$ rpki-client -vvf repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft File: 5AE57F3F97F40888F93913350A218863E705CD34.mft (raw, json) Hash identifier: xjhBFDltqamsBHKThIY/KkHK1NrDmftBj1v5O46H/VA= Subject key identifier: ED:AA:55:47:12:5B:12:10:59:15:20:7C:F9:B3:C6:68:CB:A4:90:9C Authority key identifier: 5A:E5:7F:3F:97:F4:08:88:F9:39:13:35:0A:21:88:63:E7:05:CD:34 Certificate issuer: /CN=5AE57F3F97F40888F93913350A218863E705CD34 Certificate serial: 7F3778E7FA37C399F6E0E6A2194FEC12C8B35F42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft Manifest number: 025B Signing time: Sat 08 Nov 2025 07:51:28 +0000 Manifest this update: Sat 08 Nov 2025 07:46:28 +0000 Manifest next update: Tue 11 Nov 2025 08:58:28 +0000 Files and hashes: 1: 5AE57F3F97F40888F93913350A218863E705CD34.crl (hash: OYAyMJjGuLq3g0tMzwiQJm0Reg37Tx1Ap4KkbwlDreU=) 2: 3130332e3138332e31312e302f32342d3234203d3e20313339393637.roa (hash: Aeu4h6nFmtclcSAntQ1D1feUfbui+nbdSHb/VFJyfM0=) 3: 3130332e3138332e31302e302f32342d3234203d3e20313339393637.roa (hash: lDreBV2a5k+F2nOzqdVDXyLmxgTFmhT5IbglBwCmDnU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.crl rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 08:58:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:37:78:e7:fa:37:c3:99:f6:e0:e6:a2:19:4f:ec:12:c8:b3:5f:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AE57F3F97F40888F93913350A218863E705CD34 Validity Not Before: Nov 8 07:46:28 2025 GMT Not After : Nov 11 08:58:28 2025 GMT Subject: CN=EDAA5547125B12105915207CF9B3C668CBA4909C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f3:14:87:95:9c:95:c5:52:34:1d:51:7f:f4: 8d:4e:6a:17:05:67:0f:e5:46:fc:1d:a8:51:cd:37: dd:01:cf:6e:64:84:55:e2:1d:5b:ff:be:68:5c:9c: 11:f0:23:b2:2f:cd:89:1f:3c:93:92:14:af:43:55: b2:29:c4:50:8d:1b:ee:ba:1d:c9:74:7d:1f:dc:17: 2c:b6:2e:77:ec:16:3d:ea:6c:8e:3b:7b:5c:5a:99: 2a:7c:f0:94:6a:f2:55:09:95:f3:ee:af:61:51:97: bb:f3:fa:b6:79:cb:2c:0a:ec:a3:86:1b:5c:51:b8: 6a:47:2b:3c:af:26:44:40:88:e8:0f:66:13:f8:2a: ab:30:1c:e3:23:2d:cf:c7:e9:d7:11:bd:df:09:d4: 6f:25:c4:82:6c:fc:5a:72:06:02:5c:18:cc:f2:35: d0:c0:52:4c:db:89:2f:a7:51:b6:3a:6f:be:d4:85: 1c:b9:a8:ac:26:35:39:98:71:e3:b5:f5:58:43:8e: 57:01:ec:6e:64:4d:f0:fb:c4:99:4e:18:ca:a5:ce: 63:3e:ac:9c:09:19:c2:ce:4a:c2:8d:44:85:1c:f7: 02:ad:40:d8:36:f9:6c:82:c0:3d:e7:0d:96:45:bc: 0f:d4:99:ed:35:2b:d7:4e:bc:98:f3:5d:4b:ff:d4: e2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:AA:55:47:12:5B:12:10:59:15:20:7C:F9:B3:C6:68:CB:A4:90:9C X509v3 Authority Key Identifier: keyid:5A:E5:7F:3F:97:F4:08:88:F9:39:13:35:0A:21:88:63:E7:05:CD:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:b6:40:ba:a8:9e:c8:fc:95:bf:29:aa:bd:a0:c1:9a:a3:2b: af:9e:52:21:5b:f8:a6:23:f2:eb:bb:d9:90:1c:0c:b4:33:e4: 1a:d4:46:77:d9:52:ba:59:50:d5:50:c2:de:62:71:90:36:5b: a9:65:f7:43:45:74:98:aa:1c:35:03:2c:f5:c4:6f:6b:e8:71: 10:52:4e:09:84:fe:a3:56:e7:2c:e7:52:f1:89:03:f9:56:51: 4d:87:45:05:bf:b9:24:34:e1:d8:9d:84:61:03:45:c7:bd:42: fe:55:c7:4a:17:5f:34:1d:f4:da:ef:51:cd:93:97:99:47:4a: f0:2e:43:48:86:a9:4c:8e:9e:ca:00:0d:f0:35:0f:41:b4:2d: fd:2f:f0:7f:c6:bd:97:84:14:bf:f3:5d:97:c5:d6:f8:c8:f2: a8:f4:2d:98:0a:ed:87:76:40:b4:88:88:51:7e:b3:b9:36:d2: 52:61:9d:5a:ae:99:ef:eb:8e:e9:fa:b2:8a:3a:87:49:88:81: d1:05:20:22:4b:fa:b7:b4:27:ee:5c:dc:ab:52:a5:05:e5:7f: 7a:50:4f:b6:0b:be:30:dc:74:47:84:76:ae:18:88:70:72:3c: 42:a4:e9:cb:fc:ef:fd:cf:c5:f0:96:61:46:6e:5b:59:c2:cd: d2:79:10:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfzd45/o3w5n24OaiGU/sEsizX0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4NjNF NzA1Q0QzNDAeFw0yNTExMDgwNzQ2MjhaFw0yNTExMTEwODU4MjhaMDMxMTAvBgNV BAMTKEVEQUE1NTQ3MTI1QjEyMTA1OTE1MjA3Q0Y5QjNDNjY4Q0JBNDkwOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk8xSHlZyVxVI0HVF/9I1OahcF Zw/lRvwdqFHNN90Bz25khFXiHVv/vmhcnBHwI7IvzYkfPJOSFK9DVbIpxFCNG+66 Hcl0fR/cFyy2LnfsFj3qbI47e1xamSp88JRq8lUJlfPur2FRl7vz+rZ5yywK7KOG G1xRuGpHKzyvJkRAiOgPZhP4KqswHOMjLc/H6dcRvd8J1G8lxIJs/FpyBgJcGMzy NdDAUkzbiS+nUbY6b77UhRy5qKwmNTmYceO19VhDjlcB7G5kTfD7xJlOGMqlzmM+ rJwJGcLOSsKNRIUc9wKtQNg2+WyCwD3nDZZFvA/Ume01K9dOvJjzXUv/1OKVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7apVRxJbEhBZFSB8+bPGaMukkJwwHwYDVR0j BBgwFoAUWuV/P5f0CIj5ORM1CiGIY+cFzTQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDhjZGY1YS1iOWE3LTQ0NjktYTY1My1jOWZmMmEwMDM3NzMvMC81QUU1N0YzRjk3 RjQwODg4RjkzOTEzMzUwQTIxODg2M0U3MDVDRDM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4NjNFNzA1 Q0QzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ4Y2RmNWEtYjlhNy00NDY5LWE2 NTMtYzlmZjJhMDAzNzczLzAvNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4 NjNFNzA1Q0QzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ62QLqonsj8lb8pqr2gwZqjK6+eUiFb+KYj 8uu72ZAcDLQz5BrURnfZUrpZUNVQwt5icZA2W6ll90NFdJiqHDUDLPXEb2vocRBS TgmE/qNW5yznUvGJA/lWUU2HRQW/uSQ04didhGEDRce9Qv5Vx0oXXzQd9NrvUc2T l5lHSvAuQ0iGqUyOnsoADfA1D0G0Lf0v8H/GvZeEFL/zXZfF1vjI8qj0LZgK7Yd2 QLSIiFF+s7k20lJhnVqume/rjun6soo6h0mIgdEFICJL+re0J+5c3KtSpQXlf3pQ T7YLvjDcdEeEdq4YiHByPEKk6cv87/3PxfCWYUZuW1nCzdJ5ELw= -----END CERTIFICATE-----Generated at Sat Nov 8 21:38:43 2025 by rpki-client