$ rpki-client -vvf repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft File: 5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft (raw, json) Hash identifier: X5NIPMD7i5MvvfNOJCvXeTg/Oea2dZWeCCS4ZUOmi0k= Subject key identifier: 41:88:6B:8D:ED:84:06:BF:C8:1C:49:11:41:36:41:3C:1F:42:35:B0 Authority key identifier: 5A:D1:91:73:FE:66:EE:2B:9E:99:5A:99:ED:7D:C4:23:01:13:BD:EF Certificate issuer: /CN=5AD19173FE66EE2B9E995A99ED7DC4230113BDEF Certificate serial: 0FF2AC2D19EB2B45F7EE264A4F9BBD8C6156D813 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft Manifest number: 015C Signing time: Sat 19 Jul 2025 19:32:04 +0000 Manifest this update: Sat 19 Jul 2025 19:27:04 +0000 Manifest next update: Wed 23 Jul 2025 02:03:04 +0000 Files and hashes: 1: 5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl (hash: sxxJstat0L0Q4FdDaTTwuda1Seoku8tiFR7uNAO0dyU=) 2: 3130332e3132332e3137342e302f32332d3233203d3e20313530393638.roa (hash: 5XRHZIZI1oj83KHXG7v/4Bg68uKlgADqYmMHikLr/vU=) 3: 3130332e3132332e3137342e302f32342d3234203d3e20313530393638.roa (hash: HBPJroPXGy8LUopobuBKzRyp/rbJ8xWZnNOPphW6Qlg=) 4: 3130332e3132332e3137352e302f32342d3234203d3e20313530393638.roa (hash: dqxRLNjaP87/BAjwkFlOT+1aQilVY6SUF3ZdlXMJQnY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 02:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:f2:ac:2d:19:eb:2b:45:f7:ee:26:4a:4f:9b:bd:8c:61:56:d8:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AD19173FE66EE2B9E995A99ED7DC4230113BDEF Validity Not Before: Jul 19 19:27:04 2025 GMT Not After : Jul 23 02:03:04 2025 GMT Subject: CN=41886B8DED8406BFC81C49114136413C1F4235B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c0:8e:7f:01:e4:fe:ea:96:77:84:1c:2b:09: ac:96:b3:d2:b6:61:b7:89:ca:e5:83:5f:b7:94:50: 7c:b1:91:18:2c:3a:c6:53:1f:44:dd:2e:e5:93:17: 06:17:b4:dd:9e:94:eb:ce:7d:68:5d:00:84:c3:bf: 2c:57:14:dc:0c:48:62:13:21:e7:e5:2e:92:82:59: a5:f0:37:87:de:f9:1b:be:ef:b4:fb:a9:60:cc:c1: f9:f9:82:c9:27:8f:00:c1:3c:f4:bc:8d:0d:e4:a9: 47:89:68:94:51:44:ec:81:de:1c:68:3d:87:52:2f: b8:65:07:1a:51:9a:2a:f6:fa:c7:f8:85:d9:49:f0: ee:91:6c:55:df:d0:e5:6c:e2:3c:57:0f:a8:01:83: ae:a6:01:46:8a:00:f1:55:57:bb:1a:ea:27:5b:1c: 5e:83:3a:fb:23:2a:86:cf:23:4d:ad:80:ea:2b:ac: 97:31:a9:27:70:e4:1d:d1:97:ba:bb:43:13:7d:02: d9:64:e4:cc:29:37:01:ce:b5:fe:ea:1d:b3:ef:b3: 40:13:8f:d0:54:c8:84:9e:b2:c4:f3:d5:b7:59:55: e2:e8:b2:88:83:62:45:c3:d7:ca:84:13:30:4e:5b: 8b:81:55:80:d8:16:a9:d3:26:3f:e8:94:61:a9:1e: f0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:88:6B:8D:ED:84:06:BF:C8:1C:49:11:41:36:41:3C:1F:42:35:B0 X509v3 Authority Key Identifier: keyid:5A:D1:91:73:FE:66:EE:2B:9E:99:5A:99:ED:7D:C4:23:01:13:BD:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:f6:02:2d:90:ed:5c:f6:61:c0:60:9d:ff:6c:0f:7e:c5:16: 7e:58:11:3b:d2:53:6f:0a:c6:55:d2:06:50:bb:66:a5:2f:72: 1b:62:c8:36:94:34:ab:61:79:28:bc:a9:32:8d:6e:d5:ce:da: 6a:5b:30:9b:b2:7c:4d:bd:f9:23:5f:2e:a3:65:10:91:36:25: 46:bf:70:6e:9a:6d:1b:07:fd:0c:58:d5:44:e0:0d:97:80:f1: 93:4a:c8:b1:c0:e2:62:16:49:02:ba:65:ca:71:ed:2d:90:60: f5:2d:0d:fa:91:81:fb:c3:c0:17:1a:98:c7:7d:ac:60:d5:3d: 02:5b:20:51:5e:da:8f:68:70:76:9e:10:d3:43:e7:1f:0d:75: c8:d5:bb:cf:18:ab:61:ea:40:ab:c9:1a:9e:b5:6d:46:55:b5: 58:20:4e:e1:9d:15:e2:cd:58:23:0f:85:4b:29:cc:2d:4b:57: 64:8a:13:70:8b:40:25:29:50:04:33:6f:66:e6:6b:05:9e:9a: e9:2b:ad:30:1f:40:c5:4b:bf:62:c9:76:50:c1:85:7a:5f:ac: dc:37:92:10:20:82:25:01:12:6d:70:83:99:df:76:89:bf:b3: 00:7e:98:fc:ef:d5:52:55:8f:f7:ad:9c:a0:25:ac:57:8a:75: 7e:ed:7c:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD/KsLRnrK0X37iZKT5u9jGFW2BMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0MjMw MTEzQkRFRjAeFw0yNTA3MTkxOTI3MDRaFw0yNTA3MjMwMjAzMDRaMDMxMTAvBgNV BAMTKDQxODg2QjhERUQ4NDA2QkZDODFDNDkxMTQxMzY0MTNDMUY0MjM1QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/wI5/AeT+6pZ3hBwrCayWs9K2 YbeJyuWDX7eUUHyxkRgsOsZTH0TdLuWTFwYXtN2elOvOfWhdAITDvyxXFNwMSGIT IeflLpKCWaXwN4fe+Ru+77T7qWDMwfn5gsknjwDBPPS8jQ3kqUeJaJRRROyB3hxo PYdSL7hlBxpRmir2+sf4hdlJ8O6RbFXf0OVs4jxXD6gBg66mAUaKAPFVV7sa6idb HF6DOvsjKobPI02tgOorrJcxqSdw5B3Rl7q7QxN9Atlk5MwpNwHOtf7qHbPvs0AT j9BUyISessTz1bdZVeLosoiDYkXD18qEEzBOW4uBVYDYFqnTJj/olGGpHvBxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQYhrje2EBr/IHEkRQTZBPB9CNbAwHwYDVR0j BBgwFoAUWtGRc/5m7iuemVqZ7X3EIwETve8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmVkYjI4Zi1mM2Y5LTQxOTktODVhMy1jOWJmOWE3YTdkZjgvMC81QUQxOTE3M0ZF NjZFRTJCOUU5OTVBOTlFRDdEQzQyMzAxMTNCREVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0MjMwMTEz QkRFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWZlZGIyOGYtZjNmOS00MTk5LTg1 YTMtYzliZjlhN2E3ZGY4LzAvNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0 MjMwMTEzQkRFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAL2Ai2Q7Vz2YcBgnf9sD37FFn5YETvSU28K xlXSBlC7ZqUvchtiyDaUNKtheSi8qTKNbtXO2mpbMJuyfE29+SNfLqNlEJE2JUa/ cG6abRsH/QxY1UTgDZeA8ZNKyLHA4mIWSQK6Zcpx7S2QYPUtDfqRgfvDwBcamMd9 rGDVPQJbIFFe2o9ocHaeENND5x8NdcjVu88Yq2HqQKvJGp61bUZVtVggTuGdFeLN WCMPhUspzC1LV2SKE3CLQCUpUAQzb2bmawWemukrrTAfQMVLv2LJdlDBhXpfrNw3 khAggiUBEm1wg5nfdom/swB+mPzv1VJVj/etnKAlrFeKdX7tfGo= -----END CERTIFICATE-----Generated at Sun Jul 20 23:56:24 2025 by rpki-client