$ rpki-client -vvf repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft File: 5DFC46925E2D4B3FB044F284111222A8B4C78392.mft (raw, json) Hash identifier: xMNTY6argtu/KDStOnaQooV49uw5M2qQcf6mMcem06E= Subject key identifier: BD:B5:AD:B0:DA:0C:CA:03:5E:36:6C:51:E6:EB:B0:C5:7D:D6:03:73 Authority key identifier: 5D:FC:46:92:5E:2D:4B:3F:B0:44:F2:84:11:12:22:A8:B4:C7:83:92 Certificate issuer: /CN=5DFC46925E2D4B3FB044F284111222A8B4C78392 Certificate serial: 5D5C01A4A443DD1D8FAE2F8F917B93C7FEDC2BB9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft Manifest number: 01BD Signing time: Mon 20 Oct 2025 13:51:05 +0000 Manifest this update: Mon 20 Oct 2025 13:46:05 +0000 Manifest next update: Fri 24 Oct 2025 00:09:05 +0000 Files and hashes: 1: 3130332e32322e39382e302f32342d3234203d3e20313530323433.roa (hash: RBUkVebuQcs/eoD+DsobzhNFA6Y0GlvHxLIjvG85Lgo=) 2: 5DFC46925E2D4B3FB044F284111222A8B4C78392.crl (hash: Q/1BxUsJZY7usytnZ4eQNDrwVjykSJuhttBJJIcjVQc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.crl rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:5c:01:a4:a4:43:dd:1d:8f:ae:2f:8f:91:7b:93:c7:fe:dc:2b:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DFC46925E2D4B3FB044F284111222A8B4C78392 Validity Not Before: Oct 20 13:46:05 2025 GMT Not After : Oct 24 00:09:05 2025 GMT Subject: CN=BDB5ADB0DA0CCA035E366C51E6EBB0C57DD60373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:40:26:27:6c:d9:63:1b:6c:34:2a:cd:cf:72: 2e:3f:e6:64:f6:1e:b7:e6:d7:0f:33:a3:a8:c0:79: 19:ce:11:0a:25:c4:71:e2:02:44:d6:cf:f2:93:f3: 7d:3c:45:b0:47:b0:d2:ef:20:31:d0:44:47:ed:bd: c9:7b:a2:6d:7b:15:34:97:18:dc:f0:ef:63:13:8a: d2:5b:b8:60:b3:a0:38:5e:f9:78:da:fc:32:f3:c4: d9:78:aa:14:3b:81:5c:52:43:f1:3a:b6:bd:43:87: e1:8f:8d:d8:1a:07:9b:f3:d3:19:ee:74:92:98:9e: ba:c3:28:43:4b:5f:90:04:85:06:77:86:ef:9b:9d: 3b:11:d2:a3:84:23:e6:99:50:c9:56:e7:be:e7:7c: e6:a3:e4:fe:3c:53:d0:4e:e3:e6:e7:bf:b4:26:7d: 16:10:9e:5e:e3:ad:db:cf:f0:8d:ad:0d:77:f7:df: 6a:88:30:b3:01:43:ee:13:0e:60:b2:16:6b:e9:a0: c3:05:f0:ff:e8:1c:e0:86:30:ca:18:d0:66:aa:f5: 22:da:a3:eb:cc:c4:f5:27:c7:7c:e5:ce:46:19:5d: 9c:c3:98:5c:e9:36:db:4c:0d:79:bb:20:d3:7b:34: fd:5d:e2:e0:42:ed:2e:78:11:84:c9:1d:ce:1e:b4: ee:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:B5:AD:B0:DA:0C:CA:03:5E:36:6C:51:E6:EB:B0:C5:7D:D6:03:73 X509v3 Authority Key Identifier: keyid:5D:FC:46:92:5E:2D:4B:3F:B0:44:F2:84:11:12:22:A8:B4:C7:83:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:1f:16:86:e5:80:7d:42:99:0f:6b:b6:fd:8d:93:5b:55:21: 06:bf:3a:6a:89:3c:08:93:86:62:e6:b9:d5:99:78:7a:35:36: 1c:97:9c:e4:b2:d9:be:71:05:dd:dc:b6:b1:11:d4:07:e3:1a: 81:b9:80:15:e9:22:d8:57:d6:d6:e5:c1:89:02:4a:a2:be:63: 54:2e:e9:65:0d:e1:98:72:f8:61:7d:e7:6e:2d:80:9a:b2:3c: a2:0a:33:45:cd:2f:c3:9a:3d:db:34:52:fe:95:62:0d:b6:c7: 25:83:83:dd:75:91:0a:a0:49:0b:04:f8:6d:ba:87:cd:a0:f8: ea:b7:8b:ca:a6:3b:0c:71:43:e2:ab:26:e6:a4:e4:c8:88:f5: 4e:45:dc:74:a4:15:4c:84:b9:43:94:fa:88:35:0d:f1:57:dc: 8e:39:69:88:36:f8:3a:ab:77:09:eb:58:a7:5b:1a:a0:0e:e9: 47:86:d3:fb:ce:7a:26:da:a7:94:ef:ee:a9:7f:dd:ca:45:e7: c2:90:52:7f:99:6e:70:d5:d7:6c:5f:9a:12:aa:47:db:07:82: 15:ba:3a:f7:00:fe:c7:c4:85:01:31:76:5b:37:8a:a6:18:4e: ad:da:d9:e5:0d:dc:a1:43:5f:15:d8:45:24:ff:8c:3f:2f:9a: ba:72:7b:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXVwBpKRD3R2Pri+PkXuTx/7cK7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIyQThC NEM3ODM5MjAeFw0yNTEwMjAxMzQ2MDVaFw0yNTEwMjQwMDA5MDVaMDMxMTAvBgNV BAMTKEJEQjVBREIwREEwQ0NBMDM1RTM2NkM1MUU2RUJCMEM1N0RENjAzNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsQCYnbNljG2w0Ks3Pci4/5mT2 Hrfm1w8zo6jAeRnOEQolxHHiAkTWz/KT8308RbBHsNLvIDHQREftvcl7om17FTSX GNzw72MTitJbuGCzoDhe+Xja/DLzxNl4qhQ7gVxSQ/E6tr1Dh+GPjdgaB5vz0xnu dJKYnrrDKENLX5AEhQZ3hu+bnTsR0qOEI+aZUMlW577nfOaj5P48U9BO4+bnv7Qm fRYQnl7jrdvP8I2tDXf332qIMLMBQ+4TDmCyFmvpoMMF8P/oHOCGMMoY0Gaq9SLa o+vMxPUnx3zlzkYZXZzDmFzpNttMDXm7INN7NP1d4uBC7S54EYTJHc4etO5DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvbWtsNoMygNeNmxR5uuwxX3WA3MwHwYDVR0j BBgwFoAUXfxGkl4tSz+wRPKEERIiqLTHg5IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzAxYjI3Ny1jODBjLTQ1ZDUtODA4OS1hOWVmYTM0MDU0MmEvMC81REZDNDY5MjVF MkQ0QjNGQjA0NEYyODQxMTEyMjJBOEI0Qzc4MzkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIyQThCNEM3 ODM5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDcwMWIyNzctYzgwYy00NWQ1LTgw ODktYTllZmEzNDA1NDJhLzAvNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIy QThCNEM3ODM5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHUfFoblgH1CmQ9rtv2Nk1tVIQa/OmqJPAiT hmLmudWZeHo1NhyXnOSy2b5xBd3ctrER1AfjGoG5gBXpIthX1tblwYkCSqK+Y1Qu 6WUN4Zhy+GF9524tgJqyPKIKM0XNL8OaPds0Uv6VYg22xyWDg911kQqgSQsE+G26 h82g+Oq3i8qmOwxxQ+KrJuak5MiI9U5F3HSkFUyEuUOU+og1DfFX3I45aYg2+Dqr dwnrWKdbGqAO6UeG0/vOeibap5Tv7ql/3cpF58KQUn+ZbnDV12xfmhKqR9sHghW6 OvcA/sfEhQExdls3iqYYTq3a2eUN3KFDXxXYRST/jD8vmrpye8w= -----END CERTIFICATE-----Generated at Mon Oct 20 18:02:46 2025 by rpki-client