2:70:D3:A6 X509v3 Authority Key Identifier: keyid:5D:DD:CC:DF:3A:FC:49:2F:6C:C4:87:1D:60:72:A5:AF:A9:73:A0:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:fa:9d:1c:2b:34:11:f9:be:0a:a2:41:92:d7:c3:51:a7:38: ee:37:81:f2:84:c4:d8:3c:ee:64:ac:37:b2:62:80:e4:74:cd: 9c:9c:bd:ee:8c:27:19:40:66:13:df:97:ea:8a:fe:3e:10:ef: 36:86:2e:41:8f:84:24:59:39:ed:3d:c4:f3:71:21:41:79:d1: c0:40:60:16:9e:3f:d3:ed:5e:c0:93:8c:44:d9:6d:76:3f:4b: 68:64:f1:21:56:4e:86:37:25:e0:39:7e:da:66:e9:b2:85:37: 58:87:a1:e0:c3:b1:eb:a1:97:ed:f2:98:77:5b:d6:54:d9:c3: 55:90:4b:54:a9:a6:cf:64:60:c3:d9:17:d3:77:47:e9:ac:3d: be:76:87:92:a1:3c:11:83:7d:2d:34:e2:38:0c:e9:e4:f7:34: 5c:27:2d:bf:59:4b:a3:bc:08:98:ea:06:d4:73:25:af:6d:4e: d2:b7:d4:ec:ba:d4:9e:bc:2a:5f:b3:68:39:83:2e:dd:2f:6e: d1:b5:fc:26:c9:b0:77:d5:dc:65:dd:d6:b2:c9:fa:c2:db:76: 43:d8:1b:d8:f7:78:af:82:e0:2c:e8:24:fa:c7:66:4e:a0:60: be:da:06:8a:8b:81:df:52:c0:28:0f:4c:52:5f:1b:8a:86:ee: 25:b7:3e:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfo0ieNWH7zPt5BEQst3scPjnWXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURERENDREYzQUZDNDkyRjZDQzQ4NzFENjA3MkE1QUZB OTczQTA2MDAeFw0yNTEwMjAwMzU2MjZaFw0yNTEwMjMwNzA1MjZaMDMxMTAvBgNV BAMTKDRGNDNCQzRBNkRBMjIwNTQ3N0Y0MDZFQ0EwN0M5RjlBRDI3MEQzQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTAolLNIriGWnSsd2kkMDlUoUn wdIHqLyQwGXHMIr1CEdOjUypMNq6Bi1396LmtKHP0jcY5xYfXiv3gWJztqJm/ihS SivekeVPjZGfzmHkMbXBQYilkEl1Ugdr+XVejQJc3GpeneCsXbOf2oaw3f6UoYn5 nvHkUED/arEHwzJbypSqY97ipJPax10ZjZ5+sNEfGwXwAFkdqKSwpU7Pp3BXvd90 SgsE6AhXlDUUizterLDGZnnSG5IpQemAmvIacOrvxNLxnimMmHRcQZHUGDh1z4NA hENlGYu7I6U38uAiHamZPoUzB5b0SuhjNYLXhvPRw26tGLEmTM8no/xNQMOhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT0O8Sm2iIFR39AbsoHyfmtJw06YwHwYDVR0j BBgwFoAUXd3M3zr8SS9sxIcdYHKlr6lzoGAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjA2Y2Y1MC1hM2QxLTRjYzktOTI2MC05ODdiMmNhMGM5MjcvMC81REREQ0NERjNB RkM0OTJGNkNDNDg3MUQ2MDcyQTVBRkE5NzNBMDYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNURERENDREYzQUZDNDkyRjZDQzQ4NzFENjA3MkE1QUZBOTcz QTA2MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjIwNmNmNTAtYTNkMS00Y2M5LTky NjAtOTg3YjJjYTBjOTI3LzAvNURERENDREYzQUZDNDkyRjZDQzQ4NzFENjA3MkE1 QUZBOTczQTA2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACH6nRwrNBH5vgqiQZLXw1GnOO43gfKExNg8 7mSsN7JigOR0zZycve6MJxlAZhPfl+qK/j4Q7zaGLkGPhCRZOe09xPNxIUF50cBA YBaeP9PtXsCTjETZbXY/S2hk8SFWToY3JeA5ftpm6bKFN1iHoeDDseuhl+3ymHdb 1lTZw1WQS1Spps9kYMPZF9N3R+msPb52h5KhPBGDfS004jgM6eT3NFwnLb9ZS6O8 CJjqBtRzJa9tTtK31Oy61J68Kl+zaDmDLt0vbtG1/CbJsHfV3GXd1rLJ+sLbdkPY G9j3eK+C4CzoJPrHZk6gYL7aBoqLgd9SwCgPTFJfG4qG7iW3Pp0= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:29 2025 by rpki-client