$ rpki-client -vvf repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft File: 5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft (raw, json) Hash identifier: 4DiBKiA+srD+3kcoJiiDDC1r8qCNl6vag9Lb6kcr69k= Subject key identifier: 19:C9:60:F0:A5:40:16:85:C9:7E:BB:6B:0F:F8:9A:50:45:CE:F7:FE Authority key identifier: 5F:E2:D2:A6:AB:51:68:6B:C9:12:62:CC:80:15:2C:19:50:63:7A:EA Certificate issuer: /CN=5FE2D2A6AB51686BC91262CC80152C1950637AEA Certificate serial: 33C26A1968C2E1D121C0D30AFE02C1C8D8AC0F37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft Manifest number: D2 Signing time: Tue 04 Nov 2025 18:01:58 +0000 Manifest this update: Tue 04 Nov 2025 17:56:58 +0000 Manifest next update: Fri 07 Nov 2025 22:38:58 +0000 Files and hashes: 1: 5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl (hash: hFDk7Ve1ZBxafKPihBte9Y/TC4xw2vgz5SfY5WqgZGM=) 2: 3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa (hash: jnzw16bqb1Ot67y6WJYq1p4RFM0IEtmQV6RwIJ2Az3Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:c2:6a:19:68:c2:e1:d1:21:c0:d3:0a:fe:02:c1:c8:d8:ac:0f:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FE2D2A6AB51686BC91262CC80152C1950637AEA Validity Not Before: Nov 4 17:56:58 2025 GMT Not After : Nov 7 22:38:58 2025 GMT Subject: CN=19C960F0A5401685C97EBB6B0FF89A5045CEF7FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c8:ca:24:36:1d:9b:cc:63:b5:99:44:7d:10: 8c:06:66:27:0d:0b:27:89:81:80:1d:82:b6:0e:a9: 38:c4:de:2b:3f:76:ed:49:99:02:64:0a:cc:f8:64: 65:9a:e7:b6:d4:d5:9a:04:7e:9e:81:86:8f:d5:e2: 59:37:27:98:24:60:56:9a:02:17:fb:a0:7a:6e:47: ea:7b:4d:a5:f0:d4:29:5f:bc:31:d9:5c:f9:0a:de: 82:cc:69:d4:53:63:f0:18:94:f5:80:01:72:1b:e0: 29:97:a7:7b:d4:f4:39:79:c7:9b:c0:7e:d0:fa:b5: 85:f4:3a:ef:df:e2:7e:b7:a9:a2:72:64:6a:9f:be: 6a:b6:c2:48:fe:ed:f0:ee:21:a9:34:c9:75:8b:d0: 57:cf:55:83:7c:95:de:50:5b:aa:e8:9b:07:fe:44: db:fc:b7:bc:ca:e5:06:88:88:22:c2:20:25:2a:da: f7:7b:9d:31:cd:90:0b:b8:80:19:2d:67:04:92:f2: 8c:e8:39:20:a9:2e:4b:c8:80:71:76:fc:f9:15:5c: fd:67:12:5a:ed:33:ce:fa:3b:00:20:30:52:6e:99: 6e:51:56:22:e8:9d:89:97:8c:7f:6d:80:d4:19:08: 0a:18:33:dd:44:81:c5:e4:e5:c8:b2:c9:a3:da:67: d1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C9:60:F0:A5:40:16:85:C9:7E:BB:6B:0F:F8:9A:50:45:CE:F7:FE X509v3 Authority Key Identifier: keyid:5F:E2:D2:A6:AB:51:68:6B:C9:12:62:CC:80:15:2C:19:50:63:7A:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:35:93:d1:7f:b1:5e:72:e0:5e:78:1d:f6:41:67:af:93:55: f3:c3:49:87:ac:9d:b8:ef:d5:42:64:43:98:7c:8d:7c:80:ab: 4f:78:9f:e4:3c:8a:cb:29:23:5d:a8:c3:fc:37:ea:6e:ee:7a: 11:33:53:41:3a:aa:cd:3a:19:2c:43:f4:40:54:8a:1b:af:43: 31:e1:c6:47:0b:10:0f:24:a8:d4:21:cd:e8:ad:9e:02:12:17: 5b:2e:ad:33:e6:11:67:a0:ce:c9:24:a2:5a:4e:f5:51:19:cf: 58:ef:a2:85:b9:93:3c:99:39:b9:0b:eb:e5:a4:e2:ab:90:41: 0b:21:26:55:d1:2f:bc:5d:2c:c2:2a:c2:16:38:e2:38:67:df: 4c:04:eb:17:84:4a:4f:23:d0:2a:5f:18:68:38:c5:a8:a0:65: 0b:b3:c6:ad:fd:00:fa:5c:14:4f:71:b8:32:1c:d0:5e:27:35: be:bb:e7:5f:af:f2:1d:f9:bd:f7:36:ab:ff:79:8b:4b:eb:13: a9:b0:da:7a:16:a5:54:e2:85:b1:f1:40:46:83:01:2f:cf:65: be:ea:1f:af:7e:c6:4d:d4:ef:89:b2:28:d6:d6:90:b5:5c:84: 09:68:f5:2f:1a:6a:2d:a6:b8:e3:7f:36:20:ad:f1:76:72:34: 27:78:7a:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM8JqGWjC4dEhwNMK/gLByNisDzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJDMTk1 MDYzN0FFQTAeFw0yNTExMDQxNzU2NThaFw0yNTExMDcyMjM4NThaMDMxMTAvBgNV BAMTKDE5Qzk2MEYwQTU0MDE2ODVDOTdFQkI2QjBGRjg5QTUwNDVDRUY3RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYyMokNh2bzGO1mUR9EIwGZicN CyeJgYAdgrYOqTjE3is/du1JmQJkCsz4ZGWa57bU1ZoEfp6Bho/V4lk3J5gkYFaa Ahf7oHpuR+p7TaXw1ClfvDHZXPkK3oLMadRTY/AYlPWAAXIb4CmXp3vU9Dl5x5vA ftD6tYX0Ou/f4n63qaJyZGqfvmq2wkj+7fDuIak0yXWL0FfPVYN8ld5QW6romwf+ RNv8t7zK5QaIiCLCICUq2vd7nTHNkAu4gBktZwSS8ozoOSCpLkvIgHF2/PkVXP1n ElrtM876OwAgMFJumW5RViLonYmXjH9tgNQZCAoYM91EgcXk5ciyyaPaZ9FJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGclg8KVAFoXJfrtrD/iaUEXO9/4wHwYDVR0j BBgwFoAUX+LSpqtRaGvJEmLMgBUsGVBjeuowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjEwZWMwZi0wNDIwLTQwMmYtOTVmZS03YjMzZTUxMTJiYzMvMC81RkUyRDJBNkFC NTE2ODZCQzkxMjYyQ0M4MDE1MkMxOTUwNjM3QUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJDMTk1MDYz N0FFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDIxMGVjMGYtMDQyMC00MDJmLTk1 ZmUtN2IzM2U1MTEyYmMzLzAvNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJD MTk1MDYzN0FFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMU1k9F/sV5y4F54HfZBZ6+TVfPDSYesnbjv 1UJkQ5h8jXyAq094n+Q8isspI12ow/w36m7uehEzU0E6qs06GSxD9EBUihuvQzHh xkcLEA8kqNQhzeitngISF1surTPmEWegzskkolpO9VEZz1jvooW5kzyZObkL6+Wk 4quQQQshJlXRL7xdLMIqwhY44jhn30wE6xeESk8j0CpfGGg4xaigZQuzxq39APpc FE9xuDIc0F4nNb6751+v8h35vfc2q/95i0vrE6mw2noWpVTihbHxQEaDAS/PZb7q H69+xk3U74myKNbWkLVchAlo9S8aai2muON/NiCt8XZyNCd4emI= -----END CERTIFICATE-----Generated at Wed Nov 5 01:20:35 2025 by rpki-client