$ rpki-client -vvf repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft File: 5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft (raw, json) Hash identifier: EcgD0rIXR2hYwTEFT9EqFH2rBCWvFPI4rrj/KaazaM4= Subject key identifier: 73:64:EF:49:42:E7:91:DC:C2:8E:7F:40:02:8F:56:FC:26:E8:0E:67 Authority key identifier: 5A:6B:14:28:A8:72:38:DC:9D:A9:B9:28:90:E1:C9:BF:60:CC:09:4E Certificate issuer: /CN=5A6B1428A87238DC9DA9B92890E1C9BF60CC094E Certificate serial: 5FEBE3F0F818F3B7AF22E99B61F3AD7C23CC4A0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft Manifest number: 0216 Signing time: Wed 23 Jul 2025 19:31:53 +0000 Manifest this update: Wed 23 Jul 2025 19:26:53 +0000 Manifest next update: Sun 27 Jul 2025 02:20:53 +0000 Files and hashes: 1: 5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.crl (hash: BmjkVKBLpM0SBmu042JC7ACottJ7dgGooEAGnSyE9Kk=) 2: 3130332e3138362e31302e302f32332d3234203d3e2034383030.roa (hash: IbiWK5270mwHrnB6XT0JomBYqQc1q1mQYDwwzYu+Fp8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.crl rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 02:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:eb:e3:f0:f8:18:f3:b7:af:22:e9:9b:61:f3:ad:7c:23:cc:4a:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A6B1428A87238DC9DA9B92890E1C9BF60CC094E Validity Not Before: Jul 23 19:26:53 2025 GMT Not After : Jul 27 02:20:53 2025 GMT Subject: CN=7364EF4942E791DCC28E7F40028F56FC26E80E67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:69:0e:c7:d4:76:6e:5b:17:75:fd:3e:fc:b7: 58:da:6e:fb:ce:29:e9:a2:b3:fd:b1:07:4c:3a:94: 7b:74:51:4e:33:86:91:0b:6d:80:b6:26:01:66:a9: 52:f7:06:4c:15:47:b8:18:54:e2:e5:5f:04:f2:14: d7:3d:cc:7a:c2:73:75:1d:f3:08:16:14:48:b8:17: e6:1a:74:2a:a6:b0:fb:1a:59:88:6f:88:a8:58:6b: 81:a2:2e:b2:f4:85:fc:b7:c4:a6:14:c2:7d:f9:c8: 94:de:90:ab:5f:3d:c1:32:2b:14:ac:55:46:94:8a: 82:cb:2d:46:29:d9:66:ea:51:fa:d6:38:68:5d:22: a3:25:dd:97:fc:78:ed:f1:df:15:17:65:db:bc:1c: b0:3f:fe:ab:13:3a:ff:eb:b4:fa:f6:66:d4:3e:2b: 7d:32:c2:b3:1f:4c:87:e8:99:93:32:1e:92:5e:31: be:af:e1:c1:bf:bb:ac:e6:4e:22:ec:81:a8:c5:d1: 81:18:e7:7a:3a:fe:cf:ee:29:06:fa:7d:11:f7:b3: 99:36:57:17:34:51:0c:12:2b:54:99:68:65:10:9c: 5d:67:9b:5e:55:a6:1d:94:e8:81:0c:66:ca:12:a6: 47:06:05:77:f4:90:13:2a:71:c9:62:83:ed:c3:32: 99:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:64:EF:49:42:E7:91:DC:C2:8E:7F:40:02:8F:56:FC:26:E8:0E:67 X509v3 Authority Key Identifier: keyid:5A:6B:14:28:A8:72:38:DC:9D:A9:B9:28:90:E1:C9:BF:60:CC:09:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:80:e2:bf:8e:05:a5:59:31:32:60:96:80:89:46:51:00:4b: b7:43:97:74:f8:3b:53:99:35:59:9d:51:6e:8c:c0:fd:57:1b: e6:eb:0a:de:8e:d7:22:4b:b7:ef:cb:ff:be:0e:97:c9:ab:e4: 36:fc:f8:20:60:a3:61:fb:1b:03:8b:2d:61:f4:77:02:58:26: 7c:83:20:3a:63:c5:10:d7:e7:49:20:75:cb:59:a6:f5:67:8b: 3e:46:77:5c:91:d9:31:97:6f:c0:9d:c0:4e:97:da:be:98:a9: c3:d2:3d:17:ec:7f:8f:30:2a:1b:71:43:58:d8:19:fc:06:94: 5d:ed:97:ed:c4:f6:5e:c1:2e:ba:8a:bf:a1:f7:fd:1d:08:fa: 4c:20:fc:4e:7f:35:67:7b:08:c9:f4:21:a7:91:b5:9d:8a:5e: 5f:d5:29:b4:59:3d:7b:80:82:36:95:a9:94:c4:ff:0b:43:97: 43:dd:8c:ec:56:17:f6:d3:11:7e:19:69:64:07:ab:9b:83:40: b9:61:60:59:80:df:2e:0a:35:8e:94:60:5a:d4:66:21:a3:53: 1f:ef:d9:1e:21:f2:3a:94:eb:09:82:a0:f3:60:f8:54:08:2d: 0b:60:9e:a7:61:2e:e6:ca:e9:85:31:b8:7b:3a:93:81:cc:8d: 10:72:1b:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX+vj8PgY87evIumbYfOtfCPMSgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE2QjE0MjhBODcyMzhEQzlEQTlCOTI4OTBFMUM5QkY2 MENDMDk0RTAeFw0yNTA3MjMxOTI2NTNaFw0yNTA3MjcwMjIwNTNaMDMxMTAvBgNV BAMTKDczNjRFRjQ5NDJFNzkxRENDMjhFN0Y0MDAyOEY1NkZDMjZFODBFNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBaQ7H1HZuWxd1/T78t1jabvvO Kemis/2xB0w6lHt0UU4zhpELbYC2JgFmqVL3BkwVR7gYVOLlXwTyFNc9zHrCc3Ud 8wgWFEi4F+YadCqmsPsaWYhviKhYa4GiLrL0hfy3xKYUwn35yJTekKtfPcEyKxSs VUaUioLLLUYp2WbqUfrWOGhdIqMl3Zf8eO3x3xUXZdu8HLA//qsTOv/rtPr2ZtQ+ K30ywrMfTIfomZMyHpJeMb6v4cG/u6zmTiLsgajF0YEY53o6/s/uKQb6fRH3s5k2 Vxc0UQwSK1SZaGUQnF1nm15Vph2U6IEMZsoSpkcGBXf0kBMqcclig+3DMplXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc2TvSULnkdzCjn9AAo9W/CboDmcwHwYDVR0j BBgwFoAUWmsUKKhyONydqbkokOHJv2DMCU4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ODZkZjc5MS0wMDc5LTQ1ZjYtYWE5My00YzNhMjQzMDVkODUvMC81QTZCMTQyOEE4 NzIzOERDOURBOUI5Mjg5MEUxQzlCRjYwQ0MwOTRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUE2QjE0MjhBODcyMzhEQzlEQTlCOTI4OTBFMUM5QkY2MEND MDk0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODg2ZGY3OTEtMDA3OS00NWY2LWFh OTMtNGMzYTI0MzA1ZDg1LzAvNUE2QjE0MjhBODcyMzhEQzlEQTlCOTI4OTBFMUM5 QkY2MENDMDk0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHKA4r+OBaVZMTJgloCJRlEAS7dDl3T4O1OZ NVmdUW6MwP1XG+brCt6O1yJLt+/L/74Ol8mr5Db8+CBgo2H7GwOLLWH0dwJYJnyD IDpjxRDX50kgdctZpvVniz5Gd1yR2TGXb8CdwE6X2r6YqcPSPRfsf48wKhtxQ1jY GfwGlF3tl+3E9l7BLrqKv6H3/R0I+kwg/E5/NWd7CMn0IaeRtZ2KXl/VKbRZPXuA gjaVqZTE/wtDl0PdjOxWF/bTEX4ZaWQHq5uDQLlhYFmA3y4KNY6UYFrUZiGjUx/v 2R4h8jqU6wmCoPNg+FQILQtgnqdhLubK6YUxuHs6k4HMjRByG34= -----END CERTIFICATE-----Generated at Thu Jul 24 08:43:05 2025 by rpki-client