$ rpki-client -vvf repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft File: 5C7240CA135C93835F95A8E1F3526942D3214EC2.mft (raw, json) Hash identifier: /0l8QwtHBoNThcY7ksdAzKA1E30Ebkil9QwINmmAjm8= Subject key identifier: 6C:8E:B7:90:E0:65:1F:5A:4C:D4:B5:5D:CA:91:57:60:90:16:2F:98 Authority key identifier: 5C:72:40:CA:13:5C:93:83:5F:95:A8:E1:F3:52:69:42:D3:21:4E:C2 Certificate issuer: /CN=5C7240CA135C93835F95A8E1F3526942D3214EC2 Certificate serial: 7131807B8088599C786A9AD8FBBBC44C825C98FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft Manifest number: 0224 Signing time: Thu 30 Oct 2025 09:31:33 +0000 Manifest this update: Thu 30 Oct 2025 09:26:33 +0000 Manifest next update: Sun 02 Nov 2025 17:58:33 +0000 Files and hashes: 1: 5C7240CA135C93835F95A8E1F3526942D3214EC2.crl (hash: hos7/J8t/SKxB+AmfaRFTVeIatrBO2IkUsQdnwv32OU=) 2: 3130332e3139302e34362e302f32342d3234203d3e2039333431.roa (hash: jBjxNJ+007Quwhm8JkgTbciN359d/zYXuYTKIMisTrU=) 3: 3130332e3139302e34362e302f32332d3233203d3e2039333431.roa (hash: WvXqqkpLSakilobbbh3oi/iYc3pt0ZdEradB47daqG8=) 4: 3130332e3139302e34372e302f32342d3234203d3e2039333431.roa (hash: rr9ymmJLTXtCYmg7wZwMhNNVHwxbRfZ339GatX+MBVg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.crl rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 17:58:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:31:80:7b:80:88:59:9c:78:6a:9a:d8:fb:bb:c4:4c:82:5c:98:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C7240CA135C93835F95A8E1F3526942D3214EC2 Validity Not Before: Oct 30 09:26:33 2025 GMT Not After : Nov 2 17:58:33 2025 GMT Subject: CN=6C8EB790E0651F5A4CD4B55DCA91576090162F98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:58:1b:00:07:4a:d9:45:ee:56:fe:90:d8:2f: 9e:24:9b:33:f0:29:ea:39:86:1f:63:a3:b6:83:f8: 69:03:ca:7c:44:b8:84:2a:e8:61:aa:cd:77:84:5f: 5d:d4:4c:7e:7a:04:c0:de:11:81:59:b9:1b:2e:70: dc:e7:80:f4:ba:4b:15:c2:68:2e:be:ad:80:c3:87: 93:99:2f:38:fa:3e:ed:86:62:74:ee:e6:e5:8b:3b: a7:85:05:db:22:1e:1e:eb:3b:47:76:37:27:82:f6: 96:a2:d9:f1:c5:68:42:54:e3:c3:82:d4:3e:dc:02: c3:93:81:31:dc:9f:ba:b5:59:41:f0:c5:cd:44:76: 0f:3e:17:6a:e9:c6:58:ec:24:e5:d5:a5:a2:3a:fd: ff:e8:bd:22:30:d9:39:6b:62:02:eb:9e:48:28:75: b1:ad:99:f3:d2:dc:50:aa:d6:c6:a3:ae:35:24:d8: 84:c5:44:72:0c:6a:76:ea:35:8a:26:a0:da:ae:40: 95:26:65:34:35:db:b2:5b:ec:52:28:34:80:56:76: 2a:5b:01:cc:86:ed:ee:dd:91:e3:7a:55:c2:89:b3: 31:a5:89:76:5b:89:75:b8:1b:1a:d9:30:26:9e:89: 58:5f:4e:3d:88:aa:64:22:0d:e3:d6:bd:5e:d1:1f: cc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:8E:B7:90:E0:65:1F:5A:4C:D4:B5:5D:CA:91:57:60:90:16:2F:98 X509v3 Authority Key Identifier: keyid:5C:72:40:CA:13:5C:93:83:5F:95:A8:E1:F3:52:69:42:D3:21:4E:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:7c:f8:9c:19:b7:5b:f4:23:15:d6:e3:1e:bd:89:9f:2c:fe: a3:b8:34:35:62:5f:d6:55:2b:f7:9b:14:69:c0:24:5a:71:79: 68:64:4e:e1:71:d9:1e:c5:a0:80:8b:cf:c8:38:72:34:f4:f9: b1:17:a3:f0:80:e1:3b:dd:39:3a:b5:be:a3:84:24:b9:f4:88: 9c:20:f0:7a:c0:51:b4:58:94:bc:39:c7:96:3a:ed:e3:30:47: 9c:9e:b9:3c:de:eb:b1:6b:f3:e3:bc:e0:e0:cd:14:ef:1f:d2: 32:68:ad:7a:62:5e:68:19:b5:39:df:c0:05:bb:48:dd:c7:73: de:5b:41:eb:43:2e:8e:3f:82:1a:c0:1d:20:6b:19:d0:5b:2a: 1d:ca:7c:1e:6e:68:f6:d4:0f:3f:f5:20:90:34:bb:83:56:d8: d4:9b:ff:71:b3:1a:5e:8e:e4:bb:5e:99:aa:8d:a2:26:49:e5: d5:cd:aa:9c:f3:18:a1:95:10:eb:8c:3f:e7:79:11:2d:09:de: 44:a8:e6:cc:b3:64:31:ab:8f:d3:41:a1:66:6b:3b:54:9c:8e: 7e:0a:dd:88:2f:ce:12:b6:7f:98:28:aa:8f:9b:1b:2b:64:47: dd:99:a2:e9:19:23:1b:ff:e2:ae:0c:19:49:a7:d6:ce:82:d5: c3:e2:5f:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcTGAe4CIWZx4aprY+7vETIJcmPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM3MjQwQ0ExMzVDOTM4MzVGOTVBOEUxRjM1MjY5NDJE MzIxNEVDMjAeFw0yNTEwMzAwOTI2MzNaFw0yNTExMDIxNzU4MzNaMDMxMTAvBgNV BAMTKDZDOEVCNzkwRTA2NTFGNUE0Q0Q0QjU1RENBOTE1NzYwOTAxNjJGOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzWBsAB0rZRe5W/pDYL54kmzPw Keo5hh9jo7aD+GkDynxEuIQq6GGqzXeEX13UTH56BMDeEYFZuRsucNzngPS6SxXC aC6+rYDDh5OZLzj6Pu2GYnTu5uWLO6eFBdsiHh7rO0d2NyeC9pai2fHFaEJU48OC 1D7cAsOTgTHcn7q1WUHwxc1Edg8+F2rpxljsJOXVpaI6/f/ovSIw2TlrYgLrnkgo dbGtmfPS3FCq1sajrjUk2ITFRHIManbqNYomoNquQJUmZTQ127Jb7FIoNIBWdipb AcyG7e7dkeN6VcKJszGliXZbiXW4GxrZMCaeiVhfTj2IqmQiDePWvV7RH8y7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbI63kOBlH1pM1LVdypFXYJAWL5gwHwYDVR0j BBgwFoAUXHJAyhNck4Nflajh81JpQtMhTsIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjFmOTk5Yi1hYmNlLTRmYTktOGU3OS05M2I5YzVlNDU0ZTEvMC81QzcyNDBDQTEz NUM5MzgzNUY5NUE4RTFGMzUyNjk0MkQzMjE0RUMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM3MjQwQ0ExMzVDOTM4MzVGOTVBOEUxRjM1MjY5NDJEMzIx NEVDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIxZjk5OWItYWJjZS00ZmE5LThl NzktOTNiOWM1ZTQ1NGUxLzAvNUM3MjQwQ0ExMzVDOTM4MzVGOTVBOEUxRjM1MjY5 NDJEMzIxNEVDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZ8+JwZt1v0IxXW4x69iZ8s/qO4NDViX9ZV K/ebFGnAJFpxeWhkTuFx2R7FoICLz8g4cjT0+bEXo/CA4TvdOTq1vqOEJLn0iJwg 8HrAUbRYlLw5x5Y67eMwR5yeuTze67Fr8+O84ODNFO8f0jJorXpiXmgZtTnfwAW7 SN3Hc95bQetDLo4/ghrAHSBrGdBbKh3KfB5uaPbUDz/1IJA0u4NW2NSb/3GzGl6O 5LtemaqNoiZJ5dXNqpzzGKGVEOuMP+d5ES0J3kSo5syzZDGrj9NBoWZrO1Scjn4K 3YgvzhK2f5goqo+bGytkR92ZoukZIxv/4q4MGUmn1s6C1cPiX6s= -----END CERTIFICATE-----Generated at Thu Oct 30 14:59:06 2025 by rpki-client