$ rpki-client -vvf repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft File: D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft (raw, json) Hash identifier: plK0oFnLKqIHEXtaxdU7zfQfoa/STMDyUpy1ckLbfVw= Subject key identifier: 4E:CB:6D:70:0C:59:18:96:F9:F0:BF:A1:A4:8B:74:AC:06:C7:42:6F Authority key identifier: D8:07:B5:A7:71:6C:B5:6D:03:6E:DE:4C:E9:94:63:2C:0D:3A:25:01 Certificate issuer: /CN=D807B5A7716CB56D036EDE4CE994632C0D3A2501 Certificate serial: 6DB54FFC13FD331F011B2A3FDE9F05C1A86DBF44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft Manifest number: 01C5 Signing time: Mon 20 Oct 2025 07:02:12 +0000 Manifest this update: Mon 20 Oct 2025 06:57:12 +0000 Manifest next update: Thu 23 Oct 2025 07:22:12 +0000 Files and hashes: 1: 3130332e3139312e3230302e302f32342d3234203d3e20313432333636.roa (hash: PoHfbIWBTAgg6GV0EgVNoxxVcZmuQWnVjc1te2yrEhM=) 2: D807B5A7716CB56D036EDE4CE994632C0D3A2501.crl (hash: NEKLFU3kcjlNA3y088khsIDdfLqe2wuDgeRDropzRcQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.crl rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 07:22:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:b5:4f:fc:13:fd:33:1f:01:1b:2a:3f:de:9f:05:c1:a8:6d:bf:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D807B5A7716CB56D036EDE4CE994632C0D3A2501 Validity Not Before: Oct 20 06:57:12 2025 GMT Not After : Oct 23 07:22:12 2025 GMT Subject: CN=4ECB6D700C591896F9F0BFA1A48B74AC06C7426F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a2:33:3e:82:8f:4a:d1:cf:e1:bb:6d:e6:74: 00:52:1e:aa:f1:55:1a:cb:ab:22:62:6b:68:4d:62: ed:21:e0:03:33:a6:96:17:78:1e:45:7c:ad:bc:be: 4d:79:aa:c7:47:62:52:7e:ab:db:2d:7b:1d:32:f3: 9d:70:c6:74:b3:e4:53:00:b2:34:c3:10:74:3b:01: dd:8a:36:62:45:f7:3a:8e:65:6a:ff:f3:29:f6:e4: 9c:24:33:88:87:3a:4c:6c:18:f8:6f:ca:85:c5:cf: dc:9d:71:de:f6:a6:ce:cb:cc:0d:cc:90:ea:b9:6c: 1e:8b:d2:b5:d0:5a:bc:ff:86:db:70:27:df:e0:b0: 90:00:92:99:5a:dd:55:b7:25:0b:12:1c:76:e0:c9: 23:b5:0c:dc:7b:48:ca:a9:6b:e0:cd:a3:d6:1d:a0: 48:77:4f:ff:84:48:4f:ba:d1:b1:7e:21:bd:e5:36: 90:85:f4:ab:5e:7d:ad:83:b3:af:e3:12:a3:e0:3a: 5f:7b:47:45:a6:03:64:c1:b2:e2:fd:8f:fc:da:97: ce:42:33:ed:74:56:08:5c:07:fe:e9:cf:6a:a2:6b: 6f:de:cc:72:e1:3a:a5:cc:39:3c:32:fb:90:47:72: f2:07:86:19:5c:ec:13:55:48:f6:d7:57:4e:09:e6: a4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:CB:6D:70:0C:59:18:96:F9:F0:BF:A1:A4:8B:74:AC:06:C7:42:6F X509v3 Authority Key Identifier: keyid:D8:07:B5:A7:71:6C:B5:6D:03:6E:DE:4C:E9:94:63:2C:0D:3A:25:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:05:5c:34:44:8d:9f:67:6f:4f:22:09:40:9d:c6:3c:76:36: de:f2:f5:3d:37:52:48:50:49:3d:a1:d7:33:fc:b9:db:2e:7b: ea:cb:cd:59:11:f8:dd:bb:04:40:86:03:5e:18:4e:01:1e:da: 1a:22:d9:3e:79:ea:fe:a0:8e:41:30:1b:95:c9:5b:fc:07:30: d2:3d:1d:c5:52:7f:87:2b:01:66:70:68:34:d5:74:6e:9f:19: 34:2d:03:f3:cb:b5:8f:59:53:2b:28:c6:3b:83:95:25:9f:d9: b4:3c:e7:fc:ff:3b:86:3a:59:77:72:57:b7:67:37:1c:ce:6b: b4:ac:40:fb:23:8c:a7:b2:ae:04:14:4a:df:6a:df:de:84:17: 48:ae:6f:f9:44:56:57:2e:25:e5:94:35:a6:97:20:f1:fb:de: 8d:27:fb:68:31:a8:9a:4e:47:43:d6:cb:b5:96:c4:26:49:c6: 56:ea:3f:23:a0:df:07:df:2b:02:ef:23:2b:7c:b0:c3:f4:d2: 11:45:1f:0f:8c:eb:22:e4:d1:7d:e9:e8:c1:fe:db:fe:af:45: 8f:18:bc:a8:fd:38:48:bf:12:ab:c4:20:30:f0:f5:c7:40:bd: c5:0c:69:21:60:82:09:c4:e2:e2:05:f1:30:f4:c6:d5:2a:ea: 85:88:d6:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbbVP/BP9Mx8BGyo/3p8Fwahtv0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDgwN0I1QTc3MTZDQjU2RDAzNkVERTRDRTk5NDYzMkMw RDNBMjUwMTAeFw0yNTEwMjAwNjU3MTJaFw0yNTEwMjMwNzIyMTJaMDMxMTAvBgNV BAMTKDRFQ0I2RDcwMEM1OTE4OTZGOUYwQkZBMUE0OEI3NEFDMDZDNzQyNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwojM+go9K0c/hu23mdABSHqrx VRrLqyJia2hNYu0h4AMzppYXeB5FfK28vk15qsdHYlJ+q9stex0y851wxnSz5FMA sjTDEHQ7Ad2KNmJF9zqOZWr/8yn25JwkM4iHOkxsGPhvyoXFz9ydcd72ps7LzA3M kOq5bB6L0rXQWrz/httwJ9/gsJAAkpla3VW3JQsSHHbgySO1DNx7SMqpa+DNo9Yd oEh3T/+ESE+60bF+Ib3lNpCF9Ktefa2Ds6/jEqPgOl97R0WmA2TBsuL9j/zal85C M+10VghcB/7pz2qia2/ezHLhOqXMOTwy+5BHcvIHhhlc7BNVSPbXV04J5qQvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTsttcAxZGJb58L+hpIt0rAbHQm8wHwYDVR0j BBgwFoAU2Ae1p3FstW0Dbt5M6ZRjLA06JQEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDNlNzFmZS1hZDMzLTRkMTItODcyMC00MzE0M2ZmMDFkYmYvMC9EODA3QjVBNzcx NkNCNTZEMDM2RURFNENFOTk0NjMyQzBEM0EyNTAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDgwN0I1QTc3MTZDQjU2RDAzNkVERTRDRTk5NDYzMkMwRDNB MjUwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTAzZTcxZmUtYWQzMy00ZDEyLTg3 MjAtNDMxNDNmZjAxZGJmLzAvRDgwN0I1QTc3MTZDQjU2RDAzNkVERTRDRTk5NDYz MkMwRDNBMjUwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMkFXDREjZ9nb08iCUCdxjx2Nt7y9T03UkhQ ST2h1zP8udsue+rLzVkR+N27BECGA14YTgEe2hoi2T556v6gjkEwG5XJW/wHMNI9 HcVSf4crAWZwaDTVdG6fGTQtA/PLtY9ZUysoxjuDlSWf2bQ85/z/O4Y6WXdyV7dn NxzOa7SsQPsjjKeyrgQUSt9q396EF0iub/lEVlcuJeWUNaaXIPH73o0n+2gxqJpO R0PWy7WWxCZJxlbqPyOg3wffKwLvIyt8sMP00hFFHw+M6yLk0X3p6MH+2/6vRY8Y vKj9OEi/EqvEIDDw9cdAvcUMaSFgggnE4uIF8TD0xtUq6oWI1ko= -----END CERTIFICATE-----Generated at Mon Oct 20 09:45:09 2025 by rpki-client