$ rpki-client -vvf repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft File: 5EC928AFD73AFC70F10C468E21482031920DF521.mft (raw, json) Hash identifier: 9SXj3l4s154flQ9MGvCJapIAQC3NK7/o94GZ6q0SWA0= Subject key identifier: F8:D3:92:B6:63:79:D2:9B:2D:46:64:7A:A7:74:D8:35:DA:6E:05:70 Authority key identifier: 5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21 Certificate issuer: /CN=5EC928AFD73AFC70F10C468E21482031920DF521 Certificate serial: 05E5278F0B24A319741BC4951715CFF737144D82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft Manifest number: 012D Signing time: Sun 19 Oct 2025 18:40:38 +0000 Manifest this update: Sun 19 Oct 2025 18:35:38 +0000 Manifest next update: Wed 22 Oct 2025 21:01:38 +0000 Files and hashes: 1: 5EC928AFD73AFC70F10C468E21482031920DF521.crl (hash: VOVWG0mJvKY+E9IOACq4L48UexY+KFRRurKkvSJcj5A=) 2: 3135372e31302e39312e302f32342d3234203d3e20313532303836.roa (hash: aoRUG5CQtzRZGdloOpfTrb2fX3fCFwbxN1OMSRI1BYY=) 3: 3135372e31302e39302e302f32332d3233203d3e20313532303836.roa (hash: sqhh6fhWizwXoH9l3XVTNUts+MHffcu11O/8GZa+UZk=) 4: 3135372e31302e39302e302f32342d3234203d3e20313532303836.roa (hash: G+zk6B4j6LBv4VXf/ZrduIBLIatUxzNWyMHjZfotW/M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.crl rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 21:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:e5:27:8f:0b:24:a3:19:74:1b:c4:95:17:15:cf:f7:37:14:4d:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EC928AFD73AFC70F10C468E21482031920DF521 Validity Not Before: Oct 19 18:35:38 2025 GMT Not After : Oct 22 21:01:38 2025 GMT Subject: CN=F8D392B66379D29B2D46647AA774D835DA6E0570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:82:16:20:67:03:4d:96:d0:c7:a1:9a:71:1c: e5:e6:b7:db:a6:10:63:b3:ac:3c:b6:74:56:bf:a7: ca:cb:fd:6e:62:b9:c4:65:55:f3:98:7f:5b:ce:0a: 4f:f9:dd:17:32:2d:03:d8:66:1c:10:0e:4f:18:40: 31:2a:55:3f:63:7c:08:fd:21:e3:fe:7e:cb:11:9f: 0a:c2:2e:d8:0a:63:b8:c4:4a:3a:5a:b1:7f:40:ea: 8a:59:7e:2f:05:bd:5f:b0:a2:ac:7b:31:0d:54:34: 5c:cd:79:24:40:2f:25:0e:b1:b5:0e:eb:1e:0a:e3: f3:5a:55:13:e9:5a:24:51:c6:eb:2c:55:41:64:7e: 16:75:be:a0:68:bc:73:60:6b:51:05:f9:ff:df:0a: 18:a7:9f:27:4f:12:fa:8f:a3:70:f1:32:43:3c:64: 21:b8:92:88:4e:44:26:d9:71:02:83:98:11:90:ed: 97:9a:ea:ae:87:c4:13:7c:d8:0c:d6:ce:8c:92:5c: 57:78:3e:a7:dd:b6:4c:95:83:4d:28:75:38:c1:b6: 8b:14:c6:73:d4:ba:3f:da:a4:bd:14:ca:5f:ac:21: 92:c4:0c:46:a7:f9:86:ea:d8:00:0c:a8:19:b9:de: a6:19:d7:3d:a0:da:4a:31:50:df:3f:9f:25:61:8e: 0b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D3:92:B6:63:79:D2:9B:2D:46:64:7A:A7:74:D8:35:DA:6E:05:70 X509v3 Authority Key Identifier: keyid:5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:01:2e:a0:db:14:af:cd:d0:dc:4e:83:12:d0:10:f5:c6:01: 3b:07:01:b0:f6:70:31:97:cc:cf:5c:27:85:8d:56:03:b7:9e: a8:08:c0:9f:11:e7:7c:17:35:9e:ae:7c:0b:cb:05:79:4c:ea: cb:78:51:86:0b:61:80:a9:ea:d5:48:68:d1:f0:ff:d2:40:80: 3b:f8:32:d6:23:3e:27:66:8e:a3:1f:02:91:f2:49:a6:cb:84: 27:f0:98:db:f9:2b:9d:5e:49:fa:8a:99:9b:f8:d6:86:92:07: 1f:c5:3c:19:27:0d:ac:6d:82:c5:5a:50:c1:0e:f4:9e:a6:d0: bb:9e:37:ad:14:90:41:9c:4f:81:dc:8a:95:24:58:84:85:46: b0:5f:ff:6c:9a:ff:fa:93:48:09:42:b6:b4:1f:30:30:36:c5: 21:04:bd:26:2b:88:9b:4c:7f:ca:40:5e:ff:29:30:34:93:05: 63:77:02:d9:83:b5:e3:2c:ab:8a:9b:a6:cb:5e:59:d1:05:26: cb:06:02:56:6d:30:2d:3f:9a:60:e6:4b:f5:41:0a:1b:5f:b0: 67:21:32:ae:1c:00:0a:be:6e:fd:57:67:25:ba:12:f8:1c:19: 94:45:da:dc:54:cc:ee:40:e8:a3:af:2c:3f:c6:49:4e:4b:06: da:ba:b6:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBeUnjwskoxl0G8SVFxXP9zcUTYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIwMzE5 MjBERjUyMTAeFw0yNTEwMTkxODM1MzhaFw0yNTEwMjIyMTAxMzhaMDMxMTAvBgNV BAMTKEY4RDM5MkI2NjM3OUQyOUIyRDQ2NjQ3QUE3NzREODM1REE2RTA1NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ghYgZwNNltDHoZpxHOXmt9um EGOzrDy2dFa/p8rL/W5iucRlVfOYf1vOCk/53RcyLQPYZhwQDk8YQDEqVT9jfAj9 IeP+fssRnwrCLtgKY7jESjpasX9A6opZfi8FvV+woqx7MQ1UNFzNeSRALyUOsbUO 6x4K4/NaVRPpWiRRxussVUFkfhZ1vqBovHNga1EF+f/fChinnydPEvqPo3DxMkM8 ZCG4kohORCbZcQKDmBGQ7Zea6q6HxBN82AzWzoySXFd4PqfdtkyVg00odTjBtosU xnPUuj/apL0Uyl+sIZLEDEan+Ybq2AAMqBm53qYZ1z2g2koxUN8/nyVhjgs5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+NOStmN50pstRmR6p3TYNdpuBXAwHwYDVR0j BBgwFoAUXskor9c6/HDxDEaOIUggMZIN9SEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2YzZjhjOC0wNDA2LTRiMzgtYTdhOC1kY2IxNWU0MWYyYjcvMC81RUM5MjhBRkQ3 M0FGQzcwRjEwQzQ2OEUyMTQ4MjAzMTkyMERGNTIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIwMzE5MjBE RjUyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNmM2Y4YzgtMDQwNi00YjM4LWE3 YTgtZGNiMTVlNDFmMmI3LzAvNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIw MzE5MjBERjUyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALoBLqDbFK/N0NxOgxLQEPXGATsHAbD2cDGX zM9cJ4WNVgO3nqgIwJ8R53wXNZ6ufAvLBXlM6st4UYYLYYCp6tVIaNHw/9JAgDv4 MtYjPidmjqMfApHySabLhCfwmNv5K51eSfqKmZv41oaSBx/FPBknDaxtgsVaUMEO 9J6m0LueN60UkEGcT4HcipUkWISFRrBf/2ya//qTSAlCtrQfMDA2xSEEvSYriJtM f8pAXv8pMDSTBWN3AtmDteMsq4qbpsteWdEFJssGAlZtMC0/mmDmS/VBChtfsGch Mq4cAAq+bv1XZyW6EvgcGZRF2txUzO5A6KOvLD/GSU5LBtq6tvc= -----END CERTIFICATE-----Generated at Mon Oct 20 13:16:10 2025 by rpki-client