$ rpki-client -vvf repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft File: 5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft (raw, json) Hash identifier: US8hIQ1ZV3CYIVJUUw7iSFeCqc/WjCSGjJ+Ta0xC78Q= Subject key identifier: B1:41:BE:CD:7F:2F:A9:A8:7B:43:F5:FA:46:00:92:30:69:CC:E5:DB Authority key identifier: 54:61:EA:BC:86:2E:4C:90:B3:27:90:DB:A2:1C:D5:FF:CB:96:6B:D3 Certificate issuer: /CN=5461EABC862E4C90B32790DBA21CD5FFCB966BD3 Certificate serial: 32A81B3220E54AE5F6B07FC8A290ACBD9DCDCFE3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft Manifest number: 01C3 Signing time: Sat 19 Jul 2025 23:00:59 +0000 Manifest this update: Sat 19 Jul 2025 22:55:59 +0000 Manifest next update: Wed 23 Jul 2025 06:38:59 +0000 Files and hashes: 1: 5461EABC862E4C90B32790DBA21CD5FFCB966BD3.crl (hash: FrHW03kxKXBNeFuNNcjoxNbrYXuFKJ+FUv6f2J51oNA=) 2: 3130332e37332e37322e302f32322d3234203d3e20313335343638.roa (hash: KaaHy0cR6xA7/7fhA1scnNnAkCNoe5f7kq1dVSYxDCg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.crl rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 06:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:a8:1b:32:20:e5:4a:e5:f6:b0:7f:c8:a2:90:ac:bd:9d:cd:cf:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5461EABC862E4C90B32790DBA21CD5FFCB966BD3 Validity Not Before: Jul 19 22:55:59 2025 GMT Not After : Jul 23 06:38:59 2025 GMT Subject: CN=B141BECD7F2FA9A87B43F5FA4600923069CCE5DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:59:bf:d2:92:bb:39:b7:77:a9:50:89:df:b5: a7:7b:3f:d2:41:74:dd:a2:ed:59:5c:27:12:41:bd: eb:8b:17:a0:83:5c:ff:b1:e2:24:15:8c:5c:23:33: 43:5e:da:ee:28:42:d5:0c:79:03:d5:64:b0:b3:2b: 6b:b2:08:a2:9a:52:54:b1:46:27:c4:da:0a:ce:ab: e9:bf:3f:81:34:b2:a3:6d:c1:36:62:4e:03:6f:4b: f2:15:18:57:51:9c:32:22:ce:a9:39:76:bb:99:ff: 21:26:07:a6:3c:b1:0b:78:80:7e:95:31:81:97:56: 36:44:3e:ba:84:e8:6c:e6:d6:82:99:e4:d9:c6:9a: e7:66:1a:66:ed:f7:73:e1:f6:67:10:4c:ca:c7:ac: d1:5f:4a:fb:1c:54:15:c3:2d:74:59:85:57:80:52: ae:2f:a6:5a:7e:e4:98:6c:1d:50:87:f2:27:98:67: f0:62:c9:6b:cc:08:64:5d:c6:ce:fa:84:01:c1:fb: 6f:86:0b:e8:da:e6:42:43:b9:b7:db:5c:a7:72:36: 85:fe:15:96:30:b1:58:47:da:ec:41:05:11:e3:1f: 7f:45:51:94:36:7a:5a:38:92:92:7d:3d:37:6d:1b: 8f:98:68:c8:d9:be:80:0a:6a:6b:57:30:37:21:17: b0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:41:BE:CD:7F:2F:A9:A8:7B:43:F5:FA:46:00:92:30:69:CC:E5:DB X509v3 Authority Key Identifier: keyid:54:61:EA:BC:86:2E:4C:90:B3:27:90:DB:A2:1C:D5:FF:CB:96:6B:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:9f:b4:49:fb:ea:d8:bc:a8:06:c2:87:5d:fc:64:48:8c:57: b9:c4:a8:97:d2:d6:34:60:5b:26:ea:87:40:83:4b:6a:4a:01: d0:99:31:52:bc:9d:2e:10:c8:84:eb:91:28:f0:d9:a7:56:b2: 14:b9:df:00:44:c6:b3:e4:ff:bb:60:c0:60:04:8d:2a:ee:85: da:e6:bb:3b:4d:70:07:04:73:d3:11:f6:7c:56:98:a7:7e:b2: b2:e8:19:7f:30:b2:c7:b5:e2:77:94:91:5b:b0:dc:9f:ec:3b: 59:d3:1b:ea:3e:9d:44:35:6f:cc:0d:bb:7a:76:81:88:2f:ab: ae:43:d3:d8:f0:77:ad:58:12:2f:d1:ab:82:75:5b:2f:a6:ca: 4b:39:d1:aa:75:03:2f:9d:02:8e:3c:a8:17:75:6f:25:24:18: d9:64:1d:4e:ee:df:ec:28:47:f3:b0:89:ea:87:9f:35:4c:40: 64:91:f7:6b:1a:60:54:89:91:a4:37:05:68:5d:5c:10:e9:d9: 8e:8b:68:9d:78:13:f1:e2:d3:0b:a7:d5:17:da:66:5a:b8:1d: dd:ee:f0:9f:7b:8a:9f:fb:71:ce:57:c7:59:29:37:02:00:65: cc:f8:4d:8e:a6:4a:8c:62:00:4f:7b:e4:a9:1a:c0:59:49:a9: d9:3a:09:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMqgbMiDlSuX2sH/IopCsvZ3Nz+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ2MUVBQkM4NjJFNEM5MEIzMjc5MERCQTIxQ0Q1RkZD Qjk2NkJEMzAeFw0yNTA3MTkyMjU1NTlaFw0yNTA3MjMwNjM4NTlaMDMxMTAvBgNV BAMTKEIxNDFCRUNEN0YyRkE5QTg3QjQzRjVGQTQ2MDA5MjMwNjlDQ0U1REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Wb/Skrs5t3epUInftad7P9JB dN2i7VlcJxJBveuLF6CDXP+x4iQVjFwjM0Ne2u4oQtUMeQPVZLCzK2uyCKKaUlSx RifE2grOq+m/P4E0sqNtwTZiTgNvS/IVGFdRnDIizqk5druZ/yEmB6Y8sQt4gH6V MYGXVjZEPrqE6Gzm1oKZ5NnGmudmGmbt93Ph9mcQTMrHrNFfSvscVBXDLXRZhVeA Uq4vplp+5JhsHVCH8ieYZ/BiyWvMCGRdxs76hAHB+2+GC+ja5kJDubfbXKdyNoX+ FZYwsVhH2uxBBRHjH39FUZQ2elo4kpJ9PTdtG4+YaMjZvoAKamtXMDchF7CVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsUG+zX8vqah7Q/X6RgCSMGnM5dswHwYDVR0j BBgwFoAUVGHqvIYuTJCzJ5DbohzV/8uWa9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmVjYzcyYS1lOTU0LTQzMDItOTJjNC1mNGYyMzA3MGI5OTcvMC81NDYxRUFCQzg2 MkU0QzkwQjMyNzkwREJBMjFDRDVGRkNCOTY2QkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTQ2MUVBQkM4NjJFNEM5MEIzMjc5MERCQTIxQ0Q1RkZDQjk2 NkJEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZlY2M3MmEtZTk1NC00MzAyLTky YzQtZjRmMjMwNzBiOTk3LzAvNTQ2MUVBQkM4NjJFNEM5MEIzMjc5MERCQTIxQ0Q1 RkZDQjk2NkJEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADmftEn76ti8qAbCh138ZEiMV7nEqJfS1jRg Wybqh0CDS2pKAdCZMVK8nS4QyITrkSjw2adWshS53wBExrPk/7tgwGAEjSruhdrm uztNcAcEc9MR9nxWmKd+srLoGX8wsse14neUkVuw3J/sO1nTG+o+nUQ1b8wNu3p2 gYgvq65D09jwd61YEi/Rq4J1Wy+myks50ap1Ay+dAo48qBd1byUkGNlkHU7u3+wo R/OwieqHnzVMQGSR92saYFSJkaQ3BWhdXBDp2Y6LaJ14E/Hi0wun1RfaZlq4Hd3u 8J97ip/7cc5Xx1kpNwIAZcz4TY6mSoxiAE975KkawFlJqdk6CUI= -----END CERTIFICATE-----Generated at Mon Jul 21 02:06:44 2025 by rpki-client