$ rpki-client -vvf repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft File: 5234A428BC63559E2511B3EFFB085B82B195A8ED.mft (raw, json) Hash identifier: nOlec6m3IVppYFAfiotWYiEC1XK+w1ABZcxBO20rUfo= Subject key identifier: BF:2F:7E:ED:9E:D4:66:4C:7A:6A:06:26:60:9E:66:CF:91:52:D2:8F Authority key identifier: 52:34:A4:28:BC:63:55:9E:25:11:B3:EF:FB:08:5B:82:B1:95:A8:ED Certificate issuer: /CN=5234A428BC63559E2511B3EFFB085B82B195A8ED Certificate serial: 29D34BBE984703757BFA543D955091C483616C7A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft Manifest number: 37 Signing time: Sun 20 Jul 2025 12:22:00 +0000 Manifest this update: Sun 20 Jul 2025 12:17:00 +0000 Manifest next update: Wed 23 Jul 2025 22:10:00 +0000 Files and hashes: 1: 5234A428BC63559E2511B3EFFB085B82B195A8ED.crl (hash: ZhbxY3GNDx2U/71ldD/fcXa3QeT252OG7ODyDLoUAtA=) 2: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: 3jZR/32xfuAKeJQ/xf5TVwB85F6YIOYekaTwsoIa1SY=) 3: 3130332e31372e37362e302f32342d3234203d3e20313331373831.roa (hash: rB8zcfhigYxp6rZG5kgxX6r/oJS8xphHw/YAzK8Sodw=) 4: 3130332e31372e37372e302f32342d3234203d3e20313331373831.roa (hash: 4y750PE+WZPEuQKdgW2BVnFEcTQLxauJA4sENyjZR2o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.crl rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 22:10:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:d3:4b:be:98:47:03:75:7b:fa:54:3d:95:50:91:c4:83:61:6c:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5234A428BC63559E2511B3EFFB085B82B195A8ED Validity Not Before: Jul 20 12:17:00 2025 GMT Not After : Jul 23 22:10:00 2025 GMT Subject: CN=BF2F7EED9ED4664C7A6A0626609E66CF9152D28F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:62:00:59:42:93:f1:7c:de:16:43:24:98:f0: d7:3c:9b:24:5f:7b:8a:42:72:ec:41:33:c8:a9:fa: 15:33:a6:e9:52:39:ac:24:97:28:24:c3:c4:0d:44: 59:48:f9:f0:df:15:bf:52:3c:f8:17:63:a8:50:c2: ac:54:90:d6:d0:76:20:ec:c9:e6:cc:4d:40:90:f4: 35:f2:58:5b:a4:ce:4c:2d:5c:af:b6:61:3d:b9:2a: f5:96:f0:ec:cd:b5:db:6d:bb:12:04:58:d5:55:98: 94:b9:46:71:bf:67:30:2f:52:f4:2b:90:51:e2:53: 78:fb:26:63:cd:7e:10:d7:a2:8f:88:4f:70:35:fd: 83:0a:fa:cb:f0:d0:4d:6a:92:25:3e:31:f6:a6:32: 37:e8:a8:b1:b6:e0:6c:54:aa:35:0d:88:f3:50:63: ac:1c:3f:7f:e0:31:66:22:8a:86:ee:c9:ca:2c:58: 1f:2e:25:6d:53:cd:9d:70:c3:c8:b2:69:22:fa:28: 0f:93:fb:44:bc:13:9d:10:12:cf:66:1a:52:0a:c4: ff:e9:02:d2:74:4b:55:33:18:3f:2c:92:56:5b:83: ec:8a:c5:00:26:88:1a:54:33:fb:4c:29:b0:99:e3: bc:3e:41:6f:b7:f5:1f:f1:92:f0:a3:e4:81:b2:fc: 47:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:2F:7E:ED:9E:D4:66:4C:7A:6A:06:26:60:9E:66:CF:91:52:D2:8F X509v3 Authority Key Identifier: keyid:52:34:A4:28:BC:63:55:9E:25:11:B3:EF:FB:08:5B:82:B1:95:A8:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:8d:99:43:23:68:09:fc:b9:69:fe:c9:aa:d6:f2:74:84:e7: 9f:13:fe:38:08:5b:18:ef:5c:ad:9b:03:7f:1a:08:e7:cd:9c: 77:29:97:de:c4:eb:2a:25:79:a2:78:ad:5c:9b:9a:5e:6e:73: 66:46:22:33:9c:b4:c5:ca:18:be:ad:b0:8f:a4:b2:80:b7:c6: d3:f0:90:97:bb:79:49:a6:fb:38:e4:3e:8f:79:e3:cc:48:4d: c8:e8:dd:db:47:58:ae:8e:42:5f:1b:ee:dd:99:db:cf:ce:91: c1:6f:3d:30:1f:b3:78:78:3b:48:e3:e1:33:0d:4d:5f:aa:9b: e5:7e:47:75:f5:35:64:c9:84:be:88:a6:67:c4:14:8f:7b:a3: c4:4c:d5:c1:75:ab:6d:b9:15:05:46:34:91:0e:c6:b6:df:16: 5d:76:b4:03:e8:91:97:0d:59:ef:d3:32:30:eb:ee:2b:6c:27: 30:df:67:14:8f:3c:ef:d1:86:8a:f6:70:1f:e0:a0:e2:64:32: d6:c5:9c:e8:1a:08:ee:61:b1:85:60:d7:e9:84:d1:1e:21:5c: 1b:ee:7f:b1:14:ec:2a:cf:f8:80:ee:f0:82:84:98:c1:b3:93: e7:cf:37:74:f2:b5:e6:6e:6f:47:8c:23:f2:b9:36:62:06:cd: ba:b9:17:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKdNLvphHA3V7+lQ9lVCRxINhbHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVCODJC MTk1QThFRDAeFw0yNTA3MjAxMjE3MDBaFw0yNTA3MjMyMjEwMDBaMDMxMTAvBgNV BAMTKEJGMkY3RUVEOUVENDY2NEM3QTZBMDYyNjYwOUU2NkNGOTE1MkQyOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8YgBZQpPxfN4WQySY8Nc8myRf e4pCcuxBM8ip+hUzpulSOawklygkw8QNRFlI+fDfFb9SPPgXY6hQwqxUkNbQdiDs yebMTUCQ9DXyWFukzkwtXK+2YT25KvWW8OzNtdttuxIEWNVVmJS5RnG/ZzAvUvQr kFHiU3j7JmPNfhDXoo+IT3A1/YMK+svw0E1qkiU+MfamMjfoqLG24GxUqjUNiPNQ Y6wcP3/gMWYiiobuycosWB8uJW1TzZ1ww8iyaSL6KA+T+0S8E50QEs9mGlIKxP/p AtJ0S1UzGD8sklZbg+yKxQAmiBpUM/tMKbCZ47w+QW+39R/xkvCj5IGy/EeVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvy9+7Z7UZkx6agYmYJ5mz5FS0o8wHwYDVR0j BBgwFoAUUjSkKLxjVZ4lEbPv+whbgrGVqO0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YTA3MTUxNC1lNGRlLTRhY2UtYTBkZi1mN2M0YWI4MDc0YTUvMC81MjM0QTQyOEJD NjM1NTlFMjUxMUIzRUZGQjA4NUI4MkIxOTVBOEVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVCODJCMTk1 QThFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmEwNzE1MTQtZTRkZS00YWNlLWEw ZGYtZjdjNGFiODA3NGE1LzAvNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVC ODJCMTk1QThFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM6NmUMjaAn8uWn+yarW8nSE558T/jgIWxjv XK2bA38aCOfNnHcpl97E6yoleaJ4rVybml5uc2ZGIjOctMXKGL6tsI+ksoC3xtPw kJe7eUmm+zjkPo9548xITcjo3dtHWK6OQl8b7t2Z28/OkcFvPTAfs3h4O0jj4TMN TV+qm+V+R3X1NWTJhL6IpmfEFI97o8RM1cF1q225FQVGNJEOxrbfFl12tAPokZcN We/TMjDr7itsJzDfZxSPPO/Rhor2cB/goOJkMtbFnOgaCO5hsYVg1+mE0R4hXBvu f7EU7CrP+IDu8IKEmMGzk+fPN3TyteZub0eMI/K5NmIGzbq5F68= -----END CERTIFICATE-----Generated at Mon Jul 21 18:09:16 2025 by rpki-client