$ rpki-client -vvf repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft File: C5CA2999FE7612F56CCCB7441743B05181458ED0.mft (raw, json) Hash identifier: QTsv+Ctma6qZXrzxCWTrpwE2USRpBsPBLk1kN1vw8Oo= Subject key identifier: B6:5D:9D:9D:55:06:4E:02:58:FD:4E:8E:8F:80:C9:76:17:92:D3:1D Authority key identifier: C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0 Certificate issuer: /CN=C5CA2999FE7612F56CCCB7441743B05181458ED0 Certificate serial: 516A072929A61D30C3F047ADB892E88AAC664B0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft Manifest number: 04EF Signing time: Mon 21 Jul 2025 09:00:39 +0000 Manifest this update: Mon 21 Jul 2025 08:55:39 +0000 Manifest next update: Thu 24 Jul 2025 19:26:39 +0000 Files and hashes: 1: 3130332e3134322e3230332e302f32342d3234203d3e20313339333738.roa (hash: TJhHkKwr35GRF8gqIxcj9n16SqAaRRuK8PF46Ie+LXg=) 2: 3130332e3134322e3230322e302f32332d3233203d3e20313339333738.roa (hash: aOFDhPstKOFaNipOEFwONnhh/OGsZlp5fuQdDXOoo9E=) 3: 323030313a6466313a353638303a3a2f34382d3438203d3e20313339333738.roa (hash: q7ox9dPZeS59odB2IJMVaFXBFhKkSZPWVMJt5aLWrRc=) 4: C5CA2999FE7612F56CCCB7441743B05181458ED0.crl (hash: PPHqsPzhTww9uZrypPpnWu7/vMuGnaf/eLl4pNBnVv8=) 5: 3130332e3134322e3230322e302f32342d3234203d3e20313339333738.roa (hash: kZ/7LdQ98yA+6ycYvld45u3DxaVBg4NMh+WZ028gPpU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 19:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:6a:07:29:29:a6:1d:30:c3:f0:47:ad:b8:92:e8:8a:ac:66:4b:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5CA2999FE7612F56CCCB7441743B05181458ED0 Validity Not Before: Jul 21 08:55:39 2025 GMT Not After : Jul 24 19:26:39 2025 GMT Subject: CN=B65D9D9D55064E0258FD4E8E8F80C9761792D31D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:82:15:dc:fa:ff:0a:e6:ef:66:f9:ca:13:96: 7f:62:2e:9a:c6:b7:df:f4:ef:b5:3c:92:05:6f:fd: f8:be:70:86:8a:6d:6d:ae:56:27:e1:67:3a:41:23: 3a:e7:15:64:fa:21:ad:4c:a8:1d:6d:d0:86:c9:cf: 7a:16:91:21:cc:0e:d0:11:0d:3a:19:2d:81:25:c3: 7b:05:a9:29:81:83:38:64:43:17:d5:aa:e9:29:24: b7:82:9a:82:16:58:16:65:dd:3f:65:ba:ad:70:1a: 50:1e:2c:2c:7f:9a:07:f5:a9:03:b0:9a:a2:6b:94: a3:e8:04:62:46:09:8b:03:88:67:7c:e1:cf:db:6c: 7c:4f:e4:7e:c0:8b:5d:48:23:42:ea:1a:1b:59:03: d2:3c:b4:96:3b:b4:ac:28:00:c5:e2:00:16:5a:20: ee:2c:e3:e4:1f:a2:85:c2:0f:12:f8:14:c1:29:49: 0e:4c:a1:7e:cb:47:d1:94:ab:d8:46:66:01:cb:b6: f0:86:ac:1e:bf:f5:8f:7e:10:f1:24:d8:4f:1a:df: 33:d7:2b:9b:64:91:da:7b:ef:71:3c:64:8e:da:3a: a8:0b:fe:c3:be:43:1f:69:e8:19:13:16:bb:eb:88: c2:8c:37:a8:12:ae:13:d3:80:ce:dc:97:dd:0b:96: 3f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:5D:9D:9D:55:06:4E:02:58:FD:4E:8E:8F:80:C9:76:17:92:D3:1D X509v3 Authority Key Identifier: keyid:C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:11:1e:94:f2:27:f3:cb:e2:bd:a3:c2:0c:e2:14:4a:49:0b: 4c:b3:4d:46:d1:a5:c7:57:db:88:af:6a:8f:82:e9:c0:93:ad: ff:96:68:b4:5a:af:85:20:29:fa:d8:9e:a1:fa:23:01:29:43: b1:26:1c:39:cc:33:b6:5d:b3:c8:d4:83:da:0c:03:9f:30:82: 96:61:65:89:14:6a:95:58:a3:e2:40:21:be:7d:f1:e2:f4:76: 1d:a1:6b:ac:d0:db:05:45:0d:77:d8:c2:b6:fd:b6:ec:b8:f8: 9c:60:2b:c6:00:40:27:57:b5:c1:17:53:4c:a2:60:65:23:58: 5d:10:ad:7f:32:54:e7:31:4f:2f:eb:63:d9:03:52:ee:31:a0: 49:14:40:d5:f7:54:3d:9b:89:99:1d:d9:bc:b5:28:dd:95:f8: 66:99:27:05:d3:83:79:8d:cb:b9:84:c9:c7:2b:97:95:3b:44: 56:44:5c:66:c2:a5:c5:56:7e:69:61:27:ad:6d:60:ab:6f:59: aa:83:e0:93:df:97:93:61:6c:38:48:53:f0:f5:61:78:07:0a: 36:9d:3b:d1:52:aa:4f:25:53:d8:9e:c8:d2:bd:5a:7c:fa:e9: a5:ad:da:be:83:a5:c6:a9:50:5a:7a:f9:a0:f5:2e:72:11:b1: 5b:c7:6a:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUWoHKSmmHTDD8EetuJLoiqxmSwswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0IwNTE4 MTQ1OEVEMDAeFw0yNTA3MjEwODU1MzlaFw0yNTA3MjQxOTI2MzlaMDMxMTAvBgNV BAMTKEI2NUQ5RDlENTUwNjRFMDI1OEZENEU4RThGODBDOTc2MTc5MkQzMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIghXc+v8K5u9m+coTln9iLprG t9/077U8kgVv/fi+cIaKbW2uVifhZzpBIzrnFWT6Ia1MqB1t0IbJz3oWkSHMDtAR DToZLYElw3sFqSmBgzhkQxfVqukpJLeCmoIWWBZl3T9luq1wGlAeLCx/mgf1qQOw mqJrlKPoBGJGCYsDiGd84c/bbHxP5H7Ai11II0LqGhtZA9I8tJY7tKwoAMXiABZa IO4s4+QfooXCDxL4FMEpSQ5MoX7LR9GUq9hGZgHLtvCGrB6/9Y9+EPEk2E8a3zPX K5tkkdp773E8ZI7aOqgL/sO+Qx9p6BkTFrvriMKMN6gSrhPTgM7cl90Llj+xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtl2dnVUGTgJY/U6Oj4DJdheS0x0wHwYDVR0j BBgwFoAUxcopmf52EvVszLdEF0OwUYFFjtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjdmYjgzNy0xYjJmLTRjNGUtYjk5OS02ZTk5MGRkYzE0OTkvMC9DNUNBMjk5OUZF NzYxMkY1NkNDQ0I3NDQxNzQzQjA1MTgxNDU4RUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0IwNTE4MTQ1 OEVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDY3ZmI4MzctMWIyZi00YzRlLWI5 OTktNmU5OTBkZGMxNDk5LzAvQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0Iw NTE4MTQ1OEVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4RHpTyJ/PL4r2jwgziFEpJC0yzTUbRpcdX 24ivao+C6cCTrf+WaLRar4UgKfrYnqH6IwEpQ7EmHDnMM7Zds8jUg9oMA58wgpZh ZYkUapVYo+JAIb598eL0dh2ha6zQ2wVFDXfYwrb9tuy4+JxgK8YAQCdXtcEXU0yi YGUjWF0QrX8yVOcxTy/rY9kDUu4xoEkUQNX3VD2biZkd2by1KN2V+GaZJwXTg3mN y7mEyccrl5U7RFZEXGbCpcVWfmlhJ61tYKtvWaqD4JPfl5NhbDhIU/D1YXgHCjad O9FSqk8lU9ieyNK9Wnz66aWt2r6DpcapUFp6+aD1LnIRsVvHajs= -----END CERTIFICATE-----Generated at Mon Jul 21 18:06:19 2025 by rpki-client