$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft File: C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft (raw, json) Hash identifier: 4G4EguJoX7KjB4yLzSIG27pA78KnfLGrLSojcep0/Rk= Subject key identifier: 1A:EF:7B:19:D0:EE:3F:61:ED:A0:BD:F0:9C:8A:AE:A0:94:D3:F5:4A Authority key identifier: C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D Certificate issuer: /CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D Certificate serial: 22F3658134D6955E2E5B1710B7737480957650A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft Manifest number: 051D Signing time: Sun 19 Oct 2025 15:31:35 +0000 Manifest this update: Sun 19 Oct 2025 15:26:35 +0000 Manifest next update: Wed 22 Oct 2025 22:45:35 +0000 Files and hashes: 1: C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl (hash: cbpf4XDB+A62QEUqJBYlEiphEK+GpEIEkgrC8Xh8pkI=) 2: 323030313a6466343a626430303a3a2f34382d3438203d3e20313337333338.roa (hash: X0XuQCteFt44X9z4G5hv/Tll9L9Acd6wBAIKaiqJSfU=) 3: 3130332e3131322e3232332e302f32342d3234203d3e20313337333338.roa (hash: h9EnCBlEcC94GebgUJlWGKNfIlqkrzmaOBhnTq8r/5A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 22:45:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:f3:65:81:34:d6:95:5e:2e:5b:17:10:b7:73:74:80:95:76:50:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D Validity Not Before: Oct 19 15:26:35 2025 GMT Not After : Oct 22 22:45:35 2025 GMT Subject: CN=1AEF7B19D0EE3F61EDA0BDF09C8AAEA094D3F54A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:11:6b:91:66:eb:4c:b5:44:d6:a1:3e:dc:22: 42:ca:8e:47:bc:17:84:d6:cf:c0:54:02:d6:a6:1a: ef:dc:4b:d8:91:ee:1c:b9:25:63:ac:12:be:6b:bd: c9:44:df:ff:63:e7:27:28:fa:23:81:f8:e5:fe:b1: 72:e3:c7:a2:fe:11:05:4f:1d:64:5d:cf:dc:ae:21: 07:f4:e4:66:3e:b6:86:39:6b:f1:19:c6:04:65:27: 93:b4:ea:0d:ef:6c:bd:bd:d2:11:5f:da:e8:d4:03: 69:10:a9:60:f7:29:d4:81:35:a0:7a:70:a0:b8:74: 8c:9b:19:c3:51:02:74:c3:34:25:44:fc:45:3f:88: 43:dc:b4:9b:ae:a7:e5:72:d8:26:61:1f:fc:ed:f5: 30:49:fd:80:81:da:4e:14:88:aa:38:ad:c6:98:31: c7:17:e9:f4:43:13:00:79:35:d6:71:47:a6:db:bf: 8d:88:f2:e1:19:93:53:e5:31:94:8c:6b:bb:9f:d2: 99:8d:2a:97:90:a7:b0:7d:cf:41:6b:0c:83:8c:fa: ed:5f:4b:f5:37:52:f1:f6:c0:3f:35:a2:6e:e5:8b: 14:71:3a:91:04:1d:ca:56:56:4a:e1:6d:99:83:68: 46:4d:18:a6:45:81:cf:6d:ef:46:47:9d:1b:f1:c8: 9d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:EF:7B:19:D0:EE:3F:61:ED:A0:BD:F0:9C:8A:AE:A0:94:D3:F5:4A X509v3 Authority Key Identifier: keyid:C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:b5:ec:9e:7d:66:5e:94:10:7b:61:9a:e4:50:b8:4d:90:ec: 37:1c:84:cb:78:45:08:76:01:31:af:24:2c:97:9b:8b:10:a7: 4d:5a:0d:62:0b:a0:a0:82:63:55:b5:c9:18:36:5f:fb:55:e3: d8:2a:79:7b:de:38:b6:4e:34:dd:86:39:95:2e:37:b9:f2:7a: f6:66:9c:aa:89:b9:13:c9:07:c9:65:70:0c:15:39:12:b5:14: 61:80:70:47:23:3d:60:b1:b2:62:90:55:03:e3:a4:cb:14:3b: bf:2f:67:31:84:14:0d:a9:2b:26:05:03:84:33:2a:ff:e0:8c: 7e:ab:c9:0d:b7:5d:70:99:05:72:c4:18:4c:59:2f:42:33:bb: bf:15:69:f0:0f:58:ea:5b:d5:31:d9:1f:ed:b3:cb:28:8e:b5: 83:9c:b7:42:2c:49:51:26:97:88:e4:b8:31:48:0b:89:da:28: 40:16:10:41:dc:72:2c:16:a6:ae:b4:28:cc:ae:45:6b:41:1b: d9:a6:9b:65:5d:13:e9:5c:06:38:c5:f3:10:84:49:15:73:10: 3e:d8:30:b9:be:ef:c0:b8:cb:e7:10:b8:88:b8:07:c3:9e:bf: fb:b5:3e:88:54:17:d6:98:6a:d9:6f:bd:74:40:1b:de:8b:01: 1f:83:f7:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIvNlgTTWlV4uWxcQt3N0gJV2UKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZG MzA2OTQ1RDAeFw0yNTEwMTkxNTI2MzVaFw0yNTEwMjIyMjQ1MzVaMDMxMTAvBgNV BAMTKDFBRUY3QjE5RDBFRTNGNjFFREEwQkRGMDlDOEFBRUEwOTREM0Y1NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6EWuRZutMtUTWoT7cIkLKjke8 F4TWz8BUAtamGu/cS9iR7hy5JWOsEr5rvclE3/9j5yco+iOB+OX+sXLjx6L+EQVP HWRdz9yuIQf05GY+toY5a/EZxgRlJ5O06g3vbL290hFf2ujUA2kQqWD3KdSBNaB6 cKC4dIybGcNRAnTDNCVE/EU/iEPctJuup+Vy2CZhH/zt9TBJ/YCB2k4UiKo4rcaY MccX6fRDEwB5NdZxR6bbv42I8uEZk1PlMZSMa7uf0pmNKpeQp7B9z0FrDIOM+u1f S/U3UvH2wD81om7lixRxOpEEHcpWVkrhbZmDaEZNGKZFgc9t70ZHnRvxyJ3xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGu97GdDuP2HtoL3wnIquoJTT9UowHwYDVR0j BBgwFoAUxQlgLoSS4e8veiuZpMa/T/MGlF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmQ2ZDBkZi1jMjFlLTQ5MWMtYjExNi00YTFkOWEyYzc0YmUvMC9DNTA5NjAyRTg0 OTJFMUVGMkY3QTJCOTlBNEM2QkY0RkYzMDY5NDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZGMzA2 OTQ1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJkNmQwZGYtYzIxZS00OTFjLWIx MTYtNGExZDlhMmM3NGJlLzAvQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJG NEZGMzA2OTQ1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACy17J59Zl6UEHthmuRQuE2Q7DcchMt4RQh2 ATGvJCyXm4sQp01aDWILoKCCY1W1yRg2X/tV49gqeXveOLZONN2GOZUuN7nyevZm nKqJuRPJB8llcAwVORK1FGGAcEcjPWCxsmKQVQPjpMsUO78vZzGEFA2pKyYFA4Qz Kv/gjH6ryQ23XXCZBXLEGExZL0Izu78VafAPWOpb1THZH+2zyyiOtYOct0IsSVEm l4jkuDFIC4naKEAWEEHcciwWpq60KMyuRWtBG9mmm2VdE+lcBjjF8xCESRVzED7Y MLm+78C4y+cQuIi4B8Oev/u1PohUF9aYatlvvXRAG96LAR+D96s= -----END CERTIFICATE-----Generated at Mon Oct 20 16:02:39 2025 by rpki-client