$ rpki-client -vvf repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft File: 5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft (raw, json) Hash identifier: Bnw/jhm0qXteuX3Jg7UNjcEyBVLN4pAHkXhQ+GOc7o8= Subject key identifier: 17:C7:DE:82:4E:24:B2:19:2D:7C:D3:01:7A:94:C0:D5:84:6E:FA:08 Authority key identifier: 5A:0C:BE:2D:BC:F9:88:35:69:F8:C2:4B:FB:9E:59:54:42:D8:35:D0 Certificate issuer: /CN=5A0CBE2DBCF9883569F8C24BFB9E595442D835D0 Certificate serial: 215837A143FC073AC31A42EC7A93ABCA9BA8B015 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft Manifest number: 0520 Signing time: Thu 23 Oct 2025 16:01:45 +0000 Manifest this update: Thu 23 Oct 2025 15:56:45 +0000 Manifest next update: Sun 26 Oct 2025 22:40:45 +0000 Files and hashes: 1: 3130332e3134382e37362e302f32332d3233203d3e20313339393839.roa (hash: tHgBQBHZyelL12LDcNEGOIdBk1KUkf5Y80WNybt6NLU=) 2: 3130332e3134382e37362e302f32342d3234203d3e20313339393839.roa (hash: 4DHvFxVV4LIBkA3x8qQp+DBWnN9OK+EeEYU9y73AnvA=) 3: 5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl (hash: oVDfSvwKME/E4m3audKrDzhAqViKeUvvnNu5lgo2aO8=) 4: 3130332e3134382e37372e302f32342d3234203d3e20313339393839.roa (hash: MWm2F1DhYXk8gG9Y58JwnEVzuJMu3hmMEBr/crsMrlo=) 5: 323030313a6466323a633238303a3a2f34382d3438203d3e20313339393839.roa (hash: NAP8Ecg7mcF+3+EYuEqADPL2zQZENpYX/wZwvz8zK2k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 22:40:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:58:37:a1:43:fc:07:3a:c3:1a:42:ec:7a:93:ab:ca:9b:a8:b0:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A0CBE2DBCF9883569F8C24BFB9E595442D835D0 Validity Not Before: Oct 23 15:56:45 2025 GMT Not After : Oct 26 22:40:45 2025 GMT Subject: CN=17C7DE824E24B2192D7CD3017A94C0D5846EFA08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:69:03:58:13:c2:4f:0b:8a:21:d9:ea:44:b5: b5:f5:3d:45:3f:da:86:f4:4b:04:26:44:63:b5:f3: 28:d8:42:35:72:8a:d3:8f:89:94:05:16:cb:1c:1f: 30:07:d1:ab:00:52:50:80:cb:5c:19:39:f8:2f:12: 03:57:90:5e:e5:47:63:c9:23:cf:37:7e:a1:e4:17: 10:2a:ce:50:03:3c:da:75:c2:53:0e:1b:69:b5:17: bf:61:0c:40:f8:3d:44:33:66:5f:16:bf:27:2b:e4: 67:43:b8:ac:c1:d9:7f:8b:bb:81:60:15:a6:fa:80: 49:91:2a:f7:80:35:ec:f7:07:93:9a:43:af:a7:bc: 15:a7:81:03:1c:19:54:41:ea:ee:5c:12:2c:77:7d: 08:af:e2:65:ae:15:3b:57:27:46:f8:4e:f1:ec:e3: db:4f:21:1b:c7:50:e4:8f:a2:3b:38:4f:9e:51:7f: ae:81:70:45:9d:07:57:80:d0:15:69:8b:21:81:c4: b5:0a:cc:82:9a:56:fe:5e:bf:9d:12:1a:fd:41:d1: 82:c9:e2:03:fb:19:fc:55:ed:ef:b4:02:83:0b:39: 45:43:82:59:eb:5b:73:ca:78:f8:b0:01:16:de:2f: dd:37:0e:73:4a:ad:a1:38:b5:54:f9:fd:57:55:a2: 6c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C7:DE:82:4E:24:B2:19:2D:7C:D3:01:7A:94:C0:D5:84:6E:FA:08 X509v3 Authority Key Identifier: keyid:5A:0C:BE:2D:BC:F9:88:35:69:F8:C2:4B:FB:9E:59:54:42:D8:35:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:d6:3a:0f:4c:a0:de:76:3e:e5:49:35:9d:60:c6:b6:90:af: a1:83:d0:fa:ca:92:9e:29:bc:6e:dd:39:e1:4d:26:46:c1:43: 85:33:d4:59:93:84:2b:bc:b5:e8:da:b4:df:18:33:28:71:e7: 0b:5d:54:b6:80:43:aa:b7:f1:38:c3:7b:92:f7:f1:7d:42:8a: 36:f3:85:1a:1c:f8:46:89:5c:2b:e3:02:cf:1c:4c:a3:6a:85: 07:fa:d7:e3:55:50:13:93:19:b8:39:b6:f7:92:44:a2:83:7d: b5:c8:a6:28:0a:06:6a:5f:0a:8b:aa:ae:7a:8c:9d:86:c3:f1: 12:2f:2d:cb:ab:b1:22:a7:94:14:c4:8b:51:94:af:ca:a3:2c: a1:46:fb:30:7e:6f:28:e5:7c:c2:31:16:e6:33:12:cb:98:bc: b5:31:2b:02:0d:15:58:3f:89:4a:b0:5b:0a:14:4a:57:0c:f1: 43:f2:d0:9b:f0:22:bc:f4:bf:c3:82:b9:bc:bf:10:81:c3:22: dc:87:df:0d:fa:35:a6:1b:0b:ad:92:82:d7:92:c1:1f:74:3a: 71:1c:18:b2:f4:44:4a:ed:e8:a6:5f:06:c6:30:fa:cc:5e:55: 6e:8f:b6:88:c4:09:56:a7:c4:40:00:e9:ad:ab:e8:fe:cf:77: 33:50:9d:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIVg3oUP8BzrDGkLsepOrypuosBUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5NTQ0 MkQ4MzVEMDAeFw0yNTEwMjMxNTU2NDVaFw0yNTEwMjYyMjQwNDVaMDMxMTAvBgNV BAMTKDE3QzdERTgyNEUyNEIyMTkyRDdDRDMwMTdBOTRDMEQ1ODQ2RUZBMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaaQNYE8JPC4oh2epEtbX1PUU/ 2ob0SwQmRGO18yjYQjVyitOPiZQFFsscHzAH0asAUlCAy1wZOfgvEgNXkF7lR2PJ I883fqHkFxAqzlADPNp1wlMOG2m1F79hDED4PUQzZl8Wvycr5GdDuKzB2X+Lu4Fg Fab6gEmRKveANez3B5OaQ6+nvBWngQMcGVRB6u5cEix3fQiv4mWuFTtXJ0b4TvHs 49tPIRvHUOSPojs4T55Rf66BcEWdB1eA0BVpiyGBxLUKzIKaVv5ev50SGv1B0YLJ 4gP7GfxV7e+0AoMLOUVDglnrW3PKePiwARbeL903DnNKraE4tVT5/VdVomxvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF8fegk4kshktfNMBepTA1YRu+ggwHwYDVR0j BBgwFoAUWgy+Lbz5iDVp+MJL+55ZVELYNdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDMxNzQ2ZS1iMGY2LTQ4MjctOGM0ZS1iODE5MmRlY2MzOWEvMC81QTBDQkUyREJD Rjk4ODM1NjlGOEMyNEJGQjlFNTk1NDQyRDgzNUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5NTQ0MkQ4 MzVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAzMTc0NmUtYjBmNi00ODI3LThj NGUtYjgxOTJkZWNjMzlhLzAvNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5 NTQ0MkQ4MzVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACvWOg9MoN52PuVJNZ1gxraQr6GD0PrKkp4p vG7dOeFNJkbBQ4Uz1FmThCu8tejatN8YMyhx5wtdVLaAQ6q38TjDe5L38X1Cijbz hRoc+EaJXCvjAs8cTKNqhQf61+NVUBOTGbg5tveSRKKDfbXIpigKBmpfCouqrnqM nYbD8RIvLcursSKnlBTEi1GUr8qjLKFG+zB+byjlfMIxFuYzEsuYvLUxKwINFVg/ iUqwWwoUSlcM8UPy0JvwIrz0v8OCuby/EIHDItyH3w36NaYbC62SgteSwR90OnEc GLL0RErt6KZfBsYw+sxeVW6PtojECVanxEAA6a2r6P7PdzNQneI= -----END CERTIFICATE-----Generated at Fri Oct 24 09:14:35 2025 by rpki-client