$ rpki-client -vvf repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft File: 5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft (raw, json) Hash identifier: L2Ch8GAURtMZl97uMo5P0LY7RaTZewmRghTlrnmOWPQ= Subject key identifier: E6:7A:FF:08:04:2E:22:77:23:1F:12:4F:5F:5B:45:DA:4E:70:F7:B5 Authority key identifier: 5C:55:87:61:8B:4E:1C:1F:4C:EF:C6:99:B0:1F:FC:3C:EC:E3:B6:6C Certificate issuer: /CN=5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C Certificate serial: 35B7FD89998A5BD8B8B03083FEC792B0DA16C834 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft Manifest number: 022D Signing time: Mon 20 Oct 2025 06:31:34 +0000 Manifest this update: Mon 20 Oct 2025 06:26:34 +0000 Manifest next update: Thu 23 Oct 2025 07:36:34 +0000 Files and hashes: 1: 5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl (hash: mO90nYq1Fsa67n4qRvyJ7mdpbthCdC87qipTtueRl8w=) 2: 3130332e3135372e32352e302f32342d3234203d3e20313431313038.roa (hash: JVr4ISjQIPYpq1lUAq+CAUgp8toUADJxZ8neAP9jpDQ=) 3: 323030313a6466353a6338303a3a2f34382d3438203d3e20313431313038.roa (hash: X6Rsg1TfWPdkmJNWv+FJnlS7WWkveBK6RzkbYc8aDOc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 07:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:b7:fd:89:99:8a:5b:d8:b8:b0:30:83:fe:c7:92:b0:da:16:c8:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C Validity Not Before: Oct 20 06:26:34 2025 GMT Not After : Oct 23 07:36:34 2025 GMT Subject: CN=E67AFF08042E2277231F124F5F5B45DA4E70F7B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6a:7a:ba:ae:f2:fd:78:93:ee:cd:cf:19:fe: b7:2c:66:53:2c:c6:06:65:9a:39:0b:45:fc:39:09: 3b:c0:ff:60:a9:21:14:62:2c:28:90:97:90:6b:69: 35:37:1b:29:6c:61:22:18:ef:87:9d:d9:7f:db:5b: 0b:37:d8:dd:91:8b:c6:94:ea:84:af:bf:91:00:0c: b7:52:73:21:96:ce:5a:d5:b3:ee:2f:a9:94:07:c0: e5:2a:f8:b7:b4:ba:49:ed:88:cd:c0:70:cd:14:f9: 78:d5:c5:27:15:31:31:5b:4f:f4:1d:51:d8:27:b4: 66:85:03:66:e2:6e:9e:6b:a9:99:86:45:05:cf:17: a4:10:4c:ca:1c:5f:5e:ce:db:e3:93:43:0d:db:96: e8:6b:53:98:5a:d6:3b:ac:ca:7e:17:09:2f:64:81: 80:28:fa:e6:b7:4f:ac:08:c4:f4:54:40:f8:d9:8e: e3:aa:c8:4c:d1:e6:63:eb:6d:6b:d6:e3:bd:95:9b: 6e:fc:2d:3d:82:c1:65:ad:fc:52:60:e4:c7:24:32: 3b:f5:c1:0a:93:5a:8e:c9:f6:b8:e6:bb:ff:3f:bb: 45:8d:b6:3a:d4:80:69:39:30:4e:f7:63:f7:7a:bc: d9:93:d6:33:cd:07:6b:bf:c3:7c:a2:a2:53:13:80: 10:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:7A:FF:08:04:2E:22:77:23:1F:12:4F:5F:5B:45:DA:4E:70:F7:B5 X509v3 Authority Key Identifier: keyid:5C:55:87:61:8B:4E:1C:1F:4C:EF:C6:99:B0:1F:FC:3C:EC:E3:B6:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:b6:38:cb:0a:0a:3e:d9:fe:13:85:62:47:01:ff:98:3e:4c: 77:ba:f2:23:01:29:dc:50:84:c8:4c:13:c8:58:b5:6d:d3:9b: 2f:4e:25:6e:5c:8e:3e:5b:c5:cc:28:86:18:3f:1c:03:55:86: 8c:aa:90:7c:0e:6e:61:4d:a6:aa:a9:6d:90:4c:d0:22:96:8b: 15:be:b1:13:40:14:35:98:2f:6d:4e:ee:66:71:04:6b:b3:6f: 6b:2c:96:bf:4b:0d:b9:22:2f:dd:3b:25:b2:9c:08:27:3f:78: 07:6e:f5:a6:ca:5b:a1:f7:35:f7:e3:1f:85:0b:35:40:b1:0b: a7:df:17:0a:1b:bd:2e:8d:1e:f2:68:a9:85:c2:3a:39:a1:3a: 8c:f8:fe:c9:e4:b3:53:be:42:2f:db:d7:fc:dd:ad:68:4f:b6: 74:7a:3b:38:af:2f:18:57:ee:18:f7:cd:43:3e:b0:62:e9:b7: c7:76:f2:b1:ec:d1:fd:1f:96:77:5f:3c:93:17:13:d0:d5:d3: 26:29:5e:04:2a:70:a3:5c:b2:db:3a:60:9e:31:be:a9:2f:d3: 43:c3:ba:98:c1:49:91:c2:52:f2:2f:94:40:13:f0:3e:2e:ea: e3:6b:a0:de:27:78:dc:4f:6e:e5:f9:6e:52:f8:20:11:bb:aa: 8c:61:2d:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNbf9iZmKW9i4sDCD/seSsNoWyDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZDM0NF Q0UzQjY2QzAeFw0yNTEwMjAwNjI2MzRaFw0yNTEwMjMwNzM2MzRaMDMxMTAvBgNV BAMTKEU2N0FGRjA4MDQyRTIyNzcyMzFGMTI0RjVGNUI0NURBNEU3MEY3QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDanq6rvL9eJPuzc8Z/rcsZlMs xgZlmjkLRfw5CTvA/2CpIRRiLCiQl5BraTU3GylsYSIY74ed2X/bWws32N2Ri8aU 6oSvv5EADLdScyGWzlrVs+4vqZQHwOUq+Le0ukntiM3AcM0U+XjVxScVMTFbT/Qd UdgntGaFA2bibp5rqZmGRQXPF6QQTMocX17O2+OTQw3bluhrU5ha1jusyn4XCS9k gYAo+ua3T6wIxPRUQPjZjuOqyEzR5mPrbWvW472Vm278LT2CwWWt/FJg5MckMjv1 wQqTWo7J9rjmu/8/u0WNtjrUgGk5ME73Y/d6vNmT1jPNB2u/w3yiolMTgBBxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5nr/CAQuIncjHxJPX1tF2k5w97UwHwYDVR0j BBgwFoAUXFWHYYtOHB9M78aZsB/8POzjtmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDFiNzlhYy0zMzUxLTQ3MDUtOGMzZC02MDJhZGNkNzliYjcvMC81QzU1ODc2MThC NEUxQzFGNENFRkM2OTlCMDFGRkMzQ0VDRTNCNjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZDM0NFQ0Uz QjY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODAxYjc5YWMtMzM1MS00NzA1LThj M2QtNjAyYWRjZDc5YmI3LzAvNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZD M0NFQ0UzQjY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+2OMsKCj7Z/hOFYkcB/5g+THe68iMBKdxQ hMhME8hYtW3Tmy9OJW5cjj5bxcwohhg/HANVhoyqkHwObmFNpqqpbZBM0CKWixW+ sRNAFDWYL21O7mZxBGuzb2sslr9LDbkiL907JbKcCCc/eAdu9abKW6H3NffjH4UL NUCxC6ffFwobvS6NHvJoqYXCOjmhOoz4/snks1O+Qi/b1/zdrWhPtnR6OzivLxhX 7hj3zUM+sGLpt8d28rHs0f0flndfPJMXE9DV0yYpXgQqcKNcsts6YJ4xvqkv00PD upjBSZHCUvIvlEAT8D4u6uNroN4neNxPbuX5blL4IBG7qoxhLTs= -----END CERTIFICATE-----Generated at Tue Oct 21 00:08:01 2025 by rpki-client