$ rpki-client -vvf repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.mft File: 5CDA120200D28E4FC66FECD60F5AFCC57E79E642.mft (raw, json) Hash identifier: WIEaAeD04ZDqU52O0MQip9WQN14piG7Fbak4gFSidik= Subject key identifier: 51:6C:3D:2A:BF:14:9B:0A:C7:6D:CE:9F:31:98:52:76:56:95:82:4B Authority key identifier: 5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42 Certificate issuer: /CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642 Certificate serial: 5B5F4BBDE8CADDAA14A4E35DC21F014B09552FAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.mft Manifest number: 02DF Signing time: Sat 15 Nov 2025 23:31:37 +0000 Manifest this update: Sat 15 Nov 2025 23:26:37 +0000 Manifest next update: Wed 19 Nov 2025 03:53:37 +0000 Files and hashes: 1: 5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl (hash: dLkN1Vs0TOID9DM6tSv6du3emmhOYnFiDeT7PUESljU=) 2: 3130332e38372e36362e302f32332d3233203d3e20313333383030.roa (hash: YUNDCL4eKY/WSBYrQHBCQwjmiznybb06CPTcpquocBA=) 3: 3130332e38372e36362e302f32332d3234203d3e20313333383030.roa (hash: hZosjgusREm1QITquyfPnR/M8IfPTl6ZAS8oENoHwKA=) 4: 3130332e38372e36372e302f32342d3234203d3e20313333383030.roa (hash: SHAFGJOdQSS5ZqozGPq16khbD5estk3T1ejmGm1B3pU=) 5: 3130332e39342e3233382e302f32332d3234203d3e20313333383030.roa (hash: Gqjs8W/hxpL2gCxE1+hRH/WoM9HAVJhf5XiKi+bhD8c=) 6: 3130332e38372e36362e302f32342d3234203d3e20313333383030.roa (hash: 28vgeLNt3g9napF7ybKdFbQimDX85rDBRhlE0yU7IqI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Nov 2025 16:06:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:5f:4b:bd:e8:ca:dd:aa:14:a4:e3:5d:c2:1f:01:4b:09:55:2f:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642 Validity Not Before: Nov 15 23:26:37 2025 GMT Not After : Nov 19 03:53:37 2025 GMT Subject: CN=516C3D2ABF149B0AC76DCE9F319852765695824B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:16:39:af:14:7f:79:0f:49:09:0c:99:cb:3a: 03:82:05:43:03:cf:39:ee:8c:c2:e9:07:c7:e3:55: a1:9a:13:91:dc:53:79:b1:37:6c:cf:eb:25:d1:e3: b7:fb:2e:6d:c1:c4:4a:21:31:8c:68:be:27:b0:58: 1a:9e:1e:3f:6d:ca:21:03:85:c9:34:e7:04:1c:36: 1c:15:15:fb:48:5e:e5:94:d8:f0:d5:ea:62:19:67: 0e:e2:fd:ba:ce:0e:b0:c4:35:ac:8a:d1:6a:45:09: e2:5c:63:f5:a1:7f:63:46:e4:05:df:c4:0b:ba:0b: 46:59:32:c0:ba:83:40:de:aa:b2:00:17:86:5d:ef: 3e:ab:5a:d5:3e:4b:24:46:44:8f:73:e7:95:38:65: 79:c0:84:17:f6:02:f3:4b:bb:40:44:e1:38:fd:f3: a8:4f:46:91:9d:cc:e4:11:81:26:c6:bc:61:79:81: fd:f0:d3:b8:e9:86:12:3b:60:e1:0f:dd:d5:04:aa: 50:c2:1f:8a:96:15:13:ee:19:ee:c1:ec:6d:ab:b1: 81:13:5d:7e:36:b2:2f:6e:da:4b:1a:5c:bc:0c:35: 00:7c:e0:a8:05:24:9b:a2:87:8d:ea:3a:f3:dc:06: e0:cc:a4:af:61:ed:df:44:f3:30:96:23:c1:dc:d7: 26:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:6C:3D:2A:BF:14:9B:0A:C7:6D:CE:9F:31:98:52:76:56:95:82:4B X509v3 Authority Key Identifier: keyid:5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:6c:2d:75:a6:95:96:40:04:50:d6:aa:04:39:8d:31:13:e1: 20:ef:13:88:38:55:28:85:58:1b:9c:02:df:6f:bd:8e:01:75: aa:b5:d1:46:30:1a:89:0a:1c:11:79:ac:b3:cb:53:56:e9:41: 0c:b1:7f:66:67:74:32:3f:53:a1:34:30:44:18:ed:93:b6:3e: 10:47:33:95:24:09:9e:a9:0e:21:9a:ef:6a:10:1d:71:f2:48: f8:c1:99:2b:71:7a:91:8f:37:6a:9e:cd:f9:4c:17:5a:54:55: 1e:6a:fa:63:7d:26:70:c4:57:0e:5c:d7:1c:19:eb:ac:90:f3: c1:9c:4f:80:00:6d:66:e2:25:d0:32:e3:45:c9:cf:cd:15:e3: 4d:f2:27:24:1a:bf:0f:8f:a5:c7:a4:8a:89:f3:5f:f9:eb:85: 60:d3:9e:40:58:bd:01:9e:7e:79:55:8b:dc:3a:02:45:f0:92: c4:ae:1c:a4:66:4a:7c:80:4c:9c:05:7d:1d:f6:73:f8:a7:b2: e3:55:e4:9a:92:38:38:c8:7e:b4:78:86:3d:7a:a6:1c:65:5e: 18:a4:a2:b1:ae:2e:73:75:90:56:81:aa:ac:8a:23:95:1e:53: 68:3d:69:bf:a0:91:34:d6:cf:d2:3b:f4:61:6e:ec:b4:94:9e: 4f:75:90:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW19LvejK3aoUpONdwh8BSwlVL64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNEQTEyMDIwMEQyOEU0RkM2NkZFQ0Q2MEY1QUZDQzU3 RTc5RTY0MjAeFw0yNTExMTUyMzI2MzdaFw0yNTExMTkwMzUzMzdaMDMxMTAvBgNV BAMTKDUxNkMzRDJBQkYxNDlCMEFDNzZEQ0U5RjMxOTg1Mjc2NTY5NTgyNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1FjmvFH95D0kJDJnLOgOCBUMD zznujMLpB8fjVaGaE5HcU3mxN2zP6yXR47f7Lm3BxEohMYxoviewWBqeHj9tyiED hck05wQcNhwVFftIXuWU2PDV6mIZZw7i/brODrDENayK0WpFCeJcY/Whf2NG5AXf xAu6C0ZZMsC6g0DeqrIAF4Zd7z6rWtU+SyRGRI9z55U4ZXnAhBf2AvNLu0BE4Tj9 86hPRpGdzOQRgSbGvGF5gf3w07jphhI7YOEP3dUEqlDCH4qWFRPuGe7B7G2rsYET XX42si9u2ksaXLwMNQB84KgFJJuih43qOvPcBuDMpK9h7d9E8zCWI8Hc1yaLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUWw9Kr8UmwrHbc6fMZhSdlaVgkswHwYDVR0j BBgwFoAUXNoSAgDSjk/Gb+zWD1r8xX555kIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmFmODM1Mi1jZDY1LTRkYjctYjBjYi0wNDhiNDVlN2E0YmYvMC81Q0RBMTIwMjAw RDI4RTRGQzY2RkVDRDYwRjVBRkNDNTdFNzlFNjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUNEQTEyMDIwMEQyOEU0RkM2NkZFQ0Q2MEY1QUZDQzU3RTc5 RTY0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJhZjgzNTItY2Q2NS00ZGI3LWIw Y2ItMDQ4YjQ1ZTdhNGJmLzAvNUNEQTEyMDIwMEQyOEU0RkM2NkZFQ0Q2MEY1QUZD QzU3RTc5RTY0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABpsLXWmlZZABFDWqgQ5jTET4SDvE4g4VSiF WBucAt9vvY4Bdaq10UYwGokKHBF5rLPLU1bpQQyxf2ZndDI/U6E0MEQY7ZO2PhBH M5UkCZ6pDiGa72oQHXHySPjBmStxepGPN2qezflMF1pUVR5q+mN9JnDEVw5c1xwZ 66yQ88GcT4AAbWbiJdAy40XJz80V403yJyQavw+PpcekionzX/nrhWDTnkBYvQGe fnlVi9w6AkXwksSuHKRmSnyATJwFfR32c/insuNV5JqSODjIfrR4hj16phxlXhik orGuLnN1kFaBqqyKI5UeU2g9ab+gkTTWz9I79GFu7LSUnk91kCs= -----END CERTIFICATE-----Generated at Sun Nov 16 07:29:03 2025 by rpki-client