$ rpki-client -vvf repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft File: 5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft (raw, json) Hash identifier: +XkB0gpHlilpHrWYQPNfdG+7xHGt81xxcjjwvypq3wY= Subject key identifier: 52:1E:7A:F3:E1:A1:1D:95:4E:AB:E1:D1:C7:32:87:AB:9C:7C:60:F9 Authority key identifier: 54:61:EA:BC:86:2E:4C:90:B3:27:90:DB:A2:1C:D5:FF:CB:96:6B:D3 Certificate issuer: /CN=5461EABC862E4C90B32790DBA21CD5FFCB966BD3 Certificate serial: 16C67912FD84F499B5C0995339589CD59067C9EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft Manifest number: 01EC Signing time: Sun 19 Oct 2025 21:01:00 +0000 Manifest this update: Sun 19 Oct 2025 20:56:00 +0000 Manifest next update: Thu 23 Oct 2025 00:39:00 +0000 Files and hashes: 1: 5461EABC862E4C90B32790DBA21CD5FFCB966BD3.crl (hash: cFzabgHKOMC3qcA1rLX8DnwG3aw0okbfT1zGWpw7NkQ=) 2: 3130332e37332e37322e302f32322d3234203d3e20313335343638.roa (hash: KaaHy0cR6xA7/7fhA1scnNnAkCNoe5f7kq1dVSYxDCg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.crl rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 00:39:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:c6:79:12:fd:84:f4:99:b5:c0:99:53:39:58:9c:d5:90:67:c9:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5461EABC862E4C90B32790DBA21CD5FFCB966BD3 Validity Not Before: Oct 19 20:56:00 2025 GMT Not After : Oct 23 00:39:00 2025 GMT Subject: CN=521E7AF3E1A11D954EABE1D1C73287AB9C7C60F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:96:cf:4e:14:81:d1:61:4a:14:3a:c8:e4:48: 7b:12:4e:f7:2b:90:70:fa:0f:26:6d:c9:ab:91:3e: c1:fe:1e:5e:4e:c6:96:9c:97:80:40:5a:18:d5:39: cc:45:1e:70:21:82:5e:26:33:20:c9:c8:e2:df:0e: 4f:9d:3d:d0:3d:b6:d0:1c:21:0f:6e:c2:e2:b2:51: 08:6e:c2:0a:9d:f1:ad:df:7d:02:ff:d2:b8:8b:57: 2a:7b:53:bf:a6:89:e4:e6:86:46:a6:d8:84:59:f7: 1a:2f:2b:44:74:45:6e:7f:57:02:b0:e0:22:30:b5: d8:a7:d4:52:e3:bc:35:95:a9:44:3a:31:47:c9:fd: 83:8c:14:db:ae:bb:cd:f4:ac:16:5a:66:f6:7f:fd: 5a:0e:c3:d7:3a:81:bc:82:81:8c:eb:cb:83:9c:36: 68:c8:4c:e9:ed:01:e9:dd:ca:1f:c5:00:dc:77:c3: dc:fc:6e:bd:02:07:26:d2:30:ac:55:30:8a:49:e0: ad:5c:5c:ad:fa:3a:c3:0a:7d:11:a0:e2:de:fd:da: e5:a4:0e:ee:48:ed:4b:61:59:9c:62:61:ca:0c:34: f5:2b:84:db:cd:06:02:c2:0e:d1:6e:84:07:56:15: 84:84:1d:00:21:89:3a:2b:08:ee:78:26:8d:a5:02: 73:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:1E:7A:F3:E1:A1:1D:95:4E:AB:E1:D1:C7:32:87:AB:9C:7C:60:F9 X509v3 Authority Key Identifier: keyid:54:61:EA:BC:86:2E:4C:90:B3:27:90:DB:A2:1C:D5:FF:CB:96:6B:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:6a:09:28:4d:11:2e:e4:3e:b6:92:5b:86:1b:c8:1c:9b:79: 8b:60:09:12:e8:eb:80:74:bd:76:89:37:21:ec:6a:8c:cb:03: 27:74:0e:d9:e0:e7:d3:ff:13:12:8f:99:7e:35:30:18:f5:be: 86:85:53:f8:9e:e3:87:a5:a0:78:3e:0a:db:59:bf:d8:14:3a: 07:83:68:d5:47:cb:b7:59:32:8c:ec:0b:0c:f6:cc:5a:fc:71: 99:ba:a2:1d:63:94:57:d5:40:77:38:9b:bd:6d:28:5d:ba:79: 16:f1:49:19:2c:c8:07:c4:24:eb:8c:2b:96:9d:32:bd:cb:f8: de:ed:71:57:45:bb:01:f4:d6:49:46:93:52:7f:fd:4c:ae:c1: 5d:0f:53:89:d8:b6:5a:77:79:04:0a:2e:bb:2c:49:92:9d:da: 4f:71:50:3d:4d:74:4b:cf:e0:43:48:39:48:b5:c9:42:b2:2c: e3:56:8e:06:1c:dc:cb:1a:36:6c:ed:1b:e1:c0:7e:35:c7:56: 45:a3:cf:a9:92:1a:38:f8:33:54:b0:c8:e6:75:11:9c:cd:10: 98:43:3e:fd:49:35:f6:f1:2f:02:1a:a0:13:39:39:a1:01:e6: 85:a9:c8:08:26:d1:e1:5c:fb:02:f2:91:e8:40:76:0f:6b:b9: dc:99:f6:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFsZ5Ev2E9Jm1wJlTOVic1ZBnye4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ2MUVBQkM4NjJFNEM5MEIzMjc5MERCQTIxQ0Q1RkZD Qjk2NkJEMzAeFw0yNTEwMTkyMDU2MDBaFw0yNTEwMjMwMDM5MDBaMDMxMTAvBgNV BAMTKDUyMUU3QUYzRTFBMTFEOTU0RUFCRTFEMUM3MzI4N0FCOUM3QzYwRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnls9OFIHRYUoUOsjkSHsSTvcr kHD6DyZtyauRPsH+Hl5Oxpacl4BAWhjVOcxFHnAhgl4mMyDJyOLfDk+dPdA9ttAc IQ9uwuKyUQhuwgqd8a3ffQL/0riLVyp7U7+mieTmhkam2IRZ9xovK0R0RW5/VwKw 4CIwtdin1FLjvDWVqUQ6MUfJ/YOMFNuuu830rBZaZvZ//VoOw9c6gbyCgYzry4Oc NmjITOntAendyh/FANx3w9z8br0CBybSMKxVMIpJ4K1cXK36OsMKfRGg4t792uWk Du5I7UthWZxiYcoMNPUrhNvNBgLCDtFuhAdWFYSEHQAhiTorCO54Jo2lAnOzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUh568+GhHZVOq+HRxzKHq5x8YPkwHwYDVR0j BBgwFoAUVGHqvIYuTJCzJ5DbohzV/8uWa9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmVjYzcyYS1lOTU0LTQzMDItOTJjNC1mNGYyMzA3MGI5OTcvMC81NDYxRUFCQzg2 MkU0QzkwQjMyNzkwREJBMjFDRDVGRkNCOTY2QkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTQ2MUVBQkM4NjJFNEM5MEIzMjc5MERCQTIxQ0Q1RkZDQjk2 NkJEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZlY2M3MmEtZTk1NC00MzAyLTky YzQtZjRmMjMwNzBiOTk3LzAvNTQ2MUVBQkM4NjJFNEM5MEIzMjc5MERCQTIxQ0Q1 RkZDQjk2NkJEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFqCShNES7kPraSW4YbyBybeYtgCRLo64B0 vXaJNyHsaozLAyd0Dtng59P/ExKPmX41MBj1voaFU/ie44eloHg+CttZv9gUOgeD aNVHy7dZMozsCwz2zFr8cZm6oh1jlFfVQHc4m71tKF26eRbxSRksyAfEJOuMK5ad Mr3L+N7tcVdFuwH01klGk1J//UyuwV0PU4nYtlp3eQQKLrssSZKd2k9xUD1NdEvP 4ENIOUi1yUKyLONWjgYc3MsaNmztG+HAfjXHVkWjz6mSGjj4M1SwyOZ1EZzNEJhD Pv1JNfbxLwIaoBM5OaEB5oWpyAgm0eFc+wLykehAdg9rudyZ9mA= -----END CERTIFICATE-----Generated at Mon Oct 20 10:06:29 2025 by rpki-client