$ rpki-client -vvf repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft File: 5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft (raw, json) Hash identifier: 7O46PvU8px+6gZ+mE39ndD/ArlIGRMgvR7h08slcvRo= Subject key identifier: 5E:52:5A:5B:62:03:CA:46:B9:AD:18:5F:AA:0C:0F:84:39:7A:0D:73 Authority key identifier: 51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C Certificate issuer: /CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C Certificate serial: EB91A85C5B38FA1A7CA1859C39CD5E3940B81E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft Manifest number: 0516 Signing time: Mon 20 Oct 2025 23:10:01 +0000 Manifest this update: Mon 20 Oct 2025 23:05:01 +0000 Manifest next update: Fri 24 Oct 2025 02:29:01 +0000 Files and hashes: 1: 3130332e39342e392e302f32342d3234203d3e203435373232.roa (hash: orPkEwdvzbgAdBqwJx5fyoqFz6nU1AjYY7pCrQmrMAU=) 2: 3138302e3137382e39322e302f32342d3234203d3e203435373232.roa (hash: ghDv+E88LbsHp+yiOmZsjAqDuH4NzWOqybkoMe5BmV8=) 3: 3138302e3137382e39332e302f32342d3234203d3e203435373232.roa (hash: mp213bICEXwH+LqnHma8nvPV6BFgfv4aiHAHQpn9yQs=) 4: 3130332e39342e382e302f32342d3234203d3e203435373232.roa (hash: dTEDIPJlLGDlRHB30/PzLB90DYFKiiQue74QgGKHEVI=) 5: 3138302e3137382e39352e302f32342d3234203d3e203435373232.roa (hash: 9KZ9F45elzM13kws/U0IoAzbbI/YdymyAIpoe5+fMUI=) 6: 323430313a333334303a3a2f33322d3438203d3e203435373232.roa (hash: tUFNikuzZ5Dxu83zUyF9psB1ZAXrbnO+JVBeZVWaO4g=) 7: 3130332e39342e31302e302f32342d3234203d3e203435373232.roa (hash: oriUzK7mgQPCjaTV1H4IccgCRtyIm4Y5jf+70OM+bhw=) 8: 5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl (hash: rGnomPzapW2pYjvth4Xz+AzV27a2fDBoFj8cjjLTSbw=) 9: 3138302e3137382e39342e302f32342d3234203d3e203435373232.roa (hash: r/svlrZcSr5sJUDVP99x6FJY548aywPcFlNv37DJt2Y=) 10: 3130332e39342e31312e302f32342d3234203d3e203435373232.roa (hash: qGI/gZ+/LHiM5HYO/jSSY227nu7Rlo4VufnCOUnRtK4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 02:29:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: eb:91:a8:5c:5b:38:fa:1a:7c:a1:85:9c:39:cd:5e:39:40:b8:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C Validity Not Before: Oct 20 23:05:01 2025 GMT Not After : Oct 24 02:29:01 2025 GMT Subject: CN=5E525A5B6203CA46B9AD185FAA0C0F84397A0D73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:eb:5b:16:39:ff:cf:38:6c:3d:3a:0f:bb:a7: ba:17:dd:22:73:4d:88:1d:d9:d4:4c:a4:e2:91:12: c4:6d:00:82:24:a1:4e:3a:68:0c:22:67:84:61:4c: 60:ae:f5:92:9b:42:e9:7b:d4:11:02:a7:56:e3:67: 14:3c:86:b9:5c:71:c0:fe:02:1d:6a:85:22:76:5e: 20:ba:22:cd:bf:d9:09:ba:7b:9d:6b:b6:70:90:c2: bf:18:b5:0e:ea:9d:1b:67:4f:94:3f:96:f2:25:94: 94:ff:a5:fb:17:36:12:50:1e:86:e3:ad:c0:4f:fa: 90:c1:dc:bf:f2:17:10:9d:55:be:39:cb:05:bb:4e: 3f:e8:47:f6:7c:cb:27:87:00:de:4c:68:7a:cf:95: 70:31:74:98:ac:8e:43:e3:96:40:7c:93:e3:6b:b7: e0:99:b2:13:63:25:06:46:f4:42:8d:da:76:e4:26: 27:47:8e:ad:17:94:ad:68:75:97:71:05:16:be:b6: ac:4c:17:48:54:08:d2:b5:75:23:75:0c:70:33:00: 51:42:96:b3:ab:91:b2:a2:e0:92:34:7b:e9:ba:f2: f6:06:87:b2:40:8b:f3:d5:04:70:38:a2:14:3a:87: 72:49:0f:ff:56:a0:10:12:cd:d1:86:c4:9f:24:28: 53:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:52:5A:5B:62:03:CA:46:B9:AD:18:5F:AA:0C:0F:84:39:7A:0D:73 X509v3 Authority Key Identifier: keyid:51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:98:fb:47:5c:fe:ad:47:09:13:29:67:d7:86:1b:50:a6:24: 0c:3b:0c:0a:9e:14:6b:3e:29:e3:ec:2e:c4:a6:c6:93:f8:6d: 17:b2:49:c7:c7:dd:60:ba:0f:00:70:e2:93:c1:75:62:37:d6: ab:6a:76:7a:ff:f7:88:37:c3:83:3b:51:65:13:18:99:d9:10: a4:f2:65:87:1b:b6:7f:d5:5a:32:26:4a:c1:3c:bf:3d:73:3d: ee:10:a2:7e:0c:b7:7e:36:2d:18:b7:05:ea:fe:21:79:4f:06: 20:d5:df:0b:b5:82:99:81:01:28:7e:2e:f3:ec:82:f3:a3:a8: 26:ab:dc:6c:69:77:4c:5c:9d:a7:6a:18:c2:9a:c0:95:cc:4d: 80:78:68:21:15:9b:57:3a:d5:bd:37:44:7e:49:a2:2f:06:c3: 12:47:ae:7f:d4:5f:45:29:9b:40:08:82:f7:94:86:b8:f7:f2: 62:a8:d0:5b:4f:9a:a1:f3:6a:88:5e:27:36:5b:ac:28:36:c5: b9:c7:1c:fc:79:03:5f:8d:2a:7e:94:36:03:09:a1:a8:23:54: 2e:b0:be:cd:0f:14:d6:6e:9f:41:e0:3d:6e:e7:3c:1b:4d:2d: 9f:09:de:71:7d:81:60:21:3a:5e:e8:2e:3a:42:7b:b1:c3:03: 59:89:5d:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAOuRqFxbOPoafKGFnDnNXjlAuB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTExMEE3MTdFRkU5NkIxMkU1RDNBNDc1RTlCMjE3OUU1 REUwRUEwQzAeFw0yNTEwMjAyMzA1MDFaFw0yNTEwMjQwMjI5MDFaMDMxMTAvBgNV BAMTKDVFNTI1QTVCNjIwM0NBNDZCOUFEMTg1RkFBMEMwRjg0Mzk3QTBENzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX61sWOf/POGw9Og+7p7oX3SJz TYgd2dRMpOKREsRtAIIkoU46aAwiZ4RhTGCu9ZKbQul71BECp1bjZxQ8hrlcccD+ Ah1qhSJ2XiC6Is2/2Qm6e51rtnCQwr8YtQ7qnRtnT5Q/lvIllJT/pfsXNhJQHobj rcBP+pDB3L/yFxCdVb45ywW7Tj/oR/Z8yyeHAN5MaHrPlXAxdJisjkPjlkB8k+Nr t+CZshNjJQZG9EKN2nbkJidHjq0XlK1odZdxBRa+tqxMF0hUCNK1dSN1DHAzAFFC lrOrkbKi4JI0e+m68vYGh7JAi/PVBHA4ohQ6h3JJD/9WoBASzdGGxJ8kKFNJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXlJaW2IDyka5rRhfqgwPhDl6DXMwHwYDVR0j BBgwFoAUURCnF+/paxLl06R16bIXnl3g6gwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjA3ZDkyOS00Y2E4LTRmNTMtYTI5OC01ZTMzYmUxZjg2MDQvMC81MTEwQTcxN0VG RTk2QjEyRTVEM0E0NzVFOUIyMTc5RTVERTBFQTBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTExMEE3MTdFRkU5NkIxMkU1RDNBNDc1RTlCMjE3OUU1REUw RUEwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTYwN2Q5MjktNGNhOC00ZjUzLWEy OTgtNWUzM2JlMWY4NjA0LzAvNTExMEE3MTdFRkU5NkIxMkU1RDNBNDc1RTlCMjE3 OUU1REUwRUEwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG2Y+0dc/q1HCRMpZ9eGG1CmJAw7DAqeFGs+ KePsLsSmxpP4bReyScfH3WC6DwBw4pPBdWI31qtqdnr/94g3w4M7UWUTGJnZEKTy ZYcbtn/VWjImSsE8vz1zPe4Qon4Mt342LRi3Ber+IXlPBiDV3wu1gpmBASh+LvPs gvOjqCar3Gxpd0xcnadqGMKawJXMTYB4aCEVm1c61b03RH5Joi8GwxJHrn/UX0Up m0AIgveUhrj38mKo0FtPmqHzaoheJzZbrCg2xbnHHPx5A1+NKn6UNgMJoagjVC6w vs0PFNZun0HgPW7nPBtNLZ8J3nF9gWAhOl7oLjpCe7HDA1mJXaU= -----END CERTIFICATE-----Generated at Tue Oct 21 04:49:19 2025 by rpki-client