$ rpki-client -vvf repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft File: 5234A428BC63559E2511B3EFFB085B82B195A8ED.mft (raw, json) Hash identifier: 1g7rnAePeeOdta6D2Gw5FptWYnyAe/dguzySBz2r614= Subject key identifier: 4C:ED:7F:36:FB:FF:12:3D:8B:B8:F2:B2:FE:CB:C2:29:CE:84:27:EC Authority key identifier: 52:34:A4:28:BC:63:55:9E:25:11:B3:EF:FB:08:5B:82:B1:95:A8:ED Certificate issuer: /CN=5234A428BC63559E2511B3EFFB085B82B195A8ED Certificate serial: 6C6B2586223FCFE2D481AB25CE30B2E7753EA51F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft Manifest number: 5F Signing time: Sat 18 Oct 2025 13:52:03 +0000 Manifest this update: Sat 18 Oct 2025 13:47:03 +0000 Manifest next update: Tue 21 Oct 2025 18:08:03 +0000 Files and hashes: 1: 3130332e31372e37362e302f32342d3234203d3e20313331373831.roa (hash: rB8zcfhigYxp6rZG5kgxX6r/oJS8xphHw/YAzK8Sodw=) 2: 3130332e31372e37372e302f32342d3234203d3e20313331373831.roa (hash: 4y750PE+WZPEuQKdgW2BVnFEcTQLxauJA4sENyjZR2o=) 3: 5234A428BC63559E2511B3EFFB085B82B195A8ED.crl (hash: gkkyMNXnWcNcziHJLFrff7frhsHvwT+bTs+jxOfCaDA=) 4: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: 3jZR/32xfuAKeJQ/xf5TVwB85F6YIOYekaTwsoIa1SY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.crl rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 18:08:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:6b:25:86:22:3f:cf:e2:d4:81:ab:25:ce:30:b2:e7:75:3e:a5:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5234A428BC63559E2511B3EFFB085B82B195A8ED Validity Not Before: Oct 18 13:47:03 2025 GMT Not After : Oct 21 18:08:03 2025 GMT Subject: CN=4CED7F36FBFF123D8BB8F2B2FECBC229CE8427EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:79:56:22:7f:b4:57:fb:b5:d0:07:9f:83:87: f9:4b:a3:f5:58:9c:46:fe:f2:36:4a:8f:83:4c:a9: 9f:07:78:2b:38:1e:5b:7e:af:10:31:12:2e:75:4a: 63:a0:5e:7a:e5:78:84:1c:d7:82:a9:83:2e:d5:e2: 11:94:04:e2:d0:c2:f9:10:fc:c4:df:5f:5c:d9:04: ec:6e:d9:e7:6b:31:fd:8c:c7:87:0a:5d:a6:c5:88: 94:93:c7:0c:28:e1:ee:ab:d8:57:5c:8d:08:43:cd: 96:3c:dc:40:16:49:e9:8e:bc:a2:35:19:4c:52:0a: 40:42:af:e1:6a:61:7f:43:80:d3:fe:5c:71:a2:7f: 42:a3:d4:75:f5:fd:44:73:b2:16:e5:cf:cb:da:b7: 3c:c8:f1:22:1f:b1:48:2e:99:19:c7:50:13:82:2f: 91:42:4c:02:15:3a:e0:96:a8:dc:f7:f5:0e:5a:e3: 30:72:b3:0e:e6:35:de:dc:a5:77:83:61:b5:b1:1f: 0c:ed:51:39:c0:35:73:4f:0b:a2:80:24:42:68:d1: 8f:88:38:f2:78:3e:3a:f5:17:6b:b5:3d:2d:7f:19: 22:08:50:d8:5a:db:25:1d:d6:eb:1e:bf:61:68:2d: d5:43:62:1f:23:03:77:9c:e5:74:fe:5a:c2:18:19: f6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:ED:7F:36:FB:FF:12:3D:8B:B8:F2:B2:FE:CB:C2:29:CE:84:27:EC X509v3 Authority Key Identifier: keyid:52:34:A4:28:BC:63:55:9E:25:11:B3:EF:FB:08:5B:82:B1:95:A8:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:5e:c4:de:70:b3:48:14:2a:7e:5b:a8:46:94:aa:1f:60:9e: 52:f0:78:9c:11:f6:64:2d:e4:c8:4c:05:78:c8:74:e6:47:c1: 75:10:c1:23:0f:45:42:04:0c:34:91:08:4a:d0:18:af:de:4f: 76:ed:cc:76:01:71:99:59:ec:d0:88:7c:3e:80:f5:88:90:03: 93:28:52:ec:e0:b0:09:38:02:8a:c3:ff:d1:6a:6d:11:86:c0: 12:0d:8c:7b:7b:50:75:0a:00:f5:b4:a6:5d:d1:8c:02:2f:4c: bd:6e:98:ec:e7:9b:9e:5d:d2:7f:35:20:4a:fb:8a:71:44:39: db:58:89:7c:ef:60:39:4a:82:e7:5f:c8:67:64:e6:25:b4:74: be:f5:77:dc:5f:da:80:36:d5:dd:94:e9:42:e0:11:b9:49:76: b2:e9:08:aa:c9:e0:66:dd:da:fe:fe:17:41:a7:e9:39:55:c9: 9a:be:e4:94:e2:c5:46:84:3b:80:81:c9:09:3c:47:20:a1:df: cf:e3:a1:c3:9a:1b:a7:f3:35:cb:ca:7a:6a:8e:ff:3d:2e:59: dc:2e:26:cb:fc:f3:f6:66:6d:ec:cb:48:0a:b6:e1:26:69:f1: a0:e6:f5:bb:78:8c:0a:b6:51:5d:d7:15:0d:ae:44:05:56:cd: 37:23:1a:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbGslhiI/z+LUgaslzjCy53U+pR8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVCODJC MTk1QThFRDAeFw0yNTEwMTgxMzQ3MDNaFw0yNTEwMjExODA4MDNaMDMxMTAvBgNV BAMTKDRDRUQ3RjM2RkJGRjEyM0Q4QkI4RjJCMkZFQ0JDMjI5Q0U4NDI3RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxeVYif7RX+7XQB5+Dh/lLo/VY nEb+8jZKj4NMqZ8HeCs4Hlt+rxAxEi51SmOgXnrleIQc14Kpgy7V4hGUBOLQwvkQ /MTfX1zZBOxu2edrMf2Mx4cKXabFiJSTxwwo4e6r2FdcjQhDzZY83EAWSemOvKI1 GUxSCkBCr+FqYX9DgNP+XHGif0Kj1HX1/URzshblz8vatzzI8SIfsUgumRnHUBOC L5FCTAIVOuCWqNz39Q5a4zBysw7mNd7cpXeDYbWxHwztUTnANXNPC6KAJEJo0Y+I OPJ4Pjr1F2u1PS1/GSIIUNha2yUd1usev2FoLdVDYh8jA3ec5XT+WsIYGfbVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTO1/Nvv/Ej2LuPKy/svCKc6EJ+wwHwYDVR0j BBgwFoAUUjSkKLxjVZ4lEbPv+whbgrGVqO0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YTA3MTUxNC1lNGRlLTRhY2UtYTBkZi1mN2M0YWI4MDc0YTUvMC81MjM0QTQyOEJD NjM1NTlFMjUxMUIzRUZGQjA4NUI4MkIxOTVBOEVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVCODJCMTk1 QThFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmEwNzE1MTQtZTRkZS00YWNlLWEw ZGYtZjdjNGFiODA3NGE1LzAvNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVC ODJCMTk1QThFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADlexN5ws0gUKn5bqEaUqh9gnlLweJwR9mQt 5MhMBXjIdOZHwXUQwSMPRUIEDDSRCErQGK/eT3btzHYBcZlZ7NCIfD6A9YiQA5Mo UuzgsAk4AorD/9FqbRGGwBINjHt7UHUKAPW0pl3RjAIvTL1umOznm55d0n81IEr7 inFEOdtYiXzvYDlKgudfyGdk5iW0dL71d9xf2oA21d2U6ULgEblJdrLpCKrJ4Gbd 2v7+F0Gn6TlVyZq+5JTixUaEO4CByQk8RyCh38/jocOaG6fzNcvKemqO/z0uWdwu Jsv88/ZmbezLSAq24SZp8aDm9bt4jAq2UV3XFQ2uRAVWzTcjGiM= -----END CERTIFICATE-----Generated at Mon Oct 20 19:07:05 2025 by rpki-client