$ rpki-client -vvf repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft File: 5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft (raw, json) Hash identifier: O9WeZRP8OwGyBGp+5OmxStISsMfTsxGbLHN+iknLWRM= Subject key identifier: C8:F7:CF:A5:B4:D2:E7:39:DE:E8:66:DC:EC:91:65:D7:38:3F:50:71 Authority key identifier: 5A:0C:BE:2D:BC:F9:88:35:69:F8:C2:4B:FB:9E:59:54:42:D8:35:D0 Certificate issuer: /CN=5A0CBE2DBCF9883569F8C24BFB9E595442D835D0 Certificate serial: 25E966E26A8EA4A286AF6CCE8D6CCDEDF865A465 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft Manifest number: 050B Signing time: Sat 06 Sep 2025 03:11:44 +0000 Manifest this update: Sat 06 Sep 2025 03:06:44 +0000 Manifest next update: Tue 09 Sep 2025 08:26:44 +0000 Files and hashes: 1: 323030313a6466323a633238303a3a2f34382d3438203d3e20313339393839.roa (hash: NAP8Ecg7mcF+3+EYuEqADPL2zQZENpYX/wZwvz8zK2k=) 2: 3130332e3134382e37372e302f32342d3234203d3e20313339393839.roa (hash: MWm2F1DhYXk8gG9Y58JwnEVzuJMu3hmMEBr/crsMrlo=) 3: 3130332e3134382e37362e302f32342d3234203d3e20313339393839.roa (hash: 4DHvFxVV4LIBkA3x8qQp+DBWnN9OK+EeEYU9y73AnvA=) 4: 5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl (hash: PreiK3lzImuzCRGQsOBgz/O/uYSlOKsbTc259O+82x8=) 5: 3130332e3134382e37362e302f32332d3233203d3e20313339393839.roa (hash: tHgBQBHZyelL12LDcNEGOIdBk1KUkf5Y80WNybt6NLU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 08:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:e9:66:e2:6a:8e:a4:a2:86:af:6c:ce:8d:6c:cd:ed:f8:65:a4:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A0CBE2DBCF9883569F8C24BFB9E595442D835D0 Validity Not Before: Sep 6 03:06:44 2025 GMT Not After : Sep 9 08:26:44 2025 GMT Subject: CN=C8F7CFA5B4D2E739DEE866DCEC9165D7383F5071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5d:d3:bb:48:96:d8:e1:99:af:d8:ce:71:5e: b3:8f:01:02:6d:d0:bb:e4:d9:5b:a1:fd:72:f2:d1: ef:24:86:bd:00:f6:78:a9:60:fa:a1:73:7a:20:26: 86:e0:1f:c7:64:b6:19:4f:d0:98:19:f8:20:f1:70: 4c:a9:9d:6b:5b:b7:23:af:ed:19:59:4c:f0:d0:36: 6c:5f:f8:6b:40:98:90:fb:45:07:5f:91:1c:cc:66: 4f:50:df:be:41:0b:66:0f:24:0c:82:9b:f7:12:0b: c5:fa:c0:55:8a:f2:05:cd:ba:ba:7d:48:ec:bd:31: 2b:79:bb:b4:b1:29:ee:0b:e3:8d:ea:26:ad:1f:51: 49:4b:de:2c:cc:03:50:10:61:a0:bb:5f:92:a0:d1: 6a:85:3c:bd:e0:c8:b3:3e:b2:88:97:64:70:99:eb: 3b:7d:c4:d8:75:90:b2:e4:34:a9:3d:c2:6f:34:29: 68:1a:60:ac:70:94:28:9e:e8:10:28:48:54:dc:93: 56:bd:02:d6:1a:37:de:be:0a:3d:13:ef:86:61:60: 8c:84:77:6e:27:7d:35:f1:f2:50:a4:89:0b:ea:1f: d6:8f:49:51:33:a6:37:5c:4a:c2:27:7a:4f:1a:bd: f8:7e:77:b3:b5:41:0d:5c:c0:3e:e0:ea:6d:94:63: 7d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F7:CF:A5:B4:D2:E7:39:DE:E8:66:DC:EC:91:65:D7:38:3F:50:71 X509v3 Authority Key Identifier: keyid:5A:0C:BE:2D:BC:F9:88:35:69:F8:C2:4B:FB:9E:59:54:42:D8:35:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:d8:8f:f7:0f:6b:f7:2a:20:b6:48:02:d2:4c:e8:30:23:32: 09:42:fe:62:db:ae:2c:b6:d0:26:86:c5:1f:91:23:32:34:e5: a2:08:9f:46:c5:b5:2e:41:03:90:e1:24:8b:95:ca:a4:e6:16: 8f:24:a6:21:2b:a8:07:92:92:aa:76:11:af:b7:4d:90:42:b4: 14:19:99:28:50:44:c9:00:4a:ad:16:0e:45:e5:32:7c:f3:39: d0:3b:16:f6:f6:75:65:8b:6f:9a:d2:57:bb:89:2f:2d:61:9c: 62:19:d6:dd:1c:8d:2f:ae:82:8a:81:fb:b6:f4:78:ad:c9:75: b5:20:8c:3b:d8:c8:46:ac:33:c8:cd:85:fa:30:62:a1:5f:38: d1:c2:d3:f8:31:0b:06:ee:27:f2:8b:29:89:f2:68:24:af:79: 6e:9d:ae:8c:19:cf:17:ee:43:d3:a1:1b:30:ae:b7:14:f0:c0: 13:a3:26:64:48:ed:fe:d2:81:6d:0e:6f:ae:ba:ae:e6:86:1d: 04:a8:b4:b4:d0:e1:27:75:2b:de:fd:4c:44:cc:ec:7d:e4:15: b0:29:a7:dd:f3:56:05:6d:8b:f0:0f:5a:06:10:59:95:f3:36: f6:eb:e3:4a:9e:9e:aa:1a:73:e9:d0:2c:12:59:29:8f:30:84: d1:d2:22:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJelm4mqOpKKGr2zOjWzN7fhlpGUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5NTQ0 MkQ4MzVEMDAeFw0yNTA5MDYwMzA2NDRaFw0yNTA5MDkwODI2NDRaMDMxMTAvBgNV BAMTKEM4RjdDRkE1QjREMkU3MzlERUU4NjZEQ0VDOTE2NUQ3MzgzRjUwNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7XdO7SJbY4Zmv2M5xXrOPAQJt 0Lvk2Vuh/XLy0e8khr0A9nipYPqhc3ogJobgH8dkthlP0JgZ+CDxcEypnWtbtyOv 7RlZTPDQNmxf+GtAmJD7RQdfkRzMZk9Q375BC2YPJAyCm/cSC8X6wFWK8gXNurp9 SOy9MSt5u7SxKe4L443qJq0fUUlL3izMA1AQYaC7X5Kg0WqFPL3gyLM+soiXZHCZ 6zt9xNh1kLLkNKk9wm80KWgaYKxwlCie6BAoSFTck1a9AtYaN96+Cj0T74ZhYIyE d24nfTXx8lCkiQvqH9aPSVEzpjdcSsInek8avfh+d7O1QQ1cwD7g6m2UY31vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyPfPpbTS5zne6Gbc7JFl1zg/UHEwHwYDVR0j BBgwFoAUWgy+Lbz5iDVp+MJL+55ZVELYNdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDMxNzQ2ZS1iMGY2LTQ4MjctOGM0ZS1iODE5MmRlY2MzOWEvMC81QTBDQkUyREJD Rjk4ODM1NjlGOEMyNEJGQjlFNTk1NDQyRDgzNUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5NTQ0MkQ4 MzVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAzMTc0NmUtYjBmNi00ODI3LThj NGUtYjgxOTJkZWNjMzlhLzAvNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5 NTQ0MkQ4MzVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGPYj/cPa/cqILZIAtJM6DAjMglC/mLbriy2 0CaGxR+RIzI05aIIn0bFtS5BA5DhJIuVyqTmFo8kpiErqAeSkqp2Ea+3TZBCtBQZ mShQRMkASq0WDkXlMnzzOdA7Fvb2dWWLb5rSV7uJLy1hnGIZ1t0cjS+ugoqB+7b0 eK3JdbUgjDvYyEasM8jNhfowYqFfONHC0/gxCwbuJ/KLKYnyaCSveW6drowZzxfu Q9OhGzCutxTwwBOjJmRI7f7SgW0Ob666ruaGHQSotLTQ4Sd1K979TETM7H3kFbAp p93zVgVti/APWgYQWZXzNvbr40qenqoac+nQLBJZKY8whNHSIrA= -----END CERTIFICATE-----Generated at Sat Sep 6 12:22:10 2025 by rpki-client