$ rpki-client -vvf repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft File: 5E8D1116F8C66182B65521C899B56E89DDB84C57.mft (raw, json) Hash identifier: JywmtJLO1S2YFLZNGacyd7fjnnTJBeSsBDA680Phsl8= Subject key identifier: F4:30:27:D6:A8:FE:B6:8D:01:62:03:6A:15:69:F6:C2:1A:8F:E9:49 Authority key identifier: 5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 Certificate issuer: /CN=5E8D1116F8C66182B65521C899B56E89DDB84C57 Certificate serial: 1E27DB340DC8805750D442F5610D51A905C0AD99 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft Manifest number: 04AA Signing time: Sun 20 Jul 2025 18:40:44 +0000 Manifest this update: Sun 20 Jul 2025 18:35:44 +0000 Manifest next update: Wed 23 Jul 2025 22:52:44 +0000 Files and hashes: 1: 3230332e3230312e35302e302f32332d3234203d3e203138313033.roa (hash: BaobXEBDNKVOXPWnASBzuf34gx57Iel2oiiy9v7fdcA=) 2: 3230332e3132382e36342e302f31392d3234203d3e203138313033.roa (hash: cImzaCQgH/xKELxeX3ckgK5atsohpplgUl+3u43iFdY=) 3: 34332e3234382e32342e302f32322d3234203d3e203138313033.roa (hash: jjxXOD8YTfHReiK4AK2nOIQXP4l8k6sM7XR6RmO9gn0=) 4: 3130332e32332e3234302e302f32322d3234203d3e203138313033.roa (hash: etHPTVvqoe6GM4pkSxe9oMH07ZX+2TEP2H+GUDlt63w=) 5: 5E8D1116F8C66182B65521C899B56E89DDB84C57.crl (hash: UyA8EudpaoEWLQ5Gsa7QvoTPdVvc4OLrSKwtNJm/Aqk=) 6: 323430313a316230303a3a2f33322d3438203d3e203138313033.roa (hash: w+rn3hr3SMqGHiqqz9FiRvR/Sg9nolhzcrhUpRbqWiI=) 7: 3130332e31302e39362e302f32322d3234203d3e203138313033.roa (hash: fvggVkKI1Umb3Jdh64URgb1j9L9KJzqzQQjlbZZXATA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.crl rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 22:52:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:27:db:34:0d:c8:80:57:50:d4:42:f5:61:0d:51:a9:05:c0:ad:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E8D1116F8C66182B65521C899B56E89DDB84C57 Validity Not Before: Jul 20 18:35:44 2025 GMT Not After : Jul 23 22:52:44 2025 GMT Subject: CN=F43027D6A8FEB68D0162036A1569F6C21A8FE949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7c:0b:87:07:58:51:44:8e:67:cb:52:4e:36: 6f:de:ee:12:13:77:11:cf:49:ed:87:d7:66:39:7f: ea:c7:99:ef:c1:a8:0b:0c:f4:c2:f8:d2:e9:e7:a5: 00:f0:83:93:05:3b:5c:7d:ce:3a:e4:89:94:71:80: 49:75:2b:48:f4:5c:e4:1a:f2:86:52:76:0b:ad:64: c5:e1:ce:b8:88:98:8b:44:9f:b9:59:90:8b:69:64: e6:5a:3c:d7:8e:ec:bd:86:f8:5f:55:bf:5f:ff:ec: bb:e9:37:09:e1:5f:d6:47:15:bf:27:63:3c:33:f4: 38:d3:8a:ca:d7:20:b7:5d:f5:26:d5:a2:a0:dc:13: fb:59:42:b5:3b:90:e0:ce:21:87:42:87:ba:ab:de: d1:0d:f9:7f:ab:5e:6b:5f:c6:b7:08:a9:aa:28:0e: 1d:93:ca:d4:d7:1d:94:fd:de:56:9d:42:0e:ac:eb: ab:7f:6e:4e:e8:37:a9:99:7c:f1:bc:d8:3a:49:a8: 1f:13:86:30:58:30:69:1a:1b:73:6a:5d:b0:6e:d3: 2f:90:2a:5d:ce:2b:13:0e:f7:0e:9a:43:31:1d:a5: 9f:72:e2:f2:13:38:cc:09:a8:be:0f:7c:9e:6e:39: 13:e9:a7:24:a0:f6:81:a6:83:8c:07:1f:2a:f7:c5: ba:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:30:27:D6:A8:FE:B6:8D:01:62:03:6A:15:69:F6:C2:1A:8F:E9:49 X509v3 Authority Key Identifier: keyid:5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:59:db:7c:2d:4a:39:09:13:be:77:f4:13:de:0e:e4:50:50: 06:69:69:c1:6b:c3:99:d4:c8:ec:67:96:25:d1:e4:64:62:5f: 71:86:7b:03:34:9b:d3:14:b8:93:6c:83:e7:89:1f:9c:3c:52: 12:3d:e1:c4:92:31:1a:d0:60:68:80:95:29:42:98:ca:77:cb: d1:75:ed:b4:d4:dd:d4:83:08:89:53:b8:fa:79:71:5c:86:fd: e2:d6:f1:1c:a0:98:60:86:6c:c6:55:e4:3f:46:2a:7c:d5:17: ec:df:71:51:a0:79:c6:15:2d:cf:06:2e:6b:05:a3:ac:7d:1b: 4a:51:30:12:bd:d7:12:cb:cd:08:df:b8:57:76:05:56:e8:97: c1:ac:d4:91:8e:bf:e3:65:07:45:6f:d9:91:ee:c6:0e:fb:38: 7d:de:08:90:99:98:95:32:f5:c3:c4:53:19:0e:c9:be:c9:d2: 86:c6:bf:0b:5c:28:38:49:5d:ac:a7:30:62:6d:73:41:f2:4c: 1f:8e:38:5b:b8:70:3d:83:be:30:d6:e5:4d:42:38:73:fa:18: af:71:5f:e7:e1:09:d8:e3:80:57:d5:a8:85:cc:bd:2d:9e:d1: 6c:e0:8e:2f:3d:5c:cf:8a:65:b0:00:cb:f5:b1:2f:64:0b:e4: 30:3a:2d:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHifbNA3IgFdQ1EL1YQ1RqQXArZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZFODlE REI4NEM1NzAeFw0yNTA3MjAxODM1NDRaFw0yNTA3MjMyMjUyNDRaMDMxMTAvBgNV BAMTKEY0MzAyN0Q2QThGRUI2OEQwMTYyMDM2QTE1NjlGNkMyMUE4RkU5NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3fAuHB1hRRI5ny1JONm/e7hIT dxHPSe2H12Y5f+rHme/BqAsM9ML40unnpQDwg5MFO1x9zjrkiZRxgEl1K0j0XOQa 8oZSdgutZMXhzriImItEn7lZkItpZOZaPNeO7L2G+F9Vv1//7LvpNwnhX9ZHFb8n Yzwz9DjTisrXILdd9SbVoqDcE/tZQrU7kODOIYdCh7qr3tEN+X+rXmtfxrcIqaoo Dh2TytTXHZT93ladQg6s66t/bk7oN6mZfPG82DpJqB8ThjBYMGkaG3NqXbBu0y+Q Kl3OKxMO9w6aQzEdpZ9y4vITOMwJqL4PfJ5uORPppySg9oGmg4wHHyr3xbq3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9DAn1qj+to0BYgNqFWn2whqP6UkwHwYDVR0j BBgwFoAUXo0RFvjGYYK2VSHImbVuid24TFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTk5YzFhZi1kOWM3LTRmZmQtYmEwMy1hM2UxY2RkOGFlZTAvMC81RThEMTExNkY4 QzY2MTgyQjY1NTIxQzg5OUI1NkU4OUREQjg0QzU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZFODlEREI4 NEM1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjE5OWMxYWYtZDljNy00ZmZkLWJh MDMtYTNlMWNkZDhhZWUwLzAvNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZF ODlEREI4NEM1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGxZ23wtSjkJE7539BPeDuRQUAZpacFrw5nU yOxnliXR5GRiX3GGewM0m9MUuJNsg+eJH5w8UhI94cSSMRrQYGiAlSlCmMp3y9F1 7bTU3dSDCIlTuPp5cVyG/eLW8RygmGCGbMZV5D9GKnzVF+zfcVGgecYVLc8GLmsF o6x9G0pRMBK91xLLzQjfuFd2BVbol8Gs1JGOv+NlB0Vv2ZHuxg77OH3eCJCZmJUy 9cPEUxkOyb7J0obGvwtcKDhJXaynMGJtc0HyTB+OOFu4cD2DvjDW5U1COHP6GK9x X+fhCdjjgFfVqIXMvS2e0Wzgji89XM+KZbAAy/WxL2QL5DA6La4= -----END CERTIFICATE-----Generated at Sun Jul 20 21:25:18 2025 by rpki-client