$ rpki-client -vvf repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft File: 5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft (raw, json) Hash identifier: 59hiG6ma2VmubMj7QRoxwPiOoj1cp4/NxlyN0gWDVik= Subject key identifier: C7:7D:56:FF:2E:66:2C:C6:EF:67:AF:F7:F3:5F:F2:3A:AE:CE:89:08 Authority key identifier: 5B:8C:3A:29:E9:0C:25:CB:F4:61:51:24:B1:17:BE:7F:C0:13:C6:1E Certificate issuer: /CN=5B8C3A29E90C25CBF4615124B117BE7FC013C61E Certificate serial: 47A02D0B5B58D23CD9510FF51B3B25E0F18587E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft Manifest number: 01AE Signing time: Tue 22 Jul 2025 17:41:02 +0000 Manifest this update: Tue 22 Jul 2025 17:36:02 +0000 Manifest next update: Fri 25 Jul 2025 19:35:02 +0000 Files and hashes: 1: 3130332e39302e36372e302f32342d3234203d3e20313530323635.roa (hash: rSbPcUFwbUotF4iGb/0NgCE/rDZm6ThuOkAV/ZhbDr4=) 2: 3130332e39302e36362e302f32332d3233203d3e20313530323635.roa (hash: 03+kmACXHUPe0IyI3YXAvW+JekGIFfxV2tHYWD2l8nE=) 3: 3130332e39302e36362e302f32342d3234203d3e20313530323635.roa (hash: 5zPk4MUiirpmEj5/W53RgTUlrb96XIX+LjZrPDV2UMA=) 4: 5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl (hash: HBJDe18fNcZ++IJroKEbQg0HXck7ylCU6YLpeAFiZHI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:35:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:a0:2d:0b:5b:58:d2:3c:d9:51:0f:f5:1b:3b:25:e0:f1:85:87:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B8C3A29E90C25CBF4615124B117BE7FC013C61E Validity Not Before: Jul 22 17:36:02 2025 GMT Not After : Jul 25 19:35:02 2025 GMT Subject: CN=C77D56FF2E662CC6EF67AFF7F35FF23AAECE8908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:83:d3:7c:95:b4:e1:ac:ce:e0:90:63:99:13: 91:6e:bc:27:39:71:8d:3c:57:0b:7b:5e:78:93:17: 46:2f:a6:46:c2:66:62:40:dd:4a:44:7d:aa:10:89: 33:c2:f0:3f:16:1b:c6:ab:80:19:d7:89:da:64:eb: 1b:c6:be:5c:8a:1a:d1:d2:c4:55:b6:c3:f4:19:a0: 5a:df:ff:36:2d:07:cf:9f:fc:4f:23:2c:5d:21:16: d2:e7:c7:a0:af:c8:cb:cc:14:8f:ff:8e:df:cf:54: 44:e2:0b:08:d0:03:fe:55:a2:7e:28:90:35:71:76: 65:46:c8:6a:a0:a6:58:fb:5a:56:0c:83:0b:88:29: 76:52:f3:d5:b8:57:c7:86:4e:b0:86:76:73:af:64: b1:f6:ba:c6:de:83:c4:bd:49:d2:ae:9e:97:22:b9: be:12:28:47:36:d7:6d:2b:b2:2d:ec:10:e4:ec:fa: df:e9:34:31:e5:51:c7:4a:7d:d2:e3:2a:6c:ac:ed: f6:0f:d1:f0:af:7c:e9:64:06:db:74:1b:3e:ef:a8: 52:8d:0d:c6:fc:79:14:53:3a:85:bf:06:2b:f6:29: 30:48:df:1e:2d:78:2e:1c:06:73:06:ec:1b:4c:b9: d9:bb:be:bd:a0:01:bb:97:81:96:bd:48:0f:ca:c4: 50:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:7D:56:FF:2E:66:2C:C6:EF:67:AF:F7:F3:5F:F2:3A:AE:CE:89:08 X509v3 Authority Key Identifier: keyid:5B:8C:3A:29:E9:0C:25:CB:F4:61:51:24:B1:17:BE:7F:C0:13:C6:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:a1:32:10:36:f1:e0:ce:43:04:81:d3:b7:ea:41:7b:81:21: 6e:6f:5e:d4:88:5e:b6:00:b3:7a:9e:b8:a4:28:45:6e:63:c2: 57:f1:1f:93:37:e8:1d:04:14:ea:f9:e1:b4:25:a8:c8:e3:ce: eb:59:b8:73:ea:2f:c5:4e:25:2f:ad:10:77:71:e2:1a:5b:cd: 63:a2:d4:fb:cb:07:c9:40:c2:ab:b3:ed:3e:4b:e1:36:a4:f7: cd:b6:82:47:36:9e:d6:3b:d3:eb:88:44:79:64:9c:5a:f6:e4: 1e:38:65:7f:dc:71:b2:d2:61:a5:ce:3f:1c:17:f6:bf:d2:81: b7:4e:ee:ec:49:ff:1e:69:1d:08:93:1e:f1:25:61:32:a0:95: 37:14:13:dc:4b:74:8e:96:66:22:05:77:32:fe:d4:54:36:19: a9:c7:10:4d:31:23:ad:50:52:70:55:42:3f:b1:8c:37:e4:3c: 1e:c2:a7:24:1b:5d:84:c8:b4:f5:da:99:bb:73:f6:a6:c5:35: 5f:79:bf:26:7f:67:2a:d3:64:00:88:e3:99:d7:07:b4:11:7e: cb:79:b3:58:f8:0c:df:9a:3f:63:75:f2:19:4e:dc:49:f6:e3: 68:a0:f5:14:d5:1a:f0:25:d2:9e:ac:25:a1:e0:3b:09:63:26: ca:28:cd:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR6AtC1tY0jzZUQ/1Gzsl4PGFh+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JFN0ZD MDEzQzYxRTAeFw0yNTA3MjIxNzM2MDJaFw0yNTA3MjUxOTM1MDJaMDMxMTAvBgNV BAMTKEM3N0Q1NkZGMkU2NjJDQzZFRjY3QUZGN0YzNUZGMjNBQUVDRTg5MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqg9N8lbThrM7gkGOZE5FuvCc5 cY08Vwt7XniTF0YvpkbCZmJA3UpEfaoQiTPC8D8WG8argBnXidpk6xvGvlyKGtHS xFW2w/QZoFrf/zYtB8+f/E8jLF0hFtLnx6CvyMvMFI//jt/PVETiCwjQA/5Von4o kDVxdmVGyGqgplj7WlYMgwuIKXZS89W4V8eGTrCGdnOvZLH2usbeg8S9SdKunpci ub4SKEc2120rsi3sEOTs+t/pNDHlUcdKfdLjKmys7fYP0fCvfOlkBtt0Gz7vqFKN Dcb8eRRTOoW/Biv2KTBI3x4teC4cBnMG7BtMudm7vr2gAbuXgZa9SA/KxFD/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx31W/y5mLMbvZ6/381/yOq7OiQgwHwYDVR0j BBgwFoAUW4w6KekMJcv0YVEksRe+f8ATxh4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWYzYzc2OS1jZmIxLTQyMDYtOWY1NC1jMDU4N2U2M2JhNWIvMC81QjhDM0EyOUU5 MEMyNUNCRjQ2MTUxMjRCMTE3QkU3RkMwMTNDNjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JFN0ZDMDEz QzYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzlmM2M3NjktY2ZiMS00MjA2LTlm NTQtYzA1ODdlNjNiYTViLzAvNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JF N0ZDMDEzQzYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALehMhA28eDOQwSB07fqQXuBIW5vXtSIXrYA s3qeuKQoRW5jwlfxH5M36B0EFOr54bQlqMjjzutZuHPqL8VOJS+tEHdx4hpbzWOi 1PvLB8lAwquz7T5L4Tak9822gkc2ntY70+uIRHlknFr25B44ZX/ccbLSYaXOPxwX 9r/SgbdO7uxJ/x5pHQiTHvElYTKglTcUE9xLdI6WZiIFdzL+1FQ2GanHEE0xI61Q UnBVQj+xjDfkPB7CpyQbXYTItPXambtz9qbFNV95vyZ/ZyrTZACI45nXB7QRfst5 s1j4DN+aP2N18hlO3En242ig9RTVGvAl0p6sJaHgOwljJsoozWM= -----END CERTIFICATE-----Generated at Wed Jul 23 01:59:47 2025 by rpki-client