$ rpki-client -vvf repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft File: 5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft (raw, json) Hash identifier: UQtmjCTbakKKvSAIhLy1RULbfZAohcjbU67vOm2kaIo= Subject key identifier: 37:AB:44:16:23:A0:75:A9:61:BC:66:2A:45:1D:E3:B3:5F:FC:F1:FF Authority key identifier: 5C:9F:B8:0D:F9:C5:DB:E8:91:6F:73:49:A5:DD:8E:06:99:EA:3B:7A Certificate issuer: /CN=5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A Certificate serial: 6E0D4C27359973E5AF86236AD174BCA4C19B3CCA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft Manifest number: 0262 Signing time: Sun 19 Oct 2025 12:41:48 +0000 Manifest this update: Sun 19 Oct 2025 12:36:48 +0000 Manifest next update: Wed 22 Oct 2025 13:00:48 +0000 Files and hashes: 1: 5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl (hash: 3T+/sHg6f/BFesQvng9acBM6g+S/WipoNruETB5vFBs=) 2: 3130332e3138312e3138332e302f32342d3234203d3e20313439333931.roa (hash: I97S8ZLukPT3OvIAQZGbDvFdPCncrJKV5+kzzspVF2Q=) 3: 3130332e3138312e3138322e302f32342d3234203d3e20313439333931.roa (hash: /YMKURBm9TwSTxyzf2Kmx28ZIOeUEZGW5o7BX+kYPo0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 13:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:0d:4c:27:35:99:73:e5:af:86:23:6a:d1:74:bc:a4:c1:9b:3c:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A Validity Not Before: Oct 19 12:36:48 2025 GMT Not After : Oct 22 13:00:48 2025 GMT Subject: CN=37AB441623A075A961BC662A451DE3B35FFCF1FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fd:81:ef:6b:cd:5c:20:95:97:f5:53:46:db: 8d:e8:2a:3a:61:bd:91:63:e8:c5:f0:5a:65:6b:e2: 00:3d:87:0a:b0:93:9e:8c:04:94:c1:5e:b7:1a:b0: 77:e1:23:74:63:91:9d:e3:73:b5:35:0e:f1:bf:e0: da:d1:a6:6e:ae:81:9b:47:05:8b:c6:ec:9e:52:e2: ce:bc:ff:9b:a7:67:67:0c:2e:ea:90:ba:d7:e2:62: 45:6d:32:a0:77:44:87:1e:48:30:d9:e4:c9:18:22: d9:3d:a3:33:c1:21:a1:ba:00:1b:a6:21:02:89:b3: 47:8c:e9:e0:63:cc:c4:df:f4:cd:67:36:9a:29:d8: 2f:b0:2c:1f:ec:d1:a5:cd:4d:a3:71:07:73:28:76: ed:63:fb:9a:bb:05:e6:2e:16:44:65:88:23:52:a9: 17:86:f0:08:f1:39:dc:c8:0f:c2:ec:f4:07:92:0c: 9d:a1:eb:6c:6e:9e:71:3f:f7:d7:ba:7e:3b:38:03: ec:c6:d7:1e:6e:37:ef:8d:b4:24:15:17:ef:65:1d: 13:67:ec:ff:c1:f1:ea:b1:e5:42:91:05:42:9d:6d: 18:e6:3d:d6:1d:d6:f5:57:d7:a6:6d:e1:e9:b0:a2: e6:45:13:e5:7f:2c:0b:39:10:d2:9e:64:bd:90:fc: af:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:AB:44:16:23:A0:75:A9:61:BC:66:2A:45:1D:E3:B3:5F:FC:F1:FF X509v3 Authority Key Identifier: keyid:5C:9F:B8:0D:F9:C5:DB:E8:91:6F:73:49:A5:DD:8E:06:99:EA:3B:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:67:dd:70:ec:0c:fb:82:29:b8:fa:c7:67:53:2d:24:6e:13: 27:c4:86:e3:e3:7f:f8:aa:22:f1:d5:b2:39:80:5f:b2:d3:86: e3:e7:c6:e7:53:64:76:6b:35:92:48:5f:61:ef:9a:97:af:c4: 7a:66:23:f3:ff:a2:55:7e:17:34:53:31:13:72:c9:58:0d:83: 58:ee:2d:dd:5a:6b:99:f0:87:b3:1e:3f:24:9c:6d:de:03:48: 96:97:7a:83:08:22:d0:36:2a:6f:ac:0c:be:5d:9c:c8:3b:68: b2:11:39:d4:90:19:de:3c:c5:14:2a:05:98:b4:c8:1a:b8:db: 86:46:28:9a:72:bb:12:30:08:83:88:4a:30:79:01:b4:62:b8: 7c:19:fc:ca:6d:a9:01:6a:d0:2f:31:2c:6e:08:a6:5b:4a:df: bd:28:85:45:97:26:aa:13:b4:80:d3:36:f7:36:e4:f7:16:0d: 78:96:db:7f:6e:de:a8:d0:b3:96:9c:66:7f:57:82:3b:5e:6f: 1f:ae:df:53:6e:fe:32:ad:8b:01:83:dd:9f:86:c3:71:70:b2: 1b:6d:d5:79:ed:0f:5b:e2:bd:ab:bf:7f:08:59:b7:20:0d:69: 76:a9:b4:d6:28:e9:f7:f6:2a:7c:1b:51:0e:07:69:74:d8:29: 1b:c8:34:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbg1MJzWZc+WvhiNq0XS8pMGbPMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM5RkI4MERGOUM1REJFODkxNkY3MzQ5QTVERDhFMDY5 OUVBM0I3QTAeFw0yNTEwMTkxMjM2NDhaFw0yNTEwMjIxMzAwNDhaMDMxMTAvBgNV BAMTKDM3QUI0NDE2MjNBMDc1QTk2MUJDNjYyQTQ1MURFM0IzNUZGQ0YxRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5/YHva81cIJWX9VNG243oKjph vZFj6MXwWmVr4gA9hwqwk56MBJTBXrcasHfhI3RjkZ3jc7U1DvG/4NrRpm6ugZtH BYvG7J5S4s68/5unZ2cMLuqQutfiYkVtMqB3RIceSDDZ5MkYItk9ozPBIaG6ABum IQKJs0eM6eBjzMTf9M1nNpop2C+wLB/s0aXNTaNxB3Modu1j+5q7BeYuFkRliCNS qReG8AjxOdzID8Ls9AeSDJ2h62xunnE/99e6fjs4A+zG1x5uN++NtCQVF+9lHRNn 7P/B8eqx5UKRBUKdbRjmPdYd1vVX16Zt4emwouZFE+V/LAs5ENKeZL2Q/K/lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN6tEFiOgdalhvGYqRR3js1/88f8wHwYDVR0j BBgwFoAUXJ+4DfnF2+iRb3NJpd2OBpnqO3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmMyZjQ4ZC01MTg1LTQxZjktYjZkMi0yMjhmYmNhYzRlMjkvMC81QzlGQjgwREY5 QzVEQkU4OTE2RjczNDlBNUREOEUwNjk5RUEzQjdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM5RkI4MERGOUM1REJFODkxNkY3MzQ5QTVERDhFMDY5OUVB M0I3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJjMmY0OGQtNTE4NS00MWY5LWI2 ZDItMjI4ZmJjYWM0ZTI5LzAvNUM5RkI4MERGOUM1REJFODkxNkY3MzQ5QTVERDhF MDY5OUVBM0I3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIln3XDsDPuCKbj6x2dTLSRuEyfEhuPjf/iq IvHVsjmAX7LThuPnxudTZHZrNZJIX2HvmpevxHpmI/P/olV+FzRTMRNyyVgNg1ju Ld1aa5nwh7MePyScbd4DSJaXeoMIItA2Km+sDL5dnMg7aLIROdSQGd48xRQqBZi0 yBq424ZGKJpyuxIwCIOISjB5AbRiuHwZ/MptqQFq0C8xLG4IpltK370ohUWXJqoT tIDTNvc25PcWDXiW239u3qjQs5acZn9Xgjtebx+u31Nu/jKtiwGD3Z+Gw3Fwshtt 1XntD1vivau/fwhZtyANaXaptNYo6ff2KnwbUQ4HaXTYKRvINJc= -----END CERTIFICATE-----Generated at Mon Oct 20 07:32:12 2025 by rpki-client