$ rpki-client -vvf repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft File: 5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft (raw, json) Hash identifier: qrLqnkRTO5hZkLDF8ceIQ1KWbz2KsdgAIaHumnaboXM= Subject key identifier: 93:3C:25:5F:D6:89:33:54:B1:6D:D9:7D:25:2A:31:C2:9C:D2:0D:93 Authority key identifier: 55:62:ED:3E:2B:75:AA:4C:E3:61:65:EE:02:F7:69:6C:CB:80:45:E1 Certificate issuer: /CN=5562ED3E2B75AA4CE36165EE02F7696CCB8045E1 Certificate serial: 4AC75A76B8CD3D1DAA9A1BB5D83120D1CA68995B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft Manifest number: 0364 Signing time: Tue 28 Oct 2025 01:52:02 +0000 Manifest this update: Tue 28 Oct 2025 01:47:02 +0000 Manifest next update: Fri 31 Oct 2025 07:14:02 +0000 Files and hashes: 1: 3130332e3137322e33342e302f32332d3234203d3e203538383231.roa (hash: FHzMEbRY0GUv7uZMGg/BZG/YZusPXZ52OHFP1+MW/+A=) 2: 5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl (hash: XdJZ2lgLdXDeHln33YDu9j9Cv4pB3YbqGtx5f19MiqA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 07:14:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:c7:5a:76:b8:cd:3d:1d:aa:9a:1b:b5:d8:31:20:d1:ca:68:99:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5562ED3E2B75AA4CE36165EE02F7696CCB8045E1 Validity Not Before: Oct 28 01:47:02 2025 GMT Not After : Oct 31 07:14:02 2025 GMT Subject: CN=933C255FD6893354B16DD97D252A31C29CD20D93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:79:37:b7:c4:f1:b8:2e:af:f3:0f:f5:f8:12: 3b:38:38:8e:15:1f:06:9f:ed:c4:e3:1a:2a:7e:90: b7:db:21:c2:48:81:2d:17:03:24:fd:72:02:88:11: bb:c9:78:f3:2f:3d:7d:f2:33:db:ec:5f:dd:06:8b: ad:d0:e3:3f:53:1d:53:91:99:be:11:0b:dd:8d:76: 0d:07:ae:f5:a7:4b:cd:30:b0:cb:49:9e:7e:ee:e6: 8d:0c:1e:21:46:4c:fd:4a:a0:5d:bd:9e:fc:53:83: fe:15:cb:fa:78:2d:73:38:c7:05:12:1e:01:33:7a: 6d:9f:c4:f8:9a:2a:d6:6a:0e:7f:07:a5:4a:f3:99: a0:d6:4a:97:09:6d:58:56:29:b9:28:29:8d:f9:b4: 1d:ff:b1:75:37:0f:84:71:0f:ce:18:6e:bc:1b:f4: ed:bc:cb:2d:55:3d:ad:9c:68:21:89:71:de:b5:2f: 48:02:f1:1e:bb:6f:8a:2a:eb:88:20:f6:61:37:e6: 72:77:92:b9:e1:a8:09:03:4e:8f:88:2d:87:db:cb: c5:c6:83:88:b5:37:b9:dc:b5:b1:ba:bb:b2:e2:a2: 73:ca:31:68:11:ff:56:97:e3:1f:66:10:19:2e:de: cd:99:6a:84:09:bf:cd:b9:32:57:29:a9:14:a9:65: 67:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:3C:25:5F:D6:89:33:54:B1:6D:D9:7D:25:2A:31:C2:9C:D2:0D:93 X509v3 Authority Key Identifier: keyid:55:62:ED:3E:2B:75:AA:4C:E3:61:65:EE:02:F7:69:6C:CB:80:45:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:2e:6a:5c:19:27:ad:e1:55:75:df:3b:78:f7:15:4e:3d:3a: bb:2c:8f:57:53:1c:b2:e6:69:3f:85:0c:d9:87:68:b8:b6:49: 7e:82:bf:f1:43:f1:71:36:68:c1:d0:b6:bc:0f:b6:15:01:df: 54:7a:af:5a:46:6f:e7:95:12:8c:48:3f:ca:db:fb:ac:0c:f7: 55:df:b9:af:56:39:a1:a8:e1:2a:c6:c6:54:aa:58:b1:7e:0e: ce:6f:d2:6d:14:a5:0f:35:dd:b0:b0:e9:96:4d:54:df:61:b8: 0e:63:1e:dc:c3:67:e7:f9:5d:bb:a3:55:74:8f:83:87:dc:14: 4a:b2:ae:de:09:60:b2:79:17:17:41:ae:77:91:c1:ef:c4:b4: 2d:09:40:86:31:d6:58:e8:f7:92:ab:94:2e:d7:1b:a7:e0:4f: d0:dc:47:95:65:79:ce:e8:65:6a:ff:63:72:a8:95:01:f6:2f: 06:b7:9d:cd:b4:43:ce:03:1e:a2:1b:d5:d5:f6:d8:be:f6:00: f6:f1:c6:5b:5f:3a:07:3d:3e:30:a9:fc:e8:ed:8e:0d:c3:46: 9e:40:b6:48:4a:ac:b1:44:eb:ef:ac:e4:62:9a:61:fc:82:bf: 52:eb:d1:50:ac:83:b6:31:b7:f5:07:3b:59:a7:1d:2e:a2:b1: 48:ed:e1:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSsdadrjNPR2qmhu12DEg0cpomVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU2MkVEM0UyQjc1QUE0Q0UzNjE2NUVFMDJGNzY5NkND QjgwNDVFMTAeFw0yNTEwMjgwMTQ3MDJaFw0yNTEwMzEwNzE0MDJaMDMxMTAvBgNV BAMTKDkzM0MyNTVGRDY4OTMzNTRCMTZERDk3RDI1MkEzMUMyOUNEMjBEOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyeTe3xPG4Lq/zD/X4Ejs4OI4V Hwaf7cTjGip+kLfbIcJIgS0XAyT9cgKIEbvJePMvPX3yM9vsX90Gi63Q4z9THVOR mb4RC92Ndg0HrvWnS80wsMtJnn7u5o0MHiFGTP1KoF29nvxTg/4Vy/p4LXM4xwUS HgEzem2fxPiaKtZqDn8HpUrzmaDWSpcJbVhWKbkoKY35tB3/sXU3D4RxD84Ybrwb 9O28yy1VPa2caCGJcd61L0gC8R67b4oq64gg9mE35nJ3krnhqAkDTo+ILYfby8XG g4i1N7nctbG6u7LionPKMWgR/1aX4x9mEBku3s2ZaoQJv825MlcpqRSpZWeVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkzwlX9aJM1Sxbdl9JSoxwpzSDZMwHwYDVR0j BBgwFoAUVWLtPit1qkzjYWXuAvdpbMuAReEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l N2EzZTkwYS0wMzNhLTRjOGQtOTA3Ny0wZGFmODA1MGZhOGIvMC81NTYyRUQzRTJC NzVBQTRDRTM2MTY1RUUwMkY3Njk2Q0NCODA0NUUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU2MkVEM0UyQjc1QUE0Q0UzNjE2NUVFMDJGNzY5NkNDQjgw NDVFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTdhM2U5MGEtMDMzYS00YzhkLTkw NzctMGRhZjgwNTBmYThiLzAvNTU2MkVEM0UyQjc1QUE0Q0UzNjE2NUVFMDJGNzY5 NkNDQjgwNDVFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALcualwZJ63hVXXfO3j3FU49Orssj1dTHLLm aT+FDNmHaLi2SX6Cv/FD8XE2aMHQtrwPthUB31R6r1pGb+eVEoxIP8rb+6wM91Xf ua9WOaGo4SrGxlSqWLF+Ds5v0m0UpQ813bCw6ZZNVN9huA5jHtzDZ+f5XbujVXSP g4fcFEqyrt4JYLJ5FxdBrneRwe/EtC0JQIYx1ljo95KrlC7XG6fgT9DcR5Vlec7o ZWr/Y3KolQH2Lwa3nc20Q84DHqIb1dX22L72APbxxltfOgc9PjCp/Ojtjg3DRp5A tkhKrLFE6++s5GKaYfyCv1Lr0VCsg7Yxt/UHO1mnHS6isUjt4TA= -----END CERTIFICATE-----Generated at Wed Oct 29 04:56:49 2025 by rpki-client