$ rpki-client -vvf repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft File: 5EC928AFD73AFC70F10C468E21482031920DF521.mft (raw, json) Hash identifier: KL87QYvb1K2k9zeFfxa+hVR+7a4MHB096KfCQV+Iy7o= Subject key identifier: 98:34:2F:C2:29:14:2D:A8:AA:94:94:8E:F1:61:A2:3B:62:6C:96:68 Authority key identifier: 5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21 Certificate issuer: /CN=5EC928AFD73AFC70F10C468E21482031920DF521 Certificate serial: 17034870E1E78C3F3050BA4F899A4C6EDA7EA8D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft Manifest number: 0134 Signing time: Tue 04 Nov 2025 09:50:37 +0000 Manifest this update: Tue 04 Nov 2025 09:45:37 +0000 Manifest next update: Fri 07 Nov 2025 13:26:37 +0000 Files and hashes: 1: 3135372e31302e39312e302f32342d3234203d3e20313532303836.roa (hash: aoRUG5CQtzRZGdloOpfTrb2fX3fCFwbxN1OMSRI1BYY=) 2: 5EC928AFD73AFC70F10C468E21482031920DF521.crl (hash: I1gSyWNN0GGvGcTUsvKQ9gOcw1OdGxwucJXz+yJ4ETI=) 3: 3135372e31302e39302e302f32342d3234203d3e20313532303836.roa (hash: G+zk6B4j6LBv4VXf/ZrduIBLIatUxzNWyMHjZfotW/M=) 4: 3135372e31302e39302e302f32332d3233203d3e20313532303836.roa (hash: sqhh6fhWizwXoH9l3XVTNUts+MHffcu11O/8GZa+UZk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.crl rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:03:48:70:e1:e7:8c:3f:30:50:ba:4f:89:9a:4c:6e:da:7e:a8:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EC928AFD73AFC70F10C468E21482031920DF521 Validity Not Before: Nov 4 09:45:37 2025 GMT Not After : Nov 7 13:26:37 2025 GMT Subject: CN=98342FC229142DA8AA94948EF161A23B626C9668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:04:8a:38:60:3c:05:fa:a0:49:87:e3:b6:99: 8c:c4:4c:c2:d0:e6:76:5d:37:a8:df:7d:d1:64:63: 10:83:42:3b:28:21:0b:17:27:b3:99:44:33:ad:23: 45:2d:16:13:1b:e8:58:21:2c:05:6e:1c:3c:d4:e1: 44:40:e2:df:f3:1d:05:85:72:b7:c2:3c:7d:c7:a6: 01:ea:74:c6:f2:c2:6c:71:c3:c0:27:6b:4e:66:32: 2d:8c:ed:39:9d:c0:5e:5e:f4:a9:f0:2f:ce:01:23: 74:c9:31:6b:8a:ae:7c:23:2e:75:7f:2a:ee:58:70: 10:c1:0d:a1:e6:ef:47:b7:9b:39:e9:f6:6b:81:ce: 0a:d6:ed:82:29:26:fb:89:65:5c:e1:7e:ca:10:74: 75:7c:77:4b:cc:a4:40:be:bb:1c:27:bd:e2:32:e8: 95:9e:6f:fd:9e:97:1f:7f:ee:97:a2:b0:18:c2:27: 85:6a:40:49:60:35:e0:9d:44:94:03:8a:ba:aa:4e: d6:d3:c8:9f:d3:34:6b:ac:90:6f:d3:ae:ee:a9:67: e5:ad:92:64:e0:9f:19:d0:99:bb:87:68:05:49:a7: 92:8c:05:39:b6:9f:67:14:c1:81:f8:73:17:13:8d: 24:4c:7a:90:e4:2f:5d:87:d0:e3:d2:a8:ad:00:af: 02:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:34:2F:C2:29:14:2D:A8:AA:94:94:8E:F1:61:A2:3B:62:6C:96:68 X509v3 Authority Key Identifier: keyid:5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:05:1c:08:32:53:bd:77:43:f7:90:38:db:df:fd:68:44:12: 36:6e:b2:60:5a:75:37:9d:19:88:78:2d:19:14:26:68:08:33: cd:03:e2:93:32:16:db:9a:94:ea:57:61:00:ca:33:86:90:c5: e7:e1:05:b4:be:46:ce:96:f6:2b:e8:8d:fd:8b:70:be:36:1c: dd:4c:af:a3:bc:c6:6a:cb:8b:46:44:57:95:d6:61:bd:c1:db: e3:0a:81:ac:a7:bc:d3:06:49:94:45:49:69:95:07:da:79:86: 73:5e:d6:9c:ce:7f:6e:77:df:99:39:0f:ab:bc:d5:b0:0b:1c: 7c:4b:9d:ca:08:0f:e3:4a:fe:53:5c:78:77:02:61:bb:78:c0: ef:fc:f7:54:6c:e1:f9:d4:30:f4:cb:35:76:51:71:93:26:3c: 71:02:d9:fc:9e:33:f9:d4:e1:d8:30:76:7a:5a:34:ae:33:1a: d7:ad:ce:bc:17:de:5e:6d:de:6a:94:c8:93:4d:88:cd:8e:11: 31:15:84:42:66:08:63:9b:96:d5:c5:b5:ed:1a:52:73:3e:9d: dd:db:ce:a5:2b:0d:86:f9:d2:a2:d7:a1:07:d3:ec:58:38:52: 5b:bc:5f:00:c5:ba:d3:22:df:2a:58:27:5a:82:e4:82:c8:af: c0:6e:bc:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFwNIcOHnjD8wULpPiZpMbtp+qNUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIwMzE5 MjBERjUyMTAeFw0yNTExMDQwOTQ1MzdaFw0yNTExMDcxMzI2MzdaMDMxMTAvBgNV BAMTKDk4MzQyRkMyMjkxNDJEQThBQTk0OTQ4RUYxNjFBMjNCNjI2Qzk2NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1BIo4YDwF+qBJh+O2mYzETMLQ 5nZdN6jffdFkYxCDQjsoIQsXJ7OZRDOtI0UtFhMb6FghLAVuHDzU4URA4t/zHQWF crfCPH3HpgHqdMbywmxxw8Ana05mMi2M7TmdwF5e9KnwL84BI3TJMWuKrnwjLnV/ Ku5YcBDBDaHm70e3mznp9muBzgrW7YIpJvuJZVzhfsoQdHV8d0vMpEC+uxwnveIy 6JWeb/2elx9/7peisBjCJ4VqQElgNeCdRJQDirqqTtbTyJ/TNGuskG/Tru6pZ+Wt kmTgnxnQmbuHaAVJp5KMBTm2n2cUwYH4cxcTjSRMepDkL12H0OPSqK0ArwLXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmDQvwikULaiqlJSO8WGiO2JslmgwHwYDVR0j BBgwFoAUXskor9c6/HDxDEaOIUggMZIN9SEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2YzZjhjOC0wNDA2LTRiMzgtYTdhOC1kY2IxNWU0MWYyYjcvMC81RUM5MjhBRkQ3 M0FGQzcwRjEwQzQ2OEUyMTQ4MjAzMTkyMERGNTIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIwMzE5MjBE RjUyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNmM2Y4YzgtMDQwNi00YjM4LWE3 YTgtZGNiMTVlNDFmMmI3LzAvNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIw MzE5MjBERjUyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAgFHAgyU713Q/eQONvf/WhEEjZusmBadTed GYh4LRkUJmgIM80D4pMyFtualOpXYQDKM4aQxefhBbS+Rs6W9ivojf2LcL42HN1M r6O8xmrLi0ZEV5XWYb3B2+MKgaynvNMGSZRFSWmVB9p5hnNe1pzOf25335k5D6u8 1bALHHxLncoID+NK/lNceHcCYbt4wO/891Rs4fnUMPTLNXZRcZMmPHEC2fyeM/nU 4dgwdnpaNK4zGtetzrwX3l5t3mqUyJNNiM2OETEVhEJmCGObltXFte0aUnM+nd3b zqUrDYb50qLXoQfT7Fg4Ulu8XwDFutMi3ypYJ1qC5ILIr8BuvD8= -----END CERTIFICATE-----Generated at Wed Nov 5 01:47:54 2025 by rpki-client