$ rpki-client -vvf repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft File: 5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft (raw, json) Hash identifier: En2lpdKg0TIO8VP6I8kcAnlkCJo59pgPpmlsrqHpUQ8= Subject key identifier: 6A:85:4E:B0:9A:0B:9C:EF:C3:F3:E7:AE:2B:E5:BC:9D:19:27:A3:F3 Authority key identifier: 5F:E2:D2:A6:AB:51:68:6B:C9:12:62:CC:80:15:2C:19:50:63:7A:EA Certificate issuer: /CN=5FE2D2A6AB51686BC91262CC80152C1950637AEA Certificate serial: 134F7EFB28D25020823BD33C475B49626966A7DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft Manifest number: CB Signing time: Sun 19 Oct 2025 23:11:58 +0000 Manifest this update: Sun 19 Oct 2025 23:06:58 +0000 Manifest next update: Thu 23 Oct 2025 00:44:58 +0000 Files and hashes: 1: 5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl (hash: tdFLFOtewbtftBbyEKo2sDzRTMmm3stXP8mzNwjyKXI=) 2: 3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa (hash: jnzw16bqb1Ot67y6WJYq1p4RFM0IEtmQV6RwIJ2Az3Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 00:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:4f:7e:fb:28:d2:50:20:82:3b:d3:3c:47:5b:49:62:69:66:a7:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FE2D2A6AB51686BC91262CC80152C1950637AEA Validity Not Before: Oct 19 23:06:58 2025 GMT Not After : Oct 23 00:44:58 2025 GMT Subject: CN=6A854EB09A0B9CEFC3F3E7AE2BE5BC9D1927A3F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e9:2c:93:6c:7c:6a:35:9f:81:b8:c6:76:14: 7a:a6:b8:de:90:8a:dd:66:f5:53:f3:eb:ca:65:19: 20:89:9d:3a:0e:ba:96:26:79:88:01:db:d2:a2:ba: e6:9a:2f:78:f4:a6:a5:19:12:c7:2f:ca:24:55:e4: d4:af:b3:1e:11:73:fa:a7:48:fe:f4:dc:ca:e8:09: 40:a7:ac:4a:e9:db:e2:28:75:ba:4e:ef:9e:0e:ff: c7:fd:cf:14:f1:9b:6a:0b:e4:77:13:45:f1:82:75: 9a:84:dc:e1:5f:f7:31:b2:3c:02:34:a8:6f:c2:36: af:be:41:29:d7:29:f4:16:7f:42:43:50:fb:e6:45: 67:1b:bf:98:f0:bb:f7:60:ac:41:86:78:1c:09:3e: 3b:39:41:29:8c:f0:6b:59:cd:3d:98:40:41:bf:2e: 37:9e:4d:00:4b:c9:ac:99:d8:24:68:f9:bb:b2:c4: c7:52:e0:f8:d2:85:ee:4d:f1:55:3a:88:bc:2a:18: 8f:ae:0d:a5:29:a6:8f:1b:c9:bf:a8:98:e0:7c:1b: bb:5d:93:9d:c0:b8:09:fb:2e:29:a7:49:85:45:ba: 9d:11:f9:9c:e9:a3:05:b5:49:40:99:03:ec:07:4f: 39:e4:95:39:66:b4:80:09:64:44:15:c9:00:88:94: 55:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:85:4E:B0:9A:0B:9C:EF:C3:F3:E7:AE:2B:E5:BC:9D:19:27:A3:F3 X509v3 Authority Key Identifier: keyid:5F:E2:D2:A6:AB:51:68:6B:C9:12:62:CC:80:15:2C:19:50:63:7A:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:e9:68:23:fb:4e:a1:54:b7:6d:49:e8:2b:73:45:ca:87:18: cd:31:88:08:23:9d:f0:45:0b:e9:6b:14:64:22:45:bc:f3:ce: 49:db:d1:7f:c1:a3:c8:7e:9f:f3:f1:6d:ce:da:4f:cb:4a:ec: 9a:ce:66:c5:21:f2:f9:45:37:2b:f2:f1:5d:e7:f0:6a:b8:4f: c2:1b:ce:fc:ec:52:3b:37:af:90:14:1d:59:f5:57:12:95:c6: 17:c6:60:20:14:13:fb:81:49:db:1f:94:f8:82:ea:ea:88:a6: 8f:40:54:ef:6d:37:55:ae:4e:f4:81:3f:00:17:fc:bf:d6:a7: 24:9b:f9:a7:39:f4:72:3d:61:51:68:10:7a:58:aa:94:42:7f: 86:87:aa:5d:ce:a8:14:88:4f:da:e5:9a:e8:76:ae:bd:ab:af: 2c:91:df:59:21:7f:84:2c:f7:f1:a7:ac:f5:dd:63:e6:eb:29: 74:dd:a6:a4:7b:f3:b3:5e:a7:64:c6:0c:79:40:4d:29:f3:37: d9:a4:e7:e2:f2:b2:60:a6:4b:d0:23:d8:f2:41:2e:b5:c7:b1: 42:cb:cf:92:b2:68:f0:5c:7b:f3:5d:bc:71:9b:dc:e2:9b:02: a5:eb:c7:f6:e4:2b:06:d9:a1:05:92:49:4c:f6:2d:f2:05:f6: c9:98:e5:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE09++yjSUCCCO9M8R1tJYmlmp9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJDMTk1 MDYzN0FFQTAeFw0yNTEwMTkyMzA2NThaFw0yNTEwMjMwMDQ0NThaMDMxMTAvBgNV BAMTKDZBODU0RUIwOUEwQjlDRUZDM0YzRTdBRTJCRTVCQzlEMTkyN0EzRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo6SyTbHxqNZ+BuMZ2FHqmuN6Q it1m9VPz68plGSCJnToOupYmeYgB29KiuuaaL3j0pqUZEscvyiRV5NSvsx4Rc/qn SP703MroCUCnrErp2+IodbpO754O/8f9zxTxm2oL5HcTRfGCdZqE3OFf9zGyPAI0 qG/CNq++QSnXKfQWf0JDUPvmRWcbv5jwu/dgrEGGeBwJPjs5QSmM8GtZzT2YQEG/ LjeeTQBLyayZ2CRo+buyxMdS4PjShe5N8VU6iLwqGI+uDaUppo8byb+omOB8G7td k53AuAn7LimnSYVFup0R+ZzpowW1SUCZA+wHTznklTlmtIAJZEQVyQCIlFXlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaoVOsJoLnO/D8+euK+W8nRkno/MwHwYDVR0j BBgwFoAUX+LSpqtRaGvJEmLMgBUsGVBjeuowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjEwZWMwZi0wNDIwLTQwMmYtOTVmZS03YjMzZTUxMTJiYzMvMC81RkUyRDJBNkFC NTE2ODZCQzkxMjYyQ0M4MDE1MkMxOTUwNjM3QUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJDMTk1MDYz N0FFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDIxMGVjMGYtMDQyMC00MDJmLTk1 ZmUtN2IzM2U1MTEyYmMzLzAvNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJD MTk1MDYzN0FFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMXpaCP7TqFUt21J6CtzRcqHGM0xiAgjnfBF C+lrFGQiRbzzzknb0X/Bo8h+n/Pxbc7aT8tK7JrOZsUh8vlFNyvy8V3n8Gq4T8Ib zvzsUjs3r5AUHVn1VxKVxhfGYCAUE/uBSdsflPiC6uqIpo9AVO9tN1WuTvSBPwAX /L/WpySb+ac59HI9YVFoEHpYqpRCf4aHql3OqBSIT9rlmuh2rr2rryyR31khf4Qs 9/GnrPXdY+brKXTdpqR787Nep2TGDHlATSnzN9mk5+LysmCmS9Aj2PJBLrXHsULL z5KyaPBce/NdvHGb3OKbAqXrx/bkKwbZoQWSSUz2LfIF9smY5U0= -----END CERTIFICATE-----Generated at Mon Oct 20 08:47:26 2025 by rpki-client