$ rpki-client -vvf repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft File: 5AE19AE3FA86591042AE694640539C9669DEC801.mft (raw, json) Hash identifier: GRC0gdL7GHOH62IAxQBNt27DaAfaUxaIJFgflOntDD4= Subject key identifier: 2B:00:E2:16:F1:66:25:F0:13:AE:C1:ED:DA:84:ED:81:12:BF:6B:7C Authority key identifier: 5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01 Certificate issuer: /CN=5AE19AE3FA86591042AE694640539C9669DEC801 Certificate serial: 1E3316560962D4782839889E8BCCAC68A67EFD4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft Manifest number: 01FB Signing time: Sun 02 Nov 2025 01:01:42 +0000 Manifest this update: Sun 02 Nov 2025 00:56:42 +0000 Manifest next update: Wed 05 Nov 2025 12:24:42 +0000 Files and hashes: 1: 3130332e3232302e34342e302f32342d3234203d3e203438343635.roa (hash: Vw4jOV+MZ+fjdwltnh69uK5QodMXxVJ0LlNiepCYdZ0=) 2: 5AE19AE3FA86591042AE694640539C9669DEC801.crl (hash: GkOKxq3JxRn6NNgs1J58rbAjfh7NHrMLjYe8U6HBTPs=) 3: 3130332e3232302e34342e302f32342d3234203d3e20313530313939.roa (hash: JArcqatJBrG0UJiwDi1c9yEOpb8Bk4EGWPIVKLKaIwQ=) 4: 3130332e3232302e34352e302f32342d3234203d3e203438343635.roa (hash: m4IQs/Cui2ddwLQciv0u+g5oFPnYhzNtze79R+PFKLg=) 5: 3130332e3232302e34352e302f32342d3234203d3e20313530313939.roa (hash: Vrmcu03T647sbP3GWEBBWylAAxqciaCOgVn/2H7+uB8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 12:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:33:16:56:09:62:d4:78:28:39:88:9e:8b:cc:ac:68:a6:7e:fd:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AE19AE3FA86591042AE694640539C9669DEC801 Validity Not Before: Nov 2 00:56:42 2025 GMT Not After : Nov 5 12:24:42 2025 GMT Subject: CN=2B00E216F16625F013AEC1EDDA84ED8112BF6B7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d1:78:16:0b:32:96:10:c2:62:ad:46:64:92: 0a:d0:41:55:60:ea:b3:19:00:75:01:fe:b6:a7:83: 9d:62:8f:75:0e:10:32:46:3e:78:b5:93:3a:ae:fc: b6:69:69:13:bc:34:7d:2b:6c:e6:19:c6:36:20:dc: e0:ec:22:75:0d:68:9f:c3:01:ea:fb:7e:e9:6d:54: 25:6c:aa:c8:5c:f5:db:a5:9b:a9:8e:85:f9:66:ee: f0:8a:e5:84:62:d5:19:43:01:dc:12:61:9c:78:ff: 0f:6d:d3:ca:cd:5f:a1:42:8a:5e:a1:b7:3f:85:90: 83:f7:bb:00:0b:da:0e:7d:ea:cb:90:76:2e:3f:e9: 9b:be:e5:00:58:a4:b7:b9:4f:dc:f9:5d:5b:55:8c: bd:73:fb:b6:8d:0c:8e:a8:45:78:fc:12:e1:86:16: 54:41:c8:9f:02:52:26:94:23:e3:39:88:ed:47:8f: d0:03:a5:f2:ca:a4:e8:0f:1d:54:08:d0:92:01:33: 9d:22:b5:dd:0c:6a:d7:c3:73:41:98:a1:62:ff:b4: 7d:22:d1:b4:b7:db:9f:5e:b7:d9:c2:15:f4:2d:d5: 88:2d:78:08:4d:26:94:81:7b:96:10:80:27:0b:8d: f0:cb:7e:60:63:f1:14:6b:d6:75:0c:66:fc:d7:c1: 72:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:00:E2:16:F1:66:25:F0:13:AE:C1:ED:DA:84:ED:81:12:BF:6B:7C X509v3 Authority Key Identifier: keyid:5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:8b:dd:c2:b5:0d:80:b3:1f:23:41:88:33:72:9d:21:6e:5e: ca:24:d5:aa:8e:f2:90:2f:8f:39:97:9c:0a:35:f6:f5:be:22: 98:4b:3d:a3:9f:3d:1c:c7:d4:14:d3:82:64:46:6e:95:1c:a6: 40:9d:a5:16:e0:e7:4d:4b:2c:35:21:97:ea:cb:f6:e6:fc:b8: 04:31:0d:cf:d1:4e:68:16:81:b2:43:c9:9e:32:0f:28:f1:52: 58:11:bf:b2:df:1f:51:4e:17:a0:cc:c6:bb:1b:0e:0b:3e:17: 5b:e8:a2:f9:07:27:dd:bc:27:8e:5d:b5:97:37:e4:07:b3:b2: 5e:ce:a5:2c:f8:67:b0:d3:ca:89:19:ec:5c:27:e7:20:43:ac: 4b:12:7c:27:95:22:4f:09:5c:f1:e5:19:0f:ad:57:dc:13:a5: 46:ba:24:f5:51:26:7f:e6:33:a9:83:d6:67:d3:cb:b5:17:20: 3f:88:b6:88:ca:98:88:67:79:51:93:c7:1c:7e:d3:71:4a:f9: bc:c8:6d:e6:bf:17:75:ac:a3:1d:e2:3e:ca:10:49:17:35:31: b1:55:0f:72:37:9b:64:a0:38:7a:78:99:37:c1:ab:d5:4b:2c: a6:db:ba:5d:29:bb:ff:e6:29:b1:68:d8:15:07:53:3f:e2:6b: 1f:b8:60:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHjMWVgli1HgoOYiei8ysaKZ+/U0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFFMTlBRTNGQTg2NTkxMDQyQUU2OTQ2NDA1MzlDOTY2 OURFQzgwMTAeFw0yNTExMDIwMDU2NDJaFw0yNTExMDUxMjI0NDJaMDMxMTAvBgNV BAMTKDJCMDBFMjE2RjE2NjI1RjAxM0FFQzFFRERBODRFRDgxMTJCRjZCN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY0XgWCzKWEMJirUZkkgrQQVVg 6rMZAHUB/rang51ij3UOEDJGPni1kzqu/LZpaRO8NH0rbOYZxjYg3ODsInUNaJ/D Aer7fultVCVsqshc9dulm6mOhflm7vCK5YRi1RlDAdwSYZx4/w9t08rNX6FCil6h tz+FkIP3uwAL2g596suQdi4/6Zu+5QBYpLe5T9z5XVtVjL1z+7aNDI6oRXj8EuGG FlRByJ8CUiaUI+M5iO1Hj9ADpfLKpOgPHVQI0JIBM50itd0MatfDc0GYoWL/tH0i 0bS3259et9nCFfQt1YgteAhNJpSBe5YQgCcLjfDLfmBj8RRr1nUMZvzXwXIbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKwDiFvFmJfATrsHt2oTtgRK/a3wwHwYDVR0j BBgwFoAUWuGa4/qGWRBCrmlGQFOclmneyAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTcyOTI5MS1hMWE3LTRiMTktOTNmNi0xZDg0NTc0YTY3YWUvMC81QUUxOUFFM0ZB ODY1OTEwNDJBRTY5NDY0MDUzOUM5NjY5REVDODAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFFMTlBRTNGQTg2NTkxMDQyQUU2OTQ2NDA1MzlDOTY2OURF QzgwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU3MjkyOTEtYTFhNy00YjE5LTkz ZjYtMWQ4NDU3NGE2N2FlLzAvNUFFMTlBRTNGQTg2NTkxMDQyQUU2OTQ2NDA1MzlD OTY2OURFQzgwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJSL3cK1DYCzHyNBiDNynSFuXsok1aqO8pAv jzmXnAo19vW+IphLPaOfPRzH1BTTgmRGbpUcpkCdpRbg501LLDUhl+rL9ub8uAQx Dc/RTmgWgbJDyZ4yDyjxUlgRv7LfH1FOF6DMxrsbDgs+F1voovkHJ928J45dtZc3 5Aezsl7OpSz4Z7DTyokZ7Fwn5yBDrEsSfCeVIk8JXPHlGQ+tV9wTpUa6JPVRJn/m M6mD1mfTy7UXID+ItojKmIhneVGTxxx+03FK+bzIbea/F3Wsox3iPsoQSRc1MbFV D3I3m2SgOHp4mTfBq9VLLKbbul0pu//mKbFo2BUHUz/iax+4YDQ= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:29 2025 by rpki-client