$ rpki-client -vvf repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft File: C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft (raw, json) Hash identifier: K/OdnkVFuhb7p5anwRRP7qQDUrEuEIj1D+X5jY1wDqU= Subject key identifier: C0:C3:BE:71:83:D5:B5:40:96:BC:9D:D0:17:79:BF:BB:0E:AD:E4:7A Authority key identifier: C5:F2:AF:A0:AB:7A:B2:DD:BD:8F:87:5B:21:B8:EC:0C:3F:F8:31:F6 Certificate issuer: /CN=C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6 Certificate serial: 12D43CB0006CC519261A609E8A9484AC0430FF8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft Manifest number: 045B Signing time: Sun 19 Oct 2025 14:41:19 +0000 Manifest this update: Sun 19 Oct 2025 14:36:19 +0000 Manifest next update: Wed 22 Oct 2025 17:02:19 +0000 Files and hashes: 1: C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.crl (hash: xf1Wjg4lfaT5AE5y14MWZgnUsS/TnMRt3vHB3fOqmp8=) 2: 3130332e3234362e3138342e302f32342d3234203d3e203538333833.roa (hash: xufBW0tgF9GH044ZCtCODOthPCoRzgsrcm0HHfNPNhM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.crl rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:d4:3c:b0:00:6c:c5:19:26:1a:60:9e:8a:94:84:ac:04:30:ff:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6 Validity Not Before: Oct 19 14:36:19 2025 GMT Not After : Oct 22 17:02:19 2025 GMT Subject: CN=C0C3BE7183D5B54096BC9DD01779BFBB0EADE47A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ba:ec:da:60:fa:14:3d:8c:0e:4b:85:2b:00: 18:be:e9:53:d1:85:e9:f1:49:1c:42:36:b9:47:c0: a2:86:64:a4:36:41:ad:18:2a:f9:d8:40:39:74:9a: 89:d3:48:60:da:f3:46:eb:e1:88:5e:b1:4a:1e:34: 3e:af:dd:24:bb:4d:76:cd:d9:97:8a:93:c9:0d:3e: d2:4c:27:c3:55:36:6f:39:5b:ae:2a:00:82:06:43: 9d:f6:e6:44:11:e0:e1:61:e8:03:03:18:57:56:13: 6a:4c:7b:8e:6e:65:f8:79:90:16:86:e7:26:db:6b: 42:dd:9c:61:d5:22:bd:88:aa:a2:a3:f7:a2:35:ba: c8:ca:04:cc:5d:a0:a9:c2:6e:37:27:d6:d3:c8:34: c7:5e:ef:aa:68:44:49:4f:64:62:d3:e2:9f:45:b8: 80:2c:55:de:87:8c:19:41:0a:77:11:34:7a:f3:14: 7c:3c:ab:66:65:44:6b:05:94:65:c7:08:e6:cf:22: 1b:58:f0:bc:bf:63:5b:5d:fe:05:79:d0:4a:c3:20: ad:18:af:bd:39:d4:1e:08:b0:60:17:f7:f5:3a:ba: 09:ae:1a:43:1f:29:50:89:b2:0a:aa:d9:ed:4b:57: 8b:04:97:dd:12:6f:fe:e7:5d:8a:94:db:27:42:49: c1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:C3:BE:71:83:D5:B5:40:96:BC:9D:D0:17:79:BF:BB:0E:AD:E4:7A X509v3 Authority Key Identifier: keyid:C5:F2:AF:A0:AB:7A:B2:DD:BD:8F:87:5B:21:B8:EC:0C:3F:F8:31:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:53:8f:f9:f4:af:af:57:37:02:4f:e2:6c:53:d4:f9:27:11: 24:01:d4:b3:39:ca:a3:9a:18:5e:c8:88:27:e4:14:e1:41:eb: 0b:a4:f9:d3:ac:bc:3e:d4:1c:39:1e:28:eb:3d:76:6b:bf:7a: e4:f2:a8:7a:df:25:2a:17:63:f2:ea:8f:13:af:f0:a5:e5:4d: 55:2a:46:b4:b4:3a:a9:e4:da:1b:59:32:a6:73:67:94:ab:79: 82:fc:8f:38:0c:49:c2:fc:87:32:01:a2:34:e2:58:66:8b:68: 0f:3f:1f:c0:6d:b0:0c:56:cc:2e:9a:ef:f7:ca:fc:fb:c4:a9: e7:80:ba:73:5c:b9:a0:7d:1f:4f:79:59:96:67:3e:99:12:ba: c3:c3:41:fb:91:9e:3b:c1:ae:67:71:5e:7b:b0:fa:d5:e1:e3: c6:f1:53:32:10:28:4f:21:4f:66:fd:bd:9b:3b:22:f6:bb:1e: 95:88:20:af:a9:c0:f7:5d:f2:ea:06:a2:35:17:f8:04:5c:d2: cc:9c:32:a3:94:50:6b:66:7a:89:ac:31:53:11:29:6d:1e:35: 47:4f:bc:bd:e6:c0:2c:55:d9:9f:40:a6:03:13:38:32:82:07: 71:65:00:ff:65:79:f8:b0:b0:d8:15:a3:7a:fc:0e:4d:54:a4: f6:68:ec:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEtQ8sABsxRkmGmCeipSErAQw/44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVGMkFGQTBBQjdBQjJEREJEOEY4NzVCMjFCOEVDMEMz RkY4MzFGNjAeFw0yNTEwMTkxNDM2MTlaFw0yNTEwMjIxNzAyMTlaMDMxMTAvBgNV BAMTKEMwQzNCRTcxODNENUI1NDA5NkJDOUREMDE3NzlCRkJCMEVBREU0N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuuuzaYPoUPYwOS4UrABi+6VPR henxSRxCNrlHwKKGZKQ2Qa0YKvnYQDl0monTSGDa80br4YhesUoeND6v3SS7TXbN 2ZeKk8kNPtJMJ8NVNm85W64qAIIGQ5325kQR4OFh6AMDGFdWE2pMe45uZfh5kBaG 5ybba0LdnGHVIr2IqqKj96I1usjKBMxdoKnCbjcn1tPINMde76poRElPZGLT4p9F uIAsVd6HjBlBCncRNHrzFHw8q2ZlRGsFlGXHCObPIhtY8Ly/Y1td/gV50ErDIK0Y r7051B4IsGAX9/U6ugmuGkMfKVCJsgqq2e1LV4sEl90Sb/7nXYqU2ydCScFDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwMO+cYPVtUCWvJ3QF3m/uw6t5HowHwYDVR0j BBgwFoAUxfKvoKt6st29j4dbIbjsDD/4MfYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmE1YWI1NC03ODQ0LTQ2MDItOGFlYS0zYzJlNjQxZjZhM2MvMC9DNUYyQUZBMEFC N0FCMkREQkQ4Rjg3NUIyMUI4RUMwQzNGRjgzMUY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVGMkFGQTBBQjdBQjJEREJEOEY4NzVCMjFCOEVDMEMzRkY4 MzFGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZhNWFiNTQtNzg0NC00NjAyLThh ZWEtM2MyZTY0MWY2YTNjLzAvQzVGMkFGQTBBQjdBQjJEREJEOEY4NzVCMjFCOEVD MEMzRkY4MzFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxTj/n0r69XNwJP4mxT1PknESQB1LM5yqOa GF7IiCfkFOFB6wuk+dOsvD7UHDkeKOs9dmu/euTyqHrfJSoXY/LqjxOv8KXlTVUq RrS0Oqnk2htZMqZzZ5SreYL8jzgMScL8hzIBojTiWGaLaA8/H8BtsAxWzC6a7/fK /PvEqeeAunNcuaB9H095WZZnPpkSusPDQfuRnjvBrmdxXnuw+tXh48bxUzIQKE8h T2b9vZs7Iva7HpWIIK+pwPdd8uoGojUX+ARc0sycMqOUUGtmeomsMVMRKW0eNUdP vL3mwCxV2Z9ApgMTODKCB3FlAP9lefiwsNgVo3r8Dk1UpPZo7Ic= -----END CERTIFICATE-----Generated at Mon Oct 20 15:26:07 2025 by rpki-client