$ rpki-client -vvf repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft File: 5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft (raw, json) Hash identifier: bRD8SoEoUsAAzbYEbRm65/v56GAW23M+JdkILkQljR8= Subject key identifier: 69:9E:73:EE:74:A7:8D:42:F0:3A:9C:67:21:40:E7:BC:95:2A:E3:E6 Authority key identifier: 5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B Certificate issuer: /CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B Certificate serial: 1E213632C71DB1C6EB6DD429AE26056E23848465 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft Manifest number: 0243 Signing time: Sat 18 Oct 2025 23:22:20 +0000 Manifest this update: Sat 18 Oct 2025 23:17:20 +0000 Manifest next update: Wed 22 Oct 2025 05:29:20 +0000 Files and hashes: 1: 3130332e3138342e31382e302f32332d3233203d3e20313439363735.roa (hash: 8hPXkuW34xkK66/r5oL+jYYUmOueTjKMrZh36goENDw=) 2: 3130332e3138342e31392e302f32342d3234203d3e203438343635.roa (hash: QzihEc5MkFa7NqybYwRpohd7XvTO9rPruJzvUalzVM8=) 3: 5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl (hash: YB77mlntXq9WgCJ9n9a3AxOgXsxdBEuRbEaWEx4yyUM=) 4: 3130332e3138342e31382e302f32342d3234203d3e203438343635.roa (hash: 0IGopCvXSRXbCg3kz6wjCn1/1Kczl4zkhji2/R4GIz4=) 5: 3130332e3138342e31392e302f32342d3234203d3e20313439363735.roa (hash: i4XCxm32VCNZ/zacmmSjbAzxATWwcS43fZzejb3pvRo=) 6: 3130332e3138342e31382e302f32342d3234203d3e20313439363735.roa (hash: 4BUtx10alv/ZZ9FJolZJ3I8WhlB5v1F5iKW6alQrr7c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 05:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:21:36:32:c7:1d:b1:c6:eb:6d:d4:29:ae:26:05:6e:23:84:84:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B Validity Not Before: Oct 18 23:17:20 2025 GMT Not After : Oct 22 05:29:20 2025 GMT Subject: CN=699E73EE74A78D42F03A9C672140E7BC952AE3E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3e:67:8d:61:be:45:d2:aa:ea:9c:46:1f:bd: f6:81:bd:f6:a1:db:e4:00:cb:d2:59:f2:b4:13:3e: 3a:e0:f5:8c:13:92:ff:80:21:16:1d:1a:f0:e9:07: 03:71:f3:99:cf:f9:6d:7b:8f:30:d5:81:a6:6a:5d: b3:d7:13:ca:e3:86:3e:29:b7:c3:e3:6b:ee:b4:1f: 6a:22:87:68:47:ed:ff:75:fb:0b:9d:9b:f7:91:9b: f0:70:db:0c:28:ec:09:bc:ca:33:ba:0f:3f:92:eb: 0f:3a:e4:f1:ac:dc:6e:ad:aa:32:3d:40:f8:94:b2: 49:0d:88:62:17:f0:da:c2:63:a4:9b:d9:26:d2:16: 7c:22:c0:34:30:fc:81:cd:ad:bb:38:89:bc:db:c1: 0e:81:31:da:ae:cf:b3:b1:c3:48:07:fb:82:b1:57: b5:1c:5b:af:00:62:32:4f:a5:f5:a6:8b:f1:26:53: 68:21:df:f7:12:7c:5d:26:32:e1:f3:48:31:f5:66: e6:d3:f4:f2:f6:b8:58:32:2d:73:66:2c:1a:25:48: 91:30:92:fe:19:19:4b:a6:ca:60:b4:75:0f:90:a5: 9d:10:6f:ac:50:bd:89:24:4d:7c:b5:d3:0b:f0:e7: e6:91:73:35:49:02:91:8c:2b:f1:d6:28:dc:9e:c1: 81:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:9E:73:EE:74:A7:8D:42:F0:3A:9C:67:21:40:E7:BC:95:2A:E3:E6 X509v3 Authority Key Identifier: keyid:5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:fb:b0:92:a7:40:3e:55:78:ca:95:be:0f:59:ed:cf:02:68: 3b:2c:5a:7c:3d:8f:d9:23:8b:1e:87:47:a6:7d:cd:7c:67:80: 54:ab:17:fd:4b:ad:4b:f6:ff:da:04:2f:94:a4:0a:05:74:0c: cb:0f:0f:ee:70:ac:b8:59:3b:7d:39:79:c2:ae:c7:6f:5d:94: a4:af:b0:91:42:4b:f9:46:87:4d:87:70:9c:cc:8f:67:7b:71: 82:ce:f3:44:a8:83:6e:f3:44:b3:34:8b:f4:a8:94:8c:46:ef: 8b:60:13:9d:fb:05:a0:90:95:38:02:24:2f:74:cd:86:ff:9b: ad:a6:5f:5f:72:cf:ae:f4:17:2d:90:33:5d:26:eb:61:2e:b6: 50:d7:89:d3:b0:1c:a9:15:6f:15:66:ad:b3:1a:55:d4:a7:f3: e9:0a:77:4a:3d:b1:b2:2d:0f:4d:bd:67:b4:75:b8:66:a4:ef: 04:3c:d1:6e:64:1b:b1:97:d6:50:ae:57:91:4a:e2:df:d3:42: 02:50:9d:a1:54:0b:a4:99:2f:44:fb:42:18:38:c2:e7:3d:f9: 43:f9:1d:09:eb:86:0e:d1:68:d6:20:41:06:a3:9b:2c:21:51: de:d0:22:7e:f7:ab:08:0c:3a:b3:8c:27:a2:1a:42:e4:2a:2e: 64:85:80:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHiE2MscdscbrbdQpriYFbiOEhGUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIyMkY5 MDg5NTUyQjAeFw0yNTEwMTgyMzE3MjBaFw0yNTEwMjIwNTI5MjBaMDMxMTAvBgNV BAMTKDY5OUU3M0VFNzRBNzhENDJGMDNBOUM2NzIxNDBFN0JDOTUyQUUzRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEPmeNYb5F0qrqnEYfvfaBvfah 2+QAy9JZ8rQTPjrg9YwTkv+AIRYdGvDpBwNx85nP+W17jzDVgaZqXbPXE8rjhj4p t8Pja+60H2oih2hH7f91+wudm/eRm/Bw2wwo7Am8yjO6Dz+S6w865PGs3G6tqjI9 QPiUskkNiGIX8NrCY6Sb2SbSFnwiwDQw/IHNrbs4ibzbwQ6BMdquz7Oxw0gH+4Kx V7UcW68AYjJPpfWmi/EmU2gh3/cSfF0mMuHzSDH1ZubT9PL2uFgyLXNmLBolSJEw kv4ZGUumymC0dQ+QpZ0Qb6xQvYkkTXy10wvw5+aRczVJApGMK/HWKNyewYGvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaZ5z7nSnjULwOpxnIUDnvJUq4+YwHwYDVR0j BBgwFoAUWkD9GeLdU4DLblAvFtsiL5CJVSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MGQ5MTRlZi0wYjFmLTQ5MGItODA4ZC1hMjdiODNmZjlhM2UvMC81QTQwRkQxOUUy REQ1MzgwQ0I2RTUwMkYxNkRCMjIyRjkwODk1NTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIyMkY5MDg5 NTUyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjBkOTE0ZWYtMGIxZi00OTBiLTgw OGQtYTI3YjgzZmY5YTNlLzAvNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIy MkY5MDg5NTUyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHD7sJKnQD5VeMqVvg9Z7c8CaDssWnw9j9kj ix6HR6Z9zXxngFSrF/1LrUv2/9oEL5SkCgV0DMsPD+5wrLhZO305ecKux29dlKSv sJFCS/lGh02HcJzMj2d7cYLO80Sog27zRLM0i/SolIxG74tgE537BaCQlTgCJC90 zYb/m62mX19yz670Fy2QM10m62EutlDXidOwHKkVbxVmrbMaVdSn8+kKd0o9sbIt D029Z7R1uGak7wQ80W5kG7GX1lCuV5FK4t/TQgJQnaFUC6SZL0T7Qhg4wuc9+UP5 HQnrhg7RaNYgQQajmywhUd7QIn73qwgMOrOMJ6IaQuQqLmSFgE4= -----END CERTIFICATE-----Generated at Mon Oct 20 17:43:18 2025 by rpki-client