$ rpki-client -vvf repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.mft File: 5CDA120200D28E4FC66FECD60F5AFCC57E79E642.mft (raw, json) Hash identifier: ErVxDakXr4vmzE5kwxJtJP0gf1JoCzmK70rfnXdCpa0= Subject key identifier: 17:B1:AD:48:DE:58:81:5D:89:8D:DB:72:9D:FD:20:95:F9:09:04:1D Authority key identifier: 5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42 Certificate issuer: /CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642 Certificate serial: 2A40E8A70ADDA7B118E993C331A2772EF55D592E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.mft Manifest number: 02D3 Signing time: Sun 19 Oct 2025 18:21:26 +0000 Manifest this update: Sun 19 Oct 2025 18:16:26 +0000 Manifest next update: Wed 22 Oct 2025 20:59:26 +0000 Files and hashes: 1: 3130332e38372e36372e302f32342d3234203d3e20313333383030.roa (hash: SHAFGJOdQSS5ZqozGPq16khbD5estk3T1ejmGm1B3pU=) 2: 3130332e38372e36362e302f32332d3233203d3e20313333383030.roa (hash: YUNDCL4eKY/WSBYrQHBCQwjmiznybb06CPTcpquocBA=) 3: 3130332e38372e36362e302f32332d3234203d3e20313333383030.roa (hash: hZosjgusREm1QITquyfPnR/M8IfPTl6ZAS8oENoHwKA=) 4: 3130332e39342e3233382e302f32332d3234203d3e20313333383030.roa (hash: Gqjs8W/hxpL2gCxE1+hRH/WoM9HAVJhf5XiKi+bhD8c=) 5: 5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl (hash: op7KEXCz6fSKXJe1f3OP8xnLeLiGLidLNba7FpiBj4Y=) 6: 3130332e38372e36362e302f32342d3234203d3e20313333383030.roa (hash: 28vgeLNt3g9napF7ybKdFbQimDX85rDBRhlE0yU7IqI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 20:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:40:e8:a7:0a:dd:a7:b1:18:e9:93:c3:31:a2:77:2e:f5:5d:59:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642 Validity Not Before: Oct 19 18:16:26 2025 GMT Not After : Oct 22 20:59:26 2025 GMT Subject: CN=17B1AD48DE58815D898DDB729DFD2095F909041D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:75:0c:01:bb:d1:69:54:67:91:5e:6b:7c:d6: de:d2:52:65:8d:85:82:43:6e:cf:1a:70:ad:92:ec: e7:6f:fc:e0:bb:43:fd:58:d0:25:35:67:a4:d0:82: 7d:48:3f:4e:f8:f6:79:e3:fa:20:c9:1f:e8:47:60: 51:2d:d9:32:3a:5c:2a:01:3a:85:e5:b0:1c:4a:3b: 1a:58:ae:a2:e8:90:11:94:04:22:c2:2c:81:bd:0d: 9c:6f:9c:ab:da:10:ba:5a:58:f7:93:f4:ea:b9:2e: 54:7c:a0:ca:42:fb:f1:57:48:74:43:99:f4:c7:62: c8:20:5c:f1:1e:b8:c3:52:bc:de:aa:ee:7c:c5:2d: 71:61:c8:c7:4a:df:e9:14:74:4c:a1:54:bd:d0:9a: 16:24:05:9f:2d:3f:43:0d:6c:e3:db:f1:45:28:92: 42:60:95:dc:ee:6f:08:bb:64:59:f9:bd:d4:9a:94: 41:9f:6a:d7:14:71:89:ca:ee:08:d0:d7:72:be:d2: 82:d5:d3:8a:84:21:ed:a2:bb:f1:f4:af:96:63:f3: 52:e7:a6:c1:c3:35:64:59:43:be:a2:ba:b9:f7:35: b6:ae:a4:e2:58:09:bb:4a:ff:a3:2d:21:b7:c3:78: bc:e9:6a:13:e7:a5:17:a6:f1:e3:f2:52:01:e2:ab: 84:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B1:AD:48:DE:58:81:5D:89:8D:DB:72:9D:FD:20:95:F9:09:04:1D X509v3 Authority Key Identifier: keyid:5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:16:2f:b0:a0:61:0a:bc:7a:82:97:ea:85:aa:30:53:d5:7f: 31:71:c6:a0:fb:79:0a:c8:25:da:13:e1:3f:32:36:49:a3:74: 12:ee:09:b6:28:24:79:89:46:c0:34:31:8e:7d:1c:60:f2:95: 0f:14:d7:cc:75:18:1e:9e:4c:01:b7:3e:de:69:be:e9:b4:dd: ba:07:4a:d2:60:71:19:ab:a0:68:ec:a5:f5:d6:bc:2c:60:06: 2a:9b:15:49:1b:21:0c:bf:2d:37:3a:92:3c:60:3c:20:9c:d2: ea:80:89:04:3d:13:73:63:72:7c:aa:70:83:de:76:a9:42:3d: c9:73:82:05:fa:eb:c4:0f:ba:dd:b4:7d:46:5a:59:7e:f7:50: df:b9:41:14:d2:85:61:5e:20:a8:8c:b8:8f:0a:fb:1b:58:a1: 0f:16:06:b6:9f:4b:e6:b5:f1:91:09:3e:48:a2:12:84:ff:ed: 9d:a0:e7:16:39:4c:88:42:46:f3:25:a3:8d:47:e9:11:9a:bf: e3:10:b1:34:c0:b0:44:32:98:53:06:1f:d1:d4:08:73:c3:ad: cb:bd:53:77:05:b4:62:35:57:ce:8c:86:52:fd:71:d5:ec:ed: 9e:da:62:4f:15:b4:ef:bd:eb:d3:89:e2:96:68:2e:35:8b:b6: 23:b8:1a:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKkDopwrdp7EY6ZPDMaJ3LvVdWS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNEQTEyMDIwMEQyOEU0RkM2NkZFQ0Q2MEY1QUZDQzU3 RTc5RTY0MjAeFw0yNTEwMTkxODE2MjZaFw0yNTEwMjIyMDU5MjZaMDMxMTAvBgNV BAMTKDE3QjFBRDQ4REU1ODgxNUQ4OThEREI3MjlERkQyMDk1RjkwOTA0MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjdQwBu9FpVGeRXmt81t7SUmWN hYJDbs8acK2S7Odv/OC7Q/1Y0CU1Z6TQgn1IP0749nnj+iDJH+hHYFEt2TI6XCoB OoXlsBxKOxpYrqLokBGUBCLCLIG9DZxvnKvaELpaWPeT9Oq5LlR8oMpC+/FXSHRD mfTHYsggXPEeuMNSvN6q7nzFLXFhyMdK3+kUdEyhVL3QmhYkBZ8tP0MNbOPb8UUo kkJgldzubwi7ZFn5vdSalEGfatcUcYnK7gjQ13K+0oLV04qEIe2iu/H0r5Zj81Ln psHDNWRZQ76iurn3NbaupOJYCbtK/6MtIbfDeLzpahPnpRem8ePyUgHiq4ThAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF7GtSN5YgV2Jjdtynf0glfkJBB0wHwYDVR0j BBgwFoAUXNoSAgDSjk/Gb+zWD1r8xX555kIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmFmODM1Mi1jZDY1LTRkYjctYjBjYi0wNDhiNDVlN2E0YmYvMC81Q0RBMTIwMjAw RDI4RTRGQzY2RkVDRDYwRjVBRkNDNTdFNzlFNjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUNEQTEyMDIwMEQyOEU0RkM2NkZFQ0Q2MEY1QUZDQzU3RTc5 RTY0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJhZjgzNTItY2Q2NS00ZGI3LWIw Y2ItMDQ4YjQ1ZTdhNGJmLzAvNUNEQTEyMDIwMEQyOEU0RkM2NkZFQ0Q2MEY1QUZD QzU3RTc5RTY0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABMWL7CgYQq8eoKX6oWqMFPVfzFxxqD7eQrI JdoT4T8yNkmjdBLuCbYoJHmJRsA0MY59HGDylQ8U18x1GB6eTAG3Pt5pvum03boH StJgcRmroGjspfXWvCxgBiqbFUkbIQy/LTc6kjxgPCCc0uqAiQQ9E3NjcnyqcIPe dqlCPclzggX668QPut20fUZaWX73UN+5QRTShWFeIKiMuI8K+xtYoQ8WBrafS+a1 8ZEJPkiiEoT/7Z2g5xY5TIhCRvMlo41H6RGav+MQsTTAsEQymFMGH9HUCHPDrcu9 U3cFtGI1V86MhlL9cdXs7Z7aYk8VtO+969OJ4pZoLjWLtiO4Gm4= -----END CERTIFICATE-----Generated at Mon Oct 20 06:49:58 2025 by rpki-client