$ rpki-client -vvf repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft File: 5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft (raw, json) Hash identifier: YtHaTT8E0aIlVPr6FKKpFLOk3bBaUyAqovq4cXoMLis= Subject key identifier: 41:20:09:89:E2:1A:DC:4E:18:44:A1:A7:6E:6B:A8:31:1A:C5:8B:60 Authority key identifier: 51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C Certificate issuer: /CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C Certificate serial: 43D4EFB562B5CF6782FA12EF5BEC3E29F0CA268F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft Manifest number: 04ED Signing time: Sun 20 Jul 2025 04:50:00 +0000 Manifest this update: Sun 20 Jul 2025 04:45:00 +0000 Manifest next update: Wed 23 Jul 2025 16:13:00 +0000 Files and hashes: 1: 3130332e39342e31312e302f32342d3234203d3e203435373232.roa (hash: qGI/gZ+/LHiM5HYO/jSSY227nu7Rlo4VufnCOUnRtK4=) 2: 3130332e39342e392e302f32342d3234203d3e203435373232.roa (hash: orPkEwdvzbgAdBqwJx5fyoqFz6nU1AjYY7pCrQmrMAU=) 3: 5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl (hash: T/0lqmgjwvqLGQRBhYxEWNpijlkM0dqvkVBl9GVGAyo=) 4: 3130332e39342e382e302f32342d3234203d3e203435373232.roa (hash: dTEDIPJlLGDlRHB30/PzLB90DYFKiiQue74QgGKHEVI=) 5: 3138302e3137382e39352e302f32342d3234203d3e203435373232.roa (hash: 9KZ9F45elzM13kws/U0IoAzbbI/YdymyAIpoe5+fMUI=) 6: 3138302e3137382e39332e302f32342d3234203d3e203435373232.roa (hash: mp213bICEXwH+LqnHma8nvPV6BFgfv4aiHAHQpn9yQs=) 7: 3138302e3137382e39342e302f32342d3234203d3e203435373232.roa (hash: r/svlrZcSr5sJUDVP99x6FJY548aywPcFlNv37DJt2Y=) 8: 323430313a333334303a3a2f33322d3438203d3e203435373232.roa (hash: tUFNikuzZ5Dxu83zUyF9psB1ZAXrbnO+JVBeZVWaO4g=) 9: 3130332e39342e31302e302f32342d3234203d3e203435373232.roa (hash: oriUzK7mgQPCjaTV1H4IccgCRtyIm4Y5jf+70OM+bhw=) 10: 3138302e3137382e39322e302f32342d3234203d3e203435373232.roa (hash: ghDv+E88LbsHp+yiOmZsjAqDuH4NzWOqybkoMe5BmV8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 16:13:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:d4:ef:b5:62:b5:cf:67:82:fa:12:ef:5b:ec:3e:29:f0:ca:26:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C Validity Not Before: Jul 20 04:45:00 2025 GMT Not After : Jul 23 16:13:00 2025 GMT Subject: CN=41200989E21ADC4E1844A1A76E6BA8311AC58B60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:43:a4:18:2a:fb:1c:43:45:d2:e4:91:0a:21: 88:9f:35:29:e4:bf:67:8b:e5:2c:d0:09:09:4c:44: 2f:2c:1e:7e:42:c6:90:19:10:79:88:77:70:ce:78: 3a:b8:0c:32:8f:c9:7d:a6:a6:fa:00:80:01:86:af: 9b:e6:0e:53:4d:d0:38:10:c7:d5:fe:47:55:1d:e9: cc:01:3d:04:4b:79:bf:10:49:65:0c:f6:96:b9:68: ee:41:c8:b2:9f:22:dd:ea:86:b4:2a:f5:fe:1f:32: 9a:d8:f0:8d:ca:55:4e:2a:7a:ab:c8:c8:3f:6c:c1: eb:11:55:4c:64:bf:99:36:9b:d0:f2:70:9e:32:6e: 2c:84:92:be:15:68:70:c6:cc:33:30:72:cf:a8:eb: 9f:b8:b9:25:c6:9a:0b:70:e6:87:16:95:8c:80:ba: e4:97:e7:55:8a:7c:76:e5:f0:ee:54:cd:38:e4:21: a7:dd:c3:46:f8:b2:7d:c9:e7:90:91:f1:70:21:9f: 98:56:d4:e2:ac:90:eb:2c:a7:39:44:72:19:83:29: 15:32:12:b8:ff:05:30:94:4e:99:9d:fa:a6:74:f0: 1a:50:89:05:eb:f5:84:37:0d:5f:31:b4:d1:e7:6b: cc:d0:4d:b5:ab:3a:dc:c3:b7:8c:3f:02:e8:01:9a: 03:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:20:09:89:E2:1A:DC:4E:18:44:A1:A7:6E:6B:A8:31:1A:C5:8B:60 X509v3 Authority Key Identifier: keyid:51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:65:f4:fb:97:fe:14:7e:6d:a8:41:51:53:a1:98:53:29:85: fd:f9:f4:9b:0b:a9:e5:0e:1a:59:57:a5:c2:c9:c8:09:cf:ec: 51:7e:e8:f6:5f:fd:69:88:a1:d7:0a:d1:70:8d:f9:eb:13:75: b9:57:43:14:0f:7f:26:70:7c:78:53:63:5d:4c:03:8c:ee:ed: 5f:b2:a0:6b:ee:53:dd:9e:7c:33:b5:42:3a:ce:11:bd:04:f1: 46:aa:6b:87:10:0e:54:2a:15:b8:16:e2:b2:eb:77:5e:00:67: cb:4c:fe:f9:2f:dd:8b:77:3e:fd:ec:35:be:50:f0:2a:cb:c6: c6:e0:33:59:82:ca:7b:90:ab:63:92:dd:f8:23:a2:7a:49:82: ea:1b:26:bd:81:2b:2c:eb:d2:62:a2:05:23:fb:c2:b2:16:b1: b7:45:c5:9b:e1:db:6d:ec:87:1b:28:84:f8:b3:38:3c:e6:24: 29:37:83:fd:0c:59:4b:d2:7f:44:d2:93:42:e4:25:c3:9e:d3: 08:e1:67:0a:ab:84:5d:9c:74:db:0c:2a:95:9d:03:ac:3f:68: 57:2c:45:dd:d6:34:c0:84:73:19:a9:c8:28:b6:70:2c:2e:fa: 3e:f4:ed:22:c9:b8:b6:9d:23:8c:a5:81:02:3c:e8:28:5a:5f: 2c:93:8b:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ9TvtWK1z2eC+hLvW+w+KfDKJo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTExMEE3MTdFRkU5NkIxMkU1RDNBNDc1RTlCMjE3OUU1 REUwRUEwQzAeFw0yNTA3MjAwNDQ1MDBaFw0yNTA3MjMxNjEzMDBaMDMxMTAvBgNV BAMTKDQxMjAwOTg5RTIxQURDNEUxODQ0QTFBNzZFNkJBODMxMUFDNThCNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtQ6QYKvscQ0XS5JEKIYifNSnk v2eL5SzQCQlMRC8sHn5CxpAZEHmId3DOeDq4DDKPyX2mpvoAgAGGr5vmDlNN0DgQ x9X+R1Ud6cwBPQRLeb8QSWUM9pa5aO5ByLKfIt3qhrQq9f4fMprY8I3KVU4qeqvI yD9swesRVUxkv5k2m9DycJ4ybiyEkr4VaHDGzDMwcs+o65+4uSXGmgtw5ocWlYyA uuSX51WKfHbl8O5UzTjkIafdw0b4sn3J55CR8XAhn5hW1OKskOsspzlEchmDKRUy Erj/BTCUTpmd+qZ08BpQiQXr9YQ3DV8xtNHna8zQTbWrOtzDt4w/AugBmgNVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQSAJieIa3E4YRKGnbmuoMRrFi2AwHwYDVR0j BBgwFoAUURCnF+/paxLl06R16bIXnl3g6gwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjA3ZDkyOS00Y2E4LTRmNTMtYTI5OC01ZTMzYmUxZjg2MDQvMC81MTEwQTcxN0VG RTk2QjEyRTVEM0E0NzVFOUIyMTc5RTVERTBFQTBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTExMEE3MTdFRkU5NkIxMkU1RDNBNDc1RTlCMjE3OUU1REUw RUEwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTYwN2Q5MjktNGNhOC00ZjUzLWEy OTgtNWUzM2JlMWY4NjA0LzAvNTExMEE3MTdFRkU5NkIxMkU1RDNBNDc1RTlCMjE3 OUU1REUwRUEwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGdl9PuX/hR+bahBUVOhmFMphf359JsLqeUO GllXpcLJyAnP7FF+6PZf/WmIodcK0XCN+esTdblXQxQPfyZwfHhTY11MA4zu7V+y oGvuU92efDO1QjrOEb0E8Uaqa4cQDlQqFbgW4rLrd14AZ8tM/vkv3Yt3Pv3sNb5Q 8CrLxsbgM1mCynuQq2OS3fgjonpJguobJr2BKyzr0mKiBSP7wrIWsbdFxZvh223s hxsohPizODzmJCk3g/0MWUvSf0TSk0LkJcOe0wjhZwqrhF2cdNsMKpWdA6w/aFcs Rd3WNMCEcxmpyCi2cCwu+j707SLJuLadI4ylgQI86ChaXyyTi0k= -----END CERTIFICATE-----Generated at Mon Jul 21 12:32:13 2025 by rpki-client