$ rpki-client -vvf repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft File: 5CC6B0489E576BC0D642B626195A0AA0560DC792.mft (raw, json) Hash identifier: +0MHJHz1HaJOPJOthQ+sG50L1+T69Yvd7wLNT1xJ4L8= Subject key identifier: F5:33:1E:BB:80:5E:5D:60:43:4C:6D:FF:E5:AF:BD:7D:84:B6:E4:59 Authority key identifier: 5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92 Certificate issuer: /CN=5CC6B0489E576BC0D642B626195A0AA0560DC792 Certificate serial: 19E84C15EC4D4B932509BE366BBF3BF2B6314496 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft Manifest number: 0193 Signing time: Sat 19 Jul 2025 12:00:37 +0000 Manifest this update: Sat 19 Jul 2025 11:55:37 +0000 Manifest next update: Tue 22 Jul 2025 22:09:37 +0000 Files and hashes: 1: 5CC6B0489E576BC0D642B626195A0AA0560DC792.crl (hash: 8Vl6ElBhD1aQH+X24Aoux3n3A8GVm4Kz8XOtx0ap22A=) 2: 3130332e3132312e3133382e302f32332d3234203d3e20313335343738.roa (hash: IYSPzv0ipkmDqn5ZyXeN0f328BkzkZ8Pmn6bIzAKtQc=) 3: 3130332e3132312e3133362e302f32332d3234203d3e20313335343738.roa (hash: XTHSvGcaRTEV+p1Y+pj9uwCkeA4dOjhqgF5dBEY4xig=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.crl rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 22:09:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:e8:4c:15:ec:4d:4b:93:25:09:be:36:6b:bf:3b:f2:b6:31:44:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CC6B0489E576BC0D642B626195A0AA0560DC792 Validity Not Before: Jul 19 11:55:37 2025 GMT Not After : Jul 22 22:09:37 2025 GMT Subject: CN=F5331EBB805E5D60434C6DFFE5AFBD7D84B6E459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b9:89:3e:46:ea:ec:e7:2e:f6:8d:44:7a:fd: 94:09:e9:be:e3:be:59:70:1a:ef:b8:61:f1:bc:44: 13:9c:ba:c1:64:4e:96:74:15:30:fd:5b:7b:dc:76: 8b:62:76:cf:41:41:2c:6e:5b:ac:53:72:e5:1a:fe: a3:b4:41:ee:40:48:36:4f:29:6e:13:94:2b:f9:37: f9:29:f4:9d:72:f6:ea:44:39:5e:cc:ee:f4:36:03: 63:dd:10:33:37:65:4d:27:f8:da:26:d7:81:6f:ef: b9:7d:53:13:04:af:7f:6f:2a:de:a7:4a:72:b3:08: c0:79:ab:0e:55:1d:cc:58:d9:28:f9:43:db:63:13: 8b:22:d2:95:76:28:7e:c9:b7:03:9b:ea:15:a8:18: bb:42:cf:7d:2f:b8:dc:9a:25:9c:20:c9:5d:7d:c7: 92:2b:97:7f:33:14:e8:ec:6e:36:a8:73:fe:24:c8: 93:60:04:fe:06:a3:0f:57:22:43:fe:d3:0d:bd:4a: 88:af:c4:bf:b1:9c:eb:9a:36:60:b7:11:43:dc:10: f4:8d:3b:89:f0:0c:b0:f8:5a:38:f8:9a:83:f9:ac: 01:43:27:dc:7a:ee:bd:7d:fb:15:af:ff:f7:28:cc: d6:85:ab:2c:26:0e:62:22:2c:2a:42:78:a6:8d:8a: 22:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:33:1E:BB:80:5E:5D:60:43:4C:6D:FF:E5:AF:BD:7D:84:B6:E4:59 X509v3 Authority Key Identifier: keyid:5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:3a:80:31:c1:3f:8f:32:1b:5e:af:c3:1b:a4:32:5f:cf:14: 44:dd:7b:5f:f5:21:7b:0c:27:f9:4c:23:5d:d3:2e:df:5c:ed: ff:83:f5:93:3d:ca:7c:47:a8:11:17:c5:40:b3:f0:4c:ca:02: d9:c6:ed:80:8a:9d:05:c2:a6:0f:a5:bc:a0:56:b9:59:b5:e8: 66:88:d5:94:6a:6b:6d:47:4e:fb:c4:94:5f:e0:d5:72:f8:14: 01:55:62:d7:41:b5:81:68:0b:73:e5:3f:9e:c2:ae:5a:cb:ef: 6b:db:9b:d5:ff:ad:cd:ba:10:12:08:50:5a:3a:88:de:82:6f: b1:72:b7:96:36:b2:9f:94:57:c9:99:73:80:d4:cc:aa:74:2d: 74:87:55:33:bc:37:60:fb:08:fe:02:a7:ba:28:2b:b1:d2:2a: d9:f5:9e:64:0f:5d:84:e0:58:29:05:bc:7e:75:d5:00:bb:3e: a9:ef:db:7d:d4:eb:23:08:b3:b1:b6:8f:f3:0c:4e:0f:0d:d8: b3:85:a4:97:17:b5:1d:87:cb:ec:00:db:1c:3d:96:81:6e:33: 1e:d0:00:ff:d2:57:f3:2c:b9:b8:98:cb:9e:d1:95:ec:7c:0e: bc:17:3a:dc:89:22:e8:0b:64:7f:4f:eb:d4:f5:20:05:b0:67: 7a:18:cb:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGehMFexNS5MlCb42a7878rYxRJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBBQTA1 NjBEQzc5MjAeFw0yNTA3MTkxMTU1MzdaFw0yNTA3MjIyMjA5MzdaMDMxMTAvBgNV BAMTKEY1MzMxRUJCODA1RTVENjA0MzRDNkRGRkU1QUZCRDdEODRCNkU0NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKuYk+Rurs5y72jUR6/ZQJ6b7j vllwGu+4YfG8RBOcusFkTpZ0FTD9W3vcdotids9BQSxuW6xTcuUa/qO0Qe5ASDZP KW4TlCv5N/kp9J1y9upEOV7M7vQ2A2PdEDM3ZU0n+Nom14Fv77l9UxMEr39vKt6n SnKzCMB5qw5VHcxY2Sj5Q9tjE4si0pV2KH7JtwOb6hWoGLtCz30vuNyaJZwgyV19 x5Irl38zFOjsbjaoc/4kyJNgBP4Gow9XIkP+0w29SoivxL+xnOuaNmC3EUPcEPSN O4nwDLD4Wjj4moP5rAFDJ9x67r19+xWv//cozNaFqywmDmIiLCpCeKaNiiL7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9TMeu4BeXWBDTG3/5a+9fYS25FkwHwYDVR0j BBgwFoAUXMawSJ5Xa8DWQrYmGVoKoFYNx5IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjRmYTdiOC01MzAyLTQ5MGItOTJlNC0yN2YyOGM2NjU3NWMvMC81Q0M2QjA0ODlF NTc2QkMwRDY0MkI2MjYxOTVBMEFBMDU2MERDNzkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBBQTA1NjBE Qzc5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY0ZmE3YjgtNTMwMi00OTBiLTky ZTQtMjdmMjhjNjY1NzVjLzAvNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBB QTA1NjBEQzc5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEI6gDHBP48yG16vwxukMl/PFETde1/1IXsM J/lMI13TLt9c7f+D9ZM9ynxHqBEXxUCz8EzKAtnG7YCKnQXCpg+lvKBWuVm16GaI 1ZRqa21HTvvElF/g1XL4FAFVYtdBtYFoC3PlP57CrlrL72vbm9X/rc26EBIIUFo6 iN6Cb7Fyt5Y2sp+UV8mZc4DUzKp0LXSHVTO8N2D7CP4Cp7ooK7HSKtn1nmQPXYTg WCkFvH511QC7Pqnv233U6yMIs7G2j/MMTg8N2LOFpJcXtR2Hy+wA2xw9loFuMx7Q AP/SV/MsubiYy57Rlex8DrwXOtyJIugLZH9P69T1IAWwZ3oYy64= -----END CERTIFICATE-----Generated at Mon Jul 21 18:06:57 2025 by rpki-client