$ rpki-client -vvf repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.mft File: 5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.mft (raw, json) Hash identifier: KrYutwvcNZj7cjChn9yPwURwizr2gmcAOkQiIbmyPnM= Subject key identifier: CC:1E:A8:BE:11:5E:8D:7B:63:F0:90:D8:FE:0E:B8:86:FF:9C:7D:E6 Authority key identifier: 5E:7E:4A:63:C7:15:B2:96:D5:97:B5:AA:3F:E8:00:60:9B:F3:B9:F0 Certificate issuer: /CN=5E7E4A63C715B296D597B5AA3FE800609BF3B9F0 Certificate serial: 2FD36C0045D032676C8BAD6D07043A5CBA564C92 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.mft Manifest number: 0517 Signing time: Sun 19 Oct 2025 05:21:52 +0000 Manifest this update: Sun 19 Oct 2025 05:16:52 +0000 Manifest next update: Wed 22 Oct 2025 07:06:52 +0000 Files and hashes: 1: 5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.crl (hash: 61SCOk1KCoUw+ruCYHb5zRKmxUo0we1zaIJ+YmRX2yY=) 2: 3130332e3133372e38322e302f32332d3234203d3e20313338383238.roa (hash: oPq0eksRu+Qj6e9d7D3QHko1LMTQ6v8EettFrsXT3rc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.crl rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 07:06:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:d3:6c:00:45:d0:32:67:6c:8b:ad:6d:07:04:3a:5c:ba:56:4c:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E7E4A63C715B296D597B5AA3FE800609BF3B9F0 Validity Not Before: Oct 19 05:16:52 2025 GMT Not After : Oct 22 07:06:52 2025 GMT Subject: CN=CC1EA8BE115E8D7B63F090D8FE0EB886FF9C7DE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:aa:d1:75:c0:b4:2e:ae:53:51:eb:df:16:31: e7:26:fc:81:a2:e1:26:fa:c7:19:9d:90:14:7d:41: 2c:bb:13:64:07:23:03:89:8b:82:16:06:6d:38:5e: 36:8e:8f:df:c7:0a:c2:f3:0a:d2:96:16:a1:c4:40: e4:4f:3e:22:f5:62:33:cf:7a:c9:76:75:65:ed:47: e7:5d:bf:82:4f:68:ae:a6:82:a1:48:af:be:73:7d: ce:fd:81:0c:60:e8:20:db:4c:e0:94:af:11:cb:f3: ec:f0:63:5a:3e:0b:1f:98:6b:cc:c1:55:98:f9:2e: 56:c9:9c:9f:e9:14:b2:65:7d:16:e5:b2:71:bd:5e: 82:48:0c:1f:53:be:b4:24:6e:2c:c9:b2:7a:04:28: 30:f9:e3:99:d2:3e:a8:e1:82:aa:20:8d:aa:2e:85: 01:b8:f1:32:a1:e0:ab:0b:82:3b:2d:e3:3d:3c:19: df:43:c1:57:b6:54:a1:f4:35:2c:69:48:98:10:8c: 2a:4c:d6:28:f4:b6:02:77:33:8f:06:b9:35:38:d3: f2:0f:a8:54:94:2a:bf:1b:eb:dc:90:d9:e2:53:8d: 5a:0b:4d:22:a8:d3:4e:54:ba:3f:3e:af:3c:81:93: ad:d2:23:ef:28:92:0b:2e:bd:cd:8e:a3:4d:25:f5: 93:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:1E:A8:BE:11:5E:8D:7B:63:F0:90:D8:FE:0E:B8:86:FF:9C:7D:E6 X509v3 Authority Key Identifier: keyid:5E:7E:4A:63:C7:15:B2:96:D5:97:B5:AA:3F:E8:00:60:9B:F3:B9:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:4a:f2:0b:43:2c:3a:67:50:77:74:34:5e:91:21:b6:ae:4e: 78:0b:7c:2d:05:da:47:f4:5b:2c:8c:34:f8:b2:93:c9:55:5d: 2e:be:9f:94:2a:27:38:ff:9c:3a:de:69:ec:3e:e8:de:95:9f: 31:57:3b:46:61:a3:ac:73:c9:87:c3:d1:1e:2f:c1:c5:5d:8a: a8:9d:7d:1c:fe:0e:a9:d3:ac:ea:7b:b0:ad:fd:2e:3a:86:a8: 0d:f8:87:c7:1a:a4:35:3d:d5:51:a5:08:72:7b:2a:d1:fa:8e: 22:f3:66:ed:10:3b:ed:15:2c:84:2d:ec:db:65:2f:39:55:8b: 7f:63:f5:30:4b:17:2a:bc:19:ae:5b:b3:4a:7f:ab:cc:6d:67: c4:d2:af:f9:cd:f1:5b:f1:7a:3a:49:97:f5:4e:55:80:87:74: 50:f6:65:f9:8d:63:73:ae:74:41:dd:b0:77:58:f3:6c:39:64: bc:15:7a:d6:55:31:97:7f:fe:bf:c2:b7:c7:5c:ea:57:ae:8e: d0:bd:73:be:dd:ca:d8:6f:71:8d:9e:72:34:26:b2:67:0c:d9: 55:1a:66:4d:c7:1c:6e:ec:9d:86:9e:67:ac:65:e7:7d:25:29: 60:37:59:d4:0d:76:f8:f1:48:f4:a6:63:42:4f:cb:c9:a4:0b: f8:c3:b4:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL9NsAEXQMmdsi61tBwQ6XLpWTJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU3RTRBNjNDNzE1QjI5NkQ1OTdCNUFBM0ZFODAwNjA5 QkYzQjlGMDAeFw0yNTEwMTkwNTE2NTJaFw0yNTEwMjIwNzA2NTJaMDMxMTAvBgNV BAMTKENDMUVBOEJFMTE1RThEN0I2M0YwOTBEOEZFMEVCODg2RkY5QzdERTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4qtF1wLQurlNR698WMecm/IGi 4Sb6xxmdkBR9QSy7E2QHIwOJi4IWBm04XjaOj9/HCsLzCtKWFqHEQORPPiL1YjPP esl2dWXtR+ddv4JPaK6mgqFIr75zfc79gQxg6CDbTOCUrxHL8+zwY1o+Cx+Ya8zB VZj5LlbJnJ/pFLJlfRblsnG9XoJIDB9TvrQkbizJsnoEKDD545nSPqjhgqogjaou hQG48TKh4KsLgjst4z08Gd9DwVe2VKH0NSxpSJgQjCpM1ij0tgJ3M48GuTU40/IP qFSUKr8b69yQ2eJTjVoLTSKo005Uuj8+rzyBk63SI+8okgsuvc2Oo00l9ZM5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzB6ovhFejXtj8JDY/g64hv+cfeYwHwYDVR0j BBgwFoAUXn5KY8cVspbVl7WqP+gAYJvzufAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YWU2Y2Q0MS0yZTRjLTRjYzItODgxZS1iYWI0NGE4ODRmZDQvMC81RTdFNEE2M0M3 MTVCMjk2RDU5N0I1QUEzRkU4MDA2MDlCRjNCOUYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUU3RTRBNjNDNzE1QjI5NkQ1OTdCNUFBM0ZFODAwNjA5QkYz QjlGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmFlNmNkNDEtMmU0Yy00Y2MyLTg4 MWUtYmFiNDRhODg0ZmQ0LzAvNUU3RTRBNjNDNzE1QjI5NkQ1OTdCNUFBM0ZFODAw NjA5QkYzQjlGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHhK8gtDLDpnUHd0NF6RIbauTngLfC0F2kf0 WyyMNPiyk8lVXS6+n5QqJzj/nDreaew+6N6VnzFXO0Zho6xzyYfD0R4vwcVdiqid fRz+DqnTrOp7sK39LjqGqA34h8capDU91VGlCHJ7KtH6jiLzZu0QO+0VLIQt7Ntl LzlVi39j9TBLFyq8Ga5bs0p/q8xtZ8TSr/nN8VvxejpJl/VOVYCHdFD2ZfmNY3Ou dEHdsHdY82w5ZLwVetZVMZd//r/Ct8dc6leujtC9c77dythvcY2ecjQmsmcM2VUa Zk3HHG7snYaeZ6xl530lKWA3WdQNdvjxSPSmY0JPy8mkC/jDtNk= -----END CERTIFICATE-----Generated at Mon Oct 20 15:04:09 2025 by rpki-client