$ rpki-client -vvf repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.mft File: C005531488F38475CA53CB4A7ABCEC0C32F75962.mft (raw, json) Hash identifier: 98aDpe2zHGjXgtHUytUv2h4OVMJyy7X6tWxgU9Nw3rg= Subject key identifier: 8B:E4:A3:E7:FA:EB:8B:BB:5B:18:0F:3D:C8:11:40:B2:A5:F8:25:67 Authority key identifier: C0:05:53:14:88:F3:84:75:CA:53:CB:4A:7A:BC:EC:0C:32:F7:59:62 Certificate issuer: /CN=C005531488F38475CA53CB4A7ABCEC0C32F75962 Certificate serial: 13056806F6A59752BA2E03647D913E790A185A3B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C005531488F38475CA53CB4A7ABCEC0C32F75962.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.mft Manifest number: 0503 Signing time: Fri 05 Sep 2025 14:50:34 +0000 Manifest this update: Fri 05 Sep 2025 14:45:34 +0000 Manifest next update: Tue 09 Sep 2025 01:27:34 +0000 Files and hashes: 1: 323430353a396434303a3a2f33322d3438203d3e203538343935.roa (hash: 0gzYY7cjTPjY2yjhcF04nMrJdj9Xu6B9UNr2O7vO1co=) 2: C005531488F38475CA53CB4A7ABCEC0C32F75962.crl (hash: 1AtMK1snu+1707Dm0bmr7Al4vi6HYMv4eXTrL7XZNnQ=) 3: 3130332e3134362e3138392e302f32342d3234203d3e203538343935.roa (hash: OsXuery+dqrXtWPBKclCMRfHJTDgT5E1V7vyLlK5GAQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.crl rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C005531488F38475CA53CB4A7ABCEC0C32F75962.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 01:27:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:05:68:06:f6:a5:97:52:ba:2e:03:64:7d:91:3e:79:0a:18:5a:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C005531488F38475CA53CB4A7ABCEC0C32F75962 Validity Not Before: Sep 5 14:45:34 2025 GMT Not After : Sep 9 01:27:34 2025 GMT Subject: CN=8BE4A3E7FAEB8BBB5B180F3DC81140B2A5F82567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a2:79:63:cb:0c:4d:87:0a:c3:fa:e1:56:9d: 05:4a:48:3e:fb:6e:88:08:6c:f5:04:19:7c:de:6e: c6:00:42:fa:72:47:d7:4e:2e:38:4c:aa:bc:bc:7e: 6f:d4:20:6e:10:c7:cc:c2:87:9d:82:35:40:70:ef: 5c:f2:61:37:9c:e1:16:da:10:9c:03:c6:42:b1:f9: fe:35:71:5e:cb:37:51:65:b2:c4:7b:a7:47:ef:f7: c1:16:a5:45:21:1a:6e:87:7d:76:db:26:4b:28:8b: 44:a8:ed:d2:33:48:33:f1:12:ba:08:f4:05:86:1e: e8:75:cd:f4:06:b8:6a:00:a0:bd:ee:8b:6b:66:93: fa:c5:34:8e:ce:56:4a:8a:8d:3c:c7:02:73:26:28: b3:97:69:ba:0f:33:40:66:7a:3c:62:e9:0f:5e:0c: 9a:3e:c3:e0:cf:18:2e:36:cf:73:5d:ac:72:ed:02: bf:b1:1f:04:0c:f3:27:b8:f4:d3:4a:1e:f1:86:9c: 70:6f:34:fd:b2:6c:61:1c:9f:b6:1b:4e:f9:3c:10: a7:84:ca:d8:83:b7:9a:41:29:93:e3:e6:f0:13:ce: 08:40:3e:78:83:2d:15:5e:55:b6:25:f8:bc:0b:a7: 79:30:c9:5d:a2:19:6c:da:ca:f4:a4:ec:3e:ea:79: 60:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E4:A3:E7:FA:EB:8B:BB:5B:18:0F:3D:C8:11:40:B2:A5:F8:25:67 X509v3 Authority Key Identifier: keyid:C0:05:53:14:88:F3:84:75:CA:53:CB:4A:7A:BC:EC:0C:32:F7:59:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C005531488F38475CA53CB4A7ABCEC0C32F75962.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:1e:dd:d4:9f:c9:5b:d2:f0:e4:dc:2e:aa:ca:b9:da:50:82: 3c:a9:44:94:98:52:e9:81:09:15:26:5a:54:a9:43:8e:5d:1f: 6d:50:bd:37:ac:19:2a:7a:57:d8:e6:94:f1:43:66:f9:f6:9d: 98:ad:b3:92:0f:0f:4f:26:e7:a9:28:99:08:ec:4b:7a:ff:ad: 33:65:0f:38:e7:b3:ec:c9:a7:54:06:99:ba:57:f4:24:13:76: d6:8b:6b:62:08:79:fc:fe:99:67:5b:6f:3d:32:8d:48:29:37: 53:64:5e:63:6b:71:f2:e2:da:c9:25:a7:91:78:1e:2f:39:86: 69:e0:98:93:b7:66:17:d6:2a:c4:5e:f3:95:f5:1d:75:67:3c: 2f:17:ab:61:df:fd:65:35:0d:21:85:21:da:ed:d5:bd:46:43: 7a:1b:8c:b0:4a:6e:7b:61:ca:46:b6:1e:45:94:09:4e:ee:1b: 98:46:aa:84:bc:13:c5:2c:14:e6:40:c1:fe:25:aa:74:07:3f: 21:55:45:d3:f7:be:99:29:9b:63:90:36:9a:62:e6:48:21:63: 29:81:4d:24:c2:9e:d4:f9:cc:52:55:aa:4e:f0:10:aa:53:5a: 48:f1:73:d8:11:a2:7f:af:74:65:4a:ca:9b:25:29:ba:f2:02: 51:7d:dc:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEwVoBvall1K6LgNkfZE+eQoYWjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAwNTUzMTQ4OEYzODQ3NUNBNTNDQjRBN0FCQ0VDMEMz MkY3NTk2MjAeFw0yNTA5MDUxNDQ1MzRaFw0yNTA5MDkwMTI3MzRaMDMxMTAvBgNV BAMTKDhCRTRBM0U3RkFFQjhCQkI1QjE4MEYzREM4MTE0MEIyQTVGODI1NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfonljywxNhwrD+uFWnQVKSD77 bogIbPUEGXzebsYAQvpyR9dOLjhMqry8fm/UIG4Qx8zCh52CNUBw71zyYTec4Rba EJwDxkKx+f41cV7LN1FlssR7p0fv98EWpUUhGm6HfXbbJksoi0So7dIzSDPxEroI 9AWGHuh1zfQGuGoAoL3ui2tmk/rFNI7OVkqKjTzHAnMmKLOXaboPM0Bmejxi6Q9e DJo+w+DPGC42z3NdrHLtAr+xHwQM8ye49NNKHvGGnHBvNP2ybGEcn7YbTvk8EKeE ytiDt5pBKZPj5vATzghAPniDLRVeVbYl+LwLp3kwyV2iGWzayvSk7D7qeWABAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi+Sj5/rri7tbGA89yBFAsqX4JWcwHwYDVR0j BBgwFoAUwAVTFIjzhHXKU8tKerzsDDL3WWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDY0Y2JlZS1jNTEzLTQ2YzYtYTFkMC0zZWMwMWQ3YTY2MjYvMC9DMDA1NTMxNDg4 RjM4NDc1Q0E1M0NCNEE3QUJDRUMwQzMyRjc1OTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzAwNTUzMTQ4OEYzODQ3NUNBNTNDQjRBN0FCQ0VDMEMzMkY3 NTk2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ2NGNiZWUtYzUxMy00NmM2LWEx ZDAtM2VjMDFkN2E2NjI2LzAvQzAwNTUzMTQ4OEYzODQ3NUNBNTNDQjRBN0FCQ0VD MEMzMkY3NTk2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHoe3dSfyVvS8OTcLqrKudpQgjypRJSYUumB CRUmWlSpQ45dH21QvTesGSp6V9jmlPFDZvn2nZits5IPD08m56komQjsS3r/rTNl Dzjns+zJp1QGmbpX9CQTdtaLa2IIefz+mWdbbz0yjUgpN1NkXmNrcfLi2sklp5F4 Hi85hmngmJO3ZhfWKsRe85X1HXVnPC8Xq2Hf/WU1DSGFIdrt1b1GQ3objLBKbnth yka2HkWUCU7uG5hGqoS8E8UsFOZAwf4lqnQHPyFVRdP3vpkpm2OQNppi5kghYymB TSTCntT5zFJVqk7wEKpTWkjxc9gRon+vdGVKypslKbryAlF93Dk= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:41 2025 by rpki-client