$ rpki-client -vvf repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft File: 5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft (raw, json) Hash identifier: OThAmJ5UlD4bFO76bg4cHoiZCF/QdUbwX0lpOxL+da0= Subject key identifier: 74:65:ED:0F:BF:BE:F4:12:EE:BE:2C:76:12:28:F8:6E:5A:79:BF:0E Authority key identifier: 5E:02:7C:2A:BE:4A:1F:46:34:0E:D8:3A:3A:D8:F0:6D:BC:CD:CD:21 Certificate issuer: /CN=5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21 Certificate serial: 395B0998229B2AF749B1B532B6E90ABA3449E710 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft Manifest number: 0267 Signing time: Sun 20 Jul 2025 01:01:25 +0000 Manifest this update: Sun 20 Jul 2025 00:56:25 +0000 Manifest next update: Wed 23 Jul 2025 10:16:25 +0000 Files and hashes: 1: 3130332e3137392e3133362e302f32332d3234203d3e20313339393737.roa (hash: IQxk+RVCCE4pKnBFAa/I+n4PlSjcG9LFvLyIRAqgipY=) 2: 5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.crl (hash: 6T/zly9CI1hw7TVfa6TocWSZ0tXKBOvbvwgu1ytr/Fk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.crl rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 10:16:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:5b:09:98:22:9b:2a:f7:49:b1:b5:32:b6:e9:0a:ba:34:49:e7:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21 Validity Not Before: Jul 20 00:56:25 2025 GMT Not After : Jul 23 10:16:25 2025 GMT Subject: CN=7465ED0FBFBEF412EEBE2C761228F86E5A79BF0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:16:40:78:1d:03:1a:aa:e9:c7:e9:4a:81:78: c4:41:02:cc:74:2b:8b:e5:48:2a:ef:e4:bc:6a:18: 6f:41:90:97:0f:4c:47:4a:0b:0c:54:fa:34:33:3c: 09:15:d3:9d:45:fb:d4:b5:3f:5c:05:54:e3:cd:7f: a0:0b:67:63:95:46:06:51:2e:55:7d:3f:8a:cc:45: a7:de:e0:7e:ee:ea:ce:86:94:9c:35:7f:15:f0:38: 70:86:63:38:0c:85:5c:85:ba:ee:e1:4f:62:08:88: a0:35:2f:0a:1c:f1:72:12:be:fd:72:02:a3:6e:db: 63:1a:25:1b:a0:ba:66:af:69:f8:bd:42:03:c1:75: e3:a1:3a:94:aa:9a:e3:b7:ef:5c:91:63:fb:54:0b: ff:59:75:55:cb:82:d1:cf:64:84:11:0c:6b:48:33: b3:50:f3:6c:48:28:a7:cc:0b:78:71:3e:ee:c5:2d: e6:60:48:61:a7:20:c7:a6:bf:c4:26:24:b7:02:49: a4:70:d0:8c:1c:c4:fe:94:1e:73:3b:f7:ff:72:2d: a1:61:3e:33:d8:3f:0d:50:95:2d:d6:67:71:f9:40: e9:b1:26:a7:9b:1d:30:60:10:9e:0d:c9:29:be:ea: 60:a5:38:99:38:e1:d5:4c:8d:af:c6:f0:5d:5b:54: 7b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:65:ED:0F:BF:BE:F4:12:EE:BE:2C:76:12:28:F8:6E:5A:79:BF:0E X509v3 Authority Key Identifier: keyid:5E:02:7C:2A:BE:4A:1F:46:34:0E:D8:3A:3A:D8:F0:6D:BC:CD:CD:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:30:ff:38:11:12:4f:83:3f:4c:e7:c6:c2:59:a6:c6:bc:76: b7:ad:63:68:38:79:98:46:3e:06:b2:92:cc:fd:3e:ac:97:54: 8b:67:36:52:bd:f1:95:f9:7a:33:45:93:2f:82:57:65:cd:8e: 83:5e:42:4d:2a:ea:be:6f:19:31:83:ec:89:5f:81:b9:e8:9a: 8c:de:99:e5:7d:0d:ce:60:3f:8d:0e:0a:94:d6:7a:99:a4:e2: 3e:03:f6:4c:cd:fd:71:8c:6c:14:f7:fa:2e:63:8b:2f:11:c3: 89:83:dc:15:00:53:73:36:0e:1a:7f:cf:c5:c3:84:5f:40:de: 2a:6d:c7:fb:95:0c:8b:43:87:21:e1:f8:2f:3d:49:e9:7a:be: 33:06:a4:be:10:24:71:f4:09:f5:2b:79:ee:04:ec:49:33:4e: 8d:29:c8:ac:c3:8a:dd:46:a7:d7:25:23:34:7a:ad:dc:84:c7: 29:35:cd:33:5b:67:b9:7d:0a:8e:bb:25:73:50:c6:c9:e4:23: 81:8f:46:03:d6:20:5c:42:85:78:e2:a3:30:1a:ca:db:c9:52: 5e:67:7c:54:70:f5:3c:9e:f0:3e:18:af:75:65:95:54:4a:00: 5c:17:d2:21:db:73:80:bf:46:2e:0c:d7:a7:c3:f0:de:08:85: 29:d8:bf:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOVsJmCKbKvdJsbUytukKujRJ5xAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUwMjdDMkFCRTRBMUY0NjM0MEVEODNBM0FEOEYwNkRC Q0NEQ0QyMTAeFw0yNTA3MjAwMDU2MjVaFw0yNTA3MjMxMDE2MjVaMDMxMTAvBgNV BAMTKDc0NjVFRDBGQkZCRUY0MTJFRUJFMkM3NjEyMjhGODZFNUE3OUJGMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFFkB4HQMaqunH6UqBeMRBAsx0 K4vlSCrv5LxqGG9BkJcPTEdKCwxU+jQzPAkV051F+9S1P1wFVOPNf6ALZ2OVRgZR LlV9P4rMRafe4H7u6s6GlJw1fxXwOHCGYzgMhVyFuu7hT2IIiKA1Lwoc8XISvv1y AqNu22MaJRugumavafi9QgPBdeOhOpSqmuO371yRY/tUC/9ZdVXLgtHPZIQRDGtI M7NQ82xIKKfMC3hxPu7FLeZgSGGnIMemv8QmJLcCSaRw0IwcxP6UHnM79/9yLaFh PjPYPw1QlS3WZ3H5QOmxJqebHTBgEJ4NySm+6mClOJk44dVMja/G8F1bVHs/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdGXtD7++9BLuvix2Eij4blp5vw4wHwYDVR0j BBgwFoAUXgJ8Kr5KH0Y0Dtg6OtjwbbzNzSEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDgwYjMyMS1hYTMxLTQzMTctOWQzMS1jMmJkMTkwYzEzODQvMC81RTAyN0MyQUJF NEExRjQ2MzQwRUQ4M0EzQUQ4RjA2REJDQ0RDRDIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUUwMjdDMkFCRTRBMUY0NjM0MEVEODNBM0FEOEYwNkRCQ0NE Q0QyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ4MGIzMjEtYWEzMS00MzE3LTlk MzEtYzJiZDE5MGMxMzg0LzAvNUUwMjdDMkFCRTRBMUY0NjM0MEVEODNBM0FEOEYw NkRCQ0NEQ0QyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFUw/zgREk+DP0znxsJZpsa8dretY2g4eZhG Pgayksz9PqyXVItnNlK98ZX5ejNFky+CV2XNjoNeQk0q6r5vGTGD7Ilfgbnomoze meV9Dc5gP40OCpTWepmk4j4D9kzN/XGMbBT3+i5jiy8Rw4mD3BUAU3M2Dhp/z8XD hF9A3iptx/uVDItDhyHh+C89Sel6vjMGpL4QJHH0CfUree4E7EkzTo0pyKzDit1G p9clIzR6rdyExyk1zTNbZ7l9Co67JXNQxsnkI4GPRgPWIFxChXjiozAaytvJUl5n fFRw9Tye8D4Yr3VllVRKAFwX0iHbc4C/Ri4M16fD8N4IhSnYv+I= -----END CERTIFICATE-----Generated at Mon Jul 21 09:01:51 2025 by rpki-client