$ rpki-client -vvf repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft File: 5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft (raw, json) Hash identifier: sY7TG1412gncuTu/siF2XW2sKP0xjwJJvXZMT9/RAwo= Subject key identifier: F0:27:1E:CB:B0:3A:4F:28:FF:62:F8:18:1A:9C:7D:E3:B5:B6:FB:19 Authority key identifier: 51:97:E2:A7:8B:BA:1E:8C:9E:B8:08:E4:5A:99:DD:2B:E7:B4:12:97 Certificate issuer: /CN=5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297 Certificate serial: 4902D8BF6F13EA933F91209953C5218B5C698A19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft Manifest number: 01BC Signing time: Sat 18 Oct 2025 07:31:27 +0000 Manifest this update: Sat 18 Oct 2025 07:26:27 +0000 Manifest next update: Tue 21 Oct 2025 18:02:27 +0000 Files and hashes: 1: 5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl (hash: qv0SYVRjot6cTlFmObxS+8rItZ2qyaQqvDGxpFAg7oY=) 2: 3130332e3132392e32322e302f32332d3234203d3e20313335343738.roa (hash: FwEnmWvpQPi3X//OQNwFe+4W6d+oidU+6VtbWJyAezc=) 3: 3130332e3132392e32302e302f32332d3234203d3e20313335343738.roa (hash: YByKLIatw2VYf9uIqdHXeYjHhsev8w+x71A+omd++qw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 18:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:02:d8:bf:6f:13:ea:93:3f:91:20:99:53:c5:21:8b:5c:69:8a:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297 Validity Not Before: Oct 18 07:26:27 2025 GMT Not After : Oct 21 18:02:27 2025 GMT Subject: CN=F0271ECBB03A4F28FF62F8181A9C7DE3B5B6FB19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c1:fc:bc:3b:46:a8:79:3a:6c:25:8b:ee:79: 8e:9b:58:07:d6:76:c8:33:46:21:18:e5:d3:57:ab: 0b:42:5f:0f:c4:c3:11:0e:ad:95:64:3e:c3:ed:1d: 0d:b6:6a:5e:40:29:9f:15:4d:af:f9:20:51:4c:e8: d1:35:1a:39:62:c7:38:6e:6e:3f:77:a9:e3:b7:0b: 74:3c:8c:09:6e:31:9b:30:32:ea:fe:ce:b8:af:a8: c3:13:e9:f9:68:bd:7b:f9:60:2f:2a:ba:ca:4b:a7: e9:25:80:e0:d7:1c:f4:11:51:81:6a:b9:d9:6d:96: ce:69:22:4d:f0:e1:10:2f:c9:44:11:02:67:ec:f7: 99:a7:29:2f:c1:a8:f3:08:d0:ee:67:64:77:fc:3d: e7:35:04:01:32:89:1b:48:67:b8:07:4e:cd:2b:c7: 72:fd:d4:5e:1c:d0:15:a8:57:c2:3c:0a:3a:99:dc: b0:3e:a2:d3:62:2f:11:0c:76:2e:0c:2d:51:eb:59: 1f:8f:05:07:d8:e0:e2:b1:87:83:45:7a:54:e1:4a: 43:09:70:a5:e6:e6:9e:d9:71:a7:70:b1:0c:5f:8c: 57:c4:bd:49:85:db:cf:0a:00:73:51:02:80:6b:9a: fc:50:a2:6e:57:e7:3a:c0:ff:4f:74:b4:8b:7d:f3: 83:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:27:1E:CB:B0:3A:4F:28:FF:62:F8:18:1A:9C:7D:E3:B5:B6:FB:19 X509v3 Authority Key Identifier: keyid:51:97:E2:A7:8B:BA:1E:8C:9E:B8:08:E4:5A:99:DD:2B:E7:B4:12:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:3c:52:08:26:ae:be:a9:90:e5:48:b9:91:36:db:11:6e:94: 89:76:a7:8e:6d:2f:bf:c7:d4:57:f7:10:b1:f4:08:42:e5:1a: d9:4e:76:14:f3:94:15:b6:7b:58:fa:33:0f:74:6f:1a:b7:c6: 0f:b8:4c:f9:cd:2e:fa:9c:a3:d3:3e:c4:a0:3e:91:4f:b9:63: e6:90:00:cb:65:78:f9:d7:5c:19:ef:d0:4b:f4:b6:e4:d1:d9: 76:a7:c4:7d:8e:54:bf:bc:eb:b1:b0:52:d2:4e:6a:7a:69:b5: ef:aa:bd:9a:bd:c0:94:97:2e:3e:f6:eb:d0:bf:a2:9d:cd:ea: b4:e6:c9:05:95:49:26:01:28:1a:28:33:fb:d7:12:9c:2c:88: f2:1b:5a:1e:71:4d:84:ab:4a:7c:70:96:4d:31:20:f3:d7:24: 58:c6:8b:4b:2c:dc:a7:ba:9c:13:56:a3:00:3a:bd:90:2d:42: 73:4d:57:c8:98:b0:38:b9:58:29:1b:6f:85:14:e8:9d:e0:b2: ab:1b:c9:89:97:54:90:20:77:8c:0d:6d:db:a1:db:14:38:4b: 8a:f5:28:5c:c8:d4:8b:32:4e:df:da:a0:95:8f:38:e3:3d:e6: 1b:20:a7:8e:93:d5:cc:58:7c:0d:a8:d2:db:ec:e6:43:6c:ba: 85:41:13:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSQLYv28T6pM/kSCZU8Uhi1xpihkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE5N0UyQTc4QkJBMUU4QzlFQjgwOEU0NUE5OUREMkJF N0I0MTI5NzAeFw0yNTEwMTgwNzI2MjdaFw0yNTEwMjExODAyMjdaMDMxMTAvBgNV BAMTKEYwMjcxRUNCQjAzQTRGMjhGRjYyRjgxODFBOUM3REUzQjVCNkZCMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxwfy8O0aoeTpsJYvueY6bWAfW dsgzRiEY5dNXqwtCXw/EwxEOrZVkPsPtHQ22al5AKZ8VTa/5IFFM6NE1Gjlixzhu bj93qeO3C3Q8jAluMZswMur+zrivqMMT6flovXv5YC8quspLp+klgODXHPQRUYFq udltls5pIk3w4RAvyUQRAmfs95mnKS/BqPMI0O5nZHf8Pec1BAEyiRtIZ7gHTs0r x3L91F4c0BWoV8I8CjqZ3LA+otNiLxEMdi4MLVHrWR+PBQfY4OKxh4NFelThSkMJ cKXm5p7ZcadwsQxfjFfEvUmF288KAHNRAoBrmvxQom5X5zrA/090tIt984ObAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8Ccey7A6Tyj/YvgYGpx947W2+xkwHwYDVR0j BBgwFoAUUZfip4u6HoyeuAjkWpndK+e0EpcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjU0MjgzOS0yODU4LTQ5ZjAtYWNkZi1mYTdkM2FiOWM1NTgvMC81MTk3RTJBNzhC QkExRThDOUVCODA4RTQ1QTk5REQyQkU3QjQxMjk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTE5N0UyQTc4QkJBMUU4QzlFQjgwOEU0NUE5OUREMkJFN0I0 MTI5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY1NDI4MzktMjg1OC00OWYwLWFj ZGYtZmE3ZDNhYjljNTU4LzAvNTE5N0UyQTc4QkJBMUU4QzlFQjgwOEU0NUE5OURE MkJFN0I0MTI5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFI8Uggmrr6pkOVIuZE22xFulIl2p45tL7/H 1Ff3ELH0CELlGtlOdhTzlBW2e1j6Mw90bxq3xg+4TPnNLvqco9M+xKA+kU+5Y+aQ AMtlePnXXBnv0Ev0tuTR2XanxH2OVL+867GwUtJOanppte+qvZq9wJSXLj7269C/ op3N6rTmyQWVSSYBKBooM/vXEpwsiPIbWh5xTYSrSnxwlk0xIPPXJFjGi0ss3Ke6 nBNWowA6vZAtQnNNV8iYsDi5WCkbb4UU6J3gsqsbyYmXVJAgd4wNbduh2xQ4S4r1 KFzI1IsyTt/aoJWPOOM95hsgp46T1cxYfA2o0tvs5kNsuoVBE+0= -----END CERTIFICATE-----Generated at Mon Oct 20 13:05:31 2025 by rpki-client