$ rpki-client -vvf repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft File: 5DC5D36558922295B85E7AE3A79178FB430FD34B.mft (raw, json) Hash identifier: 5JQCsFWm6C07feWrCfzXZwbSpy012eUS8ci7XWKdyFM= Subject key identifier: FA:13:5C:35:A4:EB:35:29:1F:C2:7B:D8:EC:3F:23:D0:06:F9:E4:74 Authority key identifier: 5D:C5:D3:65:58:92:22:95:B8:5E:7A:E3:A7:91:78:FB:43:0F:D3:4B Certificate issuer: /CN=5DC5D36558922295B85E7AE3A79178FB430FD34B Certificate serial: 3ED6AE763A0C70F9FC3946CF761AFD2998AF4ADA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DC5D36558922295B85E7AE3A79178FB430FD34B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft Manifest number: 04A3 Signing time: Sat 19 Jul 2025 15:32:20 +0000 Manifest this update: Sat 19 Jul 2025 15:27:20 +0000 Manifest next update: Tue 22 Jul 2025 18:17:20 +0000 Files and hashes: 1: 5DC5D36558922295B85E7AE3A79178FB430FD34B.crl (hash: LdfqILUtyr3LrjNW6aAdMjfCLAM1ps5axWd8edZ66R4=) 2: 3130332e3135362e3233342e302f32342d3234203d3e20313431303939.roa (hash: l2QbtL5+hyyVVRfe0YZF9ChrujkW/kf4eBNWFTqGhOc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.crl rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DC5D36558922295B85E7AE3A79178FB430FD34B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 18:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:d6:ae:76:3a:0c:70:f9:fc:39:46:cf:76:1a:fd:29:98:af:4a:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DC5D36558922295B85E7AE3A79178FB430FD34B Validity Not Before: Jul 19 15:27:20 2025 GMT Not After : Jul 22 18:17:20 2025 GMT Subject: CN=FA135C35A4EB35291FC27BD8EC3F23D006F9E474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7a:e5:fa:2a:f9:10:fb:65:8d:2c:47:d6:09: a4:8f:60:b3:24:13:ac:09:1f:bb:ea:16:3f:86:fa: 48:99:66:e5:98:88:74:e9:fe:20:ac:1f:1b:42:bc: f3:c8:5d:c7:ef:16:96:e2:64:9d:a7:c4:08:3c:70: e6:9e:25:5f:67:f1:62:c6:ea:b5:31:24:fd:17:ac: 18:e1:b0:04:97:76:62:86:fd:f1:05:de:9f:7f:0b: a7:3a:26:a3:be:3c:b5:b8:3d:17:f4:19:ae:06:5d: 02:7d:b4:a4:da:9c:22:54:75:ca:d3:9d:e0:e5:44: d1:51:79:25:d2:aa:d0:30:c4:2c:d4:c1:59:ba:e4: d8:73:3c:5e:5c:ac:e8:c9:7e:65:82:6d:a6:81:87: 96:03:16:03:5b:f9:d0:df:1e:9d:5a:36:0d:0d:26: f4:84:ff:a5:3a:2f:27:ce:21:b6:02:db:06:72:45: 03:1e:04:7d:90:4b:a2:8c:03:54:0e:09:d9:e3:1c: b3:32:4f:db:26:9a:e3:6f:e5:04:2e:93:b1:5b:4a: 4f:76:c9:a8:8e:0b:97:16:2b:fe:77:4b:ff:79:4c: 74:5f:0a:ba:f1:86:11:03:dc:5e:7d:98:39:40:49: 37:56:23:62:e7:c5:65:c4:aa:3a:54:06:f7:a6:a7: 57:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:13:5C:35:A4:EB:35:29:1F:C2:7B:D8:EC:3F:23:D0:06:F9:E4:74 X509v3 Authority Key Identifier: keyid:5D:C5:D3:65:58:92:22:95:B8:5E:7A:E3:A7:91:78:FB:43:0F:D3:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DC5D36558922295B85E7AE3A79178FB430FD34B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:52:6c:e3:b9:90:d1:f8:5f:c0:88:82:43:67:b1:e2:d0:e9: 88:55:fb:5c:b8:41:c1:f6:d9:5e:95:aa:d9:03:78:29:53:03: 42:25:cb:65:f1:6e:1b:99:70:80:3c:91:a4:2d:a5:76:13:02: 29:49:73:03:80:10:1a:03:c7:c2:ca:e9:2a:f7:49:92:12:ec: 29:46:05:a2:80:99:98:e1:38:44:5f:18:fe:e0:01:44:53:eb: 69:a7:91:63:66:3c:fe:45:7a:03:75:7a:e8:ce:cf:89:e4:06: 21:e2:19:a4:8d:ce:eb:62:a8:80:f8:bb:6a:77:b6:0f:63:84: 0e:02:e9:3c:be:cc:01:8a:7a:6a:15:ee:e0:dd:6a:95:41:86: e4:b7:7e:1d:3e:e1:6f:cc:b8:2d:93:55:82:56:82:0e:83:ae: 98:ed:b0:da:88:28:a9:ee:18:f1:90:eb:41:89:37:27:37:58: d1:78:62:4c:9e:ea:5c:30:f0:ac:9a:94:29:5c:3b:cb:ae:6b: 3a:37:08:f2:c2:f8:8e:73:54:a0:55:61:57:8a:97:f5:40:13: 02:f3:96:e9:45:9b:66:17:b4:cb:02:ca:ef:eb:23:17:df:dd: de:3a:89:5f:c6:25:ed:b5:ba:92:36:6a:48:9c:c2:34:26:01: 4b:80:13:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPtaudjoMcPn8OUbPdhr9KZivStowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURDNUQzNjU1ODkyMjI5NUI4NUU3QUUzQTc5MTc4RkI0 MzBGRDM0QjAeFw0yNTA3MTkxNTI3MjBaFw0yNTA3MjIxODE3MjBaMDMxMTAvBgNV BAMTKEZBMTM1QzM1QTRFQjM1MjkxRkMyN0JEOEVDM0YyM0QwMDZGOUU0NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHeuX6KvkQ+2WNLEfWCaSPYLMk E6wJH7vqFj+G+kiZZuWYiHTp/iCsHxtCvPPIXcfvFpbiZJ2nxAg8cOaeJV9n8WLG 6rUxJP0XrBjhsASXdmKG/fEF3p9/C6c6JqO+PLW4PRf0Ga4GXQJ9tKTanCJUdcrT neDlRNFReSXSqtAwxCzUwVm65NhzPF5crOjJfmWCbaaBh5YDFgNb+dDfHp1aNg0N JvSE/6U6LyfOIbYC2wZyRQMeBH2QS6KMA1QOCdnjHLMyT9smmuNv5QQuk7FbSk92 yaiOC5cWK/53S/95THRfCrrxhhED3F59mDlASTdWI2LnxWXEqjpUBvemp1ftAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+hNcNaTrNSkfwnvY7D8j0Ab55HQwHwYDVR0j BBgwFoAUXcXTZViSIpW4Xnrjp5F4+0MP00swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZTNhMTM4ZS1hMmIyLTQ2MDQtYWQ1MC0zY2FiNzUwYTc1ZTcvMC81REM1RDM2NTU4 OTIyMjk1Qjg1RTdBRTNBNzkxNzhGQjQzMEZEMzRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNURDNUQzNjU1ODkyMjI5NUI4NUU3QUUzQTc5MTc4RkI0MzBG RDM0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmUzYTEzOGUtYTJiMi00NjA0LWFk NTAtM2NhYjc1MGE3NWU3LzAvNURDNUQzNjU1ODkyMjI5NUI4NUU3QUUzQTc5MTc4 RkI0MzBGRDM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGRSbOO5kNH4X8CIgkNnseLQ6YhV+1y4QcH2 2V6VqtkDeClTA0Ily2XxbhuZcIA8kaQtpXYTAilJcwOAEBoDx8LK6Sr3SZIS7ClG BaKAmZjhOERfGP7gAURT62mnkWNmPP5FegN1eujOz4nkBiHiGaSNzutiqID4u2p3 tg9jhA4C6Ty+zAGKemoV7uDdapVBhuS3fh0+4W/MuC2TVYJWgg6DrpjtsNqIKKnu GPGQ60GJNyc3WNF4Ykye6lww8KyalClcO8uuazo3CPLC+I5zVKBVYVeKl/VAEwLz lulFm2YXtMsCyu/rIxff3d46iV/GJe21upI2akicwjQmAUuAE/8= -----END CERTIFICATE-----Generated at Mon Jul 21 08:01:44 2025 by rpki-client