$ rpki-client -vvf repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft File: 5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft (raw, json) Hash identifier: /yrsO3MqJ81p14lIir/2Q2POJUl8g2HFpTF6O+grSDI= Subject key identifier: 00:19:07:6A:87:88:51:0E:AC:C3:7E:0C:7F:45:58:43:B0:D8:6E:84 Authority key identifier: 5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C Certificate issuer: /CN=5F1EC0378C7B3A8912CA32E382D2C083E173E71C Certificate serial: 18E479ECBCDA5BE3212E678F1AFC28D0ABF97F4E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft Manifest number: 0519 Signing time: Sat 18 Oct 2025 10:51:11 +0000 Manifest this update: Sat 18 Oct 2025 10:46:11 +0000 Manifest next update: Tue 21 Oct 2025 19:08:11 +0000 Files and hashes: 1: 5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl (hash: 6GgRifH2B0FkNjII/N+ak9ngjkPxiojqpqC8dASXuAc=) 2: 3130332e39302e3235302e302f32332d3234203d3e20313336313032.roa (hash: ekJ6EWJjK3BnK95R5dRKHaTG8w4+znJQJhayH3/qkyg=) 3: 34392e3132382e3138382e302f32322d3234203d3e20313337323836.roa (hash: N5sKhHjRyw1prqGuj3p6kCsMHoe6+KpOpvfRWzLWflo=) 4: 3130332e31302e3134382e302f32322d3234203d3e20313336313032.roa (hash: YsAypY99u2UNps3UuTssVcjcS3FU5EYzwPP14rlgcWs=) 5: 3130332e39302e3234382e302f32332d3234203d3e20313337323836.roa (hash: jxHxbJF/eRRjfrisoO0mVeSb4ItOk+aEiVd997Gm3wQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 19:08:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:e4:79:ec:bc:da:5b:e3:21:2e:67:8f:1a:fc:28:d0:ab:f9:7f:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F1EC0378C7B3A8912CA32E382D2C083E173E71C Validity Not Before: Oct 18 10:46:11 2025 GMT Not After : Oct 21 19:08:11 2025 GMT Subject: CN=0019076A8788510EACC37E0C7F455843B0D86E84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:84:e9:45:ce:97:92:87:74:47:25:2d:19:19: bd:aa:63:30:a4:89:f8:9b:0e:f5:1b:34:13:ae:43: 6c:1a:37:e8:a8:b4:cb:a5:57:0a:c2:28:5e:e5:06: c2:73:34:fb:f7:49:29:8e:ee:8e:7b:7a:c7:1d:74: 82:0a:c4:dd:a6:28:c5:5c:4f:11:9d:1d:31:35:a3: 8c:ec:e3:0b:3e:4d:86:82:0e:ce:d8:75:5f:56:cd: 18:40:60:60:8f:fa:76:ef:b3:19:d0:2c:a2:78:8a: b9:f3:f7:04:1b:1e:a9:0a:24:cc:bc:98:2d:27:45: 79:e5:0b:6d:9f:93:3d:23:51:7f:7d:72:cd:ba:d1: 69:25:cc:f2:d3:b6:70:96:8a:e6:1d:2b:a3:74:40: b0:84:86:f5:14:23:32:c1:a2:0f:79:51:a7:dd:0b: 77:30:4e:b4:75:ea:08:7d:be:ee:57:58:19:2c:d7: 15:f0:79:07:f1:c7:91:84:27:f8:9c:01:6b:b5:71: 4d:7b:b5:5f:e4:46:b2:22:3c:58:71:b0:13:8e:99: 98:fa:2d:d5:05:af:b9:44:06:a9:46:f8:6c:26:41: b8:1c:9e:df:60:10:0e:85:ea:6a:55:5f:b7:75:05: e7:e8:e4:2c:7e:b7:c6:5d:bb:0a:00:b3:ec:ab:87: 11:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:19:07:6A:87:88:51:0E:AC:C3:7E:0C:7F:45:58:43:B0:D8:6E:84 X509v3 Authority Key Identifier: keyid:5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:77:64:b4:c0:0e:40:b4:65:99:a0:94:a6:fd:36:48:67:24: b9:a1:c6:91:b4:8a:2e:4e:02:a2:68:fc:d2:17:a3:2a:f1:52: b1:87:36:3b:a1:f9:eb:85:35:06:c0:03:bd:70:71:bc:5f:54: 8b:40:ed:dd:9d:5f:cc:79:80:8b:47:ce:8d:e7:b5:5b:19:ec: a6:2b:af:78:4a:59:8f:54:75:b9:17:66:32:f4:7d:d2:a6:3b: cb:f4:be:42:7c:d8:0a:18:04:f6:ff:a2:a7:d8:78:29:41:fb: 22:29:01:9d:e1:c3:be:cb:9a:43:41:25:b7:5e:21:e6:80:a9: c3:f1:3c:49:39:77:a4:1e:f7:c7:c0:a6:11:95:08:3e:75:dd: 22:08:ea:52:5b:32:72:b4:58:e9:09:00:eb:81:e6:ff:18:4d: 40:8f:68:c8:77:a5:15:42:2c:27:fd:07:16:81:a3:47:32:a1: dd:94:72:39:67:fb:c5:66:61:99:d6:e6:75:10:b8:c2:12:35: 0d:3c:4d:46:49:86:8f:c2:88:48:d8:b0:73:e6:55:14:09:53: 2f:d0:bd:66:04:ea:36:d6:be:7e:a7:4c:6b:ce:10:3e:81:cf: 98:2b:1d:9b:34:ec:a0:e1:0b:02:35:90:c6:db:5f:6c:66:64: c8:06:4f:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGOR57LzaW+MhLmePGvwo0Kv5f04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMwODNF MTczRTcxQzAeFw0yNTEwMTgxMDQ2MTFaFw0yNTEwMjExOTA4MTFaMDMxMTAvBgNV BAMTKDAwMTkwNzZBODc4ODUxMEVBQ0MzN0UwQzdGNDU1ODQzQjBEODZFODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3hOlFzpeSh3RHJS0ZGb2qYzCk ifibDvUbNBOuQ2waN+iotMulVwrCKF7lBsJzNPv3SSmO7o57escddIIKxN2mKMVc TxGdHTE1o4zs4ws+TYaCDs7YdV9WzRhAYGCP+nbvsxnQLKJ4irnz9wQbHqkKJMy8 mC0nRXnlC22fkz0jUX99cs260WklzPLTtnCWiuYdK6N0QLCEhvUUIzLBog95Uafd C3cwTrR16gh9vu5XWBks1xXweQfxx5GEJ/icAWu1cU17tV/kRrIiPFhxsBOOmZj6 LdUFr7lEBqlG+GwmQbgcnt9gEA6F6mpVX7d1Befo5Cx+t8ZduwoAs+yrhxErAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUABkHaoeIUQ6sw34Mf0VYQ7DYboQwHwYDVR0j BBgwFoAUXx7AN4x7OokSyjLjgtLAg+Fz5xwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDAyZGFhNS1mYjBjLTRhMjQtOTg4OS0zM2JkNTBkYjRmZTAvMC81RjFFQzAzNzhD N0IzQTg5MTJDQTMyRTM4MkQyQzA4M0UxNzNFNzFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMwODNFMTcz RTcxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQwMmRhYTUtZmIwYy00YTI0LTk4 ODktMzNiZDUwZGI0ZmUwLzAvNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMw ODNFMTczRTcxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJ3ZLTADkC0ZZmglKb9NkhnJLmhxpG0ii5O AqJo/NIXoyrxUrGHNjuh+euFNQbAA71wcbxfVItA7d2dX8x5gItHzo3ntVsZ7KYr r3hKWY9UdbkXZjL0fdKmO8v0vkJ82AoYBPb/oqfYeClB+yIpAZ3hw77LmkNBJbde IeaAqcPxPEk5d6Qe98fAphGVCD513SII6lJbMnK0WOkJAOuB5v8YTUCPaMh3pRVC LCf9BxaBo0cyod2Ucjln+8VmYZnW5nUQuMISNQ08TUZJho/CiEjYsHPmVRQJUy/Q vWYE6jbWvn6nTGvOED6Bz5grHZs07KDhCwI1kMbbX2xmZMgGTwk= -----END CERTIFICATE-----Generated at Mon Oct 20 17:50:13 2025 by rpki-client