$ rpki-client -vvf repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft File: 5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft (raw, json) Hash identifier: dHjcukbp3hrimOWU+KancRo5fhoJh5GTRD0v8B7w9LE= Subject key identifier: 35:A4:99:B3:35:84:3E:25:68:79:4F:09:9F:A5:66:EA:F7:32:3E:5C Authority key identifier: 5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F Certificate issuer: /CN=5EC2C02340FBFA79A3352FA18934C1E7B1D9216F Certificate serial: 7CEC4F329232D22E2E1F94533DF4B6400E543C3A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft Manifest number: 021E Signing time: Tue 04 Nov 2025 22:01:59 +0000 Manifest this update: Tue 04 Nov 2025 21:56:59 +0000 Manifest next update: Sat 08 Nov 2025 00:21:59 +0000 Files and hashes: 1: 3130332e3138392e3230312e302f32342d3234203d3e2039333431.roa (hash: Dh9fcAyZ65O9TDEVPO/dqbyH2BI/vOdtlvtC7u5HK34=) 2: 3130332e3138392e3230302e302f32342d3234203d3e2039333431.roa (hash: IarCEKLylnrJ7AZkdxFWJNi+xmNEExkQb+M5jNKDEHk=) 3: 3130332e3138392e3230302e302f32332d3233203d3e2039333431.roa (hash: gvBia+LW2/7IKDQVvnVoZBUClWDY/4rfXyS+EBiBMPI=) 4: 5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl (hash: r3fJPm4fsAU0rtsM6w7exN/msuabQII1bEMeFT5sQ+Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:ec:4f:32:92:32:d2:2e:2e:1f:94:53:3d:f4:b6:40:0e:54:3c:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EC2C02340FBFA79A3352FA18934C1E7B1D9216F Validity Not Before: Nov 4 21:56:59 2025 GMT Not After : Nov 8 00:21:59 2025 GMT Subject: CN=35A499B335843E2568794F099FA566EAF7323E5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fd:9e:18:98:38:ac:e6:94:02:73:29:31:d5: 84:75:5f:4b:a6:5d:4b:03:dd:d2:6c:9f:31:60:03: 92:88:62:dc:e1:45:15:dc:d4:2d:23:c4:8a:e5:eb: 24:5d:28:70:99:cd:3f:ce:c4:c7:1f:5d:c1:1d:14: 87:33:3d:bc:c7:bd:b4:3d:6a:9f:a9:2c:ab:ec:7d: 5a:33:6b:3b:b8:21:04:91:af:36:50:d2:50:ce:35: ea:d5:28:69:54:e7:ae:2b:3e:c8:87:d9:27:ab:a6: 10:b2:5d:ce:29:f3:6a:8a:24:d3:6d:d9:ac:c3:c6: 13:58:6d:ca:2c:9b:8c:9a:31:83:74:90:7a:67:b7: 48:84:41:f7:6f:cc:51:16:50:4e:db:b4:55:e1:26: fd:d4:fc:68:cd:1f:ab:fa:c8:a3:14:2e:bb:8f:7d: 11:ff:30:cc:d2:5b:ec:08:69:8b:6d:9e:03:5a:a8: 6b:66:e1:22:34:be:0f:62:4b:7f:6c:26:05:2f:d6: 17:35:ff:7f:ee:cb:94:cd:84:c3:b5:27:8f:33:21: fe:ea:2d:39:9c:20:e8:0e:07:70:91:bc:40:02:83: 78:82:85:e6:e0:9d:8b:83:3b:14:8a:fd:3a:cc:ba: 3c:93:c2:13:89:07:dc:eb:c9:03:29:ed:55:30:b0: 73:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A4:99:B3:35:84:3E:25:68:79:4F:09:9F:A5:66:EA:F7:32:3E:5C X509v3 Authority Key Identifier: keyid:5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:ab:c2:02:c7:35:91:b2:fc:5b:20:04:90:fd:6f:f8:7c:9e: 41:c8:6f:8f:e3:87:68:fc:48:7a:ed:c8:ce:41:e8:3d:2e:fe: e7:f1:64:eb:60:7e:b9:ba:14:90:f1:e0:be:fa:b6:f6:f9:87: 39:ab:93:1b:42:33:92:60:8f:bf:dc:24:9f:3d:98:3a:e6:7c: 4d:0b:7f:f4:d9:c0:bb:7e:bc:2f:d5:76:c2:13:70:96:3d:73: d4:6d:ed:ba:5b:e6:33:df:06:b1:3b:d2:57:8b:f0:d9:df:24: 32:3d:28:c1:0e:99:7d:c2:d7:e6:f4:64:2a:8c:97:bb:62:e2: 1a:87:fd:76:5f:2b:c4:6d:61:e2:8d:4b:f1:33:33:e1:55:3f: b5:fb:42:66:fb:b0:49:67:42:73:18:c3:5c:74:3f:f2:e1:60: 16:eb:4a:fe:f5:93:95:82:87:36:c8:ba:0b:17:27:e4:4c:2a: fa:70:e9:06:94:9d:a0:d8:a3:24:d4:00:ec:b1:7a:b4:ea:18: 72:1e:ed:1f:ec:85:f2:f9:6a:40:2c:68:50:08:35:29:dc:b5: 7c:53:27:f1:2f:40:ee:8d:e7:ad:9e:9d:7f:7f:b7:08:2b:bd: 9b:8d:af:c7:05:0e:93:cf:29:b9:0f:fc:93:8a:fc:cb:cc:eb: f6:e5:8c:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfOxPMpIy0i4uH5RTPfS2QA5UPDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMxRTdC MUQ5MjE2RjAeFw0yNTExMDQyMTU2NTlaFw0yNTExMDgwMDIxNTlaMDMxMTAvBgNV BAMTKDM1QTQ5OUIzMzU4NDNFMjU2ODc5NEYwOTlGQTU2NkVBRjczMjNFNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN/Z4YmDis5pQCcykx1YR1X0um XUsD3dJsnzFgA5KIYtzhRRXc1C0jxIrl6yRdKHCZzT/OxMcfXcEdFIczPbzHvbQ9 ap+pLKvsfVozazu4IQSRrzZQ0lDONerVKGlU564rPsiH2SerphCyXc4p82qKJNNt 2azDxhNYbcosm4yaMYN0kHpnt0iEQfdvzFEWUE7btFXhJv3U/GjNH6v6yKMULruP fRH/MMzSW+wIaYttngNaqGtm4SI0vg9iS39sJgUv1hc1/3/uy5TNhMO1J48zIf7q LTmcIOgOB3CRvEACg3iChebgnYuDOxSK/TrMujyTwhOJB9zryQMp7VUwsHPVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNaSZszWEPiVoeU8Jn6Vm6vcyPlwwHwYDVR0j BBgwFoAUXsLAI0D7+nmjNS+hiTTB57HZIW8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTJlNWYwMy1iZjk2LTRiNDAtYmQ0YS02ZTM4ODhjNDAyMDUvMC81RUMyQzAyMzQw RkJGQTc5QTMzNTJGQTE4OTM0QzFFN0IxRDkyMTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMxRTdCMUQ5 MjE2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EyZTVmMDMtYmY5Ni00YjQwLWJk NGEtNmUzODg4YzQwMjA1LzAvNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMx RTdCMUQ5MjE2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG2rwgLHNZGy/FsgBJD9b/h8nkHIb4/jh2j8 SHrtyM5B6D0u/ufxZOtgfrm6FJDx4L76tvb5hzmrkxtCM5Jgj7/cJJ89mDrmfE0L f/TZwLt+vC/VdsITcJY9c9Rt7bpb5jPfBrE70leL8NnfJDI9KMEOmX3C1+b0ZCqM l7ti4hqH/XZfK8RtYeKNS/EzM+FVP7X7Qmb7sElnQnMYw1x0P/LhYBbrSv71k5WC hzbIugsXJ+RMKvpw6QaUnaDYoyTUAOyxerTqGHIe7R/shfL5akAsaFAINSnctXxT J/EvQO6N562enX9/twgrvZuNr8cFDpPPKbkP/JOK/MvM6/bljEs= -----END CERTIFICATE-----Generated at Wed Nov 5 00:15:20 2025 by rpki-client