$ rpki-client -vvf repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft File: 5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft (raw, json) Hash identifier: mEyA9jj+N8Ys9UlNyuqXrPKhVXe6p6puZAqJYvt/DoQ= Subject key identifier: 31:C8:7B:40:10:23:EF:D8:0B:62:B9:7B:87:67:7A:78:14:12:28:F7 Authority key identifier: 5E:A6:0C:5C:2A:87:7A:DE:8B:13:E9:94:EA:C2:EC:E8:81:C2:F0:2E Certificate issuer: /CN=5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E Certificate serial: 2C231A6DB741874436B1E329E55728A2D53708FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft Manifest number: 0122 Signing time: Sat 19 Jul 2025 01:01:44 +0000 Manifest this update: Sat 19 Jul 2025 00:56:44 +0000 Manifest next update: Tue 22 Jul 2025 09:06:44 +0000 Files and hashes: 1: 3130332e32302e3138352e302f32342d3234203d3e203538353533.roa (hash: matLkK/0RKOzJ5T6ShVJ+TeIBVCHsHv7ufNKNv6zW+I=) 2: 5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl (hash: j0Ozauw54nG18+/5+WODrKjbyiQntOsJb46uaNJdfDE=) 3: 3130332e32302e3138372e302f32342d3234203d3e203538353533.roa (hash: bUy4CZmFBklHDVwaxUEZUZiNt8d1i/3iKLLtmboWyaU=) 4: 3130332e32302e3138342e302f32342d3234203d3e203538353533.roa (hash: m+tur8s5hF36P9KEnTMPMVDInU7+4/3lGLQOQpvofQk=) 5: 3130332e32302e3138362e302f32342d3234203d3e203538353533.roa (hash: gpL6qnRxLPgeiV+PlG3hB+cnGTmStZNiAx19SwL8f6w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 09:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:23:1a:6d:b7:41:87:44:36:b1:e3:29:e5:57:28:a2:d5:37:08:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E Validity Not Before: Jul 19 00:56:44 2025 GMT Not After : Jul 22 09:06:44 2025 GMT Subject: CN=31C87B401023EFD80B62B97B87677A78141228F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:80:f7:8d:4a:bd:de:fb:ad:cd:55:ba:21:45: e8:53:4d:55:3b:8c:45:74:7b:11:d1:aa:9b:26:99: da:37:55:be:50:d4:1e:d0:b8:af:c7:7c:62:70:80: 17:eb:ae:fb:6f:15:cc:c5:01:d7:22:cc:38:98:2e: 25:e7:d0:db:60:c2:4b:3b:05:92:cd:59:11:d3:95: 0c:2f:96:c4:87:87:c7:62:e7:ab:37:08:7d:d9:df: 71:56:ff:a6:de:94:55:b2:8b:e7:96:60:4b:79:2f: 8c:45:9c:f0:35:02:a8:ee:a9:58:b0:3a:4c:d1:13: 75:4b:96:ce:f1:cf:69:cf:34:d7:a6:83:8f:9f:eb: e1:05:28:35:ba:4e:93:93:a6:5f:2b:3b:02:c7:88: 8c:df:76:da:7f:67:6b:5c:69:4c:2c:fb:a0:28:68: dc:77:e9:45:ee:d2:b7:5d:28:bd:ff:fb:d5:28:58: eb:a4:e2:10:1c:ed:23:50:2b:ae:b6:8c:8a:17:e3: a8:87:aa:d4:69:2a:16:12:0e:b0:a5:05:63:38:13: 8e:39:da:08:db:7f:e8:98:68:97:dd:4f:8e:c9:55: 53:92:71:01:a6:35:89:23:bb:46:69:fe:36:e3:94: 92:00:0c:f5:b7:0a:ee:9d:9e:fb:90:02:96:41:3c: e2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C8:7B:40:10:23:EF:D8:0B:62:B9:7B:87:67:7A:78:14:12:28:F7 X509v3 Authority Key Identifier: keyid:5E:A6:0C:5C:2A:87:7A:DE:8B:13:E9:94:EA:C2:EC:E8:81:C2:F0:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:f3:e3:72:ab:32:ce:ba:bf:07:4e:6b:61:74:08:ca:41:cf: d1:95:10:3f:73:41:5c:c1:6d:03:99:9a:0d:cb:7d:b2:e9:2a: 34:5a:df:7e:f2:06:9d:f9:ec:d7:dc:92:e9:43:c6:0f:4a:fb: 12:be:4d:d2:7c:b1:89:b2:85:c7:0f:cb:3c:d0:e7:86:56:fb: 67:50:60:ab:b2:ba:b6:09:fe:02:2c:cf:f2:34:ef:95:30:22: be:fe:78:77:fb:39:1e:48:d1:13:9b:1c:b1:e5:01:a7:fb:70: 44:cf:59:eb:17:3a:d7:23:4a:a3:d4:de:15:9e:20:2e:8a:24: c1:df:10:c2:c8:17:60:7d:63:65:ab:92:eb:8d:0b:4c:82:bb: 0c:1d:f5:d0:92:da:ae:37:e8:c5:14:00:a1:0c:dc:6f:ea:52: 74:7c:a6:0e:cd:db:52:b6:e8:49:3a:3d:fd:c8:a2:25:19:6b: 53:24:46:99:e5:ee:fa:4b:e3:92:3c:06:08:b8:c0:16:3b:d1: cb:69:8e:c6:8b:bd:71:f5:df:a5:9d:8b:1f:4c:6e:db:13:a3: ea:41:d8:7e:6e:94:18:5f:16:30:3c:04:91:62:c2:3f:83:39: 49:ab:14:c8:85:aa:d7:35:be:46:f4:f7:03:97:94:a6:3a:d4: d3:64:7e:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULCMabbdBh0Q2seMp5VcootU3CP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVDRTg4 MUMyRjAyRTAeFw0yNTA3MTkwMDU2NDRaFw0yNTA3MjIwOTA2NDRaMDMxMTAvBgNV BAMTKDMxQzg3QjQwMTAyM0VGRDgwQjYyQjk3Qjg3Njc3QTc4MTQxMjI4RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBgPeNSr3e+63NVbohRehTTVU7 jEV0exHRqpsmmdo3Vb5Q1B7QuK/HfGJwgBfrrvtvFczFAdcizDiYLiXn0Ntgwks7 BZLNWRHTlQwvlsSHh8di56s3CH3Z33FW/6belFWyi+eWYEt5L4xFnPA1AqjuqViw OkzRE3VLls7xz2nPNNemg4+f6+EFKDW6TpOTpl8rOwLHiIzfdtp/Z2tcaUws+6Ao aNx36UXu0rddKL3/+9UoWOuk4hAc7SNQK662jIoX46iHqtRpKhYSDrClBWM4E445 2gjbf+iYaJfdT47JVVOScQGmNYkju0Zp/jbjlJIADPW3Cu6dnvuQApZBPOI5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMch7QBAj79gLYrl7h2d6eBQSKPcwHwYDVR0j BBgwFoAUXqYMXCqHet6LE+mU6sLs6IHC8C4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDk3M2JlYi02NmJhLTQ4YmMtOTM3NC03MmQ3ZmI4OWM1YTMvMC81RUE2MEM1QzJB ODc3QURFOEIxM0U5OTRFQUMyRUNFODgxQzJGMDJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVDRTg4MUMy RjAyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTA5NzNiZWItNjZiYS00OGJjLTkz NzQtNzJkN2ZiODljNWEzLzAvNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVD RTg4MUMyRjAyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALnz43KrMs66vwdOa2F0CMpBz9GVED9zQVzB bQOZmg3LfbLpKjRa337yBp357NfckulDxg9K+xK+TdJ8sYmyhccPyzzQ54ZW+2dQ YKuyurYJ/gIsz/I075UwIr7+eHf7OR5I0RObHLHlAaf7cETPWesXOtcjSqPU3hWe IC6KJMHfEMLIF2B9Y2WrkuuNC0yCuwwd9dCS2q436MUUAKEM3G/qUnR8pg7N21K2 6Ek6Pf3IoiUZa1MkRpnl7vpL45I8Bgi4wBY70ctpjsaLvXH136Wdix9MbtsTo+pB 2H5ulBhfFjA8BJFiwj+DOUmrFMiFqtc1vkb09wOXlKY61NNkfuc= -----END CERTIFICATE-----Generated at Mon Jul 21 07:26:57 2025 by rpki-client