$ rpki-client -vvf repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft File: C5CA2999FE7612F56CCCB7441743B05181458ED0.mft (raw, json) Hash identifier: f/fXi3u8esOnpZ206/ptI92lzXPC+MVDe3L2jERMUhU= Subject key identifier: 8F:E2:DB:CF:14:46:28:60:35:04:94:43:F1:51:CF:44:93:15:1A:ED Authority key identifier: C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0 Certificate issuer: /CN=C5CA2999FE7612F56CCCB7441743B05181458ED0 Certificate serial: 4C821A0042D4E5ED91FD5B0A711B9DB5E0A70F38 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft Manifest number: 0517 Signing time: Sun 19 Oct 2025 08:30:40 +0000 Manifest this update: Sun 19 Oct 2025 08:25:39 +0000 Manifest next update: Wed 22 Oct 2025 19:44:39 +0000 Files and hashes: 1: 3130332e3134322e3230322e302f32342d3234203d3e20313339333738.roa (hash: kZ/7LdQ98yA+6ycYvld45u3DxaVBg4NMh+WZ028gPpU=) 2: C5CA2999FE7612F56CCCB7441743B05181458ED0.crl (hash: 4WD0Z2ICDzldLQabRAVqVaTN7FXHUZQo1sLRgOWWVNA=) 3: 3130332e3134322e3230332e302f32342d3234203d3e20313339333738.roa (hash: TJhHkKwr35GRF8gqIxcj9n16SqAaRRuK8PF46Ie+LXg=) 4: 323030313a6466313a353638303a3a2f34382d3438203d3e20313339333738.roa (hash: q7ox9dPZeS59odB2IJMVaFXBFhKkSZPWVMJt5aLWrRc=) 5: 3130332e3134322e3230322e302f32332d3233203d3e20313339333738.roa (hash: aOFDhPstKOFaNipOEFwONnhh/OGsZlp5fuQdDXOoo9E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 19:44:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:82:1a:00:42:d4:e5:ed:91:fd:5b:0a:71:1b:9d:b5:e0:a7:0f:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5CA2999FE7612F56CCCB7441743B05181458ED0 Validity Not Before: Oct 19 08:25:39 2025 GMT Not After : Oct 22 19:44:39 2025 GMT Subject: CN=8FE2DBCF1446286035049443F151CF4493151AED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c2:71:f9:ab:6e:22:7c:aa:79:e2:7b:65:07: 24:a4:4f:82:df:73:c6:85:de:76:f9:5f:de:38:cc: 59:9e:37:37:fc:ff:28:bd:ed:60:6f:b0:00:99:51: cb:4b:bd:ef:28:d6:18:5b:ca:a6:2f:01:c4:65:e9: fe:08:ec:45:6b:2e:f9:e1:24:43:4d:e4:08:0a:9a: c0:2a:cd:7f:0b:28:2a:15:6f:54:1e:33:6b:47:25: 21:60:54:e6:30:72:79:d5:04:16:49:44:ed:39:b8: ee:a6:05:25:c9:b7:c6:f3:5b:db:50:65:91:cb:1a: 31:cb:17:27:4f:13:73:e0:9c:88:69:ee:e3:fd:86: e0:04:3a:4c:7f:70:4d:43:78:72:4b:cc:ce:50:c0: 6c:71:f7:ad:ed:1a:81:ed:ae:d5:bf:56:7f:86:25: 7b:9e:b4:3f:6c:0b:aa:26:c9:75:ab:c9:d3:e3:94: 51:1d:02:04:1b:09:5f:bc:42:a7:f4:3d:2d:8f:e9: aa:14:c0:68:1d:4d:1e:90:3f:f2:75:10:46:44:65: b9:c9:17:ea:41:9f:65:35:90:a4:d1:ae:d2:7b:8d: a2:08:33:c4:ca:a9:27:f0:23:a2:bf:49:b6:80:70: 70:0c:77:c1:1b:55:b9:ed:5d:32:13:c5:be:e4:f9: 4b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E2:DB:CF:14:46:28:60:35:04:94:43:F1:51:CF:44:93:15:1A:ED X509v3 Authority Key Identifier: keyid:C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:34:d8:7f:98:8d:7f:1a:b4:70:39:c6:1d:52:23:bf:5f:8d: e9:24:85:7e:ba:5e:c1:9a:9e:51:2e:6d:f5:ce:43:af:16:b6: 11:44:f1:46:d9:61:0a:2e:3d:bd:e3:22:ba:25:70:bb:67:20: 69:e0:b3:a2:50:40:ed:e6:09:62:d7:72:8c:88:da:4d:19:a4: 00:fa:cd:4f:35:e5:86:88:bb:6f:cc:12:78:cd:ea:90:09:66: 9d:58:e3:d3:9a:4e:a3:82:d9:26:c3:61:fd:cd:3d:32:5a:df: 81:82:20:0b:43:04:fe:1a:e4:21:1b:82:f9:7b:60:5d:56:c0: 20:af:2b:a6:d0:8c:70:e3:65:5f:c6:b0:f8:5a:d0:5a:32:68: ae:45:24:3b:00:33:12:35:1f:d4:1e:63:28:f8:bd:2c:3a:a2: 61:53:38:42:bf:f0:de:fb:1a:d9:ad:01:58:fe:fe:8b:2f:fc: 23:5c:3e:c8:67:d0:cd:94:ab:49:a5:7f:3c:cb:33:c4:ce:80: ed:ae:aa:8b:31:6c:f8:c8:a6:98:91:9d:84:bc:bb:ec:78:3e: 1c:22:df:4b:8b:8f:30:1a:10:94:5c:91:25:54:19:db:f0:97: 90:d3:0a:fb:e6:f4:c5:2b:8b:df:08:87:0e:73:8c:f5:b5:dc: 30:cd:42:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTIIaAELU5e2R/VsKcRudteCnDzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0IwNTE4 MTQ1OEVEMDAeFw0yNTEwMTkwODI1MzlaFw0yNTEwMjIxOTQ0MzlaMDMxMTAvBgNV BAMTKDhGRTJEQkNGMTQ0NjI4NjAzNTA0OTQ0M0YxNTFDRjQ0OTMxNTFBRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdwnH5q24ifKp54ntlBySkT4Lf c8aF3nb5X944zFmeNzf8/yi97WBvsACZUctLve8o1hhbyqYvAcRl6f4I7EVrLvnh JENN5AgKmsAqzX8LKCoVb1QeM2tHJSFgVOYwcnnVBBZJRO05uO6mBSXJt8bzW9tQ ZZHLGjHLFydPE3PgnIhp7uP9huAEOkx/cE1DeHJLzM5QwGxx963tGoHtrtW/Vn+G JXuetD9sC6omyXWrydPjlFEdAgQbCV+8Qqf0PS2P6aoUwGgdTR6QP/J1EEZEZbnJ F+pBn2U1kKTRrtJ7jaIIM8TKqSfwI6K/SbaAcHAMd8EbVbntXTITxb7k+Uu1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj+LbzxRGKGA1BJRD8VHPRJMVGu0wHwYDVR0j BBgwFoAUxcopmf52EvVszLdEF0OwUYFFjtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjdmYjgzNy0xYjJmLTRjNGUtYjk5OS02ZTk5MGRkYzE0OTkvMC9DNUNBMjk5OUZF NzYxMkY1NkNDQ0I3NDQxNzQzQjA1MTgxNDU4RUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0IwNTE4MTQ1 OEVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDY3ZmI4MzctMWIyZi00YzRlLWI5 OTktNmU5OTBkZGMxNDk5LzAvQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0Iw NTE4MTQ1OEVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGU02H+YjX8atHA5xh1SI79fjekkhX66XsGa nlEubfXOQ68WthFE8UbZYQouPb3jIrolcLtnIGngs6JQQO3mCWLXcoyI2k0ZpAD6 zU815YaIu2/MEnjN6pAJZp1Y49OaTqOC2SbDYf3NPTJa34GCIAtDBP4a5CEbgvl7 YF1WwCCvK6bQjHDjZV/GsPha0FoyaK5FJDsAMxI1H9QeYyj4vSw6omFTOEK/8N77 GtmtAVj+/osv/CNcPshn0M2Uq0mlfzzLM8TOgO2uqosxbPjIppiRnYS8u+x4Phwi 30uLjzAaEJRckSVUGdvwl5DTCvvm9MUri98Ihw5zjPW13DDNQhs= -----END CERTIFICATE-----Generated at Mon Oct 20 14:38:32 2025 by rpki-client