$ rpki-client -vvf repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft File: 5DFC46925E2D4B3FB044F284111222A8B4C78392.mft (raw, json) Hash identifier: nqu6/RMwJF/i5/eHe/ep7Z67jjKzhsvK5xB17OfHGn4= Subject key identifier: 01:10:E0:58:8F:44:B0:85:41:A6:D4:B1:6D:A9:9C:60:6A:FC:51:1F Authority key identifier: 5D:FC:46:92:5E:2D:4B:3F:B0:44:F2:84:11:12:22:A8:B4:C7:83:92 Certificate issuer: /CN=5DFC46925E2D4B3FB044F284111222A8B4C78392 Certificate serial: 512F78272BE064015069E8115EF4404FFB3889A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft Manifest number: 0193 Signing time: Fri 18 Jul 2025 11:21:03 +0000 Manifest this update: Fri 18 Jul 2025 11:16:03 +0000 Manifest next update: Mon 21 Jul 2025 21:04:03 +0000 Files and hashes: 1: 5DFC46925E2D4B3FB044F284111222A8B4C78392.crl (hash: EwGn841a5bOHyoesnnSIdBIW/yRXhxGe1qbf1KJITDU=) 2: 3130332e32322e39382e302f32342d3234203d3e20313530323433.roa (hash: RBUkVebuQcs/eoD+DsobzhNFA6Y0GlvHxLIjvG85Lgo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.crl rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Jul 2025 21:04:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:2f:78:27:2b:e0:64:01:50:69:e8:11:5e:f4:40:4f:fb:38:89:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DFC46925E2D4B3FB044F284111222A8B4C78392 Validity Not Before: Jul 18 11:16:03 2025 GMT Not After : Jul 21 21:04:03 2025 GMT Subject: CN=0110E0588F44B08541A6D4B16DA99C606AFC511F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0f:7c:4f:75:c4:dc:42:36:1d:be:5b:bf:67: be:8b:3e:aa:cc:17:0a:9d:b4:71:ab:af:b4:dd:69: 7d:ad:86:d8:a8:d2:78:d0:35:72:f5:75:78:81:50: 5f:92:32:cd:07:f7:28:91:c0:bd:64:53:12:a2:d2: 48:4c:5a:d2:bc:a0:91:5a:9a:49:bf:6b:46:4c:22: 6e:97:9e:28:66:51:ba:91:20:3e:e9:09:00:67:04: 97:21:71:8f:94:f8:e4:8b:d3:b3:34:e5:4b:75:e2: 2e:8b:be:cc:2a:7c:4f:3e:3a:d8:db:ff:8a:06:74: f5:a0:61:fd:2b:85:33:8f:dd:51:f9:93:3a:b3:28: e9:c4:23:c4:9f:f2:72:06:98:14:d5:78:38:04:f5: 16:f9:65:15:f6:e1:8e:e9:13:31:ad:92:2b:25:7d: 02:de:92:6f:42:64:dc:47:59:87:37:a6:51:68:98: 49:11:e9:c0:af:e4:ac:2c:ad:a6:3f:97:77:1e:df: be:10:4e:dc:b8:37:80:82:60:e1:39:3f:0d:96:97: e6:78:76:36:48:13:0e:55:49:88:49:b7:4c:96:92: 2e:d0:82:6e:6e:42:0e:e3:59:3d:75:d4:e4:45:db: 41:de:30:74:ed:ca:87:75:9a:0b:52:95:89:85:83: e9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:10:E0:58:8F:44:B0:85:41:A6:D4:B1:6D:A9:9C:60:6A:FC:51:1F X509v3 Authority Key Identifier: keyid:5D:FC:46:92:5E:2D:4B:3F:B0:44:F2:84:11:12:22:A8:B4:C7:83:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:7e:04:9a:10:bb:bc:d0:b4:95:95:c1:47:f9:1e:02:b6:86: ce:85:78:df:29:a6:0b:c6:08:88:de:45:e0:c6:77:20:83:53: 2d:cd:ca:0f:a3:f3:62:3f:60:43:c3:89:f8:09:db:30:b8:6c: b1:a9:2d:77:1b:f3:05:4f:01:5d:1a:32:08:a4:cf:a4:eb:aa: bd:d9:4d:9f:48:a1:64:cc:6e:ed:9b:65:27:28:bd:e0:c4:57: 93:c4:19:a3:d1:ce:b3:4f:b5:bf:a1:30:83:32:38:51:d2:9c: 21:e6:6d:3c:e2:6c:8c:ae:2e:b8:da:35:f2:86:85:38:e0:55: 93:05:6f:1f:62:e1:8c:bb:86:43:28:39:97:c2:bc:91:89:a5: 38:a9:ab:79:3e:70:28:5a:80:7d:78:07:0c:37:57:24:9a:50: 37:7e:f6:89:1b:e5:07:60:3b:0c:79:3f:d6:3e:30:1d:e6:f7: 9b:dc:44:7b:45:b3:f4:5d:1e:1b:ee:7c:fd:ed:ff:4a:f6:cc: 01:0f:5c:dd:ca:17:d5:d4:d2:3f:d6:63:d1:a5:16:f2:ec:66: d5:45:c8:13:bd:39:75:63:43:00:d6:54:e6:f4:cd:4d:4a:80: 4c:ef:d1:ca:54:a8:9b:01:ad:db:98:b1:9b:47:cc:e5:92:3e: 41:d9:b1:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUS94JyvgZAFQaegRXvRAT/s4iagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIyQThC NEM3ODM5MjAeFw0yNTA3MTgxMTE2MDNaFw0yNTA3MjEyMTA0MDNaMDMxMTAvBgNV BAMTKDAxMTBFMDU4OEY0NEIwODU0MUE2RDRCMTZEQTk5QzYwNkFGQzUxMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7D3xPdcTcQjYdvlu/Z76LPqrM FwqdtHGrr7TdaX2thtio0njQNXL1dXiBUF+SMs0H9yiRwL1kUxKi0khMWtK8oJFa mkm/a0ZMIm6XnihmUbqRID7pCQBnBJchcY+U+OSL07M05Ut14i6LvswqfE8+Otjb /4oGdPWgYf0rhTOP3VH5kzqzKOnEI8Sf8nIGmBTVeDgE9Rb5ZRX24Y7pEzGtkisl fQLekm9CZNxHWYc3plFomEkR6cCv5KwsraY/l3ce374QTty4N4CCYOE5Pw2Wl+Z4 djZIEw5VSYhJt0yWki7Qgm5uQg7jWT111ORF20HeMHTtyod1mgtSlYmFg+l3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUARDgWI9EsIVBptSxbamcYGr8UR8wHwYDVR0j BBgwFoAUXfxGkl4tSz+wRPKEERIiqLTHg5IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzAxYjI3Ny1jODBjLTQ1ZDUtODA4OS1hOWVmYTM0MDU0MmEvMC81REZDNDY5MjVF MkQ0QjNGQjA0NEYyODQxMTEyMjJBOEI0Qzc4MzkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIyQThCNEM3 ODM5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDcwMWIyNzctYzgwYy00NWQ1LTgw ODktYTllZmEzNDA1NDJhLzAvNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIy QThCNEM3ODM5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAId+BJoQu7zQtJWVwUf5HgK2hs6FeN8ppgvG CIjeReDGdyCDUy3Nyg+j82I/YEPDifgJ2zC4bLGpLXcb8wVPAV0aMgikz6Trqr3Z TZ9IoWTMbu2bZScoveDEV5PEGaPRzrNPtb+hMIMyOFHSnCHmbTzibIyuLrjaNfKG hTjgVZMFbx9i4Yy7hkMoOZfCvJGJpTipq3k+cChagH14Bww3VySaUDd+9okb5Qdg Owx5P9Y+MB3m95vcRHtFs/RdHhvufP3t/0r2zAEPXN3KF9XU0j/WY9GlFvLsZtVF yBO9OXVjQwDWVOb0zU1KgEzv0cpUqJsBrduYsZtHzOWSPkHZsS4= -----END CERTIFICATE-----Generated at Sun Jul 20 21:56:23 2025 by rpki-client