$ rpki-client -vvf repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft File: 5AE57F3F97F40888F93913350A218863E705CD34.mft (raw, json) Hash identifier: 9NWVVlBkWTiVMgFb5JzQQVKa6JdmdJY0IJhaK3H/iWM= Subject key identifier: 01:9D:97:7A:2E:37:9C:81:78:29:C6:31:49:8D:71:2A:4B:93:C4:F1 Authority key identifier: 5A:E5:7F:3F:97:F4:08:88:F9:39:13:35:0A:21:88:63:E7:05:CD:34 Certificate issuer: /CN=5AE57F3F97F40888F93913350A218863E705CD34 Certificate serial: 72675BEBE5C45543E2393CCE5C5FD9FF2D8FFB1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft Manifest number: 0252 Signing time: Sun 19 Oct 2025 02:31:26 +0000 Manifest this update: Sun 19 Oct 2025 02:26:26 +0000 Manifest next update: Wed 22 Oct 2025 05:34:26 +0000 Files and hashes: 1: 3130332e3138332e31302e302f32342d3234203d3e20313339393637.roa (hash: lDreBV2a5k+F2nOzqdVDXyLmxgTFmhT5IbglBwCmDnU=) 2: 5AE57F3F97F40888F93913350A218863E705CD34.crl (hash: br3A2wwrp0vPgXwEe0QurydvQvY78F+SI+Y21ycGyoA=) 3: 3130332e3138332e31312e302f32342d3234203d3e20313339393637.roa (hash: Aeu4h6nFmtclcSAntQ1D1feUfbui+nbdSHb/VFJyfM0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.crl rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 05:34:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:67:5b:eb:e5:c4:55:43:e2:39:3c:ce:5c:5f:d9:ff:2d:8f:fb:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AE57F3F97F40888F93913350A218863E705CD34 Validity Not Before: Oct 19 02:26:26 2025 GMT Not After : Oct 22 05:34:26 2025 GMT Subject: CN=019D977A2E379C817829C631498D712A4B93C4F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b8:62:38:01:a0:bb:2c:5f:ab:96:58:f8:89: 91:8e:9d:b5:08:ed:3f:03:ce:8f:b2:89:f9:07:42: 43:29:83:e3:2e:21:52:6d:63:7d:9d:11:ef:dc:cb: 71:47:8f:f5:4b:d0:d9:d2:18:86:9e:9a:2d:f1:0d: cb:98:30:fa:40:30:2f:0d:38:0b:31:4b:60:44:c6: 57:b3:ce:75:4c:55:2f:34:66:91:d1:84:0a:be:fb: 6f:71:5d:ee:db:49:5b:1f:a8:5c:d2:8f:a3:09:cc: 8b:d2:8f:a0:92:21:4e:4a:57:84:96:50:ba:49:23: b7:1d:e4:e1:4b:ef:3b:fe:b6:b6:79:ce:0d:9a:f0: 4c:cf:91:5f:b5:4c:e9:dd:9b:06:8a:82:f3:89:e0: d1:22:8d:ab:61:bd:e3:4e:f1:9c:f0:c5:25:88:c9: d3:61:45:de:9c:de:ba:c8:e5:81:01:38:29:20:da: b4:f7:66:40:2e:c8:88:84:2e:c4:60:28:fe:8e:05: 38:31:8e:42:1a:8c:79:00:e1:0d:d6:24:2d:04:5b: d5:5d:1b:c5:74:97:fc:1c:8f:35:dd:ff:a8:3d:75: 24:10:f9:83:ea:1e:ef:02:56:c9:6f:b4:97:1a:9f: 1d:4c:0a:0d:f8:11:77:89:c1:e7:6c:62:0e:06:9d: 4c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:9D:97:7A:2E:37:9C:81:78:29:C6:31:49:8D:71:2A:4B:93:C4:F1 X509v3 Authority Key Identifier: keyid:5A:E5:7F:3F:97:F4:08:88:F9:39:13:35:0A:21:88:63:E7:05:CD:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:42:96:4f:9e:28:77:b1:e3:a5:d2:87:99:39:8c:27:b5:fe: 11:00:2d:d5:5e:20:cd:24:74:3f:6e:3c:80:b8:e4:e8:93:df: 00:9d:5f:a0:6f:a2:b8:f8:7c:0d:eb:e0:96:7c:ce:41:fa:47: 64:f0:87:00:b8:36:4e:b1:4b:71:f8:34:33:cd:a3:30:92:41: 48:a0:61:06:83:e7:21:32:46:74:44:06:da:3d:f8:9f:6d:b6: 26:f8:0d:a2:09:a0:41:2d:d3:96:26:c2:4c:0a:6a:b7:71:c2: 82:a4:d4:93:be:fc:2b:5a:2f:05:73:6f:9c:83:87:a3:b5:81: fc:30:97:73:fe:57:3e:31:be:ce:e9:c3:d7:b9:29:cf:10:85: 76:fd:1c:0b:fc:94:d5:22:1e:23:45:aa:01:c4:9c:93:70:ea: c7:2d:20:92:18:50:13:bd:38:c5:14:e4:b8:82:7e:b1:c1:10: 9e:d3:24:f2:e7:df:8b:fc:8f:5c:19:f2:44:e9:67:de:5b:ce: 6e:b3:80:72:10:99:03:ef:ef:eb:c7:4b:20:5e:fb:d8:2c:c3: 26:df:9d:8b:14:be:78:cd:52:98:0e:9c:a5:5b:c8:8b:a7:f8: 52:44:61:80:24:32:72:c0:7b:f0:cd:fd:eb:9d:f8:ab:57:0d: ef:0b:ae:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcmdb6+XEVUPiOTzOXF/Z/y2P+xwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4NjNF NzA1Q0QzNDAeFw0yNTEwMTkwMjI2MjZaFw0yNTEwMjIwNTM0MjZaMDMxMTAvBgNV BAMTKDAxOUQ5NzdBMkUzNzlDODE3ODI5QzYzMTQ5OEQ3MTJBNEI5M0M0RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCquGI4AaC7LF+rllj4iZGOnbUI 7T8Dzo+yifkHQkMpg+MuIVJtY32dEe/cy3FHj/VL0NnSGIaemi3xDcuYMPpAMC8N OAsxS2BExlezznVMVS80ZpHRhAq++29xXe7bSVsfqFzSj6MJzIvSj6CSIU5KV4SW ULpJI7cd5OFL7zv+trZ5zg2a8EzPkV+1TOndmwaKgvOJ4NEijathveNO8ZzwxSWI ydNhRd6c3rrI5YEBOCkg2rT3ZkAuyIiELsRgKP6OBTgxjkIajHkA4Q3WJC0EW9Vd G8V0l/wcjzXd/6g9dSQQ+YPqHu8CVslvtJcanx1MCg34EXeJwedsYg4GnUxHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAZ2Xei43nIF4KcYxSY1xKkuTxPEwHwYDVR0j BBgwFoAUWuV/P5f0CIj5ORM1CiGIY+cFzTQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDhjZGY1YS1iOWE3LTQ0NjktYTY1My1jOWZmMmEwMDM3NzMvMC81QUU1N0YzRjk3 RjQwODg4RjkzOTEzMzUwQTIxODg2M0U3MDVDRDM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4NjNFNzA1 Q0QzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ4Y2RmNWEtYjlhNy00NDY5LWE2 NTMtYzlmZjJhMDAzNzczLzAvNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4 NjNFNzA1Q0QzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJClk+eKHex46XSh5k5jCe1/hEALdVeIM0k dD9uPIC45OiT3wCdX6Bvorj4fA3r4JZ8zkH6R2TwhwC4Nk6xS3H4NDPNozCSQUig YQaD5yEyRnREBto9+J9ttib4DaIJoEEt05YmwkwKardxwoKk1JO+/CtaLwVzb5yD h6O1gfwwl3P+Vz4xvs7pw9e5Kc8QhXb9HAv8lNUiHiNFqgHEnJNw6sctIJIYUBO9 OMUU5LiCfrHBEJ7TJPLn34v8j1wZ8kTpZ95bzm6zgHIQmQPv7+vHSyBe+9gswybf nYsUvnjNUpgOnKVbyIun+FJEYYAkMnLAe/DN/eud+KtXDe8Lro0= -----END CERTIFICATE-----Generated at Mon Oct 20 18:06:18 2025 by rpki-client