$ rpki-client -vvf repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft File: 5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft (raw, json) Hash identifier: uYrXmQ/doJaZEVH6D2b8ZWvuoZ1pNGV2WVyavT71RnY= Subject key identifier: 0F:07:E8:CE:2B:B8:75:B4:52:D7:E6:70:34:01:DA:7F:DB:B8:77:22 Authority key identifier: 53:35:07:6B:95:F2:97:8B:E3:AC:DB:39:36:0A:E5:A2:2D:0D:4B:55 Certificate issuer: /CN=5335076B95F2978BE3ACDB39360AE5A22D0D4B55 Certificate serial: 031AE3B5824AB949EAC6B99780517986DA1DEB07 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft Manifest number: 01C7 Signing time: Sat 19 Jul 2025 17:21:07 +0000 Manifest this update: Sat 19 Jul 2025 17:16:07 +0000 Manifest next update: Wed 23 Jul 2025 01:44:07 +0000 Files and hashes: 1: 323430353a636534303a3a2f33322d3438203d3e20313339393838.roa (hash: lyCNDP9EqWqz+HEfKh+8ATTipD904Rt+hS0G+abC8oQ=) 2: 3130332e3134382e3130302e302f32332d3234203d3e20313339393838.roa (hash: hRVeSPhdphVESxw/HVaRN7Uso4dNGcBae9fMOmvqYMU=) 3: 5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl (hash: b54pwT+jgVRrFpP8FWYUMypNpXDGM6DWqUY6X9lu1FA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 01:44:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:1a:e3:b5:82:4a:b9:49:ea:c6:b9:97:80:51:79:86:da:1d:eb:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5335076B95F2978BE3ACDB39360AE5A22D0D4B55 Validity Not Before: Jul 19 17:16:07 2025 GMT Not After : Jul 23 01:44:07 2025 GMT Subject: CN=0F07E8CE2BB875B452D7E6703401DA7FDBB87722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f2:4a:2f:5b:f5:b4:cc:4b:ce:1e:e3:eb:09: 6b:84:a0:cb:95:1b:9c:44:c0:98:24:7b:c7:0c:2b: 2e:99:58:04:90:9e:24:c9:ae:de:d6:be:6f:21:e8: f7:ee:f4:af:e9:d9:f5:95:00:14:5b:ec:82:83:ae: 94:3e:ca:e6:ef:f1:70:4d:2f:3e:01:73:75:7f:0c: fc:64:a1:b4:0e:b7:7c:e7:97:5c:4c:17:29:af:06: 44:e7:94:97:5d:e7:82:4e:ad:51:47:38:7d:48:e5: 4f:0a:18:a5:d6:f4:a7:5c:de:45:77:cc:e2:10:d8: be:b9:dc:91:a7:39:b3:51:5b:1e:e7:80:22:4d:39: ae:09:b6:53:d5:56:43:38:9e:ca:6f:5d:89:1d:de: 7f:bc:9d:b5:3d:c8:76:83:5b:34:23:79:ff:30:23: a8:6a:c9:1d:aa:ef:58:99:6b:3a:62:0f:dc:21:3f: 51:e0:51:7d:49:30:40:50:b0:c6:07:fc:78:30:28: 24:63:13:9b:68:f5:32:f5:38:2e:05:ae:d5:c1:76: df:f8:7d:3d:f9:47:eb:93:be:9e:4c:b2:be:24:fd: 7c:ab:b4:cc:06:4e:34:c9:eb:5a:da:00:14:1a:e8: bc:c6:dd:56:bc:c0:21:df:58:49:ea:de:ae:7f:ac: ba:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:07:E8:CE:2B:B8:75:B4:52:D7:E6:70:34:01:DA:7F:DB:B8:77:22 X509v3 Authority Key Identifier: keyid:53:35:07:6B:95:F2:97:8B:E3:AC:DB:39:36:0A:E5:A2:2D:0D:4B:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:53:37:fd:81:27:99:d5:9f:a8:37:9c:2b:0e:f0:f4:b6:a2: 73:8e:e5:29:a4:cf:72:e3:4c:9e:d9:f4:e4:54:40:d5:ae:96: 20:aa:f5:be:38:6a:aa:a7:e2:cb:74:86:5f:bb:3c:ff:58:2a: bb:8d:2f:f9:fa:48:0b:29:ee:a2:23:56:17:d8:cd:3c:8e:bb: be:2d:f2:d0:88:8d:5e:ad:9b:05:2a:05:3f:12:24:0e:87:7c: 10:c0:26:a3:93:09:fd:eb:c9:f8:d4:b0:88:2d:6a:72:26:63: 26:a8:7b:5f:6a:ad:03:97:66:03:e4:94:30:27:ac:db:79:d7: 7c:99:3e:a6:72:b4:f3:05:73:31:66:6f:b9:a2:52:f7:ab:80: e9:6c:20:ce:e9:ff:9e:48:6d:fa:fd:d0:47:69:81:ac:b8:ef: 39:87:de:b5:ac:9f:96:1c:0f:32:6c:f8:55:7b:ca:b9:e5:8d: 18:de:a0:cb:c7:9a:ae:e9:25:ae:d3:3c:25:b4:f5:7f:53:81: 10:03:e6:1a:bb:b7:66:30:26:a4:02:5c:91:72:28:58:f8:1c: 84:5d:6e:1d:af:3c:82:53:09:c4:b4:8d:25:7d:9a:57:5a:a2: 11:fc:95:9a:89:b4:73:49:6c:b2:32:63:d2:b0:39:48:d4:8e: b4:91:1d:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAxrjtYJKuUnqxrmXgFF5htod6wcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMzNTA3NkI5NUYyOTc4QkUzQUNEQjM5MzYwQUU1QTIy RDBENEI1NTAeFw0yNTA3MTkxNzE2MDdaFw0yNTA3MjMwMTQ0MDdaMDMxMTAvBgNV BAMTKDBGMDdFOENFMkJCODc1QjQ1MkQ3RTY3MDM0MDFEQTdGREJCODc3MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr8kovW/W0zEvOHuPrCWuEoMuV G5xEwJgke8cMKy6ZWASQniTJrt7Wvm8h6Pfu9K/p2fWVABRb7IKDrpQ+yubv8XBN Lz4Bc3V/DPxkobQOt3znl1xMFymvBkTnlJdd54JOrVFHOH1I5U8KGKXW9Kdc3kV3 zOIQ2L653JGnObNRWx7ngCJNOa4JtlPVVkM4nspvXYkd3n+8nbU9yHaDWzQjef8w I6hqyR2q71iZazpiD9whP1HgUX1JMEBQsMYH/HgwKCRjE5to9TL1OC4FrtXBdt/4 fT35R+uTvp5Msr4k/XyrtMwGTjTJ61raABQa6LzG3Va8wCHfWEnq3q5/rLpbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDwfoziu4dbRS1+ZwNAHaf9u4dyIwHwYDVR0j BBgwFoAUUzUHa5Xyl4vjrNs5Ngrloi0NS1UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmQ2NmQxMC1iODU3LTRiZWYtOTM5NS00NWQ1YWIyYzQ0ZjkvMC81MzM1MDc2Qjk1 RjI5NzhCRTNBQ0RCMzkzNjBBRTVBMjJEMEQ0QjU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTMzNTA3NkI5NUYyOTc4QkUzQUNEQjM5MzYwQUU1QTIyRDBE NEI1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJkNjZkMTAtYjg1Ny00YmVmLTkz OTUtNDVkNWFiMmM0NGY5LzAvNTMzNTA3NkI5NUYyOTc4QkUzQUNEQjM5MzYwQUU1 QTIyRDBENEI1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJTN/2BJ5nVn6g3nCsO8PS2onOO5Smkz3Lj TJ7Z9ORUQNWuliCq9b44aqqn4st0hl+7PP9YKruNL/n6SAsp7qIjVhfYzTyOu74t 8tCIjV6tmwUqBT8SJA6HfBDAJqOTCf3ryfjUsIgtanImYyaoe19qrQOXZgPklDAn rNt513yZPqZytPMFczFmb7miUvergOlsIM7p/55Ibfr90Edpgay47zmH3rWsn5Yc DzJs+FV7yrnljRjeoMvHmq7pJa7TPCW09X9TgRAD5hq7t2YwJqQCXJFyKFj4HIRd bh2vPIJTCcS0jSV9mldaohH8lZqJtHNJbLIyY9KwOUjUjrSRHXI= -----END CERTIFICATE-----Generated at Mon Jul 21 18:05:54 2025 by rpki-client