$ rpki-client -vvf repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.mft File: C5930A139BC72A04603E7234E6AA3938C4FAE3BC.mft (raw, json) Hash identifier: Zq4hJs4C5CEF/6AhlVqyEynBBL6GUOx+S6PlY2hzTsA= Subject key identifier: B9:78:FD:5B:23:9C:B4:05:A9:A5:B8:00:FA:CB:AB:AC:D1:13:DB:B8 Authority key identifier: C5:93:0A:13:9B:C7:2A:04:60:3E:72:34:E6:AA:39:38:C4:FA:E3:BC Certificate issuer: /CN=C5930A139BC72A04603E7234E6AA3938C4FAE3BC Certificate serial: 47B8C9B58D6170DE00452C1737681CC35842EBFD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.mft Manifest number: 023D Signing time: Sun 20 Jul 2025 23:31:01 +0000 Manifest this update: Sun 20 Jul 2025 23:26:01 +0000 Manifest next update: Thu 24 Jul 2025 05:49:01 +0000 Files and hashes: 1: 3130332e3136352e3134372e302f32342d3234203d3e20313431393236.roa (hash: IuY6Z6ZxkbRwQMJQpE9OThBrKqwMAexp3I1bhh6pQ9o=) 2: C5930A139BC72A04603E7234E6AA3938C4FAE3BC.crl (hash: IPI5WAKJTNgaCWBDQzV4+Mxgbvxd2tkdL+7yVJMnRyo=) 3: 3130332e3136352e3134362e302f32342d3234203d3e20313431393236.roa (hash: 1DftqP7fwg1IcfyuMNUOovuIMKeX+ETObWgg15HcP+g=) 4: 3130332e3136352e3134362e302f32332d3233203d3e20313431393236.roa (hash: mfc1MWJrfS0i4jbp54vUDYFOgjfPW5TyC5UPp0KzzWY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.crl rsync://repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 05:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:b8:c9:b5:8d:61:70:de:00:45:2c:17:37:68:1c:c3:58:42:eb:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5930A139BC72A04603E7234E6AA3938C4FAE3BC Validity Not Before: Jul 20 23:26:01 2025 GMT Not After : Jul 24 05:49:01 2025 GMT Subject: CN=B978FD5B239CB405A9A5B800FACBABACD113DBB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6a:88:f2:8b:c2:68:1e:f1:f8:ec:40:9b:b9: d6:aa:66:a8:d9:a1:68:ae:4c:cf:10:39:b8:a2:c0: f1:02:7f:4f:72:fe:5b:ee:d5:17:a3:04:d3:29:1c: 3f:47:cb:f5:e1:31:d5:61:62:9a:e1:4b:32:37:75: fc:03:dd:eb:f7:54:bf:67:da:57:28:b0:a1:76:99: d2:47:7f:58:57:0b:09:b6:2d:06:49:76:72:00:5a: c9:97:1d:60:31:33:de:04:c1:2b:66:fb:40:48:7d: 8b:2e:c9:a9:86:a9:1a:11:f5:e1:07:6a:4d:39:db: dc:83:22:b7:47:2e:a9:fa:bb:e1:f8:e3:0e:7a:db: 99:f6:03:3b:76:b6:92:20:3c:ce:b9:30:3c:2f:0f: 1e:1e:e1:23:19:88:53:02:3b:cf:75:39:b5:7c:6e: 12:78:d2:06:46:4f:17:24:64:e5:5c:62:20:45:34: 20:33:55:e5:d9:76:7a:8f:0d:55:34:36:83:b7:bf: b6:14:09:2e:45:bf:a6:78:ef:4e:f2:1f:bf:f2:bd: 8e:1b:5b:86:c9:69:32:6a:55:0a:be:0f:e7:f3:20: 3b:b9:b5:6a:3e:e5:f0:b3:47:05:33:f1:0d:4d:7e: 0b:0b:9a:e6:87:40:ad:34:2d:dc:59:92:77:30:c4: 62:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:78:FD:5B:23:9C:B4:05:A9:A5:B8:00:FA:CB:AB:AC:D1:13:DB:B8 X509v3 Authority Key Identifier: keyid:C5:93:0A:13:9B:C7:2A:04:60:3E:72:34:E6:AA:39:38:C4:FA:E3:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:55:87:c4:27:3f:5a:11:f1:04:ea:9c:69:45:f3:b6:50:22: aa:8f:07:09:83:aa:40:5e:dd:ae:e2:a9:5c:0c:c9:ba:b7:f0: 1e:e9:2c:31:05:de:02:b2:44:6d:c4:02:cf:f7:3d:ab:48:a1: 6c:da:ea:e6:fa:87:91:d5:af:3c:41:71:d7:f6:22:23:ad:99: 03:7d:3e:2f:a0:2d:77:c4:db:87:05:1f:9d:98:0c:ac:79:36: 17:53:74:41:c3:9d:c4:e5:7e:5b:5c:d0:10:e3:5f:06:3e:0b: 24:4b:45:84:37:b3:cb:27:83:18:53:fb:52:c5:fe:22:65:27: 57:34:25:b6:44:30:14:a9:fc:12:2d:cc:53:9b:1e:3e:9e:f5: 4a:44:d9:9f:0d:59:85:8b:fb:25:f2:44:28:8a:5f:af:f8:eb: 74:49:9e:5a:6d:91:47:d5:bd:b7:04:e1:30:3d:a3:47:93:c8: a3:fd:34:5b:b7:5c:48:16:72:4d:54:8f:d9:fa:32:86:02:f4: 16:84:d0:56:b8:a5:99:c6:d2:08:cc:38:5c:c1:61:bb:31:6b: f7:5f:d6:0b:b0:b4:42:dd:77:57:70:a1:ae:52:0c:bb:e8:e4: 16:35:32:83:6b:93:4d:98:3d:6f:b7:a0:01:c8:41:bd:0b:6b: f9:36:52:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR7jJtY1hcN4ARSwXN2gcw1hC6/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzU5MzBBMTM5QkM3MkEwNDYwM0U3MjM0RTZBQTM5MzhD NEZBRTNCQzAeFw0yNTA3MjAyMzI2MDFaFw0yNTA3MjQwNTQ5MDFaMDMxMTAvBgNV BAMTKEI5NzhGRDVCMjM5Q0I0MDVBOUE1QjgwMEZBQ0JBQkFDRDExM0RCQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6aojyi8JoHvH47ECbudaqZqjZ oWiuTM8QObiiwPECf09y/lvu1RejBNMpHD9Hy/XhMdVhYprhSzI3dfwD3ev3VL9n 2lcosKF2mdJHf1hXCwm2LQZJdnIAWsmXHWAxM94EwStm+0BIfYsuyamGqRoR9eEH ak0529yDIrdHLqn6u+H44w5625n2Azt2tpIgPM65MDwvDx4e4SMZiFMCO891ObV8 bhJ40gZGTxckZOVcYiBFNCAzVeXZdnqPDVU0NoO3v7YUCS5Fv6Z4707yH7/yvY4b W4bJaTJqVQq+D+fzIDu5tWo+5fCzRwUz8Q1NfgsLmuaHQK00LdxZkncwxGKnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuXj9WyOctAWppbgA+surrNET27gwHwYDVR0j BBgwFoAUxZMKE5vHKgRgPnI05qo5OMT647wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDQ0MGM4NS0zNDcxLTQ0NjEtYjU5MC0xNjAxZTE5ZjUzMTgvMC9DNTkzMEExMzlC QzcyQTA0NjAzRTcyMzRFNkFBMzkzOEM0RkFFM0JDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzU5MzBBMTM5QkM3MkEwNDYwM0U3MjM0RTZBQTM5MzhDNEZB RTNCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQ0NDBjODUtMzQ3MS00NDYxLWI1 OTAtMTYwMWUxOWY1MzE4LzAvQzU5MzBBMTM5QkM3MkEwNDYwM0U3MjM0RTZBQTM5 MzhDNEZBRTNCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFhVh8QnP1oR8QTqnGlF87ZQIqqPBwmDqkBe 3a7iqVwMybq38B7pLDEF3gKyRG3EAs/3PatIoWza6ub6h5HVrzxBcdf2IiOtmQN9 Pi+gLXfE24cFH52YDKx5NhdTdEHDncTlfltc0BDjXwY+CyRLRYQ3s8sngxhT+1LF /iJlJ1c0JbZEMBSp/BItzFObHj6e9UpE2Z8NWYWL+yXyRCiKX6/463RJnlptkUfV vbcE4TA9o0eTyKP9NFu3XEgWck1Uj9n6MoYC9BaE0Fa4pZnG0gjMOFzBYbsxa/df 1guwtELdd1dwoa5SDLvo5BY1MoNrk02YPW+3oAHIQb0La/k2Un0= -----END CERTIFICATE-----Generated at Mon Jul 21 08:41:00 2025 by rpki-client