$ rpki-client -vvf repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft File: 5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft (raw, json) Hash identifier: TvpLcmtDrCr8m8xYDtjh2OehNZIudz4AKjTlUCueIZ0= Subject key identifier: 79:0C:E4:15:37:89:32:3D:AC:0C:A2:D9:78:63:12:B4:39:B0:27:6B Authority key identifier: 5A:D1:91:73:FE:66:EE:2B:9E:99:5A:99:ED:7D:C4:23:01:13:BD:EF Certificate issuer: /CN=5AD19173FE66EE2B9E995A99ED7DC4230113BDEF Certificate serial: 3111A8408CE6CC341D1CF1F62840225EEB0F8308 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft Manifest number: 0185 Signing time: Sun 19 Oct 2025 19:31:58 +0000 Manifest this update: Sun 19 Oct 2025 19:26:58 +0000 Manifest next update: Thu 23 Oct 2025 05:34:58 +0000 Files and hashes: 1: 3130332e3132332e3137342e302f32342d3234203d3e20313530393638.roa (hash: HBPJroPXGy8LUopobuBKzRyp/rbJ8xWZnNOPphW6Qlg=) 2: 3130332e3132332e3137342e302f32332d3233203d3e20313530393638.roa (hash: 5XRHZIZI1oj83KHXG7v/4Bg68uKlgADqYmMHikLr/vU=) 3: 5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl (hash: dnPs8duChmUSCdwaVttevOPv/Y3lRNDZjWPZ9ls2UGE=) 4: 3130332e3132332e3137352e302f32342d3234203d3e20313530393638.roa (hash: dqxRLNjaP87/BAjwkFlOT+1aQilVY6SUF3ZdlXMJQnY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 05:34:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:11:a8:40:8c:e6:cc:34:1d:1c:f1:f6:28:40:22:5e:eb:0f:83:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AD19173FE66EE2B9E995A99ED7DC4230113BDEF Validity Not Before: Oct 19 19:26:58 2025 GMT Not After : Oct 23 05:34:58 2025 GMT Subject: CN=790CE4153789323DAC0CA2D9786312B439B0276B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:07:05:4b:13:bc:c1:8f:73:25:bb:07:a8:0e: 86:dc:46:91:7e:23:04:03:6e:c3:c7:b4:6b:58:b5: e5:cd:01:6e:9b:99:83:69:9d:80:35:73:d1:53:b2: 65:e7:60:72:bd:55:e2:b5:24:b3:9c:aa:8b:35:c7: e5:ce:01:9b:33:f0:57:37:a7:40:35:44:38:8c:3d: a2:90:76:3e:5d:15:da:0c:d1:68:06:d1:79:3d:a0: e0:73:99:1b:d4:32:3e:52:a5:ae:1a:19:05:c5:fd: 31:0c:1f:dd:80:48:a6:be:aa:4c:e8:12:4f:bb:5e: b8:03:0a:fd:28:de:3d:91:9b:3b:55:f8:42:a1:82: 09:df:9c:a8:62:ca:24:07:64:c2:13:a7:92:32:d0: 43:d9:e5:e0:08:99:5a:e7:47:19:f2:21:4d:b4:e4: e0:12:f0:bb:89:ca:c6:62:4b:8a:7c:5e:79:a1:99: a2:22:bf:10:11:d0:e3:7d:25:c7:f5:91:26:1b:05: e7:9f:5f:c2:d5:80:b6:e7:17:a8:26:cf:7d:e2:64: d8:61:f5:73:cf:eb:ca:dd:f7:ae:9b:67:4d:8c:7b: b5:e8:94:d2:c9:a0:96:be:06:57:6f:b5:eb:c5:8e: 70:87:fb:87:81:a4:43:16:1c:16:99:2b:3e:da:ce: 6d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:0C:E4:15:37:89:32:3D:AC:0C:A2:D9:78:63:12:B4:39:B0:27:6B X509v3 Authority Key Identifier: keyid:5A:D1:91:73:FE:66:EE:2B:9E:99:5A:99:ED:7D:C4:23:01:13:BD:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:11:2e:fd:61:d6:38:7f:39:a8:7c:ff:ac:69:44:4d:98:f1: cf:04:b5:03:75:da:e1:52:eb:10:f2:60:2b:92:52:03:9e:d4: 6c:84:41:49:33:69:31:e6:71:70:32:3a:d5:10:00:09:ef:8c: ed:4d:ad:ba:0c:bf:d0:07:82:b0:42:bc:e3:25:2f:1a:77:6b: 09:41:38:44:7e:31:9b:8a:b0:40:c4:d8:a2:38:e3:a2:6a:40: 66:e6:87:25:5b:af:92:47:2f:56:42:e6:90:fd:45:76:12:2a: 3b:98:d7:d3:cb:15:8e:22:88:c8:35:81:a6:10:b8:62:b0:3c: 06:d3:3b:dd:33:87:35:a4:87:15:bd:bf:41:32:b1:eb:b9:d6: bc:cf:2e:b0:aa:58:31:d2:55:81:58:61:9b:6f:24:8b:14:86: 3f:87:41:58:f3:a3:50:47:4c:cf:c0:05:db:ee:56:0f:38:36: 68:93:a5:29:19:aa:d3:91:17:f5:39:11:7a:0e:61:78:23:48: 94:0d:13:e3:0c:83:0d:3a:64:9d:21:f0:05:06:86:ee:12:3b: db:f4:6c:bc:b6:11:7f:3f:48:7b:bd:64:9f:46:7c:ed:25:28: 2d:e7:9f:51:21:23:d7:95:9f:1b:33:ad:75:af:5a:2a:c7:10: 31:39:8e:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMRGoQIzmzDQdHPH2KEAiXusPgwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0MjMw MTEzQkRFRjAeFw0yNTEwMTkxOTI2NThaFw0yNTEwMjMwNTM0NThaMDMxMTAvBgNV BAMTKDc5MENFNDE1Mzc4OTMyM0RBQzBDQTJEOTc4NjMxMkI0MzlCMDI3NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgBwVLE7zBj3MluweoDobcRpF+ IwQDbsPHtGtYteXNAW6bmYNpnYA1c9FTsmXnYHK9VeK1JLOcqos1x+XOAZsz8Fc3 p0A1RDiMPaKQdj5dFdoM0WgG0Xk9oOBzmRvUMj5Spa4aGQXF/TEMH92ASKa+qkzo Ek+7XrgDCv0o3j2RmztV+EKhggnfnKhiyiQHZMITp5Iy0EPZ5eAImVrnRxnyIU20 5OAS8LuJysZiS4p8XnmhmaIivxAR0ON9Jcf1kSYbBeefX8LVgLbnF6gmz33iZNhh 9XPP68rd966bZ02Me7XolNLJoJa+BldvtevFjnCH+4eBpEMWHBaZKz7azm1dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeQzkFTeJMj2sDKLZeGMStDmwJ2swHwYDVR0j BBgwFoAUWtGRc/5m7iuemVqZ7X3EIwETve8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmVkYjI4Zi1mM2Y5LTQxOTktODVhMy1jOWJmOWE3YTdkZjgvMC81QUQxOTE3M0ZF NjZFRTJCOUU5OTVBOTlFRDdEQzQyMzAxMTNCREVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0MjMwMTEz QkRFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWZlZGIyOGYtZjNmOS00MTk5LTg1 YTMtYzliZjlhN2E3ZGY4LzAvNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0 MjMwMTEzQkRFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACURLv1h1jh/Oah8/6xpRE2Y8c8EtQN12uFS 6xDyYCuSUgOe1GyEQUkzaTHmcXAyOtUQAAnvjO1NrboMv9AHgrBCvOMlLxp3awlB OER+MZuKsEDE2KI446JqQGbmhyVbr5JHL1ZC5pD9RXYSKjuY19PLFY4iiMg1gaYQ uGKwPAbTO90zhzWkhxW9v0Eyseu51rzPLrCqWDHSVYFYYZtvJIsUhj+HQVjzo1BH TM/ABdvuVg84NmiTpSkZqtORF/U5EXoOYXgjSJQNE+MMgw06ZJ0h8AUGhu4SO9v0 bLy2EX8/SHu9ZJ9GfO0lKC3nn1EhI9eVnxszrXWvWirHEDE5jj8= -----END CERTIFICATE-----Generated at Mon Oct 20 14:42:53 2025 by rpki-client