$ rpki-client -vvf repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft File: 5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft (raw, json) Hash identifier: 5lTTcXjCcfUIIWz2ChLzONh9uXmOS+zDn0Quo5fqhbk= Subject key identifier: 4C:33:5F:1B:AF:EF:46:18:9E:F9:B2:3B:3C:C9:FD:3F:F3:BB:BC:C3 Authority key identifier: 5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F Certificate issuer: /CN=5EC2C02340FBFA79A3352FA18934C1E7B1D9216F Certificate serial: 64C6681CC9A07486844B257878C8A88D872DFC33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft Manifest number: 021D Signing time: Sun 02 Nov 2025 17:11:56 +0000 Manifest this update: Sun 02 Nov 2025 17:06:56 +0000 Manifest next update: Wed 05 Nov 2025 21:59:56 +0000 Files and hashes: 1: 5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl (hash: kKd3AXjw12iibBUEcUovFWJey4lqHeIgXOOyLJwTHzs=) 2: 3130332e3138392e3230302e302f32332d3233203d3e2039333431.roa (hash: gvBia+LW2/7IKDQVvnVoZBUClWDY/4rfXyS+EBiBMPI=) 3: 3130332e3138392e3230312e302f32342d3234203d3e2039333431.roa (hash: Dh9fcAyZ65O9TDEVPO/dqbyH2BI/vOdtlvtC7u5HK34=) 4: 3130332e3138392e3230302e302f32342d3234203d3e2039333431.roa (hash: IarCEKLylnrJ7AZkdxFWJNi+xmNEExkQb+M5jNKDEHk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 21:59:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:c6:68:1c:c9:a0:74:86:84:4b:25:78:78:c8:a8:8d:87:2d:fc:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EC2C02340FBFA79A3352FA18934C1E7B1D9216F Validity Not Before: Nov 2 17:06:56 2025 GMT Not After : Nov 5 21:59:56 2025 GMT Subject: CN=4C335F1BAFEF46189EF9B23B3CC9FD3FF3BBBCC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:63:45:d3:42:66:c0:df:48:12:a5:67:7a:b8: c4:4f:35:44:6b:eb:64:78:e9:ec:b8:40:c6:39:bd: 6b:78:c0:83:2a:e3:55:ca:34:52:06:2e:e3:75:11: 74:4b:03:eb:af:17:b8:2f:b2:96:0c:39:5a:4c:f7: 7f:82:db:7e:b3:52:5d:b3:8f:00:9f:a3:db:45:26: 67:16:4c:f9:f4:23:61:08:4c:88:a4:c3:b8:44:cd: 5a:3e:75:1d:b9:a7:bf:d2:bf:8e:62:96:d4:41:ca: 40:9b:15:a8:8c:9f:3d:74:e4:28:6f:91:da:1d:de: 0c:1b:fc:55:58:b1:99:1f:af:71:61:17:76:70:4a: 98:81:24:83:81:c2:83:7d:c0:46:5c:54:a4:e0:7f: f0:12:ba:f9:31:57:ce:a5:1f:58:2e:77:0e:5c:ba: f0:22:7a:1b:78:d5:0d:c1:dd:21:0e:88:ae:ab:09: d9:84:28:e6:53:a8:ec:6d:4a:69:d8:62:81:4b:d1: 64:88:fc:67:b9:9f:c5:f3:49:84:14:64:ee:30:79: 3b:91:ac:9c:cb:11:17:9d:d5:67:39:c9:a5:b4:5d: bd:75:c4:1d:c6:ac:03:ca:71:bd:ab:c2:c3:13:1a: aa:49:fd:17:df:92:6f:53:a9:4c:fa:c7:27:fb:c4: b1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:33:5F:1B:AF:EF:46:18:9E:F9:B2:3B:3C:C9:FD:3F:F3:BB:BC:C3 X509v3 Authority Key Identifier: keyid:5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:a3:26:77:b7:b6:a6:37:20:3a:ad:c8:eb:57:7f:eb:37:2f: 09:8a:3f:5a:bf:ac:2d:a4:47:a2:8a:73:fc:65:79:00:99:15: d7:13:0b:21:a8:32:68:c1:e1:a6:f2:c0:25:0a:c6:32:c7:f0: 7e:c5:be:fd:13:bf:09:fc:79:a4:fc:13:b3:79:23:e1:e9:d1: 41:51:06:67:7d:f6:57:52:6e:96:33:d0:e4:85:9b:e1:0d:5e: 57:c2:72:a8:8c:e5:f8:03:be:f5:89:28:f1:a5:f8:50:60:b1: 7a:81:e7:16:12:4d:95:e2:28:0a:03:7d:20:ab:df:e0:02:55: 9a:30:c0:e0:e7:60:98:eb:4d:ab:0c:e7:c3:21:2f:88:dd:5a: 54:67:b0:56:7d:9e:e2:c0:71:ef:1c:2c:fd:86:04:a9:f7:30: 9b:36:d3:28:e7:1b:42:9b:31:54:9a:fb:82:f4:5c:96:a1:da: c5:33:c9:88:d5:9a:fb:5e:6c:ba:73:8c:4f:b4:89:3c:8f:26: dd:53:36:bf:c3:80:37:59:8f:6e:56:05:b4:03:bd:bd:1b:69: 50:e5:95:9b:ba:c0:81:54:23:50:7c:fb:c4:57:7f:b6:c4:af: c1:7c:f0:5b:35:78:af:4c:a3:9f:3d:f6:59:04:04:d4:3a:42: 36:f9:fa:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZMZoHMmgdIaESyV4eMiojYct/DMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMxRTdC MUQ5MjE2RjAeFw0yNTExMDIxNzA2NTZaFw0yNTExMDUyMTU5NTZaMDMxMTAvBgNV BAMTKDRDMzM1RjFCQUZFRjQ2MTg5RUY5QjIzQjNDQzlGRDNGRjNCQkJDQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Y0XTQmbA30gSpWd6uMRPNURr 62R46ey4QMY5vWt4wIMq41XKNFIGLuN1EXRLA+uvF7gvspYMOVpM93+C236zUl2z jwCfo9tFJmcWTPn0I2EITIikw7hEzVo+dR25p7/Sv45iltRBykCbFaiMnz105Chv kdod3gwb/FVYsZkfr3FhF3ZwSpiBJIOBwoN9wEZcVKTgf/ASuvkxV86lH1gudw5c uvAieht41Q3B3SEOiK6rCdmEKOZTqOxtSmnYYoFL0WSI/Ge5n8XzSYQUZO4weTuR rJzLERed1Wc5yaW0Xb11xB3GrAPKcb2rwsMTGqpJ/Rffkm9TqUz6xyf7xLHvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTDNfG6/vRhie+bI7PMn9P/O7vMMwHwYDVR0j BBgwFoAUXsLAI0D7+nmjNS+hiTTB57HZIW8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTJlNWYwMy1iZjk2LTRiNDAtYmQ0YS02ZTM4ODhjNDAyMDUvMC81RUMyQzAyMzQw RkJGQTc5QTMzNTJGQTE4OTM0QzFFN0IxRDkyMTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMxRTdCMUQ5 MjE2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EyZTVmMDMtYmY5Ni00YjQwLWJk NGEtNmUzODg4YzQwMjA1LzAvNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMx RTdCMUQ5MjE2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmjJne3tqY3IDqtyOtXf+s3LwmKP1q/rC2k R6KKc/xleQCZFdcTCyGoMmjB4abywCUKxjLH8H7Fvv0Tvwn8eaT8E7N5I+Hp0UFR Bmd99ldSbpYz0OSFm+ENXlfCcqiM5fgDvvWJKPGl+FBgsXqB5xYSTZXiKAoDfSCr 3+ACVZowwODnYJjrTasM58MhL4jdWlRnsFZ9nuLAce8cLP2GBKn3MJs20yjnG0Kb MVSa+4L0XJah2sUzyYjVmvtebLpzjE+0iTyPJt1TNr/DgDdZj25WBbQDvb0baVDl lZu6wIFUI1B8+8RXf7bEr8F88Fs1eK9Mo5899lkEBNQ6Qjb5+vk= -----END CERTIFICATE-----Generated at Tue Nov 4 22:22:08 2025 by rpki-client