$ rpki-client -vvf repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft File: 5E8D1116F8C66182B65521C899B56E89DDB84C57.mft (raw, json) Hash identifier: aNYu7feL2W4eHgM/RLgTLlU/6Q/n/ZE8oKinjGmkzmI= Subject key identifier: 3F:C2:36:31:4A:34:EF:B6:16:AD:32:03:E2:82:A2:E2:E1:14:F4:19 Authority key identifier: 5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 Certificate issuer: /CN=5E8D1116F8C66182B65521C899B56E89DDB84C57 Certificate serial: 58DF6E40B199F01C7BA6458BE8654068EAB889EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft Manifest number: 04DC Signing time: Thu 06 Nov 2025 01:20:46 +0000 Manifest this update: Thu 06 Nov 2025 01:15:46 +0000 Manifest next update: Sun 09 Nov 2025 12:08:46 +0000 Files and hashes: 1: 3130332e31302e39362e302f32322d3234203d3e203138313033.roa (hash: Nh5W/QyNw1TBkrXlduer6Su77QtA37Kqc35mOSl9RrM=) 2: 323430313a316230303a3a2f33322d3438203d3e203138313033.roa (hash: w+rn3hr3SMqGHiqqz9FiRvR/Sg9nolhzcrhUpRbqWiI=) 3: 3230332e3132382e36342e302f31392d3234203d3e203138313033.roa (hash: s7VSPqD5oiLwDB/oYr/1xD8uJ4/fL3Fk5/v33teavRk=) 4: 5E8D1116F8C66182B65521C899B56E89DDB84C57.crl (hash: VqW5DPZ5o+BXUiGTr9EcQB8OLVWyLExr80Q0L1837YI=) 5: 34332e3234382e32342e302f32322d3234203d3e203138313033.roa (hash: RgeUIHscM2Mr9tXUcr4QUTfcftnTlsp6MIokq2QekbI=) 6: 3230332e3230312e35302e302f32332d3234203d3e203138313033.roa (hash: 0P4/KgKZcqup91feF2ZQ2rwCC9K7mFefhTwIQ1GZnuc=) 7: 3130332e32332e3234302e302f32322d3234203d3e203138313033.roa (hash: p8gVCnY66Os0DqkzQCJfTN/fhC+u5g4F7liSBfJAUxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.crl rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 12:08:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:df:6e:40:b1:99:f0:1c:7b:a6:45:8b:e8:65:40:68:ea:b8:89:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E8D1116F8C66182B65521C899B56E89DDB84C57 Validity Not Before: Nov 6 01:15:46 2025 GMT Not After : Nov 9 12:08:46 2025 GMT Subject: CN=3FC236314A34EFB616AD3203E282A2E2E114F419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a0:c6:98:fc:39:3b:a5:e7:ef:5c:53:14:ad: 70:06:bd:d0:26:17:76:e4:91:cb:13:c0:f5:7f:f3: 36:0c:bb:d0:33:5f:92:ec:27:9a:6f:59:13:37:4c: 6a:dc:6c:1d:f0:01:43:26:cb:b4:e0:12:f6:80:31: 4a:2e:3e:be:94:0c:bc:cb:bf:20:97:48:23:7b:01: 67:11:16:02:c5:62:0c:ca:81:5e:79:7f:c1:55:ad: 47:42:d7:d8:55:d1:fd:09:6f:28:a8:1c:ad:40:51: ae:7b:27:4f:57:5e:98:94:8d:1f:70:38:7a:e7:a6: dc:c7:a7:97:1d:89:7a:17:ac:68:cc:19:3c:c2:60: 4d:8e:2d:91:1b:fd:0f:55:fd:a9:48:30:47:22:dc: 6a:cd:0a:36:0c:0e:5f:a6:81:03:d6:a2:a1:f1:a1: 36:35:6b:c7:cb:f0:d3:c1:16:16:13:ae:c8:ae:66: 74:6b:06:f4:a3:ba:54:fe:9e:91:ca:57:cc:41:dd: 2e:34:0c:b7:b7:26:80:f0:d5:bc:64:34:49:01:c8: a4:70:17:54:37:d4:f1:ee:63:ee:c9:1e:00:fb:67: 66:73:fa:54:01:37:70:cc:16:c8:82:aa:28:29:15: 1a:e6:39:7e:18:79:8c:e4:15:a6:ea:4e:c0:50:74: fb:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C2:36:31:4A:34:EF:B6:16:AD:32:03:E2:82:A2:E2:E1:14:F4:19 X509v3 Authority Key Identifier: keyid:5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:38:74:4b:ba:c7:ea:80:74:1c:b2:65:69:93:ac:e9:5f:e7: 0c:95:97:9d:eb:21:66:fa:ce:ac:8b:f3:b1:c5:f5:dc:60:73: 4b:e0:cf:a0:b7:85:c0:ac:59:5e:53:47:28:cf:79:7a:b7:b9: f7:2d:c5:15:64:03:0d:22:87:84:cc:2f:be:c3:8e:ec:79:a4: 75:5f:14:84:2e:db:8b:a0:41:ac:6f:fd:7b:50:8d:49:fe:a1: 2a:dc:99:b0:9f:42:4c:8a:62:fb:51:de:23:93:98:97:6d:3f: 86:b8:2b:1d:25:b2:46:f9:6e:d0:4d:25:0d:86:5c:06:5e:7c: fe:98:70:fb:a5:18:a8:90:93:7c:9a:88:09:e2:67:05:af:31: e8:fa:ac:c6:b2:fc:09:e6:32:d2:9f:a7:c9:ac:b4:4a:a6:68: c8:48:9d:bd:89:2d:6a:ea:45:dd:da:e1:b3:e7:db:3c:9f:8d: 0a:2f:97:cf:ed:b8:2d:2a:e1:0f:61:92:d7:f1:80:66:be:d4: 2a:10:83:20:e8:47:d8:32:6e:e7:a3:e7:02:3f:3a:d6:4e:5f: 16:54:9b:56:1f:77:26:18:72:d6:e3:26:f4:49:5c:87:71:da: 15:bf:75:2f:2c:8d:20:93:29:83:a9:12:0a:9d:c4:65:86:cd: 9e:94:1a:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWN9uQLGZ8Bx7pkWL6GVAaOq4ieowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZFODlE REI4NEM1NzAeFw0yNTExMDYwMTE1NDZaFw0yNTExMDkxMjA4NDZaMDMxMTAvBgNV BAMTKDNGQzIzNjMxNEEzNEVGQjYxNkFEMzIwM0UyODJBMkUyRTExNEY0MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsoMaY/Dk7pefvXFMUrXAGvdAm F3bkkcsTwPV/8zYMu9AzX5LsJ5pvWRM3TGrcbB3wAUMmy7TgEvaAMUouPr6UDLzL vyCXSCN7AWcRFgLFYgzKgV55f8FVrUdC19hV0f0JbyioHK1AUa57J09XXpiUjR9w OHrnptzHp5cdiXoXrGjMGTzCYE2OLZEb/Q9V/alIMEci3GrNCjYMDl+mgQPWoqHx oTY1a8fL8NPBFhYTrsiuZnRrBvSjulT+npHKV8xB3S40DLe3JoDw1bxkNEkByKRw F1Q31PHuY+7JHgD7Z2Zz+lQBN3DMFsiCqigpFRrmOX4YeYzkFabqTsBQdPvHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP8I2MUo077YWrTID4oKi4uEU9BkwHwYDVR0j BBgwFoAUXo0RFvjGYYK2VSHImbVuid24TFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTk5YzFhZi1kOWM3LTRmZmQtYmEwMy1hM2UxY2RkOGFlZTAvMC81RThEMTExNkY4 QzY2MTgyQjY1NTIxQzg5OUI1NkU4OUREQjg0QzU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZFODlEREI4 NEM1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjE5OWMxYWYtZDljNy00ZmZkLWJh MDMtYTNlMWNkZDhhZWUwLzAvNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZF ODlEREI4NEM1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQ4dEu6x+qAdByyZWmTrOlf5wyVl53rIWb6 zqyL87HF9dxgc0vgz6C3hcCsWV5TRyjPeXq3ufctxRVkAw0ih4TML77Djux5pHVf FIQu24ugQaxv/XtQjUn+oSrcmbCfQkyKYvtR3iOTmJdtP4a4Kx0lskb5btBNJQ2G XAZefP6YcPulGKiQk3yaiAniZwWvMej6rMay/AnmMtKfp8mstEqmaMhInb2JLWrq Rd3a4bPn2zyfjQovl8/tuC0q4Q9hktfxgGa+1CoQgyDoR9gybuej5wI/OtZOXxZU m1YfdyYYctbjJvRJXIdx2hW/dS8sjSCTKYOpEgqdxGWGzZ6UGhs= -----END CERTIFICATE-----Generated at Fri Nov 7 16:17:22 2025 by rpki-client