$ rpki-client -vvf repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft File: 5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft (raw, json) Hash identifier: jBou5lovngiCxtvVyDmcSG56Q5xgVSXhf0DLtNMrJDY= Subject key identifier: 11:38:7F:4B:E9:8E:2B:B1:1E:AD:5B:CC:2F:F6:7C:09:6C:FE:E9:74 Authority key identifier: 5E:68:3D:8B:34:5B:B6:E0:F6:3C:D1:A8:F3:2C:3B:5E:CC:B2:B9:B0 Certificate issuer: /CN=5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0 Certificate serial: 2D977895B27ECB85590823F84C23522513F0E0F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft Manifest number: 0494 Signing time: Sun 02 Nov 2025 17:10:54 +0000 Manifest this update: Sun 02 Nov 2025 17:05:54 +0000 Manifest next update: Wed 05 Nov 2025 20:48:54 +0000 Files and hashes: 1: 5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl (hash: 5jDPJppXjN6sIV0jrS6szsxHHFRYwfzTBOfuRM8cgGs=) 2: 3130332e3135362e3231362e302f32342d3234203d3e203538333639.roa (hash: Irudemtq4GtsKI+qW0qqUVrCa34ZHp9Oavot/JC0+Qo=) 3: 3130332e3135362e3231372e302f32342d3234203d3e203538333639.roa (hash: pwYW2LCd9vtI3mAJLlLqxnIjIDbhrNEv0Psd4I3TSks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:48:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:97:78:95:b2:7e:cb:85:59:08:23:f8:4c:23:52:25:13:f0:e0:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0 Validity Not Before: Nov 2 17:05:54 2025 GMT Not After : Nov 5 20:48:54 2025 GMT Subject: CN=11387F4BE98E2BB11EAD5BCC2FF67C096CFEE974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e1:4c:ec:ff:9b:25:28:de:45:bf:7a:34:f7: 7c:d5:54:9d:f9:f3:0d:43:83:d2:70:29:56:99:df: 74:bb:a9:1b:cc:1a:e6:2e:ce:0a:7c:2b:7f:74:6e: ec:e1:b8:22:85:00:1c:18:60:0f:15:3f:59:f5:69: 3a:03:36:15:2c:7f:7b:32:01:35:20:c2:cb:4a:b3: 0f:92:a5:5a:a4:71:24:0c:2a:8a:96:76:93:3e:1f: 20:f6:3f:d9:b8:5c:ee:69:8c:f7:96:26:82:a5:72: c2:9b:bc:4c:19:e1:65:26:75:c3:f3:88:e0:47:55: a1:a3:de:02:3c:65:9c:6a:62:14:c1:4b:aa:29:10: 05:92:3a:1e:d2:64:fd:82:02:b2:a4:c6:dd:88:a2: 68:98:98:c8:75:28:66:5b:26:4c:c2:be:b1:b5:96: 34:da:44:e6:84:b3:72:e8:e3:6c:5c:8a:cb:9b:1c: 86:0a:2b:82:b2:6c:38:70:5e:14:0f:3d:70:c9:e9: 85:fa:bd:05:4c:93:a1:bc:e4:dd:0d:49:f1:e6:62: 9f:5c:02:f4:06:c5:82:8e:a9:fd:df:2f:20:23:00: e7:21:8a:1b:ca:c4:d0:8b:6b:33:4b:10:61:a5:a0: 9c:8e:82:74:70:be:be:40:81:c3:6c:c5:5a:c3:83: 31:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:38:7F:4B:E9:8E:2B:B1:1E:AD:5B:CC:2F:F6:7C:09:6C:FE:E9:74 X509v3 Authority Key Identifier: keyid:5E:68:3D:8B:34:5B:B6:E0:F6:3C:D1:A8:F3:2C:3B:5E:CC:B2:B9:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:99:7a:53:b3:3a:89:0b:f4:b8:7e:54:17:f8:df:14:c4:fc: bc:09:3f:09:dd:55:7d:0a:e9:f0:69:9a:6f:2f:de:9b:bf:76: 1c:fb:20:1f:2c:f7:4a:6e:0f:d0:93:1f:c6:ac:d5:de:08:24: 56:2c:7b:dd:14:9a:96:a7:0a:f7:d9:e4:a9:f4:fb:e8:78:f3: 96:15:44:e2:6d:26:97:b6:c3:f0:91:55:e7:71:e8:e2:77:f8: 81:83:24:fb:ac:d0:1c:57:86:6b:0d:9a:b2:fd:72:2e:a2:1b: 9c:1c:ce:2a:6e:45:8e:0a:c3:32:22:ea:db:c8:a6:46:84:e0: bd:d9:a7:3c:f6:f1:ca:ba:9a:19:90:78:3f:42:bf:a3:4d:e5: 00:8d:be:ef:22:22:05:ba:63:65:e7:69:39:cc:61:f4:d3:c1: c7:ba:26:a2:78:60:8d:47:bd:cb:65:0d:ff:79:30:d4:61:12: 22:a6:a5:fd:41:f2:d4:3e:e5:aa:e0:8f:78:48:dc:da:fd:b8: 50:e0:38:1b:67:b3:2b:77:da:f0:71:a4:3a:36:69:64:99:7b: 20:9a:bb:06:5a:77:11:0d:14:97:df:26:6e:02:69:aa:c0:87: 35:be:dc:fd:0b:0b:63:b6:30:07:bb:1b:4e:48:6f:f9:73:10: 3a:4e:ab:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULZd4lbJ+y4VZCCP4TCNSJRPw4PMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU2ODNEOEIzNDVCQjZFMEY2M0NEMUE4RjMyQzNCNUVD Q0IyQjlCMDAeFw0yNTExMDIxNzA1NTRaFw0yNTExMDUyMDQ4NTRaMDMxMTAvBgNV BAMTKDExMzg3RjRCRTk4RTJCQjExRUFENUJDQzJGRjY3QzA5NkNGRUU5NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC64Uzs/5slKN5Fv3o093zVVJ35 8w1Dg9JwKVaZ33S7qRvMGuYuzgp8K390buzhuCKFABwYYA8VP1n1aToDNhUsf3sy ATUgwstKsw+SpVqkcSQMKoqWdpM+HyD2P9m4XO5pjPeWJoKlcsKbvEwZ4WUmdcPz iOBHVaGj3gI8ZZxqYhTBS6opEAWSOh7SZP2CArKkxt2IomiYmMh1KGZbJkzCvrG1 ljTaROaEs3Lo42xcisubHIYKK4KybDhwXhQPPXDJ6YX6vQVMk6G85N0NSfHmYp9c AvQGxYKOqf3fLyAjAOchihvKxNCLazNLEGGloJyOgnRwvr5AgcNsxVrDgzFzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUETh/S+mOK7EerVvML/Z8CWz+6XQwHwYDVR0j BBgwFoAUXmg9izRbtuD2PNGo8yw7XsyyubAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 M2E3ZjM0Yy02M2I4LTQ5NzMtODIyNi1lMTA2OTViMjVkOTQvMC81RTY4M0Q4QjM0 NUJCNkUwRjYzQ0QxQThGMzJDM0I1RUNDQjJCOUIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUU2ODNEOEIzNDVCQjZFMEY2M0NEMUE4RjMyQzNCNUVDQ0Iy QjlCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTNhN2YzNGMtNjNiOC00OTczLTgy MjYtZTEwNjk1YjI1ZDk0LzAvNUU2ODNEOEIzNDVCQjZFMEY2M0NEMUE4RjMyQzNC NUVDQ0IyQjlCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAISZelOzOokL9Lh+VBf43xTE/LwJPwndVX0K 6fBpmm8v3pu/dhz7IB8s90puD9CTH8as1d4IJFYse90UmpanCvfZ5Kn0++h485YV ROJtJpe2w/CRVedx6OJ3+IGDJPus0BxXhmsNmrL9ci6iG5wczipuRY4KwzIi6tvI pkaE4L3Zpzz28cq6mhmQeD9Cv6NN5QCNvu8iIgW6Y2XnaTnMYfTTwce6JqJ4YI1H vctlDf95MNRhEiKmpf1B8tQ+5argj3hI3Nr9uFDgOBtnsyt32vBxpDo2aWSZeyCa uwZadxENFJffJm4CaarAhzW+3P0LC2O2MAe7G05Ib/lzEDpOq5Q= -----END CERTIFICATE-----Generated at Tue Nov 4 21:13:57 2025 by rpki-client