$ rpki-client -vvf repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft File: 5DC5D36558922295B85E7AE3A79178FB430FD34B.mft (raw, json) Hash identifier: w/pcuUPSFgb3dMxmz6VzvxGAA1tACLct0UKYnFxeBv0= Subject key identifier: E8:77:69:CD:4B:11:B5:07:F7:A6:D0:51:7E:42:FA:A6:77:40:DB:83 Authority key identifier: 5D:C5:D3:65:58:92:22:95:B8:5E:7A:E3:A7:91:78:FB:43:0F:D3:4B Certificate issuer: /CN=5DC5D36558922295B85E7AE3A79178FB430FD34B Certificate serial: 1003A85F5CB69A3D179CFFD637D409FF5A81156E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DC5D36558922295B85E7AE3A79178FB430FD34B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft Manifest number: 04D6 Signing time: Sat 08 Nov 2025 03:42:23 +0000 Manifest this update: Sat 08 Nov 2025 03:37:23 +0000 Manifest next update: Tue 11 Nov 2025 06:32:23 +0000 Files and hashes: 1: 3130332e3135362e3233342e302f32342d3234203d3e20313431303939.roa (hash: 2Ij3trthgvVTDLtbPd9soaDl21FzUqm6uc+fi+je0/U=) 2: 5DC5D36558922295B85E7AE3A79178FB430FD34B.crl (hash: ATAS/uushf9qqXmtdYxI2Uzd4biaKV/geLfFMKuRTyA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.crl rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DC5D36558922295B85E7AE3A79178FB430FD34B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 06:32:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:03:a8:5f:5c:b6:9a:3d:17:9c:ff:d6:37:d4:09:ff:5a:81:15:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DC5D36558922295B85E7AE3A79178FB430FD34B Validity Not Before: Nov 8 03:37:23 2025 GMT Not After : Nov 11 06:32:23 2025 GMT Subject: CN=E87769CD4B11B507F7A6D0517E42FAA67740DB83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:79:31:48:3e:58:76:ab:af:e4:63:d4:88:37: 2e:61:fd:a1:81:17:a1:aa:d4:2a:ba:08:29:e1:3a: d3:95:af:40:b8:6e:69:d4:3d:14:dd:d1:cc:04:b6: c5:f5:ac:93:bd:9a:e7:27:83:b0:af:28:01:1b:f8: fe:3e:bf:9b:00:43:6b:06:d8:bc:c7:15:ca:83:2e: b8:37:43:ea:73:28:0f:c8:ab:92:7f:17:1a:c9:7b: 92:ea:5f:6b:a6:00:f4:95:19:bf:12:62:5f:75:b3: f1:63:73:a4:6d:78:b5:5c:12:8c:d4:dc:1d:f2:6c: 23:5b:ba:a4:83:74:1b:53:81:27:d7:0d:35:a2:b1: e9:5b:f8:b5:f5:24:72:24:b6:ac:82:5b:fa:6a:54: 6b:be:85:7d:1b:84:c7:70:5d:22:c9:c3:40:bc:79: 48:72:b5:fe:b5:76:11:8c:c5:71:2a:b1:54:3e:a0: 56:c8:64:1d:f5:79:8d:96:8c:fd:b0:53:ad:0b:40: 35:60:fa:7d:fa:90:1c:5e:94:43:af:fb:fb:c5:c6: b5:18:dc:eb:ef:d1:06:4b:ab:9a:c0:63:85:e0:3a: 6e:93:ba:11:06:52:b0:02:84:1f:60:67:b8:a3:72: 77:1a:10:c2:e3:4b:53:8e:f5:09:aa:b0:75:78:f3: 62:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:77:69:CD:4B:11:B5:07:F7:A6:D0:51:7E:42:FA:A6:77:40:DB:83 X509v3 Authority Key Identifier: keyid:5D:C5:D3:65:58:92:22:95:B8:5E:7A:E3:A7:91:78:FB:43:0F:D3:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DC5D36558922295B85E7AE3A79178FB430FD34B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:68:28:f4:9e:16:a5:c5:82:07:17:6f:16:7b:f3:80:34:d4: cf:65:83:5d:68:a6:07:26:af:6a:7f:f4:38:0f:83:be:f8:f3: a3:e9:d5:b6:7c:1f:7f:70:b5:a8:75:a4:ea:b9:41:5d:da:a9: 28:c4:84:02:c4:74:5c:97:0a:e0:ec:ed:1b:60:b5:e1:9a:54: 56:9f:b6:e7:da:38:58:4a:0c:a4:42:30:0e:ca:a4:52:73:f4: 74:11:f2:4a:1c:76:dc:61:5b:cd:5d:ba:76:5f:b1:78:22:70: dc:f8:b9:26:8c:00:d8:f0:58:e0:16:53:bc:c7:f5:42:cf:c1: f9:9e:3b:1e:16:55:be:db:6a:04:03:75:44:8c:b7:cd:43:e1: d6:d8:21:8f:b4:7a:cf:64:b7:16:e8:9c:cd:54:91:45:8d:04: ca:dd:fd:04:47:e8:af:c4:f4:43:2c:15:af:4c:ee:c8:c4:a4: 5f:16:02:10:4d:5b:3d:e7:eb:fc:09:af:ad:35:c9:fb:69:db: 5d:6e:f1:67:4f:dc:95:e1:10:b0:a6:71:a6:f0:a0:5f:82:f5: 0a:2e:61:f6:ba:aa:e7:60:fd:40:38:fb:00:c5:33:e4:07:9a: 84:a0:b3:bb:60:6e:df:45:4f:56:e4:12:fc:b6:12:9f:b2:80: 1b:b9:44:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEAOoX1y2mj0XnP/WN9QJ/1qBFW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURDNUQzNjU1ODkyMjI5NUI4NUU3QUUzQTc5MTc4RkI0 MzBGRDM0QjAeFw0yNTExMDgwMzM3MjNaFw0yNTExMTEwNjMyMjNaMDMxMTAvBgNV BAMTKEU4Nzc2OUNENEIxMUI1MDdGN0E2RDA1MTdFNDJGQUE2Nzc0MERCODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXeTFIPlh2q6/kY9SINy5h/aGB F6Gq1Cq6CCnhOtOVr0C4bmnUPRTd0cwEtsX1rJO9mucng7CvKAEb+P4+v5sAQ2sG 2LzHFcqDLrg3Q+pzKA/Iq5J/FxrJe5LqX2umAPSVGb8SYl91s/Fjc6RteLVcEozU 3B3ybCNbuqSDdBtTgSfXDTWiselb+LX1JHIktqyCW/pqVGu+hX0bhMdwXSLJw0C8 eUhytf61dhGMxXEqsVQ+oFbIZB31eY2WjP2wU60LQDVg+n36kBxelEOv+/vFxrUY 3Ovv0QZLq5rAY4XgOm6TuhEGUrAChB9gZ7ijcncaEMLjS1OO9QmqsHV482KDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6HdpzUsRtQf3ptBRfkL6pndA24MwHwYDVR0j BBgwFoAUXcXTZViSIpW4Xnrjp5F4+0MP00swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZTNhMTM4ZS1hMmIyLTQ2MDQtYWQ1MC0zY2FiNzUwYTc1ZTcvMC81REM1RDM2NTU4 OTIyMjk1Qjg1RTdBRTNBNzkxNzhGQjQzMEZEMzRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNURDNUQzNjU1ODkyMjI5NUI4NUU3QUUzQTc5MTc4RkI0MzBG RDM0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmUzYTEzOGUtYTJiMi00NjA0LWFk NTAtM2NhYjc1MGE3NWU3LzAvNURDNUQzNjU1ODkyMjI5NUI4NUU3QUUzQTc5MTc4 RkI0MzBGRDM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG1oKPSeFqXFggcXbxZ784A01M9lg11opgcm r2p/9DgPg77486Pp1bZ8H39wtah1pOq5QV3aqSjEhALEdFyXCuDs7RtgteGaVFaf tufaOFhKDKRCMA7KpFJz9HQR8kocdtxhW81dunZfsXgicNz4uSaMANjwWOAWU7zH 9ULPwfmeOx4WVb7bagQDdUSMt81D4dbYIY+0es9ktxbonM1UkUWNBMrd/QRH6K/E 9EMsFa9M7sjEpF8WAhBNWz3n6/wJr601yftp211u8WdP3JXhELCmcabwoF+C9Qou Yfa6qudg/UA4+wDFM+QHmoSgs7tgbt9FT1bkEvy2Ep+ygBu5RN4= -----END CERTIFICATE-----Generated at Sat Nov 8 13:05:45 2025 by rpki-client