$ rpki-client -vvf repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.mft File: 5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.mft (raw, json) Hash identifier: wqDDwA18BfJa7yC4n696eCiy5yJZdyI6oG3KgmUxPqw= Subject key identifier: E1:C0:A1:58:07:D6:EE:2F:46:2D:1C:AE:85:8A:BF:7B:DB:55:C5:25 Authority key identifier: 5E:7E:4A:63:C7:15:B2:96:D5:97:B5:AA:3F:E8:00:60:9B:F3:B9:F0 Certificate issuer: /CN=5E7E4A63C715B296D597B5AA3FE800609BF3B9F0 Certificate serial: 32D4E4B837D7A44994BCD96FFFE9021456F7DB8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.mft Manifest number: 051E Signing time: Mon 03 Nov 2025 18:11:51 +0000 Manifest this update: Mon 03 Nov 2025 18:06:51 +0000 Manifest next update: Fri 07 Nov 2025 04:37:51 +0000 Files and hashes: 1: 3130332e3133372e38322e302f32332d3234203d3e20313338383238.roa (hash: oPq0eksRu+Qj6e9d7D3QHko1LMTQ6v8EettFrsXT3rc=) 2: 5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.crl (hash: mHzFC6qerN/OpJ6QjkyD+kAAV5OaBLaqlAsr892HqwM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.crl rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 04:37:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:d4:e4:b8:37:d7:a4:49:94:bc:d9:6f:ff:e9:02:14:56:f7:db:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E7E4A63C715B296D597B5AA3FE800609BF3B9F0 Validity Not Before: Nov 3 18:06:51 2025 GMT Not After : Nov 7 04:37:51 2025 GMT Subject: CN=E1C0A15807D6EE2F462D1CAE858ABF7BDB55C525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cb:99:06:f6:f0:24:8d:13:0b:42:cd:ef:9c: a6:3b:4b:ac:0c:1f:69:2d:86:74:2a:45:68:c3:cb: cd:f1:8a:6f:b6:9c:07:24:d6:09:d0:f9:30:91:e9: bf:46:cf:56:62:7a:1d:d8:fc:0a:a5:11:d2:eb:3a: 8b:76:1b:13:d3:85:68:06:c2:a3:42:4e:59:10:d6: 03:08:0a:35:b7:0a:43:cf:93:3c:c3:8c:08:fe:9d: 65:18:bc:01:96:57:3a:cc:f3:cf:6c:26:42:a5:dc: cd:8a:8f:1d:9f:b2:75:d0:25:f3:05:ae:04:13:57: c1:4e:fd:36:8c:78:85:53:3c:e1:69:2d:6d:ba:c4: 18:29:60:37:b6:b6:13:a0:87:79:71:13:ee:2d:64: 62:0c:26:d8:47:c3:8c:a7:aa:6a:26:cb:ca:c9:07: ad:91:88:bf:88:f2:97:7e:e6:9d:1e:46:d5:e0:7e: d7:bb:3d:1a:55:ba:30:29:50:a2:34:dc:26:5b:57: 8f:0d:7d:5e:1f:0e:a2:47:30:9f:2f:af:e0:5d:e3: 85:0c:fb:7d:a1:83:26:e7:e3:8b:1d:e6:3a:6b:7c: 77:74:e6:16:22:5a:8a:c6:2f:8a:6f:33:30:7d:06: 68:2b:7b:54:01:c0:01:88:5c:73:bc:f1:db:a4:c0: ad:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C0:A1:58:07:D6:EE:2F:46:2D:1C:AE:85:8A:BF:7B:DB:55:C5:25 X509v3 Authority Key Identifier: keyid:5E:7E:4A:63:C7:15:B2:96:D5:97:B5:AA:3F:E8:00:60:9B:F3:B9:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ae6cd41-2e4c-4cc2-881e-bab44a884fd4/0/5E7E4A63C715B296D597B5AA3FE800609BF3B9F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:a6:b6:b4:78:01:ff:42:d0:f9:eb:60:09:5f:dc:5c:f9:09: e5:db:db:67:d3:1a:2b:0a:60:ef:b7:21:17:58:8a:d2:4c:e3: 06:6b:f3:95:2b:f8:51:72:1c:3b:f1:36:a1:37:59:e4:22:a7: 03:26:c6:56:b5:4e:24:f9:f3:8e:50:10:ef:bf:46:c3:46:aa: 98:4b:e4:fa:c9:ce:19:61:a3:b6:32:cb:8f:54:e8:57:13:47: 35:7a:e8:aa:81:12:50:d2:70:11:f0:7b:ad:f9:88:18:ff:15: ce:e7:9b:7a:d2:13:4b:4c:3a:dd:2f:d3:d1:78:c8:72:ab:f1: 51:fc:57:a1:53:f0:23:fd:9a:7e:27:b8:22:73:39:f1:6b:c3: 9c:04:e2:d0:5b:ae:8e:1e:87:ff:97:05:b9:80:71:d9:bb:93: 09:a3:f6:07:1f:2a:d5:ce:c2:33:b7:4f:80:c9:95:67:c5:39: 45:be:7e:5f:e6:40:fd:42:d5:c2:ae:34:31:9a:14:77:e7:46: ae:3e:c1:4e:26:ad:a0:fa:2e:a9:85:5b:a2:f1:71:c3:01:f7: 5c:78:22:65:e3:07:b0:ec:6a:bd:43:ba:0d:d5:c4:8b:5e:db: 12:0e:72:5b:66:cd:d3:de:51:92:44:24:b1:f6:f9:c5:f7:4d: 46:7c:34:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMtTkuDfXpEmUvNlv/+kCFFb324swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU3RTRBNjNDNzE1QjI5NkQ1OTdCNUFBM0ZFODAwNjA5 QkYzQjlGMDAeFw0yNTExMDMxODA2NTFaFw0yNTExMDcwNDM3NTFaMDMxMTAvBgNV BAMTKEUxQzBBMTU4MDdENkVFMkY0NjJEMUNBRTg1OEFCRjdCREI1NUM1MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNy5kG9vAkjRMLQs3vnKY7S6wM H2kthnQqRWjDy83xim+2nAck1gnQ+TCR6b9Gz1Zieh3Y/AqlEdLrOot2GxPThWgG wqNCTlkQ1gMICjW3CkPPkzzDjAj+nWUYvAGWVzrM889sJkKl3M2Kjx2fsnXQJfMF rgQTV8FO/TaMeIVTPOFpLW26xBgpYDe2thOgh3lxE+4tZGIMJthHw4ynqmomy8rJ B62RiL+I8pd+5p0eRtXgfte7PRpVujApUKI03CZbV48NfV4fDqJHMJ8vr+Bd44UM +32hgybn44sd5jprfHd05hYiWorGL4pvMzB9Bmgre1QBwAGIXHO88dukwK1nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4cChWAfW7i9GLRyuhYq/e9tVxSUwHwYDVR0j BBgwFoAUXn5KY8cVspbVl7WqP+gAYJvzufAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YWU2Y2Q0MS0yZTRjLTRjYzItODgxZS1iYWI0NGE4ODRmZDQvMC81RTdFNEE2M0M3 MTVCMjk2RDU5N0I1QUEzRkU4MDA2MDlCRjNCOUYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUU3RTRBNjNDNzE1QjI5NkQ1OTdCNUFBM0ZFODAwNjA5QkYz QjlGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmFlNmNkNDEtMmU0Yy00Y2MyLTg4 MWUtYmFiNDRhODg0ZmQ0LzAvNUU3RTRBNjNDNzE1QjI5NkQ1OTdCNUFBM0ZFODAw NjA5QkYzQjlGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJqmtrR4Af9C0PnrYAlf3Fz5CeXb22fTGisK YO+3IRdYitJM4wZr85Ur+FFyHDvxNqE3WeQipwMmxla1TiT5845QEO+/RsNGqphL 5PrJzhlho7Yyy49U6FcTRzV66KqBElDScBHwe635iBj/Fc7nm3rSE0tMOt0v09F4 yHKr8VH8V6FT8CP9mn4nuCJzOfFrw5wE4tBbro4eh/+XBbmAcdm7kwmj9gcfKtXO wjO3T4DJlWfFOUW+fl/mQP1C1cKuNDGaFHfnRq4+wU4mraD6LqmFW6LxccMB91x4 ImXjB7Dsar1Dug3VxIte2xIOcltmzdPeUZJEJLH2+cX3TUZ8NDI= -----END CERTIFICATE-----Generated at Tue Nov 4 10:08:47 2025 by rpki-client