$ rpki-client -vvf repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft File: 5AE57F3F97F40888F93913350A218863E705CD34.mft (raw, json) Hash identifier: dARKxx7tanneqkEHQVGP0IWswyhq2/OER5pUFge0GmM= Subject key identifier: 7D:B2:94:CD:8A:0A:3F:95:6C:B8:24:2E:8C:60:D6:B7:DF:52:4D:EA Authority key identifier: 5A:E5:7F:3F:97:F4:08:88:F9:39:13:35:0A:21:88:63:E7:05:CD:34 Certificate issuer: /CN=5AE57F3F97F40888F93913350A218863E705CD34 Certificate serial: 1170090EB0CC345C80DF21D3DF1E537E31FF6D6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft Manifest number: 0259 Signing time: Tue 04 Nov 2025 05:51:26 +0000 Manifest this update: Tue 04 Nov 2025 05:46:26 +0000 Manifest next update: Fri 07 Nov 2025 07:30:26 +0000 Files and hashes: 1: 5AE57F3F97F40888F93913350A218863E705CD34.crl (hash: z7XEUoaa/Z37i8Ui1pjSAm8zdgAM00ssBFeZNnz/5lQ=) 2: 3130332e3138332e31312e302f32342d3234203d3e20313339393637.roa (hash: Aeu4h6nFmtclcSAntQ1D1feUfbui+nbdSHb/VFJyfM0=) 3: 3130332e3138332e31302e302f32342d3234203d3e20313339393637.roa (hash: lDreBV2a5k+F2nOzqdVDXyLmxgTFmhT5IbglBwCmDnU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.crl rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:30:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:70:09:0e:b0:cc:34:5c:80:df:21:d3:df:1e:53:7e:31:ff:6d:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AE57F3F97F40888F93913350A218863E705CD34 Validity Not Before: Nov 4 05:46:26 2025 GMT Not After : Nov 7 07:30:26 2025 GMT Subject: CN=7DB294CD8A0A3F956CB8242E8C60D6B7DF524DEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:51:8e:13:fd:a7:f2:d7:50:4d:2c:e4:45:45: 7a:44:ec:13:ab:59:63:d1:39:90:c2:ef:a9:db:ef: fa:54:36:56:e9:32:5a:ca:66:11:81:5e:5f:8d:4d: 7c:90:b3:76:c7:a5:8f:32:5a:e8:85:db:5a:d6:f0: fe:9b:11:c5:7b:f4:15:53:a1:0d:d5:b3:cf:6a:d7: cc:e9:da:d6:31:aa:b3:71:95:db:fa:8a:f0:a9:71: 26:e1:52:68:74:2a:15:64:5d:f2:6d:31:e9:48:f2: c2:e4:51:34:6b:de:0e:ae:5c:2c:d9:19:a2:1a:d4: f3:c2:73:c5:15:7a:72:dd:26:5d:b8:55:70:83:26: dd:00:ca:85:bb:b4:56:0a:31:8a:1f:51:58:44:aa: 93:7c:00:79:6b:45:7c:6e:4c:80:a2:7a:6e:21:3c: 1e:b6:48:73:a8:1a:5c:9d:6c:fa:b8:ea:fe:55:a8: fe:a3:1f:f6:a8:25:c9:0e:d6:4b:55:49:b2:14:a9: 55:98:3a:47:f9:55:3e:84:f5:50:f7:5a:bf:0d:9a: 4c:f7:13:66:65:b9:b2:21:fe:d8:0a:cf:89:fd:da: 27:89:9e:1f:0a:a6:8d:a0:04:58:e6:82:e6:6b:6c: e6:78:bf:1f:64:6b:77:2d:a8:b5:ff:7a:e8:ec:d3: 2d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B2:94:CD:8A:0A:3F:95:6C:B8:24:2E:8C:60:D6:B7:DF:52:4D:EA X509v3 Authority Key Identifier: keyid:5A:E5:7F:3F:97:F4:08:88:F9:39:13:35:0A:21:88:63:E7:05:CD:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:32:37:38:41:b5:75:76:d8:b0:c0:e2:0f:d4:80:ec:46:42: db:df:75:c1:5d:76:92:f1:2c:0f:f4:27:49:42:91:1c:25:6a: 94:c2:9f:7a:8c:b7:08:7b:27:5e:86:98:53:78:bd:fb:55:18: 06:3e:f7:b1:8d:13:a4:35:de:98:b8:37:36:c8:bb:97:a8:5c: ee:77:78:f9:6d:ce:38:13:ee:e8:ba:07:3b:a2:9a:5a:77:61: 1a:1d:1f:15:ed:ed:b3:bc:28:4c:fd:fd:1f:68:fd:85:59:43: 5e:b5:60:7e:f2:71:b2:d3:55:bf:2d:3d:6c:26:e6:e1:07:35: d0:13:9c:e6:bc:d7:c7:1d:1e:d9:c5:db:7e:ca:0f:99:a3:20: f3:d0:33:b8:9f:da:90:b3:af:fd:97:5b:86:ca:f3:3a:93:f8: 4f:f7:d2:ac:66:a3:05:e8:86:9c:c5:07:04:ae:0d:51:84:9f: 29:43:20:be:2b:39:1c:69:6a:eb:84:09:af:42:ec:fb:ef:18: 61:8d:4b:d8:60:6f:a3:7b:ef:64:a9:d4:14:48:fd:7b:fb:75: 83:a3:c2:06:b7:58:de:ad:6a:d2:db:8a:e2:4a:b3:e2:70:ea: ed:25:f0:b0:ad:f0:d4:bb:dd:08:05:ea:84:74:1e:d4:7f:f9: 1c:c1:3c:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEXAJDrDMNFyA3yHT3x5TfjH/bW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4NjNF NzA1Q0QzNDAeFw0yNTExMDQwNTQ2MjZaFw0yNTExMDcwNzMwMjZaMDMxMTAvBgNV BAMTKDdEQjI5NENEOEEwQTNGOTU2Q0I4MjQyRThDNjBENkI3REY1MjRERUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPUY4T/afy11BNLORFRXpE7BOr WWPROZDC76nb7/pUNlbpMlrKZhGBXl+NTXyQs3bHpY8yWuiF21rW8P6bEcV79BVT oQ3Vs89q18zp2tYxqrNxldv6ivCpcSbhUmh0KhVkXfJtMelI8sLkUTRr3g6uXCzZ GaIa1PPCc8UVenLdJl24VXCDJt0AyoW7tFYKMYofUVhEqpN8AHlrRXxuTICiem4h PB62SHOoGlydbPq46v5VqP6jH/aoJckO1ktVSbIUqVWYOkf5VT6E9VD3Wr8Nmkz3 E2ZlubIh/tgKz4n92ieJnh8Kpo2gBFjmguZrbOZ4vx9ka3ctqLX/eujs0y2DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfbKUzYoKP5VsuCQujGDWt99STeowHwYDVR0j BBgwFoAUWuV/P5f0CIj5ORM1CiGIY+cFzTQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDhjZGY1YS1iOWE3LTQ0NjktYTY1My1jOWZmMmEwMDM3NzMvMC81QUU1N0YzRjk3 RjQwODg4RjkzOTEzMzUwQTIxODg2M0U3MDVDRDM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4NjNFNzA1 Q0QzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ4Y2RmNWEtYjlhNy00NDY5LWE2 NTMtYzlmZjJhMDAzNzczLzAvNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4 NjNFNzA1Q0QzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEsyNzhBtXV22LDA4g/UgOxGQtvfdcFddpLx LA/0J0lCkRwlapTCn3qMtwh7J16GmFN4vftVGAY+97GNE6Q13pi4NzbIu5eoXO53 ePltzjgT7ui6Bzuimlp3YRodHxXt7bO8KEz9/R9o/YVZQ161YH7ycbLTVb8tPWwm 5uEHNdATnOa818cdHtnF237KD5mjIPPQM7if2pCzr/2XW4bK8zqT+E/30qxmowXo hpzFBwSuDVGEnylDIL4rORxpauuECa9C7PvvGGGNS9hgb6N772Sp1BRI/Xv7dYOj wga3WN6tatLbiuJKs+Jw6u0l8LCt8NS73QgF6oR0HtR/+RzBPOM= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:35 2025 by rpki-client