$ rpki-client -vvf repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft File: 5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft (raw, json) Hash identifier: uYAgXsfn0LlFbu5al2wT/meiK9b1Z3UbX9UgjLj3TT4= Subject key identifier: 58:CD:B4:5B:A3:44:53:43:0D:7B:EA:78:0D:79:EA:B4:F7:53:EF:0B Authority key identifier: 5A:D1:91:73:FE:66:EE:2B:9E:99:5A:99:ED:7D:C4:23:01:13:BD:EF Certificate issuer: /CN=5AD19173FE66EE2B9E995A99ED7DC4230113BDEF Certificate serial: 060AF04564E499B6A6B857E7BC2D052D07C45E3D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft Manifest number: 018C Signing time: Tue 04 Nov 2025 15:21:55 +0000 Manifest this update: Tue 04 Nov 2025 15:16:55 +0000 Manifest next update: Fri 07 Nov 2025 20:41:55 +0000 Files and hashes: 1: 5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl (hash: EjraFmbontKUmAKoTDEp3E5jOkP5HxOL2wEzxJ3dCWg=) 2: 3130332e3132332e3137342e302f32342d3234203d3e20313530393638.roa (hash: HBPJroPXGy8LUopobuBKzRyp/rbJ8xWZnNOPphW6Qlg=) 3: 3130332e3132332e3137342e302f32332d3233203d3e20313530393638.roa (hash: 5XRHZIZI1oj83KHXG7v/4Bg68uKlgADqYmMHikLr/vU=) 4: 3130332e3132332e3137352e302f32342d3234203d3e20313530393638.roa (hash: dqxRLNjaP87/BAjwkFlOT+1aQilVY6SUF3ZdlXMJQnY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 20:41:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:0a:f0:45:64:e4:99:b6:a6:b8:57:e7:bc:2d:05:2d:07:c4:5e:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AD19173FE66EE2B9E995A99ED7DC4230113BDEF Validity Not Before: Nov 4 15:16:55 2025 GMT Not After : Nov 7 20:41:55 2025 GMT Subject: CN=58CDB45BA34453430D7BEA780D79EAB4F753EF0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1b:b5:70:95:88:a7:f3:df:50:78:6e:f6:01: e4:2d:a5:91:8d:c2:af:d3:b9:d6:af:5e:74:51:5d: a3:df:3a:64:6f:ed:e8:56:ac:e1:18:c1:07:53:5d: f9:33:d1:c3:05:1c:9d:43:64:5c:ee:97:fd:5a:49: af:9c:f3:a1:26:e7:71:69:3d:2c:fc:49:8d:33:63: c3:a9:bc:d1:61:55:ff:b9:8b:11:c1:42:fb:12:b0: 59:f3:c1:10:1c:b5:1c:43:06:23:f4:10:21:d8:e1: 38:66:17:19:1c:cf:44:a3:7b:02:69:cb:75:7d:d2: 13:ae:62:4b:ca:49:d4:79:e1:b5:65:c9:e0:95:ee: 34:b1:d3:ea:6c:cf:c2:9d:1c:4b:c8:6b:c0:6f:b3: 11:be:b7:a6:cf:a5:15:f1:81:84:d6:38:a0:92:6d: 30:06:20:c7:74:90:c6:7b:77:3d:5d:07:3c:50:07: 5e:38:69:30:06:cf:19:05:ea:f9:12:ee:79:fc:3d: 8e:05:ab:4c:bf:f7:5e:71:58:b1:ed:98:51:80:47: ef:df:08:0e:58:53:13:65:0a:e1:b4:03:d6:a6:0e: 92:e2:45:04:d0:b4:b2:61:95:9e:ee:b3:34:9f:84: ca:d0:05:31:73:2c:1f:79:ac:07:96:1d:5b:ec:e4: da:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:CD:B4:5B:A3:44:53:43:0D:7B:EA:78:0D:79:EA:B4:F7:53:EF:0B X509v3 Authority Key Identifier: keyid:5A:D1:91:73:FE:66:EE:2B:9E:99:5A:99:ED:7D:C4:23:01:13:BD:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:88:e5:80:3a:5d:7f:18:80:4f:8e:6a:80:fe:1d:78:89:50: 82:6e:01:eb:08:cf:e3:f2:74:b0:17:c2:ef:95:8e:9a:2a:49: 3e:75:0a:06:42:00:04:89:e8:97:cb:99:ba:f0:ed:3e:77:65: 10:60:8c:69:83:1a:34:f3:a6:35:4e:81:d4:8b:9b:be:94:33: b7:fa:2f:e9:75:7d:d5:92:1d:bf:85:e9:0f:da:7b:5c:db:36: 4a:07:65:b4:d9:02:e0:30:32:05:38:3a:ad:97:14:d3:65:ce: 97:24:34:9e:2d:42:ae:64:32:bb:65:b0:02:ed:3c:b1:72:1b: dc:e4:8b:3f:55:75:e4:e4:e9:e0:16:af:1b:0a:e8:5b:3d:20: 14:75:a6:f7:75:5d:57:3e:be:82:4e:06:48:6b:15:a3:97:30: 01:c7:57:45:ea:e7:93:5f:80:e9:60:bc:e1:cc:97:2d:79:35: 78:72:94:e9:9f:ef:66:42:14:66:f8:cf:ea:22:53:a6:2c:1f: af:3d:a8:d6:92:b2:a9:cd:5e:ba:8a:74:0d:36:0d:c3:6d:61: 6b:af:4f:3f:21:8b:5d:23:e8:bb:b4:81:2b:82:9b:4b:48:4d: 1b:2f:4d:7e:e5:28:4a:f1:42:d6:b2:e1:42:99:cc:a5:c1:13: 5a:7f:78:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBgrwRWTkmbamuFfnvC0FLQfEXj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0MjMw MTEzQkRFRjAeFw0yNTExMDQxNTE2NTVaFw0yNTExMDcyMDQxNTVaMDMxMTAvBgNV BAMTKDU4Q0RCNDVCQTM0NDUzNDMwRDdCRUE3ODBENzlFQUI0Rjc1M0VGMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1G7VwlYin899QeG72AeQtpZGN wq/TudavXnRRXaPfOmRv7ehWrOEYwQdTXfkz0cMFHJ1DZFzul/1aSa+c86Em53Fp PSz8SY0zY8OpvNFhVf+5ixHBQvsSsFnzwRActRxDBiP0ECHY4ThmFxkcz0SjewJp y3V90hOuYkvKSdR54bVlyeCV7jSx0+psz8KdHEvIa8BvsxG+t6bPpRXxgYTWOKCS bTAGIMd0kMZ7dz1dBzxQB144aTAGzxkF6vkS7nn8PY4Fq0y/915xWLHtmFGAR+/f CA5YUxNlCuG0A9amDpLiRQTQtLJhlZ7uszSfhMrQBTFzLB95rAeWHVvs5NrlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWM20W6NEU0MNe+p4DXnqtPdT7wswHwYDVR0j BBgwFoAUWtGRc/5m7iuemVqZ7X3EIwETve8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmVkYjI4Zi1mM2Y5LTQxOTktODVhMy1jOWJmOWE3YTdkZjgvMC81QUQxOTE3M0ZF NjZFRTJCOUU5OTVBOTlFRDdEQzQyMzAxMTNCREVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0MjMwMTEz QkRFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWZlZGIyOGYtZjNmOS00MTk5LTg1 YTMtYzliZjlhN2E3ZGY4LzAvNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0 MjMwMTEzQkRFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALeI5YA6XX8YgE+OaoD+HXiJUIJuAesIz+Py dLAXwu+VjpoqST51CgZCAASJ6JfLmbrw7T53ZRBgjGmDGjTzpjVOgdSLm76UM7f6 L+l1fdWSHb+F6Q/ae1zbNkoHZbTZAuAwMgU4Oq2XFNNlzpckNJ4tQq5kMrtlsALt PLFyG9zkiz9VdeTk6eAWrxsK6Fs9IBR1pvd1XVc+voJOBkhrFaOXMAHHV0Xq55Nf gOlgvOHMly15NXhylOmf72ZCFGb4z+oiU6YsH689qNaSsqnNXrqKdA02DcNtYWuv Tz8hi10j6Lu0gSuCm0tITRsvTX7lKErxQtay4UKZzKXBE1p/eLg= -----END CERTIFICATE-----Generated at Wed Nov 5 06:05:15 2025 by rpki-client