$ rpki-client -vvf repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft File: 5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft (raw, json) Hash identifier: jv7CO42GrSOG2v61mJFF3FJ6vVmLMAmT2NBx6zx7hRw= Subject key identifier: 01:5A:9F:03:E9:C0:03:79:71:58:38:2A:B9:5A:3B:E6:5A:DC:42:F9 Authority key identifier: 5C:55:87:61:8B:4E:1C:1F:4C:EF:C6:99:B0:1F:FC:3C:EC:E3:B6:6C Certificate issuer: /CN=5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C Certificate serial: 21F015969659A2CAF9BC6E13B33DF6338CC0303A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft Manifest number: 0204 Signing time: Mon 21 Jul 2025 04:31:32 +0000 Manifest this update: Mon 21 Jul 2025 04:26:32 +0000 Manifest next update: Thu 24 Jul 2025 07:43:32 +0000 Files and hashes: 1: 3130332e3135372e32352e302f32342d3234203d3e20313431313038.roa (hash: oDfouRUG9Q3gP76+cJluUeYjhwxX116YwTG/X1UiEKo=) 2: 323030313a6466353a6338303a3a2f34382d3438203d3e20313431313038.roa (hash: X6Rsg1TfWPdkmJNWv+FJnlS7WWkveBK6RzkbYc8aDOc=) 3: 5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl (hash: wrlyspMUs2HpGt7kcEh6xBny8+3YuQYZJ90CaXTpvR4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 07:43:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:f0:15:96:96:59:a2:ca:f9:bc:6e:13:b3:3d:f6:33:8c:c0:30:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C Validity Not Before: Jul 21 04:26:32 2025 GMT Not After : Jul 24 07:43:32 2025 GMT Subject: CN=015A9F03E9C003797158382AB95A3BE65ADC42F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f4:d2:6d:f4:92:87:9a:fb:29:34:25:a4:bb: d9:65:78:bf:00:64:49:30:0f:46:4f:09:2a:c8:91: 52:92:d1:c2:85:53:3e:57:4c:8b:48:53:6b:cb:80: 70:fa:b7:9a:2b:1f:80:02:39:fe:93:15:84:ce:ee: a4:82:ab:f8:1b:92:7f:23:3c:2b:0a:ac:f8:c3:42: cc:5f:0d:ee:f3:8d:b1:b3:c2:06:91:c5:72:68:ae: cd:e5:e1:f1:44:6c:c3:1e:e1:28:fb:30:35:92:d8: 30:77:c3:df:44:a3:8e:28:b9:17:95:65:a0:d9:fa: e5:1e:0a:6b:cb:ae:6f:69:2c:2c:99:45:ae:9b:8e: ff:0d:17:fa:8d:74:fa:04:b0:0c:3b:bf:51:ed:99: 05:f1:1e:cd:f0:ad:a9:36:8b:32:46:fb:da:35:33: 85:3b:ce:e5:47:a4:9b:1f:11:2e:70:07:f0:a0:96: 47:37:d5:32:bd:61:95:89:62:21:52:00:03:ed:a7: 9c:03:d4:68:ea:c5:ed:8a:51:69:fd:54:42:1e:15: c9:58:6a:d7:ab:87:d7:b2:86:26:6d:88:af:03:2e: 65:cd:45:6b:b2:e2:49:69:27:6a:e8:3f:6c:bc:8c: f1:62:32:ad:7f:c7:ef:f0:89:1f:f0:dc:55:f2:8d: bb:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5A:9F:03:E9:C0:03:79:71:58:38:2A:B9:5A:3B:E6:5A:DC:42:F9 X509v3 Authority Key Identifier: keyid:5C:55:87:61:8B:4E:1C:1F:4C:EF:C6:99:B0:1F:FC:3C:EC:E3:B6:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:18:8a:45:74:d0:ec:cf:b5:3c:06:5e:98:34:38:86:36:5c: 7d:58:4e:b4:22:c5:82:7e:f3:af:64:0a:d9:1c:9c:72:4c:e3: 00:c2:ef:1d:b2:e3:77:ae:7b:d0:70:f4:4d:cc:ab:68:42:39: cd:93:4e:f1:f8:a9:34:2e:34:41:c0:84:41:44:b0:fa:a1:d9: 11:6f:8c:b7:db:94:90:95:f1:0a:77:09:00:74:34:b2:12:61: 47:22:c2:0b:1d:47:d1:fb:22:3a:d2:74:33:d1:14:b2:2d:48: bf:42:17:74:57:05:64:c0:ea:38:f4:6e:4c:fc:7b:ad:98:db: c2:08:f8:16:b8:bc:50:75:cd:17:3d:9d:ab:6f:35:f3:e7:34: 1b:e3:ac:e9:7b:e5:e0:00:50:7a:66:b9:eb:87:3f:23:d6:d9: 1c:a7:82:10:84:bc:fd:81:55:88:cd:14:07:b3:0a:05:bd:6c: 23:e4:6a:12:14:36:c4:c9:34:bb:c1:03:f4:cc:f6:d4:a0:cb: f4:13:2d:50:08:b8:e0:60:c7:97:b0:2e:61:44:60:e2:b6:54: d8:d7:7c:3d:cc:06:18:a2:fc:7a:d9:6b:69:cd:5a:55:2f:95: c9:91:d4:20:fb:d5:e9:79:b8:4a:92:0b:dc:d7:d8:a4:7f:32: 37:1d:4e:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIfAVlpZZosr5vG4Tsz32M4zAMDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZDM0NF Q0UzQjY2QzAeFw0yNTA3MjEwNDI2MzJaFw0yNTA3MjQwNzQzMzJaMDMxMTAvBgNV BAMTKDAxNUE5RjAzRTlDMDAzNzk3MTU4MzgyQUI5NUEzQkU2NUFEQzQyRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe9NJt9JKHmvspNCWku9lleL8A ZEkwD0ZPCSrIkVKS0cKFUz5XTItIU2vLgHD6t5orH4ACOf6TFYTO7qSCq/gbkn8j PCsKrPjDQsxfDe7zjbGzwgaRxXJors3l4fFEbMMe4Sj7MDWS2DB3w99Eo44ouReV ZaDZ+uUeCmvLrm9pLCyZRa6bjv8NF/qNdPoEsAw7v1HtmQXxHs3wrak2izJG+9o1 M4U7zuVHpJsfES5wB/Cglkc31TK9YZWJYiFSAAPtp5wD1Gjqxe2KUWn9VEIeFclY aterh9eyhiZtiK8DLmXNRWuy4klpJ2roP2y8jPFiMq1/x+/wiR/w3FXyjbslAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAVqfA+nAA3lxWDgquVo75lrcQvkwHwYDVR0j BBgwFoAUXFWHYYtOHB9M78aZsB/8POzjtmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDFiNzlhYy0zMzUxLTQ3MDUtOGMzZC02MDJhZGNkNzliYjcvMC81QzU1ODc2MThC NEUxQzFGNENFRkM2OTlCMDFGRkMzQ0VDRTNCNjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZDM0NFQ0Uz QjY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODAxYjc5YWMtMzM1MS00NzA1LThj M2QtNjAyYWRjZDc5YmI3LzAvNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZD M0NFQ0UzQjY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACAYikV00OzPtTwGXpg0OIY2XH1YTrQixYJ+ 869kCtkcnHJM4wDC7x2y43eue9Bw9E3Mq2hCOc2TTvH4qTQuNEHAhEFEsPqh2RFv jLfblJCV8Qp3CQB0NLISYUciwgsdR9H7IjrSdDPRFLItSL9CF3RXBWTA6jj0bkz8 e62Y28II+Ba4vFB1zRc9natvNfPnNBvjrOl75eAAUHpmueuHPyPW2RynghCEvP2B VYjNFAezCgW9bCPkahIUNsTJNLvBA/TM9tSgy/QTLVAIuOBgx5ewLmFEYOK2VNjX fD3MBhii/HrZa2nNWlUvlcmR1CD71el5uEqSC9zX2KR/MjcdTtI= -----END CERTIFICATE-----Generated at Mon Jul 21 23:34:32 2025 by rpki-client