$ rpki-client -vvf repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft File: 5AE57F3F97F40888F93913350A218863E705CD34.mft (raw, json) Hash identifier: pwVCAZgWlZiyI4R7ZlOaABPMJiJJ9fVoIV0rvvrJjEg= Subject key identifier: B2:59:0E:1D:B3:B9:8D:56:BC:89:5B:B2:91:19:34:5D:F4:6C:B2:E4 Authority key identifier: 5A:E5:7F:3F:97:F4:08:88:F9:39:13:35:0A:21:88:63:E7:05:CD:34 Certificate issuer: /CN=5AE57F3F97F40888F93913350A218863E705CD34 Certificate serial: 45A51484B1A2492569287974E88015E70ACB3ED4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft Manifest number: 0229 Signing time: Sun 20 Jul 2025 01:51:25 +0000 Manifest this update: Sun 20 Jul 2025 01:46:25 +0000 Manifest next update: Wed 23 Jul 2025 09:01:25 +0000 Files and hashes: 1: 3130332e3138332e31302e302f32342d3234203d3e20313339393637.roa (hash: lDreBV2a5k+F2nOzqdVDXyLmxgTFmhT5IbglBwCmDnU=) 2: 5AE57F3F97F40888F93913350A218863E705CD34.crl (hash: eJl3mmSQmiiLvLMQnNHwiGISBGM6mO8c5gxf8E0TW7s=) 3: 3130332e3138332e31312e302f32342d3234203d3e20313339393637.roa (hash: NfTWOpBX5TEsx2AN4GNz4kZXIBLNbd1V2CGYNCmRu/U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.crl rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 09:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:a5:14:84:b1:a2:49:25:69:28:79:74:e8:80:15:e7:0a:cb:3e:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AE57F3F97F40888F93913350A218863E705CD34 Validity Not Before: Jul 20 01:46:25 2025 GMT Not After : Jul 23 09:01:25 2025 GMT Subject: CN=B2590E1DB3B98D56BC895BB29119345DF46CB2E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:2b:82:ca:ef:52:98:a2:aa:c1:23:83:4b:a9: 57:02:f3:65:08:4f:cc:47:01:0f:ef:4a:cd:e0:66: 48:d6:71:2e:83:95:70:26:33:98:89:e4:30:66:f3: 38:07:2a:4e:25:4e:f2:45:09:3e:7d:3f:1b:e9:92: a3:3a:c2:f2:3b:f1:30:c0:85:a4:59:1b:da:fa:54: 59:37:c5:66:b2:6c:63:48:6b:0f:02:e5:41:f1:fe: bd:9e:f3:bb:02:11:16:98:42:0a:1f:43:50:07:5a: 4f:1d:c8:4c:b0:f7:73:f9:de:dd:48:d8:32:a4:cc: 78:1f:e9:9b:3e:8e:26:df:03:11:e0:79:2b:08:bf: 8f:ac:43:0d:b1:c8:03:8f:7c:eb:60:b6:89:42:95: ac:88:f5:60:6d:66:9e:9e:24:01:71:31:2a:ba:f3: d4:14:4f:2a:c3:3c:92:1f:fe:82:e4:dd:a3:e8:f4: 1a:06:14:b3:52:03:1c:d0:2d:57:3b:00:14:17:49: 85:90:31:d5:5d:9e:51:4d:01:6d:94:81:c3:e6:3d: 6d:91:bd:b0:58:36:a2:a1:27:a9:e5:49:65:fc:75: 40:e9:58:b5:67:8d:6f:d0:d8:a0:79:c6:c5:bc:29: da:a2:94:07:99:9f:0e:fd:de:a6:53:5f:c6:f0:d4: b5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:59:0E:1D:B3:B9:8D:56:BC:89:5B:B2:91:19:34:5D:F4:6C:B2:E4 X509v3 Authority Key Identifier: keyid:5A:E5:7F:3F:97:F4:08:88:F9:39:13:35:0A:21:88:63:E7:05:CD:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:cb:bc:6e:96:70:9f:15:41:28:dd:7e:a3:11:71:96:9b:b8: dd:7f:a7:2e:4e:18:55:e4:e3:43:a7:42:2a:62:a0:7b:28:53: ad:d7:de:8a:20:0b:3a:7f:55:4d:ef:d7:7a:e8:7f:24:49:59: 7f:d7:fd:f9:be:64:0b:54:5f:6f:5a:e3:ee:15:e3:36:3a:6d: 6e:6d:65:65:8f:d9:98:a3:ce:da:a5:cc:f2:13:fc:99:f9:03: 2f:85:71:6a:38:74:ab:0d:37:d3:ec:3b:2d:da:33:34:c1:df: 6c:5b:ae:e9:fc:cd:af:e6:8f:3d:ab:7c:bf:ee:2b:ab:34:cf: cb:94:54:8d:37:f2:14:07:cb:56:ce:9c:6e:91:5e:2c:a0:b0: 16:8d:cf:1a:77:96:9c:84:b4:78:9b:98:10:32:79:ec:19:a9: 69:d2:d2:ae:e8:71:d3:5b:75:1e:66:50:59:16:14:e6:3d:ed: 41:26:bc:b0:bf:eb:9b:a5:74:67:e5:58:fc:73:94:cb:43:ca: 76:3f:c6:68:7e:47:b2:59:3e:21:4f:4f:1c:00:90:33:c6:bb: 5e:0d:35:f1:82:1b:00:7f:ee:9a:32:88:1f:89:67:b2:4a:c7: 7f:65:66:26:d6:64:67:78:5e:3f:aa:3a:fe:ef:c9:0f:fb:83: 2e:f0:7b:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURaUUhLGiSSVpKHl06IAV5wrLPtQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4NjNF NzA1Q0QzNDAeFw0yNTA3MjAwMTQ2MjVaFw0yNTA3MjMwOTAxMjVaMDMxMTAvBgNV BAMTKEIyNTkwRTFEQjNCOThENTZCQzg5NUJCMjkxMTkzNDVERjQ2Q0IyRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtK4LK71KYoqrBI4NLqVcC82UI T8xHAQ/vSs3gZkjWcS6DlXAmM5iJ5DBm8zgHKk4lTvJFCT59PxvpkqM6wvI78TDA haRZG9r6VFk3xWaybGNIaw8C5UHx/r2e87sCERaYQgofQ1AHWk8dyEyw93P53t1I 2DKkzHgf6Zs+jibfAxHgeSsIv4+sQw2xyAOPfOtgtolClayI9WBtZp6eJAFxMSq6 89QUTyrDPJIf/oLk3aPo9BoGFLNSAxzQLVc7ABQXSYWQMdVdnlFNAW2UgcPmPW2R vbBYNqKhJ6nlSWX8dUDpWLVnjW/Q2KB5xsW8KdqilAeZnw793qZTX8bw1LXrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUslkOHbO5jVa8iVuykRk0XfRssuQwHwYDVR0j BBgwFoAUWuV/P5f0CIj5ORM1CiGIY+cFzTQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDhjZGY1YS1iOWE3LTQ0NjktYTY1My1jOWZmMmEwMDM3NzMvMC81QUU1N0YzRjk3 RjQwODg4RjkzOTEzMzUwQTIxODg2M0U3MDVDRDM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4NjNFNzA1 Q0QzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ4Y2RmNWEtYjlhNy00NDY5LWE2 NTMtYzlmZjJhMDAzNzczLzAvNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4 NjNFNzA1Q0QzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG7LvG6WcJ8VQSjdfqMRcZabuN1/py5OGFXk 40OnQipioHsoU63X3oogCzp/VU3v13rofyRJWX/X/fm+ZAtUX29a4+4V4zY6bW5t ZWWP2ZijztqlzPIT/Jn5Ay+FcWo4dKsNN9PsOy3aMzTB32xbrun8za/mjz2rfL/u K6s0z8uUVI038hQHy1bOnG6RXiygsBaNzxp3lpyEtHibmBAyeewZqWnS0q7ocdNb dR5mUFkWFOY97UEmvLC/65uldGflWPxzlMtDynY/xmh+R7JZPiFPTxwAkDPGu14N NfGCGwB/7poyiB+JZ7JKx39lZibWZGd4Xj+qOv7vyQ/7gy7we30= -----END CERTIFICATE-----Generated at Sun Jul 20 21:56:31 2025 by rpki-client