$ rpki-client -vvf repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft File: 5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft (raw, json) Hash identifier: ntG4VHX/iZGaR44pgI3zMlXbg714Fc9aKdiCGUctP9k= Subject key identifier: D2:9A:88:C8:34:4E:33:C8:A4:2E:04:B5:C2:70:F9:51:C6:9D:F0:94 Authority key identifier: 5E:68:3D:8B:34:5B:B6:E0:F6:3C:D1:A8:F3:2C:3B:5E:CC:B2:B9:B0 Certificate issuer: /CN=5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0 Certificate serial: 16EA84E69362FA29E363EF9792F1AA538FE3B230 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft Manifest number: 0498 Signing time: Tue 11 Nov 2025 18:40:56 +0000 Manifest this update: Tue 11 Nov 2025 18:35:56 +0000 Manifest next update: Sat 15 Nov 2025 02:46:56 +0000 Files and hashes: 1: 3130332e3135362e3231372e302f32342d3234203d3e203538333639.roa (hash: pwYW2LCd9vtI3mAJLlLqxnIjIDbhrNEv0Psd4I3TSks=) 2: 5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl (hash: i/ugpuO01RjebNn6PZQku8h8VL+1gaD6gWUSXzrjooE=) 3: 3130332e3135362e3231362e302f32342d3234203d3e203538333639.roa (hash: Irudemtq4GtsKI+qW0qqUVrCa34ZHp9Oavot/JC0+Qo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Nov 2025 02:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:ea:84:e6:93:62:fa:29:e3:63:ef:97:92:f1:aa:53:8f:e3:b2:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0 Validity Not Before: Nov 11 18:35:56 2025 GMT Not After : Nov 15 02:46:56 2025 GMT Subject: CN=D29A88C8344E33C8A42E04B5C270F951C69DF094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:cb:1c:19:1a:81:77:88:04:a8:f6:21:1b:9d: 67:9d:54:45:3e:e4:6a:04:1e:99:6d:38:05:90:ee: bb:a0:f1:d2:2a:22:07:7c:2a:24:ad:ab:38:1f:70: ba:fd:e2:8f:68:cb:1b:83:8d:4a:62:e2:a8:5f:c2: 1f:99:cd:24:74:30:87:1b:17:fd:d7:a5:02:5c:38: 4b:38:8f:25:37:57:b5:e0:11:e4:b2:b8:23:00:ae: e2:e8:69:8d:1a:67:ad:b3:07:19:d8:06:c7:1e:c8: 0f:2e:cf:5d:ad:57:c4:67:92:f6:32:63:c2:f4:a6: f5:3a:c6:b4:f6:b7:1e:17:d9:b2:74:71:84:92:e9: 02:91:40:db:47:f1:0a:ac:91:ac:04:f1:23:8c:48: a7:c4:1d:98:91:60:ca:d3:80:fa:43:54:07:07:ef: 35:16:f9:a3:13:fd:0d:23:e7:8c:a2:9e:26:08:29: 06:f5:87:30:d7:47:f2:a7:63:14:c2:f1:34:a7:47: 85:60:40:1f:45:ce:e6:41:7c:5d:0e:44:ed:31:aa: bc:b5:fe:69:8a:ea:ca:a2:af:54:19:d9:36:32:cd: 5e:85:91:57:65:b5:72:18:5e:be:e7:63:5c:ae:9c: f7:69:95:e1:5e:2a:64:17:7e:cf:b5:3c:8b:57:77: fb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:9A:88:C8:34:4E:33:C8:A4:2E:04:B5:C2:70:F9:51:C6:9D:F0:94 X509v3 Authority Key Identifier: keyid:5E:68:3D:8B:34:5B:B6:E0:F6:3C:D1:A8:F3:2C:3B:5E:CC:B2:B9:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:d5:39:cb:a8:0c:cb:0f:80:4c:25:55:ab:96:1d:37:cf:ec: 13:6c:fc:23:9b:eb:2c:a4:c0:c5:ae:fe:4c:45:7e:69:67:38: 51:ae:6d:78:03:a7:b3:cd:c9:e8:af:59:ac:5d:78:ed:2e:15: dc:5a:4c:68:a8:4c:98:7b:8d:22:62:3b:27:b7:e6:d9:9d:c3: b9:a3:92:5f:6c:e4:a0:7a:d7:71:69:2e:74:c7:23:51:ca:6f: 4c:e9:83:a1:c1:a5:6b:00:b4:10:4f:da:c9:4d:c9:a0:6f:4a: df:66:d0:45:1c:99:12:59:b2:91:2d:e8:80:a6:52:05:c8:7a: c2:b3:e9:21:7b:25:75:57:7f:63:f1:5c:62:27:37:1b:df:3f: ad:22:56:a7:f4:29:94:fa:ba:00:2b:83:9b:86:6e:0e:2a:08: 08:77:e1:00:86:95:fb:35:87:14:52:8a:fd:9a:64:01:0c:90: 97:36:82:47:1a:1d:6c:9a:30:f0:50:b4:a0:a9:05:01:20:e3: 50:fe:41:91:e6:a2:75:38:e5:3d:53:a7:f0:e4:d6:d9:e1:d2: 64:52:5c:be:c3:94:6c:87:4b:4d:5f:af:c7:1f:9c:db:9f:0a: b5:e4:0d:80:d7:e6:d9:7d:b1:0f:1b:44:20:f7:e3:a6:d3:06: 7c:71:0b:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFuqE5pNi+injY++XkvGqU4/jsjAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU2ODNEOEIzNDVCQjZFMEY2M0NEMUE4RjMyQzNCNUVD Q0IyQjlCMDAeFw0yNTExMTExODM1NTZaFw0yNTExMTUwMjQ2NTZaMDMxMTAvBgNV BAMTKEQyOUE4OEM4MzQ0RTMzQzhBNDJFMDRCNUMyNzBGOTUxQzY5REYwOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmyxwZGoF3iASo9iEbnWedVEU+ 5GoEHpltOAWQ7rug8dIqIgd8KiStqzgfcLr94o9oyxuDjUpi4qhfwh+ZzSR0MIcb F/3XpQJcOEs4jyU3V7XgEeSyuCMAruLoaY0aZ62zBxnYBsceyA8uz12tV8RnkvYy Y8L0pvU6xrT2tx4X2bJ0cYSS6QKRQNtH8QqskawE8SOMSKfEHZiRYMrTgPpDVAcH 7zUW+aMT/Q0j54yiniYIKQb1hzDXR/KnYxTC8TSnR4VgQB9FzuZBfF0ORO0xqry1 /mmK6sqir1QZ2TYyzV6FkVdltXIYXr7nY1yunPdpleFeKmQXfs+1PItXd/v7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0pqIyDROM8ikLgS1wnD5Ucad8JQwHwYDVR0j BBgwFoAUXmg9izRbtuD2PNGo8yw7XsyyubAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 M2E3ZjM0Yy02M2I4LTQ5NzMtODIyNi1lMTA2OTViMjVkOTQvMC81RTY4M0Q4QjM0 NUJCNkUwRjYzQ0QxQThGMzJDM0I1RUNDQjJCOUIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUU2ODNEOEIzNDVCQjZFMEY2M0NEMUE4RjMyQzNCNUVDQ0Iy QjlCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTNhN2YzNGMtNjNiOC00OTczLTgy MjYtZTEwNjk1YjI1ZDk0LzAvNUU2ODNEOEIzNDVCQjZFMEY2M0NEMUE4RjMyQzNC NUVDQ0IyQjlCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKvVOcuoDMsPgEwlVauWHTfP7BNs/COb6yyk wMWu/kxFfmlnOFGubXgDp7PNyeivWaxdeO0uFdxaTGioTJh7jSJiOye35tmdw7mj kl9s5KB613FpLnTHI1HKb0zpg6HBpWsAtBBP2slNyaBvSt9m0EUcmRJZspEt6ICm UgXIesKz6SF7JXVXf2PxXGInNxvfP60iVqf0KZT6ugArg5uGbg4qCAh34QCGlfs1 hxRSiv2aZAEMkJc2gkcaHWyaMPBQtKCpBQEg41D+QZHmonU45T1Tp/Dk1tnh0mRS XL7DlGyHS01fr8cfnNufCrXkDYDX5tl9sQ8bRCD346bTBnxxC/0= -----END CERTIFICATE-----Generated at Thu Nov 13 09:26:14 2025 by rpki-client