$ rpki-client -vvf repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft File: 5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft (raw, json) Hash identifier: +a18iKIlmEviagRrXL0y3+ZfnxLjHopo65R2HIN4aO4= Subject key identifier: C5:F1:11:5A:79:4C:28:DE:69:9D:BB:A3:C6:CB:B8:EF:FA:4D:7A:1B Authority key identifier: 5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C Certificate issuer: /CN=5F1EC0378C7B3A8912CA32E382D2C083E173E71C Certificate serial: 365CF492DFA2AF4E334B8D1026BE9249E83AE4EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft Manifest number: 0505 Signing time: Wed 03 Sep 2025 22:01:11 +0000 Manifest this update: Wed 03 Sep 2025 21:56:11 +0000 Manifest next update: Sat 06 Sep 2025 22:21:11 +0000 Files and hashes: 1: 34392e3132382e3138382e302f32322d3234203d3e20313337323836.roa (hash: N5sKhHjRyw1prqGuj3p6kCsMHoe6+KpOpvfRWzLWflo=) 2: 3130332e31302e3134382e302f32322d3234203d3e20313336313032.roa (hash: YsAypY99u2UNps3UuTssVcjcS3FU5EYzwPP14rlgcWs=) 3: 3130332e39302e3234382e302f32332d3234203d3e20313337323836.roa (hash: jxHxbJF/eRRjfrisoO0mVeSb4ItOk+aEiVd997Gm3wQ=) 4: 3130332e39302e3235302e302f32332d3234203d3e20313336313032.roa (hash: ekJ6EWJjK3BnK95R5dRKHaTG8w4+znJQJhayH3/qkyg=) 5: 5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl (hash: E6pSzgkBSVw1apgy55n8OzklqxMz8duPgNmvVrpNESk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 22:21:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:5c:f4:92:df:a2:af:4e:33:4b:8d:10:26:be:92:49:e8:3a:e4:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F1EC0378C7B3A8912CA32E382D2C083E173E71C Validity Not Before: Sep 3 21:56:11 2025 GMT Not After : Sep 6 22:21:11 2025 GMT Subject: CN=C5F1115A794C28DE699DBBA3C6CBB8EFFA4D7A1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:30:42:85:d9:52:0c:6a:87:bd:03:f9:f9:4f: 51:33:2d:0c:20:66:36:e9:6f:a5:4d:c5:60:35:ba: ed:e1:dc:36:a7:1b:11:19:44:ad:1c:50:1e:09:fe: 85:6a:04:e7:82:f1:4b:c3:b6:8b:88:84:4c:1e:cc: 6a:44:59:a4:bd:6b:56:d3:d4:ba:46:c2:56:9a:c1: 12:3e:18:a8:24:66:02:c8:79:08:bb:72:89:64:ff: ba:b6:70:da:c0:62:8d:7c:86:7c:cd:8f:53:1e:af: 30:7f:ea:36:4f:ed:07:d7:f6:1a:01:52:b5:9e:5c: 16:89:81:55:91:38:4b:e4:e1:b5:fa:58:64:37:46: a9:cb:e4:c1:9d:54:62:28:3b:19:aa:68:26:9a:d9: 19:04:ed:3c:09:58:9c:8c:2a:51:84:8d:24:2f:19: d2:3d:a3:5e:03:48:49:bd:5b:21:08:68:98:91:c7: 77:53:79:01:56:2a:a5:72:61:6e:89:b9:f5:88:a4: 51:d9:a1:e5:d1:92:6b:62:cd:50:2c:37:88:16:b9: 22:de:80:b3:11:2c:68:a3:84:a3:2d:56:e2:b5:c8: a6:f3:f3:0c:fb:7b:56:6f:6f:7b:ac:bb:c8:09:96: 60:df:02:ce:79:b2:af:5b:96:dd:1f:6a:06:1d:78: ac:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F1:11:5A:79:4C:28:DE:69:9D:BB:A3:C6:CB:B8:EF:FA:4D:7A:1B X509v3 Authority Key Identifier: keyid:5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:a1:33:3d:7c:79:18:95:e5:0e:41:d3:71:f8:66:5f:47:99: d6:f9:25:73:a5:59:a4:d9:a4:fc:36:78:ad:1d:cb:91:6d:49: e9:15:2e:d7:62:c3:60:64:e2:f3:1c:93:f4:b2:40:23:83:0d: b1:2c:26:89:e3:f7:1d:0f:ac:6f:9c:9f:fd:71:52:f6:e3:77: 1e:97:d9:df:71:0c:32:15:ff:70:e2:68:01:05:b4:5f:b3:92: bf:4d:20:2e:db:fd:1a:97:eb:75:54:6e:26:d8:01:bb:b3:bf: a4:1d:10:ba:75:76:e0:43:33:4a:28:f9:7a:53:c6:85:1a:7d: 42:13:42:5f:01:93:d3:4a:35:ac:4c:26:1a:2c:bf:30:56:9b: 33:eb:5d:05:05:4a:cc:b5:4b:fb:dd:eb:ad:52:68:46:41:28: 41:a6:dc:9c:af:d0:63:d1:3a:76:ce:db:1d:7d:18:78:8e:53: 15:61:4f:fa:7c:86:26:f4:6e:80:7c:2d:bd:ad:5c:26:a5:f2: 9e:eb:77:6a:85:e0:8d:d5:cb:68:79:59:ac:d5:d0:d9:e7:74: 3d:2c:c0:fc:ef:4c:79:a3:34:2b:9b:6d:cf:70:20:90:73:29: 4c:ff:b5:8e:d9:6d:6a:a6:1a:04:cd:25:03:5e:99:3a:cf:d7: 91:f4:33:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNlz0kt+ir04zS40QJr6SSeg65O4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMwODNF MTczRTcxQzAeFw0yNTA5MDMyMTU2MTFaFw0yNTA5MDYyMjIxMTFaMDMxMTAvBgNV BAMTKEM1RjExMTVBNzk0QzI4REU2OTlEQkJBM0M2Q0JCOEVGRkE0RDdBMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCMEKF2VIMaoe9A/n5T1EzLQwg Zjbpb6VNxWA1uu3h3DanGxEZRK0cUB4J/oVqBOeC8UvDtouIhEwezGpEWaS9a1bT 1LpGwlaawRI+GKgkZgLIeQi7colk/7q2cNrAYo18hnzNj1MerzB/6jZP7QfX9hoB UrWeXBaJgVWROEvk4bX6WGQ3RqnL5MGdVGIoOxmqaCaa2RkE7TwJWJyMKlGEjSQv GdI9o14DSEm9WyEIaJiRx3dTeQFWKqVyYW6JufWIpFHZoeXRkmtizVAsN4gWuSLe gLMRLGijhKMtVuK1yKbz8wz7e1Zvb3usu8gJlmDfAs55sq9blt0fagYdeKzfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxfERWnlMKN5pnbujxsu47/pNehswHwYDVR0j BBgwFoAUXx7AN4x7OokSyjLjgtLAg+Fz5xwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDAyZGFhNS1mYjBjLTRhMjQtOTg4OS0zM2JkNTBkYjRmZTAvMC81RjFFQzAzNzhD N0IzQTg5MTJDQTMyRTM4MkQyQzA4M0UxNzNFNzFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMwODNFMTcz RTcxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQwMmRhYTUtZmIwYy00YTI0LTk4 ODktMzNiZDUwZGI0ZmUwLzAvNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMw ODNFMTczRTcxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHKhMz18eRiV5Q5B03H4Zl9Hmdb5JXOlWaTZ pPw2eK0dy5FtSekVLtdiw2Bk4vMck/SyQCODDbEsJonj9x0PrG+cn/1xUvbjdx6X 2d9xDDIV/3DiaAEFtF+zkr9NIC7b/RqX63VUbibYAbuzv6QdELp1duBDM0oo+XpT xoUafUITQl8Bk9NKNaxMJhosvzBWmzPrXQUFSsy1S/vd661SaEZBKEGm3Jyv0GPR OnbO2x19GHiOUxVhT/p8hib0boB8Lb2tXCal8p7rd2qF4I3Vy2h5WazV0NnndD0s wPzvTHmjNCubbc9wIJBzKUz/tY7ZbWqmGgTNJQNemTrP15H0M60= -----END CERTIFICATE-----Generated at Fri Sep 5 10:34:15 2025 by rpki-client