$ rpki-client -vvf repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft File: 5CC6B0489E576BC0D642B626195A0AA0560DC792.mft (raw, json) Hash identifier: BZMTUMkIMgDDIYACVZsdc2tphm+cniK+EsRc+pxvk00= Subject key identifier: 76:2B:C0:FF:B1:05:7D:EC:8A:8B:55:D9:74:6C:52:2D:59:25:61:AB Authority key identifier: 5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92 Certificate issuer: /CN=5CC6B0489E576BC0D642B626195A0AA0560DC792 Certificate serial: 4E2264D3E25AD8EA6F35F540246A7443BD347B59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft Manifest number: 01A8 Signing time: Thu 04 Sep 2025 08:10:36 +0000 Manifest this update: Thu 04 Sep 2025 08:05:36 +0000 Manifest next update: Sun 07 Sep 2025 15:06:36 +0000 Files and hashes: 1: 3130332e3132312e3133362e302f32332d3234203d3e20313335343738.roa (hash: XTHSvGcaRTEV+p1Y+pj9uwCkeA4dOjhqgF5dBEY4xig=) 2: 5CC6B0489E576BC0D642B626195A0AA0560DC792.crl (hash: tjepuf0P9mzU+xAc2UFePvm07NouSCSFHkuabpQmvKA=) 3: 3130332e3132312e3133382e302f32332d3234203d3e20313335343738.roa (hash: IYSPzv0ipkmDqn5ZyXeN0f328BkzkZ8Pmn6bIzAKtQc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.crl rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 15:06:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:22:64:d3:e2:5a:d8:ea:6f:35:f5:40:24:6a:74:43:bd:34:7b:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CC6B0489E576BC0D642B626195A0AA0560DC792 Validity Not Before: Sep 4 08:05:36 2025 GMT Not After : Sep 7 15:06:36 2025 GMT Subject: CN=762BC0FFB1057DEC8A8B55D9746C522D592561AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d2:30:6c:60:a3:1b:71:b0:de:f2:d5:ca:1d: 5d:d3:06:7b:e6:12:5b:6b:d7:89:50:91:bd:85:85: be:39:9f:49:1c:02:5a:10:b3:06:7a:1a:f8:09:34: f4:64:0d:3b:f1:d9:18:8d:70:36:76:08:70:ba:0a: 59:6f:a6:d7:14:ec:23:ab:cc:51:62:e7:e7:31:5a: 84:78:3c:3b:a4:ab:83:26:f1:62:6d:60:04:59:22: 5a:f3:8f:8e:77:dd:ce:1c:c8:fd:e6:aa:20:ae:3a: ca:50:a7:b4:11:fa:2a:59:fb:b9:73:70:88:78:1d: ff:50:e4:db:27:40:ce:cf:38:3d:22:da:78:83:a7: 5c:ca:f1:f1:65:e8:6a:38:95:23:18:f0:f9:73:b1: 36:a0:89:da:81:3b:b8:4c:fd:9b:29:22:0f:27:9d: 93:70:44:c4:31:da:29:95:e2:71:54:a4:ba:f6:25: 76:7f:06:64:85:59:fb:ca:80:1c:f0:df:17:20:62: 5b:37:48:0c:3f:7f:a7:f7:de:aa:52:0d:45:2c:ec: fa:69:1c:0c:b4:9a:8a:5b:07:50:d2:a2:f3:14:1e: 96:d6:85:13:38:60:d2:17:8e:34:6f:52:c5:7f:13: 13:c6:d2:77:d9:33:ae:d4:fb:f9:df:38:1a:b1:dc: c7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:2B:C0:FF:B1:05:7D:EC:8A:8B:55:D9:74:6C:52:2D:59:25:61:AB X509v3 Authority Key Identifier: keyid:5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:6a:2a:10:77:a9:74:31:c8:b1:fd:b2:af:a5:6d:bf:3a:6e: c9:83:ea:bd:6a:13:9d:f6:40:00:8d:9e:7e:31:1d:ed:b6:0b: d8:f9:8f:12:f9:69:fc:d6:0d:64:9d:2b:e2:75:87:7f:c7:f1: d3:24:38:59:19:f5:7c:21:09:a7:df:70:5c:13:4f:80:ab:74: cf:6f:b3:d3:1d:1a:0b:42:ce:b5:2d:9f:c7:4d:d0:2e:66:c7: 8c:42:78:1c:9e:67:80:a5:f6:49:51:5c:d4:ab:f2:c5:a6:89: 93:f4:9a:b8:75:5c:d3:d3:cb:da:83:9f:4c:ad:19:1c:eb:bb: f7:49:50:6b:07:85:f0:18:98:dc:da:67:fa:c2:67:c2:36:43: 0d:68:eb:3d:b7:fc:e9:d4:57:14:87:de:88:f3:c0:fd:22:e3: c2:b9:ab:6c:f9:f8:0d:2e:0e:d5:e6:3a:d4:46:d7:3e:61:62: a2:21:d5:b5:a2:eb:50:6c:3e:1a:f6:35:d6:3f:d4:5d:28:23: 82:cf:07:d6:ed:dc:98:d0:be:b6:81:3a:11:c9:b5:6e:2b:4f: 47:84:ce:6d:5a:cd:52:b8:6e:07:18:14:3c:66:65:8c:ec:e5: 46:46:fb:76:f5:4d:ce:17:3b:fa:83:bb:46:08:89:a9:f1:fb: 59:c6:d7:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTiJk0+Ja2OpvNfVAJGp0Q700e1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBBQTA1 NjBEQzc5MjAeFw0yNTA5MDQwODA1MzZaFw0yNTA5MDcxNTA2MzZaMDMxMTAvBgNV BAMTKDc2MkJDMEZGQjEwNTdERUM4QThCNTVEOTc0NkM1MjJENTkyNTYxQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv0jBsYKMbcbDe8tXKHV3TBnvm Eltr14lQkb2Fhb45n0kcAloQswZ6GvgJNPRkDTvx2RiNcDZ2CHC6CllvptcU7COr zFFi5+cxWoR4PDukq4Mm8WJtYARZIlrzj4533c4cyP3mqiCuOspQp7QR+ipZ+7lz cIh4Hf9Q5NsnQM7POD0i2niDp1zK8fFl6Go4lSMY8PlzsTagidqBO7hM/ZspIg8n nZNwRMQx2imV4nFUpLr2JXZ/BmSFWfvKgBzw3xcgYls3SAw/f6f33qpSDUUs7Ppp HAy0mopbB1DSovMUHpbWhRM4YNIXjjRvUsV/ExPG0nfZM67U+/nfOBqx3MffAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdivA/7EFfeyKi1XZdGxSLVklYaswHwYDVR0j BBgwFoAUXMawSJ5Xa8DWQrYmGVoKoFYNx5IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjRmYTdiOC01MzAyLTQ5MGItOTJlNC0yN2YyOGM2NjU3NWMvMC81Q0M2QjA0ODlF NTc2QkMwRDY0MkI2MjYxOTVBMEFBMDU2MERDNzkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBBQTA1NjBE Qzc5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY0ZmE3YjgtNTMwMi00OTBiLTky ZTQtMjdmMjhjNjY1NzVjLzAvNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBB QTA1NjBEQzc5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJqKhB3qXQxyLH9sq+lbb86bsmD6r1qE532 QACNnn4xHe22C9j5jxL5afzWDWSdK+J1h3/H8dMkOFkZ9XwhCaffcFwTT4CrdM9v s9MdGgtCzrUtn8dN0C5mx4xCeByeZ4Cl9klRXNSr8sWmiZP0mrh1XNPTy9qDn0yt GRzru/dJUGsHhfAYmNzaZ/rCZ8I2Qw1o6z23/OnUVxSH3ojzwP0i48K5q2z5+A0u DtXmOtRG1z5hYqIh1bWi61BsPhr2NdY/1F0oI4LPB9bt3JjQvraBOhHJtW4rT0eE zm1azVK4bgcYFDxmZYzs5UZG+3b1Tc4XO/qDu0YIianx+1nG1xU= -----END CERTIFICATE-----Generated at Fri Sep 5 10:16:11 2025 by rpki-client