$ rpki-client -vvf repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft File: C5247B1CF64591B1DB27280B439B507E56BF0232.mft (raw, json) Hash identifier: gugR48A00pbOA69KIZ7xsYiLr0plrl4FL4xqU6y88Yg= Subject key identifier: 9E:C6:24:47:98:8F:DE:36:D3:DB:2A:60:5E:59:12:0A:DE:01:22:39 Authority key identifier: C5:24:7B:1C:F6:45:91:B1:DB:27:28:0B:43:9B:50:7E:56:BF:02:32 Certificate issuer: /CN=C5247B1CF64591B1DB27280B439B507E56BF0232 Certificate serial: 13770CC8F20D07E4F2C6316C186C5867107FF241 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5247B1CF64591B1DB27280B439B507E56BF0232.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft Manifest number: 0461 Signing time: Mon 20 Oct 2025 04:31:15 +0000 Manifest this update: Mon 20 Oct 2025 04:26:15 +0000 Manifest next update: Thu 23 Oct 2025 11:41:15 +0000 Files and hashes: 1: C5247B1CF64591B1DB27280B439B507E56BF0232.crl (hash: j7WPoY79yesfOH9KPKdT2tvGG5tCxWIepOr3Fv0iqO0=) 2: 3230332e38312e3138342e302f32312d3234203d3e203234353338.roa (hash: fLSt4OmsorwQGSOaGglnH8ttitbrl6AJWQaVzHo2NOU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.crl rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5247B1CF64591B1DB27280B439B507E56BF0232.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:41:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:77:0c:c8:f2:0d:07:e4:f2:c6:31:6c:18:6c:58:67:10:7f:f2:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5247B1CF64591B1DB27280B439B507E56BF0232 Validity Not Before: Oct 20 04:26:15 2025 GMT Not After : Oct 23 11:41:15 2025 GMT Subject: CN=9EC62447988FDE36D3DB2A605E59120ADE012239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:60:0c:e4:d5:22:b9:08:b0:a1:68:da:8e:15: 2b:ea:6c:77:66:5b:9a:92:7b:b9:a7:d3:d7:c3:9e: bd:c2:eb:7e:5d:ae:48:95:b1:54:40:db:5c:68:3a: 26:37:1e:f1:9c:bf:0e:e6:12:65:18:d9:4a:67:d8: 9b:61:ab:ac:20:5d:d1:62:50:d8:8f:35:5a:d8:c3: 19:f2:24:60:cf:b9:a9:b5:97:d2:ae:d3:dc:28:01: 1f:59:71:76:5e:70:82:bf:24:dc:66:59:c3:96:90: 69:bd:b1:c8:06:54:90:a4:ea:5f:a0:f7:21:f0:ca: 4f:29:8e:8a:7e:00:28:7d:b9:ba:cc:f2:86:ca:4f: 47:80:7a:4f:45:c3:aa:4c:ab:29:bf:87:a0:1c:92: 75:fb:0c:28:d8:10:e7:f7:b1:9c:67:8e:9f:dc:f0: 4d:12:56:be:26:ab:29:fb:99:67:9f:3a:ad:ee:87: 83:b2:67:21:1a:79:57:1f:92:7f:70:3b:ba:b6:55: 02:e9:b4:e0:af:e3:79:8b:4a:f6:f9:4e:03:cc:0c: 66:d7:3c:96:44:2f:53:bd:5c:06:a2:79:0f:20:3f: 7b:60:0d:70:5c:fe:e2:72:a1:33:65:a3:60:5c:fb: 20:36:e9:a7:98:3c:6f:b9:9c:73:cc:97:e9:3b:d2: 85:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C6:24:47:98:8F:DE:36:D3:DB:2A:60:5E:59:12:0A:DE:01:22:39 X509v3 Authority Key Identifier: keyid:C5:24:7B:1C:F6:45:91:B1:DB:27:28:0B:43:9B:50:7E:56:BF:02:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5247B1CF64591B1DB27280B439B507E56BF0232.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:62:4d:0e:5a:20:f9:1d:44:48:bb:c2:aa:af:e3:d5:f2:c8: b5:27:42:73:f8:e7:95:2c:82:3f:9e:61:36:c3:65:ca:90:99: 28:c6:35:dd:7f:ed:77:cc:af:a8:9a:7b:e6:26:71:37:ff:cb: c1:11:4b:cb:78:53:4b:d2:4d:29:86:fa:c9:59:63:6c:5b:ff: 72:09:57:fc:74:2a:d6:8f:ab:77:65:c0:c9:2b:1c:1c:bf:24: 0d:3e:7e:e4:35:e9:d5:a7:ae:75:64:7e:27:ea:b9:63:ce:ae: 3a:57:44:6e:e5:c4:0e:95:7a:38:47:2d:b6:74:3d:93:98:26: d3:a7:92:a4:ed:30:8b:b8:3d:10:ae:eb:92:0c:75:02:33:b3: ac:f2:0a:72:0d:41:38:36:52:f4:b1:ce:bb:e5:0d:28:03:ac: ba:2b:ce:6a:1a:60:87:a0:0f:59:a0:c6:4a:04:c6:02:59:16: c2:13:d3:42:a9:9e:2e:4d:78:6e:12:f7:e4:bf:33:46:77:14: bf:3b:c7:8e:cb:5f:8d:43:42:18:24:e2:a9:82:13:e1:14:d4: 95:b9:9e:22:79:19:12:69:f0:2a:c0:7c:71:75:22:6e:fe:03: 2e:65:de:66:03:6e:62:75:af:d5:90:eb:a8:aa:45:27:6d:2c: d4:e8:8b:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE3cMyPINB+TyxjFsGGxYZxB/8kEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUyNDdCMUNGNjQ1OTFCMURCMjcyODBCNDM5QjUwN0U1 NkJGMDIzMjAeFw0yNTEwMjAwNDI2MTVaFw0yNTEwMjMxMTQxMTVaMDMxMTAvBgNV BAMTKDlFQzYyNDQ3OTg4RkRFMzZEM0RCMkE2MDVFNTkxMjBBREUwMTIyMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOYAzk1SK5CLChaNqOFSvqbHdm W5qSe7mn09fDnr3C635drkiVsVRA21xoOiY3HvGcvw7mEmUY2Upn2Jthq6wgXdFi UNiPNVrYwxnyJGDPuam1l9Ku09woAR9ZcXZecIK/JNxmWcOWkGm9scgGVJCk6l+g 9yHwyk8pjop+ACh9ubrM8obKT0eAek9Fw6pMqym/h6AcknX7DCjYEOf3sZxnjp/c 8E0SVr4mqyn7mWefOq3uh4OyZyEaeVcfkn9wO7q2VQLptOCv43mLSvb5TgPMDGbX PJZEL1O9XAaieQ8gP3tgDXBc/uJyoTNlo2Bc+yA26aeYPG+5nHPMl+k70oXZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnsYkR5iP3jbT2ypgXlkSCt4BIjkwHwYDVR0j BBgwFoAUxSR7HPZFkbHbJygLQ5tQfla/AjIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWEyOWE3NS1jNWI5LTQ3NWItOWQ5Ni02ZDFhMTVlYWUyNGQvMC9DNTI0N0IxQ0Y2 NDU5MUIxREIyNzI4MEI0MzlCNTA3RTU2QkYwMjMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUyNDdCMUNGNjQ1OTFCMURCMjcyODBCNDM5QjUwN0U1NkJG MDIzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFhMjlhNzUtYzViOS00NzViLTlk OTYtNmQxYTE1ZWFlMjRkLzAvQzUyNDdCMUNGNjQ1OTFCMURCMjcyODBCNDM5QjUw N0U1NkJGMDIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFBiTQ5aIPkdREi7wqqv49XyyLUnQnP455Us gj+eYTbDZcqQmSjGNd1/7XfMr6iae+YmcTf/y8ERS8t4U0vSTSmG+slZY2xb/3IJ V/x0KtaPq3dlwMkrHBy/JA0+fuQ16dWnrnVkfifquWPOrjpXRG7lxA6VejhHLbZ0 PZOYJtOnkqTtMIu4PRCu65IMdQIzs6zyCnINQTg2UvSxzrvlDSgDrLorzmoaYIeg D1mgxkoExgJZFsIT00Kpni5NeG4S9+S/M0Z3FL87x47LX41DQhgk4qmCE+EU1JW5 niJ5GRJp8CrAfHF1Im7+Ay5l3mYDbmJ1r9WQ66iqRSdtLNToi68= -----END CERTIFICATE-----Generated at Mon Oct 20 13:45:42 2025 by rpki-client