$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft File: 5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft (raw, json) Hash identifier: MdtXAV3+rRnClQPxQ5FbhjE+IsIP7gcJZHifzM6l9hs= Subject key identifier: C3:AE:64:E5:DC:2A:C2:6B:04:BB:90:24:5E:1D:22:BD:13:83:81:17 Authority key identifier: 5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D Certificate issuer: /CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D Certificate serial: 79F587D5615F8D29D9AA821B51C9DD479CF8B2D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft Manifest number: E1 Signing time: Sun 19 Oct 2025 18:01:07 +0000 Manifest this update: Sun 19 Oct 2025 17:56:07 +0000 Manifest next update: Thu 23 Oct 2025 02:38:07 +0000 Files and hashes: 1: 5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl (hash: tioJTSuEteindpg+sl6QxfnlQbdEYMrMK1tUZLgEVbc=) 2: 3136302e32322e362e302f32342d3234203d3e20313532373936.roa (hash: lZoAiDIfwdwZRfkj/NcAK+vDJElzUZIJDOrxy0zEGf4=) 3: 3136302e32322e362e302f32332d3233203d3e20313532373936.roa (hash: MlPD1Cp5WkgMa2H7CRUKYw5NrewBHnE4PxE2BVKQlL0=) 4: 3136302e32322e372e302f32342d3234203d3e20313532373936.roa (hash: Se9if4ahUM8UZ9DwPwRriHNSzgliBVi3qv7HNc4T4+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 02:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:f5:87:d5:61:5f:8d:29:d9:aa:82:1b:51:c9:dd:47:9c:f8:b2:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D Validity Not Before: Oct 19 17:56:07 2025 GMT Not After : Oct 23 02:38:07 2025 GMT Subject: CN=C3AE64E5DC2AC26B04BB90245E1D22BD13838117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9a:d6:9c:f5:37:c3:8e:b8:d2:85:33:a6:d5: 0b:07:3d:35:62:35:81:1f:0f:89:a9:d8:24:b1:f8: 7f:42:95:d0:a1:e5:1b:69:80:14:2e:a7:3a:19:64: b0:03:03:00:66:9d:14:af:b0:ba:c7:a6:8a:35:8e: 9e:d9:6d:a3:65:a7:e9:57:27:f3:4b:e7:b3:56:65: 5b:6a:b0:01:5d:b5:74:65:cb:49:1b:4a:4f:f8:9d: 21:1e:5b:e4:b2:2d:ac:b4:8c:fd:f0:0c:0e:34:c7: 47:19:48:8e:b6:9b:f6:83:83:d1:c4:04:7d:7e:39: 54:c4:9a:54:de:94:44:e5:9c:fa:76:52:3b:34:c4: f5:1c:2f:19:ac:0f:a2:8d:70:d2:3a:0f:b0:31:47: e6:69:9d:a4:54:e4:1d:59:71:ba:d9:19:a9:db:bf: e3:d6:a9:6f:f4:1d:b1:c1:c2:e6:dc:dc:78:14:37: 6e:67:5f:e3:35:8a:54:6b:90:66:c9:6e:f5:e6:f1: ec:81:4e:75:10:f1:47:35:bf:df:41:a0:00:7d:62: 8a:da:8e:ec:8f:dd:5e:fd:7a:09:9d:76:53:08:63: fb:49:fa:e6:a6:04:bf:9b:dd:89:84:97:43:90:63: 6b:50:df:2d:74:bd:ff:16:ee:4a:50:ef:ec:61:ef: 59:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:AE:64:E5:DC:2A:C2:6B:04:BB:90:24:5E:1D:22:BD:13:83:81:17 X509v3 Authority Key Identifier: keyid:5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:11:c2:20:12:72:00:cd:12:2a:b6:05:35:4d:1e:18:df:d8: f2:40:29:c2:41:88:a2:f3:f7:32:3c:a6:5c:06:da:d2:99:1d: 70:7c:37:53:51:34:b2:6e:82:03:41:dd:c2:2e:79:15:e8:40: 05:71:af:e2:37:8d:cb:b7:1c:3f:57:6d:f3:38:68:12:9c:a1: 71:00:48:98:0b:50:6c:f6:60:1e:93:ce:16:25:14:0b:3d:b4: 73:78:8d:91:77:7a:7d:00:60:78:81:6d:e3:77:69:6d:ef:4e: 6e:50:7a:8b:29:fa:56:cf:a7:e7:9a:79:42:cf:3d:e3:53:bf: af:71:55:51:29:f2:45:24:c1:c0:04:13:7b:ca:48:ed:dd:cb: 3b:39:6c:94:f1:35:7c:5f:55:6e:25:4f:e5:61:f2:c8:cb:1f: e3:c1:1d:ca:bd:9a:a7:e3:cc:f8:ac:2a:5d:e5:2c:aa:bb:16: da:a2:b8:44:86:98:e6:5f:bc:d0:62:de:c3:9e:67:b6:cd:4c: 8f:b3:0a:21:0d:61:5c:dd:dd:2c:9a:8a:14:56:4d:64:e8:6c: 09:87:f1:2f:f1:3d:0f:4c:c9:59:09:1a:82:9e:ad:b8:f1:18: 55:53:68:86:3b:2a:55:ca:de:70:bc:ab:04:98:6f:31:9c:09: 78:2e:c5:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUefWH1WFfjSnZqoIbUcndR5z4stMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2MDQy RjBCNkQ3RDAeFw0yNTEwMTkxNzU2MDdaFw0yNTEwMjMwMjM4MDdaMDMxMTAvBgNV BAMTKEMzQUU2NEU1REMyQUMyNkIwNEJCOTAyNDVFMUQyMkJEMTM4MzgxMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFmtac9TfDjrjShTOm1QsHPTVi NYEfD4mp2CSx+H9CldCh5RtpgBQupzoZZLADAwBmnRSvsLrHpoo1jp7ZbaNlp+lX J/NL57NWZVtqsAFdtXRly0kbSk/4nSEeW+SyLay0jP3wDA40x0cZSI62m/aDg9HE BH1+OVTEmlTelETlnPp2Ujs0xPUcLxmsD6KNcNI6D7AxR+ZpnaRU5B1ZcbrZGanb v+PWqW/0HbHBwubc3HgUN25nX+M1ilRrkGbJbvXm8eyBTnUQ8Uc1v99BoAB9Yora juyP3V79egmddlMIY/tJ+uamBL+b3YmEl0OQY2tQ3y10vf8W7kpQ7+xh71nZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw65k5dwqwmsEu5AkXh0ivRODgRcwHwYDVR0j BBgwFoAUXjI/nX2oTYVuukjHbps2BC8LbX0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5ODgxNi01YWY5LTQ3ZWYtYjk4OS00MmYyNzMxODQ4YmUvMC81RTMyM0Y5RDdE QTg0RDg1NkVCQTQ4Qzc2RTlCMzYwNDJGMEI2RDdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2MDQyRjBC NkQ3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzAvNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2 MDQyRjBCNkQ3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALgRwiAScgDNEiq2BTVNHhjf2PJAKcJBiKLz 9zI8plwG2tKZHXB8N1NRNLJuggNB3cIueRXoQAVxr+I3jcu3HD9XbfM4aBKcoXEA SJgLUGz2YB6TzhYlFAs9tHN4jZF3en0AYHiBbeN3aW3vTm5Qeosp+lbPp+eaeULP PeNTv69xVVEp8kUkwcAEE3vKSO3dyzs5bJTxNXxfVW4lT+Vh8sjLH+PBHcq9mqfj zPisKl3lLKq7FtqiuESGmOZfvNBi3sOeZ7bNTI+zCiENYVzd3SyaihRWTWTobAmH 8S/xPQ9MyVkJGoKerbjxGFVTaIY7KlXK3nC8qwSYbzGcCXguxRQ= -----END CERTIFICATE-----Generated at Tue Oct 21 00:13:22 2025 by rpki-client