$ rpki-client -vvf repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft File: 5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft (raw, json) Hash identifier: xgHmcPvFn/qV+QvHVewN16fmfQB8qMYPgJTBac6mau4= Subject key identifier: B4:91:4C:67:F0:67:BC:FB:43:7C:EC:A6:33:10:5C:0C:C8:EA:93:05 Authority key identifier: 5B:D3:41:A6:D4:6A:F5:2C:FF:23:A5:D1:E2:58:94:94:EE:AC:A2:70 Certificate issuer: /CN=5BD341A6D46AF52CFF23A5D1E2589494EEACA270 Certificate serial: 2D7210B46B64F073BC32E827F8CAEBF077B65EC3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft Manifest number: 0276 Signing time: Mon 21 Jul 2025 01:00:48 +0000 Manifest this update: Mon 21 Jul 2025 00:55:48 +0000 Manifest next update: Thu 24 Jul 2025 06:33:48 +0000 Files and hashes: 1: 3130332e3137392e36362e302f32332d3234203d3e20313531303030.roa (hash: 3ytI4WNdkarTA98AKzILbdHeDtsgun+xePSvAI/3j/w=) 2: 5BD341A6D46AF52CFF23A5D1E2589494EEACA270.crl (hash: USssJP8H0eyKih67BxgLMYnEhk5/e9cfx+96qMm2BKc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.crl rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:72:10:b4:6b:64:f0:73:bc:32:e8:27:f8:ca:eb:f0:77:b6:5e:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BD341A6D46AF52CFF23A5D1E2589494EEACA270 Validity Not Before: Jul 21 00:55:48 2025 GMT Not After : Jul 24 06:33:48 2025 GMT Subject: CN=B4914C67F067BCFB437CECA633105C0CC8EA9305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a2:03:c6:2c:33:27:62:b0:a2:a3:28:88:57: 71:b8:82:b7:6c:f4:99:64:02:67:b3:1c:27:52:bd: 61:23:f0:eb:85:3c:b0:d9:da:75:1a:08:86:93:3d: c3:60:87:3d:94:a8:9c:b8:59:7a:2a:41:a6:18:a8: d1:2d:ac:23:a7:e8:91:2b:a8:db:52:df:97:21:b6: 55:b1:0b:93:52:d3:ab:0c:37:19:7c:2a:b9:0c:58: b2:b0:7e:3b:28:8e:7e:85:72:44:ce:c7:5d:a4:fd: c6:ab:6f:56:92:fe:2b:af:da:40:1e:61:73:ba:fe: 46:8d:67:20:e9:3d:48:35:d1:d6:1a:8d:5b:a5:ab: ee:f0:c5:fe:f0:12:44:6a:1e:79:4c:2e:05:6a:21: 09:6e:2d:29:3b:1e:6a:1f:f6:31:90:61:b9:3f:5c: a0:93:37:8a:1f:db:93:b4:80:f3:d4:43:28:20:b7: 35:93:e0:8f:33:4a:24:a5:af:67:7d:5d:f8:d7:a5: 5f:01:0d:bf:23:39:cf:1f:30:2d:9a:26:80:69:76: 9d:c9:df:93:4a:35:26:0c:03:f3:9e:51:40:68:cf: 7f:86:f3:80:e2:c9:e8:64:62:d6:6d:8a:6f:62:b8: f3:89:f0:e0:1b:3f:17:39:f6:aa:8a:dc:68:e3:f8: af:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:91:4C:67:F0:67:BC:FB:43:7C:EC:A6:33:10:5C:0C:C8:EA:93:05 X509v3 Authority Key Identifier: keyid:5B:D3:41:A6:D4:6A:F5:2C:FF:23:A5:D1:E2:58:94:94:EE:AC:A2:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:be:ae:ba:cb:7e:03:57:37:b9:b5:48:81:f7:ac:2c:8c:75: db:96:1c:64:4e:05:46:2b:15:de:d1:b3:d5:07:b3:43:f1:da: a2:12:91:2a:08:7c:11:bf:03:31:86:2f:40:36:8b:d2:9d:ca: c4:70:02:c2:85:c4:2d:18:bd:c8:c5:63:9e:e0:4f:d5:c4:94: 91:d2:12:b6:4e:83:c1:82:a9:e8:42:87:1c:65:c6:1a:97:e9: 93:35:05:f3:6c:41:7c:e3:ec:4b:ff:4d:e6:7e:20:fe:2c:94: 91:05:27:0f:13:1c:68:28:39:1b:a7:5d:1f:6e:70:4a:2c:37: 33:65:5d:5d:d9:69:e4:9d:ed:8a:c6:e4:23:d9:11:97:5a:ff: 24:a7:f8:af:05:23:bf:79:a8:1b:37:b3:2a:17:59:90:ee:9b: 38:c0:b7:af:02:cb:e4:2d:2c:05:49:b0:58:08:e5:98:8f:e3: 22:af:12:00:bb:06:96:97:84:55:94:ff:62:a1:4d:32:65:60: bc:a9:b7:43:95:d6:57:9c:d6:f5:a4:78:4e:99:df:e5:dc:bc: 70:13:e8:a6:6e:7b:d4:0b:5d:6e:b8:9a:20:b8:ba:78:56:ad: 99:11:e1:5e:87:97:43:c0:e9:18:c8:c2:28:bb:aa:36:ec:5c: c9:8d:a3:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULXIQtGtk8HO8Mugn+Mrr8He2XsMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJEMzQxQTZENDZBRjUyQ0ZGMjNBNUQxRTI1ODk0OTRF RUFDQTI3MDAeFw0yNTA3MjEwMDU1NDhaFw0yNTA3MjQwNjMzNDhaMDMxMTAvBgNV BAMTKEI0OTE0QzY3RjA2N0JDRkI0MzdDRUNBNjMzMTA1QzBDQzhFQTkzMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZogPGLDMnYrCioyiIV3G4grds 9JlkAmezHCdSvWEj8OuFPLDZ2nUaCIaTPcNghz2UqJy4WXoqQaYYqNEtrCOn6JEr qNtS35chtlWxC5NS06sMNxl8KrkMWLKwfjsojn6FckTOx12k/carb1aS/iuv2kAe YXO6/kaNZyDpPUg10dYajVulq+7wxf7wEkRqHnlMLgVqIQluLSk7Hmof9jGQYbk/ XKCTN4of25O0gPPUQyggtzWT4I8zSiSlr2d9XfjXpV8BDb8jOc8fMC2aJoBpdp3J 35NKNSYMA/OeUUBoz3+G84DiyehkYtZtim9iuPOJ8OAbPxc59qqK3Gjj+K8FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtJFMZ/BnvPtDfOymMxBcDMjqkwUwHwYDVR0j BBgwFoAUW9NBptRq9Sz/I6XR4liUlO6sonAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTEyNzQzZC1kNTZkLTRhNzctOTBlMi1jNTJlNmRmZTA2YzIvMC81QkQzNDFBNkQ0 NkFGNTJDRkYyM0E1RDFFMjU4OTQ5NEVFQUNBMjcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUJEMzQxQTZENDZBRjUyQ0ZGMjNBNUQxRTI1ODk0OTRFRUFD QTI3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2UxMjc0M2QtZDU2ZC00YTc3LTkw ZTItYzUyZTZkZmUwNmMyLzAvNUJEMzQxQTZENDZBRjUyQ0ZGMjNBNUQxRTI1ODk0 OTRFRUFDQTI3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAES+rrrLfgNXN7m1SIH3rCyMdduWHGROBUYr Fd7Rs9UHs0Px2qISkSoIfBG/AzGGL0A2i9KdysRwAsKFxC0YvcjFY57gT9XElJHS ErZOg8GCqehChxxlxhqX6ZM1BfNsQXzj7Ev/TeZ+IP4slJEFJw8THGgoORunXR9u cEosNzNlXV3ZaeSd7YrG5CPZEZda/ySn+K8FI795qBs3syoXWZDumzjAt68Cy+Qt LAVJsFgI5ZiP4yKvEgC7BpaXhFWU/2KhTTJlYLypt0OV1lec1vWkeE6Z3+XcvHAT 6KZue9QLXW64miC4unhWrZkR4V6Hl0PA6RjIwii7qjbsXMmNo8s= -----END CERTIFICATE-----Generated at Mon Jul 21 02:23:18 2025 by rpki-client