$ rpki-client -vvf repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft File: 5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft (raw, json) Hash identifier: epTXE6+9yiD3ttxkiXUlM2+lMx+2n184CWRG6kJ2Fek= Subject key identifier: 02:FD:F2:11:28:B5:76:90:0F:21:CC:ED:D7:4B:EC:89:C0:4F:DE:3F Authority key identifier: 5A:0C:BE:2D:BC:F9:88:35:69:F8:C2:4B:FB:9E:59:54:42:D8:35:D0 Certificate issuer: /CN=5A0CBE2DBCF9883569F8C24BFB9E595442D835D0 Certificate serial: 76401427842CB4179982B4AF07EB61D4F54A9F57 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft Manifest number: 04F6 Signing time: Sun 20 Jul 2025 19:41:50 +0000 Manifest this update: Sun 20 Jul 2025 19:36:50 +0000 Manifest next update: Thu 24 Jul 2025 02:42:50 +0000 Files and hashes: 1: 5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl (hash: 52NVMLZvvqYJM9nLJNV3W24hUtLtKtNtAQfIvuGIj4o=) 2: 3130332e3134382e37362e302f32342d3234203d3e20313339393839.roa (hash: 4DHvFxVV4LIBkA3x8qQp+DBWnN9OK+EeEYU9y73AnvA=) 3: 323030313a6466323a633238303a3a2f34382d3438203d3e20313339393839.roa (hash: NAP8Ecg7mcF+3+EYuEqADPL2zQZENpYX/wZwvz8zK2k=) 4: 3130332e3134382e37362e302f32332d3233203d3e20313339393839.roa (hash: tHgBQBHZyelL12LDcNEGOIdBk1KUkf5Y80WNybt6NLU=) 5: 3130332e3134382e37372e302f32342d3234203d3e20313339393839.roa (hash: MWm2F1DhYXk8gG9Y58JwnEVzuJMu3hmMEBr/crsMrlo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 02:42:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:40:14:27:84:2c:b4:17:99:82:b4:af:07:eb:61:d4:f5:4a:9f:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A0CBE2DBCF9883569F8C24BFB9E595442D835D0 Validity Not Before: Jul 20 19:36:50 2025 GMT Not After : Jul 24 02:42:50 2025 GMT Subject: CN=02FDF21128B576900F21CCEDD74BEC89C04FDE3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:46:cd:e6:e0:e7:b2:11:b6:a6:d0:24:60:c0: 48:b9:97:0a:aa:a3:ce:77:31:4c:e0:32:29:62:a1: 01:6c:87:cf:66:16:a3:74:fb:09:61:76:27:8b:d5: 8b:fe:1d:b1:d8:9d:7b:d5:63:d6:df:10:8e:00:5a: 88:43:21:87:29:02:ee:cc:bb:42:86:5b:7f:7b:65: e6:3f:41:74:bf:0c:44:17:50:c8:60:09:09:25:ee: ff:98:b2:7e:c4:32:d0:36:46:77:bf:70:1a:42:38: 99:fe:df:4e:bb:01:c6:6d:e4:8f:af:5a:99:2f:ed: dc:d5:2d:5b:e1:b8:ca:8f:0c:ec:1e:18:9d:82:f2: 8f:8d:fe:43:1c:02:be:77:bd:ea:10:f6:64:ac:bf: d7:0b:ea:11:26:c7:b2:37:87:b3:a6:f7:8c:19:86: 52:18:65:1e:82:70:80:3e:b8:87:f2:12:2f:43:65: a6:ac:22:d5:64:e7:bc:d5:7f:c6:ba:b0:a1:87:20: 87:b5:4d:e9:57:ff:44:03:d5:f2:b4:6b:a4:19:4d: c5:ee:40:cd:34:27:18:aa:e0:a5:e0:91:6c:24:90: d5:50:4b:90:16:b6:3d:11:43:70:d9:72:e1:b0:8d: ac:c5:71:50:90:7c:83:c9:f1:d3:bb:2d:b4:89:38: c9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:FD:F2:11:28:B5:76:90:0F:21:CC:ED:D7:4B:EC:89:C0:4F:DE:3F X509v3 Authority Key Identifier: keyid:5A:0C:BE:2D:BC:F9:88:35:69:F8:C2:4B:FB:9E:59:54:42:D8:35:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ff:c6:65:99:7d:e0:46:52:3f:8e:2b:8e:b3:03:75:25:ec: 49:10:7d:d8:2e:43:ac:07:b8:a5:ce:c4:ee:a1:fd:e0:dd:2b: a3:ba:03:6b:7f:9a:45:07:9a:e5:fc:6e:e0:94:30:0d:a3:9c: 7e:fc:29:8d:ea:41:49:7e:9c:d1:66:6d:03:ee:aa:f4:7d:95: b6:0b:7a:30:a4:9f:11:e4:b8:fa:53:50:ee:03:1d:d0:4b:59: 68:2f:4b:e8:6a:5f:5a:38:26:9f:05:d9:f5:1d:90:b5:ee:b1: 4c:9b:37:75:f9:f1:1e:a3:99:a6:25:64:3e:35:8e:ee:aa:28: d7:93:8f:0c:d3:35:70:4b:fb:fb:86:a3:5d:1b:0f:cf:89:d4: 3f:b9:b9:07:08:54:1e:bf:23:86:34:bc:d4:7f:76:8d:c7:08: 65:7a:b9:8a:b5:11:e8:21:45:46:77:9b:d7:0d:14:f1:cd:0d: da:a3:01:95:5e:3f:22:89:ae:e4:63:51:ba:c0:ad:46:41:f8: 60:e7:35:dd:81:82:ba:ff:37:68:16:f9:5c:cb:2a:7a:6a:ab: 3e:d3:96:cf:13:98:2a:92:62:09:3a:cf:52:85:ad:63:24:3e: c9:07:5d:52:c6:05:46:51:6f:31:f7:6a:c2:51:0a:90:86:fb: 8b:42:48:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdkAUJ4QstBeZgrSvB+th1PVKn1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5NTQ0 MkQ4MzVEMDAeFw0yNTA3MjAxOTM2NTBaFw0yNTA3MjQwMjQyNTBaMDMxMTAvBgNV BAMTKDAyRkRGMjExMjhCNTc2OTAwRjIxQ0NFREQ3NEJFQzg5QzA0RkRFM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNRs3m4OeyEbam0CRgwEi5lwqq o853MUzgMilioQFsh89mFqN0+wlhdieL1Yv+HbHYnXvVY9bfEI4AWohDIYcpAu7M u0KGW397ZeY/QXS/DEQXUMhgCQkl7v+Ysn7EMtA2Rne/cBpCOJn+3067AcZt5I+v Wpkv7dzVLVvhuMqPDOweGJ2C8o+N/kMcAr53veoQ9mSsv9cL6hEmx7I3h7Om94wZ hlIYZR6CcIA+uIfyEi9DZaasItVk57zVf8a6sKGHIIe1TelX/0QD1fK0a6QZTcXu QM00Jxiq4KXgkWwkkNVQS5AWtj0RQ3DZcuGwjazFcVCQfIPJ8dO7LbSJOMkFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAv3yESi1dpAPIczt10vsicBP3j8wHwYDVR0j BBgwFoAUWgy+Lbz5iDVp+MJL+55ZVELYNdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDMxNzQ2ZS1iMGY2LTQ4MjctOGM0ZS1iODE5MmRlY2MzOWEvMC81QTBDQkUyREJD Rjk4ODM1NjlGOEMyNEJGQjlFNTk1NDQyRDgzNUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5NTQ0MkQ4 MzVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAzMTc0NmUtYjBmNi00ODI3LThj NGUtYjgxOTJkZWNjMzlhLzAvNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5 NTQ0MkQ4MzVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHz/xmWZfeBGUj+OK46zA3Ul7EkQfdguQ6wH uKXOxO6h/eDdK6O6A2t/mkUHmuX8buCUMA2jnH78KY3qQUl+nNFmbQPuqvR9lbYL ejCknxHkuPpTUO4DHdBLWWgvS+hqX1o4Jp8F2fUdkLXusUybN3X58R6jmaYlZD41 ju6qKNeTjwzTNXBL+/uGo10bD8+J1D+5uQcIVB6/I4Y0vNR/do3HCGV6uYq1Eegh RUZ3m9cNFPHNDdqjAZVePyKJruRjUbrArUZB+GDnNd2Bgrr/N2gW+VzLKnpqqz7T ls8TmCqSYgk6z1KFrWMkPskHXVLGBUZRbzH3asJRCpCG+4tCSFE= -----END CERTIFICATE-----Generated at Mon Jul 21 23:58:22 2025 by rpki-client