$ rpki-client -vvf repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft File: 5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft (raw, json) Hash identifier: lMwl3av3+Io8R75T4w2Z8VG2h7BZLg3KB7K9ghOsT8w= Subject key identifier: B5:5B:E4:31:D5:2C:A2:F4:AC:78:5A:84:9D:E9:AA:6B:C0:6F:3D:CE Authority key identifier: 5E:68:3D:8B:34:5B:B6:E0:F6:3C:D1:A8:F3:2C:3B:5E:CC:B2:B9:B0 Certificate issuer: /CN=5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0 Certificate serial: 74CE488FD3CDA640751DC75567355B2E5A32CAAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft Manifest number: 048D Signing time: Sat 18 Oct 2025 06:10:54 +0000 Manifest this update: Sat 18 Oct 2025 06:05:54 +0000 Manifest next update: Tue 21 Oct 2025 11:54:54 +0000 Files and hashes: 1: 3130332e3135362e3231372e302f32342d3234203d3e203538333639.roa (hash: pwYW2LCd9vtI3mAJLlLqxnIjIDbhrNEv0Psd4I3TSks=) 2: 3130332e3135362e3231362e302f32342d3234203d3e203538333639.roa (hash: Irudemtq4GtsKI+qW0qqUVrCa34ZHp9Oavot/JC0+Qo=) 3: 5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl (hash: XY3G8cKsP4x2q5kJqhv9/jHsZUBgTEgcT7eKT90l/mI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 11:54:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:ce:48:8f:d3:cd:a6:40:75:1d:c7:55:67:35:5b:2e:5a:32:ca:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0 Validity Not Before: Oct 18 06:05:54 2025 GMT Not After : Oct 21 11:54:54 2025 GMT Subject: CN=B55BE431D52CA2F4AC785A849DE9AA6BC06F3DCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:53:70:11:99:cc:bd:ba:9a:ed:90:2a:f2:1a: a6:ac:85:77:9a:e9:dc:11:7c:d8:f6:b7:e2:97:4e: 7c:81:1e:c6:f1:c4:a2:73:1c:13:d1:24:de:fd:1c: 6b:bf:e3:c8:da:3f:9d:13:83:af:ba:f9:11:58:15: b2:da:be:50:a9:fd:d1:65:a8:d4:d6:af:8f:fc:9c: 15:33:25:c3:d6:4c:10:16:38:21:7d:ef:3a:18:ad: b3:b8:3f:48:0c:8c:56:79:34:20:6c:5d:f3:fa:b8: e3:23:00:0c:90:b5:91:fa:66:68:ca:5c:2d:54:a2: 3d:82:e5:b8:90:2e:28:01:4c:37:8b:ad:23:c5:50: 2c:15:80:49:f3:16:76:2a:02:97:24:82:e4:b3:db: 0b:d1:f2:ea:fc:e0:7b:36:26:85:3a:76:ca:2b:33: c8:0f:09:8d:1a:72:5e:7b:9b:0f:f2:f2:4a:bd:46: 65:4c:3b:61:9e:84:45:f1:9a:65:09:ec:c9:d2:bc: 55:22:8e:4d:74:8e:7e:11:be:54:36:77:78:fa:8c: 63:f0:98:70:11:d2:a5:bf:71:75:5a:37:11:4b:6d: c5:0d:47:c3:b2:d1:70:f7:be:46:7d:f5:e8:fe:4e: 76:2e:35:41:65:20:e9:1b:9c:56:e7:33:40:3e:d4: 77:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:5B:E4:31:D5:2C:A2:F4:AC:78:5A:84:9D:E9:AA:6B:C0:6F:3D:CE X509v3 Authority Key Identifier: keyid:5E:68:3D:8B:34:5B:B6:E0:F6:3C:D1:A8:F3:2C:3B:5E:CC:B2:B9:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:7d:ab:f3:87:82:7f:dc:c5:b4:ff:ea:e6:a3:bd:af:10:ce: 88:1b:8a:d6:a6:f1:6f:a9:30:a1:52:dd:c8:46:29:68:ad:5a: f6:ed:31:ac:ec:24:0a:6e:da:bd:72:7e:76:bc:24:c8:bc:e1: 72:0c:7f:2a:3e:fb:20:ad:ae:bd:08:a6:6d:eb:8b:50:45:71: 7a:95:09:02:ec:33:7b:38:55:e4:b3:34:2c:0a:5c:fb:f3:6f: 7d:6f:0d:e1:14:29:5e:34:d7:67:05:70:24:fc:0d:29:b6:58: 04:7b:3a:6c:b1:20:c7:59:1f:cf:0a:8f:5d:68:f7:c6:30:b3: 14:2c:52:15:23:25:ca:e0:40:0b:b0:ed:d8:eb:29:c6:bf:eb: 61:3e:da:64:da:39:a2:41:e5:a6:a0:6a:96:bd:07:95:df:f0: f0:c7:6f:47:63:c3:d9:a4:a4:1d:6f:e8:9a:3e:77:ad:83:4c: 2e:25:d4:f1:d7:db:99:ad:e8:2a:d5:ea:24:dc:fe:cc:75:27: d5:07:3c:4a:df:6d:bc:b7:7b:04:10:6a:64:1d:fa:f4:cc:3d: 46:ae:4a:88:60:f6:40:27:f4:8d:2f:55:65:77:ad:c6:93:2a: 69:20:0e:89:cc:52:c9:ec:fc:4d:ae:82:4c:61:49:a6:13:c1: 04:73:f8:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdM5Ij9PNpkB1HcdVZzVbLloyyqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU2ODNEOEIzNDVCQjZFMEY2M0NEMUE4RjMyQzNCNUVD Q0IyQjlCMDAeFw0yNTEwMTgwNjA1NTRaFw0yNTEwMjExMTU0NTRaMDMxMTAvBgNV BAMTKEI1NUJFNDMxRDUyQ0EyRjRBQzc4NUE4NDlERTlBQTZCQzA2RjNEQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEU3ARmcy9uprtkCryGqashXea 6dwRfNj2t+KXTnyBHsbxxKJzHBPRJN79HGu/48jaP50Tg6+6+RFYFbLavlCp/dFl qNTWr4/8nBUzJcPWTBAWOCF97zoYrbO4P0gMjFZ5NCBsXfP6uOMjAAyQtZH6ZmjK XC1Uoj2C5biQLigBTDeLrSPFUCwVgEnzFnYqApckguSz2wvR8ur84Hs2JoU6dsor M8gPCY0acl57mw/y8kq9RmVMO2GehEXxmmUJ7MnSvFUijk10jn4RvlQ2d3j6jGPw mHAR0qW/cXVaNxFLbcUNR8Oy0XD3vkZ99ej+TnYuNUFlIOkbnFbnM0A+1HcrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtVvkMdUsovSseFqEnemqa8BvPc4wHwYDVR0j BBgwFoAUXmg9izRbtuD2PNGo8yw7XsyyubAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 M2E3ZjM0Yy02M2I4LTQ5NzMtODIyNi1lMTA2OTViMjVkOTQvMC81RTY4M0Q4QjM0 NUJCNkUwRjYzQ0QxQThGMzJDM0I1RUNDQjJCOUIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUU2ODNEOEIzNDVCQjZFMEY2M0NEMUE4RjMyQzNCNUVDQ0Iy QjlCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTNhN2YzNGMtNjNiOC00OTczLTgy MjYtZTEwNjk1YjI1ZDk0LzAvNUU2ODNEOEIzNDVCQjZFMEY2M0NEMUE4RjMyQzNC NUVDQ0IyQjlCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKR9q/OHgn/cxbT/6uajva8Qzogbitam8W+p MKFS3chGKWitWvbtMazsJApu2r1yfna8JMi84XIMfyo++yCtrr0Ipm3ri1BFcXqV CQLsM3s4VeSzNCwKXPvzb31vDeEUKV4012cFcCT8DSm2WAR7OmyxIMdZH88Kj11o 98YwsxQsUhUjJcrgQAuw7djrKca/62E+2mTaOaJB5aagapa9B5Xf8PDHb0djw9mk pB1v6Jo+d62DTC4l1PHX25mt6CrV6iTc/sx1J9UHPErfbby3ewQQamQd+vTMPUau Sohg9kAn9I0vVWV3rcaTKmkgDonMUsns/E2ugkxhSaYTwQRz+Og= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:48 2025 by rpki-client