$ rpki-client -vvf repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft File: 5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft (raw, json) Hash identifier: IA7bTD9fz5rQDYF8UYs0CJdooFeoy8YqO0QfW33g0dY= Subject key identifier: 43:15:C7:D1:96:F5:71:83:B4:D3:B6:A8:3B:15:BA:98:A1:9B:92:FC Authority key identifier: 5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F Certificate issuer: /CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F Certificate serial: 3AEA38E90A6CDA3841063048C5D4B64C1DAFB6C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft Manifest number: 033F Signing time: Tue 09 Sep 2025 08:00:38 +0000 Manifest this update: Tue 09 Sep 2025 07:55:38 +0000 Manifest next update: Fri 12 Sep 2025 11:38:38 +0000 Files and hashes: 1: 5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl (hash: OBBWQwdhDdJ3DwQdM3aULhHTtze7KbezNw6FC81uDWU=) 2: 3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (hash: UdMMuDzVeoO8FHRaQDUzSG3siVMxaIJM4SzGz06W/gA=) 3: 3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (hash: AdQ+JO/REhdDwDAu63+KE7Cs+bTRN78/P47D5a5DoZI=) 4: 3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (hash: MsMpPPcpIZuSudoMMepNN+ZazUOetlA5JvcEYSzR82g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 11:38:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ea:38:e9:0a:6c:da:38:41:06:30:48:c5:d4:b6:4c:1d:af:b6:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F Validity Not Before: Sep 9 07:55:38 2025 GMT Not After : Sep 12 11:38:38 2025 GMT Subject: CN=4315C7D196F57183B4D3B6A83B15BA98A19B92FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:22:2c:b0:5e:20:d2:96:62:ec:17:23:3c:6f: 74:e5:96:33:ba:c1:ba:a8:db:3c:3b:43:30:38:3e: 41:dc:70:d8:38:40:83:8c:9f:3e:d6:d5:6a:a1:45: 9a:1a:b9:fa:d2:48:9c:96:e9:18:e1:b4:0e:59:da: d2:d0:86:f8:1c:1f:22:0c:77:50:60:c3:06:c4:c4: af:33:16:07:37:2d:22:f3:50:28:f2:0e:95:4d:5a: 37:eb:dc:6d:46:2b:66:58:f6:57:69:ef:b3:76:b4: 92:c0:4f:9c:37:c7:c0:ae:4c:62:9c:fc:ee:7a:79: 7e:3a:c3:29:86:3e:d1:31:26:04:a9:ef:e4:32:56: 6d:fa:75:97:a9:02:46:c0:30:17:e8:fc:e6:92:80: 8e:b8:c4:47:2c:8f:a1:90:f7:56:32:a8:ee:7f:c9: f4:58:e1:cd:a6:e2:31:af:d7:d6:7e:87:74:1c:5d: 96:35:6e:ae:1d:20:58:67:43:f8:36:4e:ce:03:e9: 3b:2a:29:32:83:a9:88:27:65:b0:8d:a5:a0:09:35: c5:b8:e0:50:97:64:e8:b3:e0:16:df:1f:d2:a3:37: ab:7c:a2:c0:f2:a1:e4:27:8d:36:61:cb:73:c9:35: a3:0d:47:ac:0d:32:24:eb:aa:83:8a:b8:11:d6:28: e1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:15:C7:D1:96:F5:71:83:B4:D3:B6:A8:3B:15:BA:98:A1:9B:92:FC X509v3 Authority Key Identifier: keyid:5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:99:8d:cd:79:a2:f0:97:09:50:6c:47:0b:af:b7:38:fc:83: e0:81:4e:8d:ae:86:2e:42:45:d7:3e:20:22:58:42:7f:74:5d: dd:45:e1:27:1e:ad:37:b7:d7:a7:ae:27:0a:63:10:bc:27:c8: 4b:04:ba:69:26:d8:57:f9:af:4d:1f:db:4b:73:9d:2e:4c:6d: ef:87:04:b7:4d:83:3e:72:d4:99:bf:72:3a:68:56:08:f0:41: 30:53:fd:98:03:9c:a8:61:5f:8b:31:96:d0:f9:42:54:8c:f8: 67:08:06:c0:b7:dc:94:27:39:90:6f:e2:5e:b9:27:70:ab:62: 8f:db:94:c3:de:48:50:8c:3c:a7:a9:f0:6b:95:52:74:db:15: 21:41:e3:50:6d:16:0f:17:2f:eb:8a:b2:22:7a:67:d9:11:b6: f4:14:f5:3f:8f:64:1a:08:a9:1a:40:f7:fd:63:32:8f:a6:c2: a8:88:ab:fb:78:39:13:4d:cd:82:01:18:79:36:cd:29:6f:84: 13:0c:2b:71:00:ec:fc:f3:ea:89:ac:48:a2:fc:a9:17:40:d6: 7f:5e:b0:56:ad:46:0e:ab:db:07:c4:ca:54:f1:d1:71:2c:41: e7:d7:6f:c2:ba:91:54:af:aa:56:b8:86:ff:3e:91:78:91:bd: 79:32:5a:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOuo46Qps2jhBBjBIxdS2TB2vtscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJCQ0My RTZCM0Q4RjAeFw0yNTA5MDkwNzU1MzhaFw0yNTA5MTIxMTM4MzhaMDMxMTAvBgNV BAMTKDQzMTVDN0QxOTZGNTcxODNCNEQzQjZBODNCMTVCQTk4QTE5QjkyRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWIiywXiDSlmLsFyM8b3TlljO6 wbqo2zw7QzA4PkHccNg4QIOMnz7W1WqhRZoaufrSSJyW6RjhtA5Z2tLQhvgcHyIM d1BgwwbExK8zFgc3LSLzUCjyDpVNWjfr3G1GK2ZY9ldp77N2tJLAT5w3x8CuTGKc /O56eX46wymGPtExJgSp7+QyVm36dZepAkbAMBfo/OaSgI64xEcsj6GQ91YyqO5/ yfRY4c2m4jGv19Z+h3QcXZY1bq4dIFhnQ/g2Ts4D6TsqKTKDqYgnZbCNpaAJNcW4 4FCXZOiz4BbfH9KjN6t8osDyoeQnjTZhy3PJNaMNR6wNMiTrqoOKuBHWKOGLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQxXH0Zb1cYO007aoOxW6mKGbkvwwHwYDVR0j BBgwFoAUXB3H6HRXqR81kVrx3j+7zC5rPY8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yzg4NDQyYi1jNDhlLTRiYTAtOGFkNy01OGUxMjYzYzZkYzcvMC81QzFEQzdFODc0 NTdBOTFGMzU5MTVBRjFERTNGQkJDQzJFNkIzRDhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJCQ0MyRTZC M0Q4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M4ODQ0MmItYzQ4ZS00YmEwLThh ZDctNThlMTI2M2M2ZGM3LzAvNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJC Q0MyRTZCM0Q4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6Zjc15ovCXCVBsRwuvtzj8g+CBTo2uhi5C Rdc+ICJYQn90Xd1F4ScerTe316euJwpjELwnyEsEumkm2Ff5r00f20tznS5Mbe+H BLdNgz5y1Jm/cjpoVgjwQTBT/ZgDnKhhX4sxltD5QlSM+GcIBsC33JQnOZBv4l65 J3CrYo/blMPeSFCMPKep8GuVUnTbFSFB41BtFg8XL+uKsiJ6Z9kRtvQU9T+PZBoI qRpA9/1jMo+mwqiIq/t4ORNNzYIBGHk2zSlvhBMMK3EA7Pzz6omsSKL8qRdA1n9e sFatRg6r2wfEylTx0XEsQefXb8K6kVSvqla4hv8+kXiRvXkyWl0= -----END CERTIFICATE-----Generated at Tue Sep 9 13:40:36 2025 by rpki-client