$ rpki-client -vvf repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft File: 5DF7F909917C4DA09D7486E2B70323E7972B7675.mft (raw, json) Hash identifier: 9ObdXXRRmGN1xS5xqpWQFqPDsg2/FlLE/wRhmq4EsMA= Subject key identifier: 57:05:89:85:9D:3A:0B:AA:48:E7:8B:51:02:E7:1F:8C:64:72:78:28 Authority key identifier: 5D:F7:F9:09:91:7C:4D:A0:9D:74:86:E2:B7:03:23:E7:97:2B:76:75 Certificate issuer: /CN=5DF7F909917C4DA09D7486E2B70323E7972B7675 Certificate serial: 1158E0D7600054AC714CB4884A49FF7B2C9AF68C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DF7F909917C4DA09D7486E2B70323E7972B7675.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft Manifest number: 0205 Signing time: Sat 19 Jul 2025 13:01:43 +0000 Manifest this update: Sat 19 Jul 2025 12:56:43 +0000 Manifest next update: Tue 22 Jul 2025 23:54:43 +0000 Files and hashes: 1: 5DF7F909917C4DA09D7486E2B70323E7972B7675.crl (hash: uv9vOuG8USlUQGjMBqsmweI8a5apWIvpM5GABsxXiEc=) 2: 3130332e3138362e3136372e302f32342d3234203d3e20313439373033.roa (hash: uTV9a8fdyT6ZmJ8NRNVsn4KQvmLK6xkJNJmzdYWe1pQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.crl rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DF7F909917C4DA09D7486E2B70323E7972B7675.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 23:54:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:58:e0:d7:60:00:54:ac:71:4c:b4:88:4a:49:ff:7b:2c:9a:f6:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DF7F909917C4DA09D7486E2B70323E7972B7675 Validity Not Before: Jul 19 12:56:43 2025 GMT Not After : Jul 22 23:54:43 2025 GMT Subject: CN=570589859D3A0BAA48E78B5102E71F8C64727828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6d:b2:30:9a:73:84:75:be:b9:6d:8c:9f:35: 5a:51:f9:f6:17:6c:e7:88:99:fc:b1:92:68:50:be: 66:4d:e2:be:90:d7:a1:a7:1c:37:0c:3a:91:53:b4: 6a:90:5c:59:04:af:69:30:f6:17:53:e6:9e:c8:28: c8:0e:d6:ea:64:f8:46:19:35:14:c5:d1:6b:e1:cf: bf:ff:5e:ee:e5:59:9d:b0:89:d0:92:3e:ad:33:d4: a6:47:4a:50:7f:24:41:0f:e5:75:3f:e0:3b:6b:3b: a9:56:7f:59:15:4f:e7:62:c9:8c:0f:2b:b8:89:24: a1:56:ae:f1:60:0a:6a:fb:61:e5:6c:87:ab:31:69: 1a:40:89:28:ed:f3:d8:58:90:eb:fa:3a:67:58:47: d5:99:4d:2d:48:69:73:89:f1:40:ef:12:a2:48:1b: cc:42:cb:32:78:06:ba:00:42:c0:e3:a5:46:5e:48: 53:ed:b3:e2:86:8f:6e:75:cd:04:df:1d:bc:64:1b: 08:9f:16:af:57:72:98:04:cd:4a:90:85:a7:f5:86: 13:6b:d4:a2:29:aa:b3:07:34:1a:bd:9d:9a:a3:57: cc:c6:01:0b:69:2a:8c:f7:52:7e:67:80:75:c1:51: 9e:b2:d6:5e:a6:d7:c7:d7:be:31:91:01:72:e4:36: 56:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:05:89:85:9D:3A:0B:AA:48:E7:8B:51:02:E7:1F:8C:64:72:78:28 X509v3 Authority Key Identifier: keyid:5D:F7:F9:09:91:7C:4D:A0:9D:74:86:E2:B7:03:23:E7:97:2B:76:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DF7F909917C4DA09D7486E2B70323E7972B7675.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:a3:0d:6c:61:1e:6e:bf:e1:a6:b9:e4:85:93:28:a5:a1:ad: 46:64:28:93:9c:74:22:6e:9d:55:14:de:69:cf:6a:12:38:ef: a6:49:61:5c:ce:ca:24:06:7b:9e:af:2d:a7:21:89:ab:d7:03: 2a:48:1b:ac:f5:1a:c7:6e:6a:a2:2b:0a:9c:2e:7a:57:71:52: d7:76:16:d9:3c:fb:a9:a9:3a:50:d5:15:00:f2:4c:a2:09:b0: 6c:e6:b3:56:e6:79:78:72:ce:c7:8c:a0:cf:84:bf:96:51:4f: b9:a0:57:c6:de:17:07:41:ac:7a:4d:c2:24:88:37:7a:c9:5f: 6f:e1:58:16:1c:c1:ab:2d:2d:ba:95:c2:aa:c4:c2:89:3c:52: 0e:60:dd:f8:59:16:09:76:24:7a:7f:99:fa:68:29:c2:35:ad: de:f8:09:39:06:b2:8b:b6:56:e4:64:a7:e9:7a:46:91:c2:a9: 00:36:01:3c:d8:1a:ee:0f:7e:40:5c:b7:4a:64:10:66:92:b3: 06:25:03:c4:ae:58:96:11:0c:1d:11:b2:20:d4:c2:fc:ce:fe: 6c:56:df:95:9e:1c:1c:17:f8:1d:f6:a4:ba:d2:25:a5:ab:1f: 82:88:12:c3:9f:86:47:69:ec:07:59:a4:85:47:ab:8d:f8:0c: 18:cd:aa:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEVjg12AAVKxxTLSISkn/eyya9owwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGN0Y5MDk5MTdDNERBMDlENzQ4NkUyQjcwMzIzRTc5 NzJCNzY3NTAeFw0yNTA3MTkxMjU2NDNaFw0yNTA3MjIyMzU0NDNaMDMxMTAvBgNV BAMTKDU3MDU4OTg1OUQzQTBCQUE0OEU3OEI1MTAyRTcxRjhDNjQ3Mjc4MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcbbIwmnOEdb65bYyfNVpR+fYX bOeImfyxkmhQvmZN4r6Q16GnHDcMOpFTtGqQXFkEr2kw9hdT5p7IKMgO1upk+EYZ NRTF0Wvhz7//Xu7lWZ2widCSPq0z1KZHSlB/JEEP5XU/4DtrO6lWf1kVT+diyYwP K7iJJKFWrvFgCmr7YeVsh6sxaRpAiSjt89hYkOv6OmdYR9WZTS1IaXOJ8UDvEqJI G8xCyzJ4BroAQsDjpUZeSFPts+KGj251zQTfHbxkGwifFq9XcpgEzUqQhaf1hhNr 1KIpqrMHNBq9nZqjV8zGAQtpKoz3Un5ngHXBUZ6y1l6m18fXvjGRAXLkNlb/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVwWJhZ06C6pI54tRAucfjGRyeCgwHwYDVR0j BBgwFoAUXff5CZF8TaCddIbitwMj55crdnUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2I2NGMzZS1iMTNkLTQyN2EtYjk4Mi00Mzk0MDczZTVjZjUvMC81REY3RjkwOTkx N0M0REEwOUQ3NDg2RTJCNzAzMjNFNzk3MkI3Njc1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNURGN0Y5MDk5MTdDNERBMDlENzQ4NkUyQjcwMzIzRTc5NzJC NzY3NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdiNjRjM2UtYjEzZC00MjdhLWI5 ODItNDM5NDA3M2U1Y2Y1LzAvNURGN0Y5MDk5MTdDNERBMDlENzQ4NkUyQjcwMzIz RTc5NzJCNzY3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImjDWxhHm6/4aa55IWTKKWhrUZkKJOcdCJu nVUU3mnPahI476ZJYVzOyiQGe56vLachiavXAypIG6z1GsduaqIrCpwueldxUtd2 Ftk8+6mpOlDVFQDyTKIJsGzms1bmeXhyzseMoM+Ev5ZRT7mgV8beFwdBrHpNwiSI N3rJX2/hWBYcwastLbqVwqrEwok8Ug5g3fhZFgl2JHp/mfpoKcI1rd74CTkGsou2 VuRkp+l6RpHCqQA2ATzYGu4PfkBct0pkEGaSswYlA8SuWJYRDB0RsiDUwvzO/mxW 35WeHBwX+B32pLrSJaWrH4KIEsOfhkdp7AdZpIVHq434DBjNqlA= -----END CERTIFICATE-----Generated at Mon Jul 21 07:25:00 2025 by rpki-client