$ rpki-client -vvf repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft File: 5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft (raw, json) Hash identifier: rJocxCjsTwKRahIsMuhuwB6cA6e5XyjT1+ahs7Sdq3k= Subject key identifier: 47:55:2B:2E:5F:1F:B9:F6:D3:42:40:13:2F:26:2E:3E:38:4B:3F:A2 Authority key identifier: 57:87:AD:66:59:EA:8A:5E:40:18:87:6F:5F:9D:BD:9A:AA:F9:CA:1D Certificate issuer: /CN=5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D Certificate serial: 504CD6A9C528D7BC23D74FA5D1A2DFAE1F91631D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft Manifest number: 01F3 Signing time: Sat 18 Oct 2025 09:01:47 +0000 Manifest this update: Sat 18 Oct 2025 08:56:47 +0000 Manifest next update: Tue 21 Oct 2025 20:35:47 +0000 Files and hashes: 1: 5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl (hash: 8AtvduXq49o4jTWEZRcziuO5fh7kJXEMNX8TdJ+UzXE=) 2: 3130332e3130322e3235302e302f32342d3234203d3e20313336383632.roa (hash: XJaPVKL+tFj4c3WHFeXKkbEPFHc33QGCd8eyCL/ZJ7M=) 3: 323030313a6466323a663130303a3a2f34382d3438203d3e20313336383632.roa (hash: tZ0f5MTmtWdSIb0cW5V8BnDtVprPqdA4VLQLF9yhNs4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 20:35:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:4c:d6:a9:c5:28:d7:bc:23:d7:4f:a5:d1:a2:df:ae:1f:91:63:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D Validity Not Before: Oct 18 08:56:47 2025 GMT Not After : Oct 21 20:35:47 2025 GMT Subject: CN=47552B2E5F1FB9F6D34240132F262E3E384B3FA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1d:5f:2d:50:35:fa:22:f9:a7:91:c1:c4:c9: 8d:42:2c:eb:50:2f:11:2d:e3:fb:87:51:12:73:4a: 03:83:27:bd:0b:45:fb:32:f5:0f:77:49:99:9a:71: 08:de:58:46:97:c8:da:61:53:9e:b7:26:d5:e7:58: 74:c6:bd:e4:be:cd:57:2f:b0:75:8e:1b:ef:b3:4b: dc:56:14:4b:f6:bf:59:27:a9:ee:b6:5b:c8:6b:e9: da:c6:e8:7b:ab:86:60:6c:95:e4:5f:1a:b4:0e:87: 15:11:21:61:3d:1f:4d:f3:9b:5b:96:80:08:b0:a1: 1f:a5:4f:0e:d8:42:f0:c4:99:1f:f0:8b:34:eb:78: 0d:40:e1:37:db:68:66:51:b8:e6:90:bb:3b:8b:5a: 46:d5:0d:46:fc:c8:3c:6a:f0:73:16:7b:3c:74:29: bc:fe:66:c3:73:7a:36:a6:3a:1f:08:89:80:62:a4: 07:9d:17:2d:eb:12:b1:7a:a5:b1:b5:ac:d3:a9:31: 7a:1f:29:12:9c:6a:2f:94:a3:8e:b7:74:3d:08:97: 6e:b9:6f:93:d0:07:6e:8c:56:19:f2:af:cb:8f:59: 7f:bb:5b:8c:79:d8:d8:47:6e:b1:aa:da:b0:94:dc: 30:28:0b:91:bf:8a:88:7b:d2:e6:e2:d8:d6:73:3c: 28:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:55:2B:2E:5F:1F:B9:F6:D3:42:40:13:2F:26:2E:3E:38:4B:3F:A2 X509v3 Authority Key Identifier: keyid:57:87:AD:66:59:EA:8A:5E:40:18:87:6F:5F:9D:BD:9A:AA:F9:CA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:fc:90:e8:ea:04:9a:e2:6f:33:61:3c:74:6f:dc:c7:32:ba: aa:6d:92:fd:26:7d:a1:27:3d:76:17:8b:94:68:00:f9:60:7b: e4:4d:6b:80:6b:68:4c:e4:e1:97:b2:c9:65:a1:8a:23:9a:9b: 07:b7:f6:5a:4e:9b:6b:57:e5:6f:62:c4:a5:08:e9:bb:1e:f0: 5f:92:f9:00:a6:d8:c6:4c:98:62:7a:2a:d2:76:e2:b5:38:f7: fd:a0:8e:7c:6f:0a:e8:03:1b:23:6b:77:5a:9a:a5:76:61:64: 92:d9:5c:85:14:f1:50:51:4a:32:c5:1d:60:78:12:c7:fa:6d: 15:46:bb:31:d1:b2:c2:7b:83:b8:b7:ee:63:38:75:9a:54:34: 02:32:9a:65:e1:07:56:2a:1a:e9:71:b4:29:f3:b8:d4:8b:e5: 63:35:87:b1:54:12:88:80:c2:7c:ba:e7:6a:c0:1d:7e:27:5f: 40:97:c2:0f:17:66:36:03:6c:1b:ba:c8:e1:dc:52:70:ae:26: af:aa:a7:9d:a9:c4:b2:c1:16:7b:ea:1c:05:33:f1:9a:50:3a: f9:8e:47:ba:b3:6a:4c:e4:57:c7:6e:a4:1f:d7:83:d6:10:40: 87:82:ad:89:f4:f4:45:f7:d8:06:c8:70:76:0e:21:9d:78:ee: 9a:e7:4b:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUEzWqcUo17wj10+l0aLfrh+RYx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJEOUFB QUY5Q0ExRDAeFw0yNTEwMTgwODU2NDdaFw0yNTEwMjEyMDM1NDdaMDMxMTAvBgNV BAMTKDQ3NTUyQjJFNUYxRkI5RjZEMzQyNDAxMzJGMjYyRTNFMzg0QjNGQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKHV8tUDX6IvmnkcHEyY1CLOtQ LxEt4/uHURJzSgODJ70LRfsy9Q93SZmacQjeWEaXyNphU563JtXnWHTGveS+zVcv sHWOG++zS9xWFEv2v1knqe62W8hr6drG6HurhmBsleRfGrQOhxURIWE9H03zm1uW gAiwoR+lTw7YQvDEmR/wizTreA1A4TfbaGZRuOaQuzuLWkbVDUb8yDxq8HMWezx0 Kbz+ZsNzejamOh8IiYBipAedFy3rErF6pbG1rNOpMXofKRKcai+Uo463dD0Il265 b5PQB26MVhnyr8uPWX+7W4x52NhHbrGq2rCU3DAoC5G/ioh70ubi2NZzPCgZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR1UrLl8fufbTQkATLyYuPjhLP6IwHwYDVR0j BBgwFoAUV4etZlnqil5AGIdvX529mqr5yh0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWI4ZTc3NC0xNjgzLTQ1NmQtYmJjMC0zNDMyMjVmMTdmNGMvMC81Nzg3QUQ2NjU5 RUE4QTVFNDAxODg3NkY1RjlEQkQ5QUFBRjlDQTFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJEOUFBQUY5 Q0ExRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTViOGU3NzQtMTY4My00NTZkLWJi YzAtMzQzMjI1ZjE3ZjRjLzAvNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJE OUFBQUY5Q0ExRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKz8kOjqBJribzNhPHRv3Mcyuqptkv0mfaEn PXYXi5RoAPlge+RNa4BraEzk4ZeyyWWhiiOamwe39lpOm2tX5W9ixKUI6bse8F+S +QCm2MZMmGJ6KtJ24rU49/2gjnxvCugDGyNrd1qapXZhZJLZXIUU8VBRSjLFHWB4 Esf6bRVGuzHRssJ7g7i37mM4dZpUNAIymmXhB1YqGulxtCnzuNSL5WM1h7FUEoiA wny652rAHX4nX0CXwg8XZjYDbBu6yOHcUnCuJq+qp52pxLLBFnvqHAUz8ZpQOvmO R7qzakzkV8dupB/Xg9YQQIeCrYn09EX32AbIcHYOIZ147prnS3E= -----END CERTIFICATE-----Generated at Mon Oct 20 12:01:56 2025 by rpki-client