$ rpki-client -vvf repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft File: 5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft (raw, json) Hash identifier: zFidu0r7rrvz8A57DWNNwLm/l1keeBdEfyWJoNGOqkw= Subject key identifier: 34:B2:30:BB:FF:32:1D:7F:6A:A9:8C:3D:6B:B5:D3:49:F5:2F:B3:38 Authority key identifier: 5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B Certificate issuer: /CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B Certificate serial: 06A9988A328A7AEFDF9798EC4A3BB73FE1B9B9D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft Manifest number: 0246 Signing time: Sat 25 Oct 2025 13:12:20 +0000 Manifest this update: Sat 25 Oct 2025 13:07:20 +0000 Manifest next update: Tue 28 Oct 2025 15:55:20 +0000 Files and hashes: 1: 3130332e3138342e31382e302f32332d3233203d3e20313439363735.roa (hash: 8hPXkuW34xkK66/r5oL+jYYUmOueTjKMrZh36goENDw=) 2: 3130332e3138342e31382e302f32342d3234203d3e20313439363735.roa (hash: 4BUtx10alv/ZZ9FJolZJ3I8WhlB5v1F5iKW6alQrr7c=) 3: 3130332e3138342e31382e302f32342d3234203d3e203438343635.roa (hash: 0IGopCvXSRXbCg3kz6wjCn1/1Kczl4zkhji2/R4GIz4=) 4: 5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl (hash: VLW4C2flzIoEakUlZvNpzvOiVMIh2gRNIwVD7NqITfo=) 5: 3130332e3138342e31392e302f32342d3234203d3e20313439363735.roa (hash: i4XCxm32VCNZ/zacmmSjbAzxATWwcS43fZzejb3pvRo=) 6: 3130332e3138342e31392e302f32342d3234203d3e203438343635.roa (hash: QzihEc5MkFa7NqybYwRpohd7XvTO9rPruJzvUalzVM8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 15:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:a9:98:8a:32:8a:7a:ef:df:97:98:ec:4a:3b:b7:3f:e1:b9:b9:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B Validity Not Before: Oct 25 13:07:20 2025 GMT Not After : Oct 28 15:55:20 2025 GMT Subject: CN=34B230BBFF321D7F6AA98C3D6BB5D349F52FB338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1f:bf:fa:1d:ca:ab:ba:66:4a:a2:32:e1:b6: 11:4a:3b:bc:e6:35:10:43:86:a8:d7:75:30:99:18: 9d:36:cb:12:9c:03:cb:6c:64:27:4a:02:37:9e:87: 4c:df:0b:fb:c5:fd:2a:75:fb:6e:99:16:78:f0:19: a8:4d:fd:66:25:24:ba:56:3f:95:82:97:a9:ea:67: 16:d4:98:80:5a:bb:cf:80:e1:39:e5:92:c3:b5:71: ea:09:01:68:43:6a:24:04:40:df:e5:f3:f3:30:8f: 87:ee:c3:0b:12:46:a6:19:30:ab:12:3f:62:d3:c6: 82:0b:c6:19:36:ac:a4:c1:fe:87:29:28:79:d6:03: 4c:64:1b:48:5c:07:17:b3:0d:a4:17:b9:6f:ba:08: 64:80:b2:c8:44:64:67:6a:5b:cf:97:05:2c:3a:15: 3e:da:c3:34:b9:13:b1:17:a5:c4:01:01:55:80:db: b4:e2:da:5c:49:b6:5d:a3:85:28:09:2a:56:bc:2c: ce:cc:bf:0b:04:0b:ac:d5:98:02:8c:20:8f:1f:5d: ef:a9:fb:07:be:92:ca:ad:63:3f:98:05:0c:b0:f6: 40:3e:19:67:9d:12:89:4b:81:aa:b4:48:2e:e1:66: 06:68:08:37:f3:f7:91:f1:52:53:fb:48:73:5e:4f: 59:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:B2:30:BB:FF:32:1D:7F:6A:A9:8C:3D:6B:B5:D3:49:F5:2F:B3:38 X509v3 Authority Key Identifier: keyid:5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:d4:eb:2d:d9:c3:3f:34:fb:9f:09:1f:a1:83:fb:d4:30:e3: cb:18:90:b6:d2:e0:e4:9b:a0:d6:1b:6c:4c:64:03:da:38:2e: f4:7c:69:28:51:99:32:51:e8:1f:e2:55:0b:ae:53:a6:04:26: e8:d9:77:b9:c3:ea:88:e8:8a:55:f3:d7:5d:dd:22:2b:9d:64: 03:7b:84:2b:ea:48:a6:5c:55:cd:65:65:a1:4c:5b:24:04:93: bd:4c:f9:e1:22:dc:23:a5:b8:10:96:e0:8f:1b:bd:71:9a:88: 88:f8:96:9e:6c:7f:c6:a0:41:fc:cb:6d:71:ab:cd:a6:ee:a2: f0:f8:f8:51:e0:3d:b6:11:82:da:a9:4e:59:a9:d5:b3:fa:41: 76:09:8e:74:84:31:15:72:04:45:05:80:9f:d9:a8:7e:b4:8e: ac:ad:6e:64:bd:7d:7a:0e:c1:44:a1:d4:15:cc:a2:5f:52:be: bd:b3:40:b8:d9:e7:d5:ee:bd:f5:49:63:28:2e:85:7a:2c:24: b6:2e:05:71:45:de:35:3c:f5:62:15:d0:24:c1:e6:b3:4f:15: d3:7c:2b:b7:7e:88:ee:aa:69:01:05:01:a5:46:d2:0b:e8:66: d0:b6:5f:29:62:7e:92:44:08:34:68:91:8e:1f:90:b4:e2:08: 54:38:26:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBqmYijKKeu/fl5jsSju3P+G5udEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIyMkY5 MDg5NTUyQjAeFw0yNTEwMjUxMzA3MjBaFw0yNTEwMjgxNTU1MjBaMDMxMTAvBgNV BAMTKDM0QjIzMEJCRkYzMjFEN0Y2QUE5OEMzRDZCQjVEMzQ5RjUyRkIzMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBH7/6HcqrumZKojLhthFKO7zm NRBDhqjXdTCZGJ02yxKcA8tsZCdKAjeeh0zfC/vF/Sp1+26ZFnjwGahN/WYlJLpW P5WCl6nqZxbUmIBau8+A4TnlksO1ceoJAWhDaiQEQN/l8/Mwj4fuwwsSRqYZMKsS P2LTxoILxhk2rKTB/ocpKHnWA0xkG0hcBxezDaQXuW+6CGSAsshEZGdqW8+XBSw6 FT7awzS5E7EXpcQBAVWA27Ti2lxJtl2jhSgJKla8LM7MvwsEC6zVmAKMII8fXe+p +we+ksqtYz+YBQyw9kA+GWedEolLgaq0SC7hZgZoCDfz95HxUlP7SHNeT1mzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNLIwu/8yHX9qqYw9a7XTSfUvszgwHwYDVR0j BBgwFoAUWkD9GeLdU4DLblAvFtsiL5CJVSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MGQ5MTRlZi0wYjFmLTQ5MGItODA4ZC1hMjdiODNmZjlhM2UvMC81QTQwRkQxOUUy REQ1MzgwQ0I2RTUwMkYxNkRCMjIyRjkwODk1NTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIyMkY5MDg5 NTUyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjBkOTE0ZWYtMGIxZi00OTBiLTgw OGQtYTI3YjgzZmY5YTNlLzAvNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIy MkY5MDg5NTUyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACPU6y3Zwz80+58JH6GD+9Qw48sYkLbS4OSb oNYbbExkA9o4LvR8aShRmTJR6B/iVQuuU6YEJujZd7nD6ojoilXz113dIiudZAN7 hCvqSKZcVc1lZaFMWyQEk71M+eEi3COluBCW4I8bvXGaiIj4lp5sf8agQfzLbXGr zabuovD4+FHgPbYRgtqpTlmp1bP6QXYJjnSEMRVyBEUFgJ/ZqH60jqytbmS9fXoO wUSh1BXMol9Svr2zQLjZ59XuvfVJYyguhXosJLYuBXFF3jU89WIV0CTB5rNPFdN8 K7d+iO6qaQEFAaVG0gvoZtC2XylifpJECDRokY4fkLTiCFQ4JmY= -----END CERTIFICATE-----Generated at Mon Oct 27 09:24:43 2025 by rpki-client