$ rpki-client -vvf repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft File: 5AE19AE3FA86591042AE694640539C9669DEC801.mft (raw, json) Hash identifier: iIT9gz3gCSRQ1jLhyyKelrkQvCeCgkAbefpEJI0dbZw= Subject key identifier: 51:D3:43:C0:8B:76:EB:4E:CE:5A:6F:85:D0:25:1F:99:97:59:D7:FF Authority key identifier: 5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01 Certificate issuer: /CN=5AE19AE3FA86591042AE694640539C9669DEC801 Certificate serial: 7E8180638A2CC75EC4D65198BC853F2785F3CAC9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft Manifest number: 01F8 Signing time: Sun 26 Oct 2025 17:11:43 +0000 Manifest this update: Sun 26 Oct 2025 17:06:43 +0000 Manifest next update: Wed 29 Oct 2025 18:18:43 +0000 Files and hashes: 1: 5AE19AE3FA86591042AE694640539C9669DEC801.crl (hash: UVzCmfPy7s8czSMfZz/8+/MphezoC1gj+X70imvMHZQ=) 2: 3130332e3232302e34352e302f32342d3234203d3e203438343635.roa (hash: m4IQs/Cui2ddwLQciv0u+g5oFPnYhzNtze79R+PFKLg=) 3: 3130332e3232302e34352e302f32342d3234203d3e20313530313939.roa (hash: Vrmcu03T647sbP3GWEBBWylAAxqciaCOgVn/2H7+uB8=) 4: 3130332e3232302e34342e302f32342d3234203d3e203438343635.roa (hash: Vw4jOV+MZ+fjdwltnh69uK5QodMXxVJ0LlNiepCYdZ0=) 5: 3130332e3232302e34342e302f32342d3234203d3e20313530313939.roa (hash: JArcqatJBrG0UJiwDi1c9yEOpb8Bk4EGWPIVKLKaIwQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 18:18:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:81:80:63:8a:2c:c7:5e:c4:d6:51:98:bc:85:3f:27:85:f3:ca:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AE19AE3FA86591042AE694640539C9669DEC801 Validity Not Before: Oct 26 17:06:43 2025 GMT Not After : Oct 29 18:18:43 2025 GMT Subject: CN=51D343C08B76EB4ECE5A6F85D0251F999759D7FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d5:98:26:a0:bf:f3:f7:d7:cf:d0:f7:b2:cc: 99:54:d2:a9:21:cd:90:2c:f6:3e:9f:a7:6c:cc:a1: ca:73:03:85:1b:91:0c:d5:fa:4b:83:99:87:dd:56: 64:cd:01:27:dd:69:91:03:38:a7:df:72:03:46:a6: 73:39:7b:8f:ab:f4:ec:c6:8a:73:69:06:c9:05:22: 0c:0e:af:0b:1a:af:fd:41:6d:fd:d1:d3:1d:94:ff: b9:80:2c:25:92:42:ae:aa:00:25:d7:9a:0b:b6:bd: 51:c2:bc:e8:28:9d:0a:86:7d:7a:72:9b:59:4b:a0: fc:c3:dc:e3:ac:66:b7:36:6c:d6:85:f1:85:42:fc: d1:92:9c:d5:51:c7:0e:75:ea:e5:8e:ad:5d:30:1e: f3:3e:7c:f3:69:53:d7:84:12:46:3e:87:fb:39:96: 8d:c8:4d:60:9d:3a:fe:0b:d1:bc:57:84:0d:9a:05: 96:94:39:0e:da:d0:b8:67:15:7a:7b:ed:82:d6:60: bf:d3:3b:26:09:bb:e6:a5:ba:06:53:be:b0:69:c1: e9:04:70:78:e4:2a:20:d4:74:c0:03:7d:4f:b8:03: da:9a:bf:3a:31:23:32:1d:b9:4b:5c:72:a2:60:22: eb:3e:08:30:2b:85:2f:c1:77:e8:80:8a:a5:dd:38: 05:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D3:43:C0:8B:76:EB:4E:CE:5A:6F:85:D0:25:1F:99:97:59:D7:FF X509v3 Authority Key Identifier: keyid:5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:62:64:49:e4:27:23:7a:9a:35:35:99:eb:68:62:30:10:9c: b4:21:d5:f9:d3:0a:b5:60:d5:ad:03:e7:61:21:ce:dc:08:db: 6d:f0:07:49:2e:af:ca:a9:99:37:d7:0a:84:2e:d0:0c:ee:2b: 05:95:bc:36:ac:06:66:d4:09:0c:4b:34:c5:28:b8:1b:64:c9: 69:65:d5:e4:fc:7a:46:d8:db:48:b9:1b:a2:6b:9e:8d:8c:01: 15:ac:7a:a6:a2:89:ad:7b:77:25:f3:f0:df:ec:03:9d:2c:34: f8:de:c3:c1:ce:9f:1c:0b:ee:fb:a3:6b:3a:6a:84:fc:65:9f: 90:7d:6a:ad:d3:95:51:0f:d7:45:c9:20:e3:c3:1d:7d:4c:fc: e2:ad:a6:b8:dd:50:37:84:5d:14:fd:7e:6a:bc:51:3a:35:2b: e9:60:9c:2e:52:3f:1e:09:bb:63:98:f3:38:e5:82:32:59:7e: 01:71:c7:63:23:78:4a:69:75:39:8c:60:41:0e:67:4f:e0:50: 4b:c1:cd:b8:e5:3f:72:4d:fa:95:dd:01:f7:f5:49:6c:e2:51: 95:b8:e0:f9:27:38:d8:78:13:0d:5d:8b:60:cf:e0:59:3b:18: 68:89:c7:0c:1f:9f:a0:a7:04:f8:33:9e:f0:c8:60:ef:5a:b3: db:a8:70:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfoGAY4osx17E1lGYvIU/J4XzyskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFFMTlBRTNGQTg2NTkxMDQyQUU2OTQ2NDA1MzlDOTY2 OURFQzgwMTAeFw0yNTEwMjYxNzA2NDNaFw0yNTEwMjkxODE4NDNaMDMxMTAvBgNV BAMTKDUxRDM0M0MwOEI3NkVCNEVDRTVBNkY4NUQwMjUxRjk5OTc1OUQ3RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz1ZgmoL/z99fP0PeyzJlU0qkh zZAs9j6fp2zMocpzA4UbkQzV+kuDmYfdVmTNASfdaZEDOKffcgNGpnM5e4+r9OzG inNpBskFIgwOrwsar/1Bbf3R0x2U/7mALCWSQq6qACXXmgu2vVHCvOgonQqGfXpy m1lLoPzD3OOsZrc2bNaF8YVC/NGSnNVRxw516uWOrV0wHvM+fPNpU9eEEkY+h/s5 lo3ITWCdOv4L0bxXhA2aBZaUOQ7a0LhnFXp77YLWYL/TOyYJu+alugZTvrBpwekE cHjkKiDUdMADfU+4A9qavzoxIzIduUtccqJgIus+CDArhS/Bd+iAiqXdOAW7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUdNDwIt2607OWm+F0CUfmZdZ1/8wHwYDVR0j BBgwFoAUWuGa4/qGWRBCrmlGQFOclmneyAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTcyOTI5MS1hMWE3LTRiMTktOTNmNi0xZDg0NTc0YTY3YWUvMC81QUUxOUFFM0ZB ODY1OTEwNDJBRTY5NDY0MDUzOUM5NjY5REVDODAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFFMTlBRTNGQTg2NTkxMDQyQUU2OTQ2NDA1MzlDOTY2OURF QzgwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU3MjkyOTEtYTFhNy00YjE5LTkz ZjYtMWQ4NDU3NGE2N2FlLzAvNUFFMTlBRTNGQTg2NTkxMDQyQUU2OTQ2NDA1MzlD OTY2OURFQzgwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHNiZEnkJyN6mjU1metoYjAQnLQh1fnTCrVg 1a0D52EhztwI223wB0kur8qpmTfXCoQu0AzuKwWVvDasBmbUCQxLNMUouBtkyWll 1eT8ekbY20i5G6Jrno2MARWseqaiia17dyXz8N/sA50sNPjew8HOnxwL7vujazpq hPxln5B9aq3TlVEP10XJIOPDHX1M/OKtprjdUDeEXRT9fmq8UTo1K+lgnC5SPx4J u2OY8zjlgjJZfgFxx2MjeEppdTmMYEEOZ0/gUEvBzbjlP3JN+pXdAff1SWziUZW4 4PknONh4Ew1di2DP4Fk7GGiJxwwfn6CnBPgznvDIYO9as9uocGg= -----END CERTIFICATE-----Generated at Mon Oct 27 09:29:00 2025 by rpki-client