$ rpki-client -vvf repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft File: 5C413D56294D9D20E64978B7296A9DA893C32CAB.mft (raw, json) Hash identifier: m4/hfP66KRsCFaXmKbAc9Tw/kZeUbwhrORQKAYTlzsY= Subject key identifier: DC:82:32:5B:AE:CC:C2:89:AD:94:85:B8:D2:F4:92:50:70:62:42:A2 Authority key identifier: 5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB Certificate issuer: /CN=5C413D56294D9D20E64978B7296A9DA893C32CAB Certificate serial: 7A141B7E6A304B25EC2FADD89B3ED946C594FEE4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft Manifest number: 0382 Signing time: Sat 19 Jul 2025 20:12:27 +0000 Manifest this update: Sat 19 Jul 2025 20:07:27 +0000 Manifest next update: Wed 23 Jul 2025 02:46:27 +0000 Files and hashes: 1: 323030313a6466333a356238303a3a2f34382d3438203d3e20313430333839.roa (hash: JKFEKy2zDD0/MbgGmVCYEU7vyiWQJvpcUY2RjG6e1rs=) 2: 3130332e3135302e36312e302f32342d3234203d3e20313430333839.roa (hash: PlY/JnUtAv2FxS5Soe3wZCn6MzuK/JWnFyPZQrX/fuQ=) 3: 5C413D56294D9D20E64978B7296A9DA893C32CAB.crl (hash: H9yXpz1d1ZPX7/qs/aoPLqQvyAUbQzeQLHgiHqmpdHM=) 4: 3130332e3135302e36302e302f32342d3234203d3e20313430333839.roa (hash: 4ZQwGn11qHNiVrKpaqE6sqxjVoPVYCbt4H6xntr7VWc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.crl rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 02:46:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:14:1b:7e:6a:30:4b:25:ec:2f:ad:d8:9b:3e:d9:46:c5:94:fe:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C413D56294D9D20E64978B7296A9DA893C32CAB Validity Not Before: Jul 19 20:07:27 2025 GMT Not After : Jul 23 02:46:27 2025 GMT Subject: CN=DC82325BAECCC289AD9485B8D2F49250706242A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:49:94:df:a6:60:8c:20:e0:9b:85:82:1c:64: 53:20:44:78:e1:71:fa:96:1e:ff:87:b9:6a:78:4f: 9a:db:be:fe:1f:5a:b3:00:ff:5b:62:08:f3:b1:cd: 5f:1c:39:18:13:7d:1b:64:ef:27:db:6e:47:46:7a: 12:af:3d:02:7b:80:d9:d8:ec:c9:94:8c:2b:f4:3d: 39:a7:ad:3e:e5:ee:94:4e:71:eb:ba:94:b1:97:16: 8e:1f:a9:4f:96:cc:74:7e:9d:39:d1:8a:c8:09:da: f3:3e:0a:a5:af:af:cd:14:80:08:ed:06:62:86:a2: 46:4a:a7:a8:32:ea:73:25:8d:52:b0:68:1d:58:78: ac:1c:91:79:60:09:a0:99:43:c2:8e:b5:b8:73:8f: e6:bf:ee:ce:bc:68:3a:82:11:2e:ea:46:84:b0:01: c6:33:9d:db:bf:78:43:a3:65:8f:b1:8b:74:6c:b7: 16:4f:5f:59:98:f7:cd:9d:15:c1:e3:24:f3:f4:a4: d9:e5:b8:8d:1f:7d:83:e0:dc:b9:40:06:49:d0:e2: 92:df:43:8d:3c:69:cf:f4:6c:e9:10:76:63:d4:65: 5f:ee:69:b3:57:41:38:4e:24:56:cf:98:09:9f:9e: 68:07:6f:5c:41:88:8a:dc:6a:3c:09:76:a6:d5:54: b3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:82:32:5B:AE:CC:C2:89:AD:94:85:B8:D2:F4:92:50:70:62:42:A2 X509v3 Authority Key Identifier: keyid:5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:62:f2:eb:86:7d:04:30:03:ac:50:94:4b:a7:42:97:9c:af: 1d:ed:56:d7:38:50:48:08:33:54:7e:fb:2e:dc:b6:f8:0d:6a: fe:8a:9f:7e:19:a5:0b:75:b5:78:10:22:16:4d:8e:17:0b:0b: 89:39:3b:27:ff:92:0c:bc:1d:a0:c4:2b:01:0d:58:70:5b:28: 88:3b:bd:e7:85:ff:d8:78:03:39:37:62:8c:b1:47:dd:18:c2: 46:46:fb:69:2f:66:68:7c:78:cb:02:02:e2:cd:d2:f5:30:dd: e3:05:99:a7:e1:61:8b:1b:66:a2:25:14:58:4e:c6:10:c1:85: 7a:1f:f8:2b:16:f0:0d:64:0e:3f:83:bb:87:d1:f5:22:31:f2: 87:11:b7:af:a9:7f:59:d3:d4:8f:d9:cb:03:d4:f8:5e:00:09: 01:06:36:df:c1:11:08:36:28:10:1a:53:03:2a:3b:be:fb:07: e7:00:a9:39:0f:df:a5:d9:15:10:07:37:d2:82:c3:4b:ba:ee: 49:b6:00:41:90:bf:25:32:c5:51:0c:af:63:39:8d:02:31:c6: 78:72:a2:90:f3:46:42:ab:91:72:c3:db:7f:67:c4:60:7f:e6: fa:4e:a7:31:4c:14:a4:d3:25:c7:a4:b3:3a:1a:47:0a:a1:76: 21:bc:39:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUehQbfmowSyXsL63Ymz7ZRsWU/uQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM0MTNENTYyOTREOUQyMEU2NDk3OEI3Mjk2QTlEQTg5 M0MzMkNBQjAeFw0yNTA3MTkyMDA3MjdaFw0yNTA3MjMwMjQ2MjdaMDMxMTAvBgNV BAMTKERDODIzMjVCQUVDQ0MyODlBRDk0ODVCOEQyRjQ5MjUwNzA2MjQyQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUSZTfpmCMIOCbhYIcZFMgRHjh cfqWHv+HuWp4T5rbvv4fWrMA/1tiCPOxzV8cORgTfRtk7yfbbkdGehKvPQJ7gNnY 7MmUjCv0PTmnrT7l7pROceu6lLGXFo4fqU+WzHR+nTnRisgJ2vM+CqWvr80UgAjt BmKGokZKp6gy6nMljVKwaB1YeKwckXlgCaCZQ8KOtbhzj+a/7s68aDqCES7qRoSw AcYzndu/eEOjZY+xi3RstxZPX1mY982dFcHjJPP0pNnluI0ffYPg3LlABknQ4pLf Q408ac/0bOkQdmPUZV/uabNXQThOJFbPmAmfnmgHb1xBiIrcajwJdqbVVLPxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3IIyW67MwomtlIW40vSSUHBiQqIwHwYDVR0j BBgwFoAUXEE9VilNnSDmSXi3KWqdqJPDLKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjNlYWJiNC00ZGIzLTQzNzMtYTM0OC1mYjFlZDcwNTU2NTEvMC81QzQxM0Q1NjI5 NEQ5RDIwRTY0OTc4QjcyOTZBOURBODkzQzMyQ0FCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM0MTNENTYyOTREOUQyMEU2NDk3OEI3Mjk2QTlEQTg5M0Mz MkNBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2IzZWFiYjQtNGRiMy00MzczLWEz NDgtZmIxZWQ3MDU1NjUxLzAvNUM0MTNENTYyOTREOUQyMEU2NDk3OEI3Mjk2QTlE QTg5M0MzMkNBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGRi8uuGfQQwA6xQlEunQpecrx3tVtc4UEgI M1R++y7ctvgNav6Kn34ZpQt1tXgQIhZNjhcLC4k5Oyf/kgy8HaDEKwENWHBbKIg7 veeF/9h4Azk3YoyxR90YwkZG+2kvZmh8eMsCAuLN0vUw3eMFmafhYYsbZqIlFFhO xhDBhXof+CsW8A1kDj+Du4fR9SIx8ocRt6+pf1nT1I/ZywPU+F4ACQEGNt/BEQg2 KBAaUwMqO777B+cAqTkP36XZFRAHN9KCw0u67km2AEGQvyUyxVEMr2M5jQIxxnhy opDzRkKrkXLD239nxGB/5vpOpzFMFKTTJcekszoaRwqhdiG8OXY= -----END CERTIFICATE-----Generated at Sun Jul 20 22:28:32 2025 by rpki-client