$ rpki-client -vvf repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft File: 5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft (raw, json) Hash identifier: m62QGhUmbUGjF2OJRuIc6Bh1gP3cpGSWgVdoJ+RA8rQ= Subject key identifier: 50:52:24:7B:9E:D1:7A:9F:D3:56:66:3E:EB:B2:6F:70:05:80:17:BE Authority key identifier: 5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F Certificate issuer: /CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F Certificate serial: 6FBB117DD0EF022652AF947E61747EFAF92AAAAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft Manifest number: 032A Signing time: Wed 23 Jul 2025 12:40:37 +0000 Manifest this update: Wed 23 Jul 2025 12:35:37 +0000 Manifest next update: Sat 26 Jul 2025 17:54:37 +0000 Files and hashes: 1: 3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (hash: AdQ+JO/REhdDwDAu63+KE7Cs+bTRN78/P47D5a5DoZI=) 2: 3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (hash: UdMMuDzVeoO8FHRaQDUzSG3siVMxaIJM4SzGz06W/gA=) 3: 3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (hash: MsMpPPcpIZuSudoMMepNN+ZazUOetlA5JvcEYSzR82g=) 4: 5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl (hash: H1EIJUtnOja8HEhcdDGyKC2W9prSCcqmMI/kPAX5TIc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 17:54:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:bb:11:7d:d0:ef:02:26:52:af:94:7e:61:74:7e:fa:f9:2a:aa:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F Validity Not Before: Jul 23 12:35:37 2025 GMT Not After : Jul 26 17:54:37 2025 GMT Subject: CN=5052247B9ED17A9FD356663EEBB26F70058017BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:32:f0:78:da:0c:82:37:08:03:bb:bc:d7:69: ba:fc:31:99:86:f0:88:d6:b2:20:bb:8b:ee:cf:34: af:a1:a9:16:3b:e4:dc:ec:8d:85:d2:93:a4:73:f4: fb:c4:58:e6:54:64:5c:61:9e:98:6f:44:09:bd:db: 5e:20:dc:7b:b8:1c:61:94:80:ad:ec:b9:39:f2:2d: 52:c9:bf:4e:8f:49:15:46:d2:49:66:1b:d9:c0:89: e8:c0:04:42:2d:6e:35:df:e5:9d:5c:47:48:e7:ae: 09:3f:9a:fc:09:d5:ec:28:42:7f:85:a0:4f:47:41: 8b:b6:e2:94:a7:a2:28:2b:f7:aa:e4:14:02:96:8d: 08:95:9b:60:84:a0:be:78:53:d8:9f:a5:ca:49:0f: a6:67:15:95:67:7b:cf:c5:c7:f5:15:df:3b:8f:b9: 79:97:ae:75:ee:4f:ee:ad:0f:d4:4f:c9:01:f3:10: 24:75:65:db:e1:c6:02:ef:a7:0b:71:bd:1f:7d:9f: 97:7a:90:7b:30:7c:14:b9:cf:49:6b:94:c5:32:5f: 20:1d:3e:3c:b3:90:62:00:30:b9:6e:a7:23:f8:a6: d3:e9:f4:f7:0f:17:97:97:98:c1:ac:8b:c0:34:1c: ed:42:f4:04:fb:71:e3:d4:df:40:f4:3c:86:49:8e: 93:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:52:24:7B:9E:D1:7A:9F:D3:56:66:3E:EB:B2:6F:70:05:80:17:BE X509v3 Authority Key Identifier: keyid:5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:03:40:0c:70:62:50:e7:d5:4a:d0:3e:c9:4c:04:63:4c:b3: 2d:9a:d5:18:6f:07:b3:20:56:5d:e2:b7:b4:16:0b:6a:9b:56: cc:be:8a:81:24:80:ee:e3:3d:0a:b4:80:c8:4c:68:d8:70:06: 50:08:97:4c:18:da:cf:97:e9:15:de:62:95:21:1c:b3:92:53: 06:14:36:6e:27:c0:c7:5d:74:4d:51:bb:33:f2:d7:0f:bb:7c: e4:bc:2c:d4:f0:37:f0:31:85:aa:05:b0:c1:15:72:ad:d3:b9: 7d:a1:ad:e2:8c:4a:4c:18:94:4b:6a:3a:95:a0:8a:44:b8:3a: 31:2e:71:cf:18:b5:30:08:8e:7b:f9:5f:3c:12:92:e7:a9:d6: f2:8c:d8:c9:4a:b8:bd:d4:cd:a3:8c:32:dd:a8:81:c2:59:af: 95:6f:a6:c2:3f:a9:61:c4:a4:4b:d2:01:c8:06:ca:fd:86:d7: 2f:f3:95:e1:8f:b4:95:e5:91:e4:37:9e:4c:46:a1:e5:32:3f: f3:13:50:37:12:66:ad:68:2c:7d:3e:07:97:bd:a0:7f:af:6b: eb:5a:8f:f1:3f:3d:11:11:fd:62:06:b1:be:6e:2d:ee:ed:8c: fc:55:55:7f:5c:aa:30:07:e1:97:d8:38:9f:89:1a:77:ab:a4: 9d:97:e8:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb7sRfdDvAiZSr5R+YXR++vkqqq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJCQ0My RTZCM0Q4RjAeFw0yNTA3MjMxMjM1MzdaFw0yNTA3MjYxNzU0MzdaMDMxMTAvBgNV BAMTKDUwNTIyNDdCOUVEMTdBOUZEMzU2NjYzRUVCQjI2RjcwMDU4MDE3QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiMvB42gyCNwgDu7zXabr8MZmG 8IjWsiC7i+7PNK+hqRY75NzsjYXSk6Rz9PvEWOZUZFxhnphvRAm9214g3Hu4HGGU gK3suTnyLVLJv06PSRVG0klmG9nAiejABEItbjXf5Z1cR0jnrgk/mvwJ1ewoQn+F oE9HQYu24pSnoigr96rkFAKWjQiVm2CEoL54U9ifpcpJD6ZnFZVne8/Fx/UV3zuP uXmXrnXuT+6tD9RPyQHzECR1ZdvhxgLvpwtxvR99n5d6kHswfBS5z0lrlMUyXyAd PjyzkGIAMLlupyP4ptPp9PcPF5eXmMGsi8A0HO1C9AT7cePU30D0PIZJjpMHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUFIke57Rep/TVmY+67JvcAWAF74wHwYDVR0j BBgwFoAUXB3H6HRXqR81kVrx3j+7zC5rPY8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yzg4NDQyYi1jNDhlLTRiYTAtOGFkNy01OGUxMjYzYzZkYzcvMC81QzFEQzdFODc0 NTdBOTFGMzU5MTVBRjFERTNGQkJDQzJFNkIzRDhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJCQ0MyRTZC M0Q4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M4ODQ0MmItYzQ4ZS00YmEwLThh ZDctNThlMTI2M2M2ZGM3LzAvNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJC Q0MyRTZCM0Q4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALkDQAxwYlDn1UrQPslMBGNMsy2a1RhvB7Mg Vl3it7QWC2qbVsy+ioEkgO7jPQq0gMhMaNhwBlAIl0wY2s+X6RXeYpUhHLOSUwYU Nm4nwMdddE1RuzPy1w+7fOS8LNTwN/AxhaoFsMEVcq3TuX2hreKMSkwYlEtqOpWg ikS4OjEucc8YtTAIjnv5XzwSkuep1vKM2MlKuL3UzaOMMt2ogcJZr5VvpsI/qWHE pEvSAcgGyv2G1y/zleGPtJXlkeQ3nkxGoeUyP/MTUDcSZq1oLH0+B5e9oH+va+ta j/E/PRER/WIGsb5uLe7tjPxVVX9cqjAH4ZfYOJ+JGnerpJ2X6NE= -----END CERTIFICATE-----Generated at Fri Jul 25 00:19:03 2025 by rpki-client