$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft File: 5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft (raw, json) Hash identifier: dLusShvk18zYs+rOfAW3sEATipT/glX01pIWNJJRbMI= Subject key identifier: 51:00:80:91:DA:B1:59:DC:00:92:5A:F5:51:65:F8:7C:32:C3:CB:18 Authority key identifier: 5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D Certificate issuer: /CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D Certificate serial: 27B8926AC94DADAEDE0C93C99E94917DBC1D42A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft Manifest number: E8 Signing time: Tue 04 Nov 2025 16:31:07 +0000 Manifest this update: Tue 04 Nov 2025 16:26:07 +0000 Manifest next update: Fri 07 Nov 2025 22:48:07 +0000 Files and hashes: 1: 3136302e32322e372e302f32342d3234203d3e20313532373936.roa (hash: Se9if4ahUM8UZ9DwPwRriHNSzgliBVi3qv7HNc4T4+A=) 2: 3136302e32322e362e302f32342d3234203d3e20313532373936.roa (hash: lZoAiDIfwdwZRfkj/NcAK+vDJElzUZIJDOrxy0zEGf4=) 3: 3136302e32322e362e302f32332d3233203d3e20313532373936.roa (hash: MlPD1Cp5WkgMa2H7CRUKYw5NrewBHnE4PxE2BVKQlL0=) 4: 5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl (hash: bJdV8IdHYT9pwRQs6wyx0DBZrfSctRfjSQYIrhl1hVs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:b8:92:6a:c9:4d:ad:ae:de:0c:93:c9:9e:94:91:7d:bc:1d:42:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D Validity Not Before: Nov 4 16:26:07 2025 GMT Not After : Nov 7 22:48:07 2025 GMT Subject: CN=51008091DAB159DC00925AF55165F87C32C3CB18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:02:0c:c0:b5:ef:3b:e7:b2:dd:40:3f:cf:60: a9:90:dd:b4:3b:3c:39:7d:00:d8:21:77:11:12:f8: bc:19:3f:89:99:99:fe:33:d7:9c:d4:c5:d9:d5:87: ab:f9:81:fb:51:28:e4:4c:b4:f4:c8:cf:c8:09:94: b2:c4:b2:72:f4:f1:76:05:af:87:0b:b0:9c:74:1d: 98:42:dd:55:cd:9a:ce:2b:e8:57:8a:e9:af:22:7d: 7d:ea:fd:e7:48:97:87:e4:e2:59:27:a4:ea:7c:cc: 19:77:2c:0f:b1:60:34:2a:21:3a:92:23:1c:bf:a0: 1a:82:87:54:a2:2c:45:93:ce:26:05:28:14:fe:3a: 8e:50:fa:bb:d3:44:99:3a:6c:82:06:df:cf:3b:8a: e9:6c:68:bc:0d:64:8a:2e:6d:fd:c5:5f:ae:aa:ab: cf:96:02:59:f0:a2:2f:aa:c6:21:81:1f:71:fc:88: d5:38:45:18:9a:8b:0b:b6:39:98:7f:2f:eb:92:1d: cc:21:89:04:18:fc:4d:72:5a:b1:1b:da:4f:c1:57: 9b:93:b1:41:48:7d:13:59:47:31:8e:c9:50:c7:bc: db:4b:21:06:54:26:c6:83:95:b5:71:49:1a:63:ec: 4b:3f:11:1f:3c:87:b9:e8:68:c9:2f:36:ef:ed:77: 3e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:00:80:91:DA:B1:59:DC:00:92:5A:F5:51:65:F8:7C:32:C3:CB:18 X509v3 Authority Key Identifier: keyid:5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:59:c0:95:ab:7e:12:2c:6b:56:93:c4:b5:d2:c1:c2:5e:4e: be:d2:c0:d5:75:6a:76:b3:fb:c3:27:0e:72:3a:99:9d:26:0e: e0:ff:0d:23:21:42:b4:3e:3a:a2:92:e0:d7:ba:5a:99:a5:4a: b3:4b:a4:84:b6:b3:10:14:49:25:f2:4f:b8:46:2e:be:f5:9a: 53:5d:f0:0d:49:df:fc:99:a3:d5:9f:f5:47:76:a4:1b:a3:f5: f6:67:32:04:49:62:93:14:e6:66:08:18:40:5e:a5:0c:63:5c: 27:c5:76:de:de:48:cb:ab:50:cd:10:91:b6:3b:a8:92:2d:67: 5c:b9:e0:3e:dd:8c:6b:5c:7c:91:71:22:98:3e:c5:af:45:1b: 85:03:6b:bb:59:81:34:81:3c:90:6c:f1:3c:88:3b:8c:b1:25: 34:8c:f0:57:bd:4d:26:88:a3:e0:0f:fb:9e:6f:03:46:59:b0: be:c2:a1:b3:33:dc:98:4c:17:a0:80:bf:71:7a:82:42:db:b8: b8:3c:4a:f7:ce:75:78:fa:c5:f8:1d:67:ef:d4:40:ed:15:df: e6:58:68:a1:19:b1:09:f3:c0:d8:f2:8c:74:76:70:38:ac:8c: 5b:18:79:85:2d:2c:a2:bb:9a:5b:0d:4e:b8:5e:17:ae:4d:be: a1:08:e0:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ7iSaslNra7eDJPJnpSRfbwdQqYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2MDQy RjBCNkQ3RDAeFw0yNTExMDQxNjI2MDdaFw0yNTExMDcyMjQ4MDdaMDMxMTAvBgNV BAMTKDUxMDA4MDkxREFCMTU5REMwMDkyNUFGNTUxNjVGODdDMzJDM0NCMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3AgzAte8757LdQD/PYKmQ3bQ7 PDl9ANghdxES+LwZP4mZmf4z15zUxdnVh6v5gftRKORMtPTIz8gJlLLEsnL08XYF r4cLsJx0HZhC3VXNms4r6FeK6a8ifX3q/edIl4fk4lknpOp8zBl3LA+xYDQqITqS Ixy/oBqCh1SiLEWTziYFKBT+Oo5Q+rvTRJk6bIIG3887iulsaLwNZIoubf3FX66q q8+WAlnwoi+qxiGBH3H8iNU4RRiaiwu2OZh/L+uSHcwhiQQY/E1yWrEb2k/BV5uT sUFIfRNZRzGOyVDHvNtLIQZUJsaDlbVxSRpj7Es/ER88h7noaMkvNu/tdz5LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUQCAkdqxWdwAklr1UWX4fDLDyxgwHwYDVR0j BBgwFoAUXjI/nX2oTYVuukjHbps2BC8LbX0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5ODgxNi01YWY5LTQ3ZWYtYjk4OS00MmYyNzMxODQ4YmUvMC81RTMyM0Y5RDdE QTg0RDg1NkVCQTQ4Qzc2RTlCMzYwNDJGMEI2RDdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2MDQyRjBC NkQ3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzAvNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2 MDQyRjBCNkQ3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHRZwJWrfhIsa1aTxLXSwcJeTr7SwNV1anaz +8MnDnI6mZ0mDuD/DSMhQrQ+OqKS4Ne6WpmlSrNLpIS2sxAUSSXyT7hGLr71mlNd 8A1J3/yZo9Wf9Ud2pBuj9fZnMgRJYpMU5mYIGEBepQxjXCfFdt7eSMurUM0QkbY7 qJItZ1y54D7djGtcfJFxIpg+xa9FG4UDa7tZgTSBPJBs8TyIO4yxJTSM8Fe9TSaI o+AP+55vA0ZZsL7CobMz3JhMF6CAv3F6gkLbuLg8SvfOdXj6xfgdZ+/UQO0V3+ZY aKEZsQnzwNjyjHR2cDisjFsYeYUtLKK7mlsNTrheF65NvqEI4Jg= -----END CERTIFICATE-----Generated at Tue Nov 4 18:59:07 2025 by rpki-client