$ rpki-client -vvf repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft File: 5C413D56294D9D20E64978B7296A9DA893C32CAB.mft (raw, json) Hash identifier: YrpQCCMW67FQKIgJv+ECQpNuLx/CRTXQAbdjYsrVAp8= Subject key identifier: D7:D6:98:77:07:0B:B0:EB:F1:9B:20:EF:32:11:54:E4:86:43:83:04 Authority key identifier: 5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB Certificate issuer: /CN=5C413D56294D9D20E64978B7296A9DA893C32CAB Certificate serial: 3F361B18C5FD719FE7D3C4DAC73F15865463B439 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft Manifest number: 03AF Signing time: Tue 28 Oct 2025 13:42:24 +0000 Manifest this update: Tue 28 Oct 2025 13:37:24 +0000 Manifest next update: Sat 01 Nov 2025 00:53:24 +0000 Files and hashes: 1: 323030313a6466333a356238303a3a2f34382d3438203d3e20313430333839.roa (hash: JKFEKy2zDD0/MbgGmVCYEU7vyiWQJvpcUY2RjG6e1rs=) 2: 3130332e3135302e36312e302f32342d3234203d3e20313430333839.roa (hash: PlY/JnUtAv2FxS5Soe3wZCn6MzuK/JWnFyPZQrX/fuQ=) 3: 5C413D56294D9D20E64978B7296A9DA893C32CAB.crl (hash: t3ilmp9yPIWD6uPwduaZO+E5VQRB2ufnn2LFllVaTuQ=) 4: 3130332e3135302e36302e302f32342d3234203d3e20313430333839.roa (hash: 4ZQwGn11qHNiVrKpaqE6sqxjVoPVYCbt4H6xntr7VWc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.crl rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 00:53:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:36:1b:18:c5:fd:71:9f:e7:d3:c4:da:c7:3f:15:86:54:63:b4:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C413D56294D9D20E64978B7296A9DA893C32CAB Validity Not Before: Oct 28 13:37:24 2025 GMT Not After : Nov 1 00:53:24 2025 GMT Subject: CN=D7D69877070BB0EBF19B20EF321154E486438304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ae:45:cb:22:68:ce:02:e9:d3:0e:89:ed:87: 82:68:ad:45:3c:35:48:66:9a:9f:d4:ae:c3:13:c1: 6c:33:d2:09:18:2b:31:08:5f:f6:f9:b7:e9:82:60: 75:00:9b:6b:57:bb:36:ad:bf:52:5a:d3:36:08:49: d9:09:f4:ec:0e:13:ff:10:d0:10:6b:5b:87:8e:a3: c1:0e:a8:02:66:ed:f0:04:f9:67:19:9e:69:ef:1d: 4b:77:c7:45:f4:d1:a9:88:32:a8:d9:07:db:c2:fb: d3:e9:eb:f5:00:d0:b0:a3:50:23:7b:02:17:bd:76: 36:04:5f:54:96:bd:db:66:51:93:12:c0:45:19:6a: d7:c9:d4:65:59:5d:cf:dd:74:3f:8b:2d:05:22:f2: 7e:20:6f:5d:d0:21:36:b3:d1:f2:4e:9e:60:24:4c: bc:74:ff:49:62:3c:aa:08:8a:be:0d:22:a2:ae:57: 4d:42:7c:9b:59:6e:89:81:cd:bb:88:08:95:a1:fb: 87:a9:cb:44:dd:5b:43:b8:75:80:ee:dc:2a:f4:3f: 10:45:4a:06:f7:28:29:38:51:2e:40:ed:3e:93:e2: a5:2b:0b:9f:93:fc:8e:21:bb:8c:38:29:7c:ee:9e: 4a:83:99:1f:0d:7a:e7:5d:5c:db:a2:ca:36:54:19: 68:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:D6:98:77:07:0B:B0:EB:F1:9B:20:EF:32:11:54:E4:86:43:83:04 X509v3 Authority Key Identifier: keyid:5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:5f:18:da:9c:aa:25:ee:d4:00:60:89:0f:42:1a:62:b8:00: a1:c1:f8:fc:34:42:8c:7a:c8:1a:27:e6:cc:96:f6:cd:c8:19: 47:75:c4:94:db:8f:97:cd:ea:23:d2:ad:c3:b9:41:a8:5e:cd: 40:8f:2b:4b:e5:29:81:72:01:83:d6:8e:35:d4:29:1b:c9:d7: 50:e0:5b:40:f8:6f:10:e2:70:64:54:28:f0:f9:1f:cd:fc:b6: f3:70:66:8f:a1:4f:2e:40:7d:99:c9:c1:3b:3f:28:f7:be:d2: 55:b6:6d:d7:1c:d9:1b:ec:78:80:73:c6:16:79:f1:fd:0b:ee: 9f:51:06:7f:ff:39:8d:40:23:01:59:90:6c:8b:50:cc:27:b1: db:78:45:39:e3:3a:cf:3f:9f:5f:36:be:46:45:bd:45:ca:0e: 68:97:ee:ee:e6:74:01:1a:cf:66:e5:d4:64:4f:65:05:b7:28: 01:72:a0:ef:84:5a:8d:f4:5f:cc:4e:42:d3:68:49:70:b2:1a: bb:42:b9:42:7b:54:57:6a:dd:5e:a5:49:7b:13:97:f9:65:48: cd:c8:b1:22:2a:8e:93:83:02:a1:da:25:88:05:01:2d:73:86: 1a:17:a2:88:33:58:fd:a2:a0:4d:6b:ac:7e:f5:18:b9:d1:44: 8c:ce:f6:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPzYbGMX9cZ/n08Taxz8VhlRjtDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM0MTNENTYyOTREOUQyMEU2NDk3OEI3Mjk2QTlEQTg5 M0MzMkNBQjAeFw0yNTEwMjgxMzM3MjRaFw0yNTExMDEwMDUzMjRaMDMxMTAvBgNV BAMTKEQ3RDY5ODc3MDcwQkIwRUJGMTlCMjBFRjMyMTE1NEU0ODY0MzgzMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCorkXLImjOAunTDonth4JorUU8 NUhmmp/UrsMTwWwz0gkYKzEIX/b5t+mCYHUAm2tXuzatv1Ja0zYISdkJ9OwOE/8Q 0BBrW4eOo8EOqAJm7fAE+WcZnmnvHUt3x0X00amIMqjZB9vC+9Pp6/UA0LCjUCN7 Ahe9djYEX1SWvdtmUZMSwEUZatfJ1GVZXc/ddD+LLQUi8n4gb13QITaz0fJOnmAk TLx0/0liPKoIir4NIqKuV01CfJtZbomBzbuICJWh+4epy0TdW0O4dYDu3Cr0PxBF Sgb3KCk4US5A7T6T4qUrC5+T/I4hu4w4KXzunkqDmR8NeuddXNuiyjZUGWjVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU19aYdwcLsOvxmyDvMhFU5IZDgwQwHwYDVR0j BBgwFoAUXEE9VilNnSDmSXi3KWqdqJPDLKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjNlYWJiNC00ZGIzLTQzNzMtYTM0OC1mYjFlZDcwNTU2NTEvMC81QzQxM0Q1NjI5 NEQ5RDIwRTY0OTc4QjcyOTZBOURBODkzQzMyQ0FCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM0MTNENTYyOTREOUQyMEU2NDk3OEI3Mjk2QTlEQTg5M0Mz MkNBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2IzZWFiYjQtNGRiMy00MzczLWEz NDgtZmIxZWQ3MDU1NjUxLzAvNUM0MTNENTYyOTREOUQyMEU2NDk3OEI3Mjk2QTlE QTg5M0MzMkNBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKFfGNqcqiXu1ABgiQ9CGmK4AKHB+Pw0Qox6 yBon5syW9s3IGUd1xJTbj5fN6iPSrcO5QahezUCPK0vlKYFyAYPWjjXUKRvJ11Dg W0D4bxDicGRUKPD5H838tvNwZo+hTy5AfZnJwTs/KPe+0lW2bdcc2RvseIBzxhZ5 8f0L7p9RBn//OY1AIwFZkGyLUMwnsdt4RTnjOs8/n182vkZFvUXKDmiX7u7mdAEa z2bl1GRPZQW3KAFyoO+EWo30X8xOQtNoSXCyGrtCuUJ7VFdq3V6lSXsTl/llSM3I sSIqjpODAqHaJYgFAS1zhhoXoogzWP2ioE1rrH71GLnRRIzO9io= -----END CERTIFICATE-----Generated at Thu Oct 30 14:58:37 2025 by rpki-client