$ rpki-client -vvf repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft File: 05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft (raw, json) Hash identifier: A+ZRSHstltjidCKMh7Jv0tAsSYeyMZT0K8r8jQR4Gbc= Subject key identifier: DF:F2:0D:F6:DA:8E:25:19:00:A6:7E:06:F1:36:65:02:98:F4:F9:B4 Authority key identifier: 05:67:1A:0A:CA:B2:6B:34:26:48:AF:FA:C0:C6:6E:CB:5A:49:3D:AB Certificate issuer: /CN=05671A0ACAB26B342648AFFAC0C66ECB5A493DAB Certificate serial: 451E7335B7204FDDA406249D730B26474C47BC64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft Manifest number: E1 Signing time: Thu 04 Sep 2025 14:41:39 +0000 Manifest this update: Thu 04 Sep 2025 14:36:39 +0000 Manifest next update: Sun 07 Sep 2025 20:51:39 +0000 Files and hashes: 1: 05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl (hash: YnJHXQG3HPGFIQ3/3kN2i8SaDT1IuEIbWALJTzwcRuw=) 2: 323030313a6466333a393034303a3a2f34382d3438203d3e20313532343139.roa (hash: RA3iDpSCkWtT/yyfxgJEQ4woQglWjmr40o6UbmeiCAk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 20:51:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:1e:73:35:b7:20:4f:dd:a4:06:24:9d:73:0b:26:47:4c:47:bc:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05671A0ACAB26B342648AFFAC0C66ECB5A493DAB Validity Not Before: Sep 4 14:36:39 2025 GMT Not After : Sep 7 20:51:39 2025 GMT Subject: CN=DFF20DF6DA8E251900A67E06F136650298F4F9B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:19:b7:51:f9:f1:78:d2:48:76:e0:25:a3:f3: 3d:24:2f:9b:14:9f:a4:51:9a:0c:3d:25:de:ed:5b: 38:81:40:28:58:46:0a:be:67:99:10:ec:23:9c:4a: 67:ee:87:ab:07:2c:7e:04:f3:98:42:ee:06:d9:b5: c5:19:32:cd:32:1b:1e:6d:0f:3e:e2:ff:69:fd:79: e0:09:4c:ec:9d:fa:c9:0c:44:60:e0:31:e6:66:e1: 1a:33:05:51:92:9e:b3:bf:e1:fc:ec:10:f5:3e:d4: 9d:57:d8:5b:61:45:75:ab:8f:a3:8b:32:7f:c4:dd: 0c:b6:7f:d2:03:d5:05:fd:51:22:ed:8f:d7:59:15: e4:1c:00:6d:32:82:5c:31:b4:8f:cf:2c:a7:ef:23: 14:d6:87:eb:70:72:13:23:c8:88:b5:4d:d0:30:59: 67:a8:1b:15:bc:e7:73:9c:64:fa:66:b2:b0:89:4b: 38:03:6f:99:55:56:34:6d:02:e5:af:1a:5e:71:68: 0b:e3:84:39:88:66:ae:c9:e8:80:b4:dc:aa:59:93: 88:e1:fa:c7:55:73:35:43:d4:10:2f:4b:2b:dc:2f: 7d:24:e5:b6:c5:3e:a4:15:01:9a:5b:f5:6b:ef:19: 5d:3a:ce:55:c1:60:39:69:a5:93:55:53:fe:d0:2a: 41:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F2:0D:F6:DA:8E:25:19:00:A6:7E:06:F1:36:65:02:98:F4:F9:B4 X509v3 Authority Key Identifier: keyid:05:67:1A:0A:CA:B2:6B:34:26:48:AF:FA:C0:C6:6E:CB:5A:49:3D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:df:63:b6:e7:cd:76:65:52:dc:d3:90:c8:50:2e:5c:c3:5f: 87:fd:32:56:ba:cb:c4:4b:ec:3b:f1:6b:9a:70:1c:4c:5d:96: 1f:5c:3c:a2:07:be:b2:8e:76:af:a3:75:a7:88:cf:9a:14:3a: 31:bc:e9:57:be:19:01:01:f2:21:bc:29:e2:cc:92:c1:6e:21: 4e:7c:45:aa:e2:b3:5d:71:30:77:40:b2:ba:76:f2:99:5d:93: 1d:fb:32:1d:8c:b4:c9:bc:75:e5:72:2d:45:c6:32:36:74:d0: 85:8c:b9:d6:1e:7e:b4:a5:e6:e2:3b:07:11:ec:0b:29:64:8b: d2:3c:06:09:94:84:44:c8:c4:b5:64:3a:b1:1d:13:d7:17:0d: c0:09:37:31:c4:e8:05:10:8e:98:b4:09:95:12:b6:7c:6e:38: 02:9a:dc:94:8b:85:32:2c:92:69:75:69:62:77:88:88:96:90: a2:da:36:78:7e:23:32:47:fd:87:e3:2b:5f:77:7a:e8:13:53: 2e:0e:76:e2:e9:cf:e8:b5:b9:41:1c:47:35:b4:b2:58:4a:fe: f4:ac:1f:ce:f1:a0:bd:ac:4f:dc:af:f3:05:67:44:8d:6c:32: 0d:2b:d9:c4:25:d8:08:fb:d5:e6:be:85:d1:08:aa:17:a4:70: ba:b8:b9:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURR5zNbcgT92kBiSdcwsmR0xHvGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZFQ0I1 QTQ5M0RBQjAeFw0yNTA5MDQxNDM2MzlaFw0yNTA5MDcyMDUxMzlaMDMxMTAvBgNV BAMTKERGRjIwREY2REE4RTI1MTkwMEE2N0UwNkYxMzY2NTAyOThGNEY5QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkGbdR+fF40kh24CWj8z0kL5sU n6RRmgw9Jd7tWziBQChYRgq+Z5kQ7COcSmfuh6sHLH4E85hC7gbZtcUZMs0yGx5t Dz7i/2n9eeAJTOyd+skMRGDgMeZm4RozBVGSnrO/4fzsEPU+1J1X2FthRXWrj6OL Mn/E3Qy2f9ID1QX9USLtj9dZFeQcAG0yglwxtI/PLKfvIxTWh+twchMjyIi1TdAw WWeoGxW853OcZPpmsrCJSzgDb5lVVjRtAuWvGl5xaAvjhDmIZq7J6IC03KpZk4jh +sdVczVD1BAvSyvcL30k5bbFPqQVAZpb9WvvGV06zlXBYDlppZNVU/7QKkGBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3/IN9tqOJRkApn4G8TZlApj0+bQwHwYDVR0j BBgwFoAUBWcaCsqyazQmSK/6wMZuy1pJPaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDgyM2JiMy01YTAxLTQ2NTgtYTc4My1mOGU4OWZhZGNmNDUvMS8wNTY3MUEwQUNB QjI2QjM0MjY0OEFGRkFDMEM2NkVDQjVBNDkzREFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZFQ0I1QTQ5 M0RBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4MjNiYjMtNWEwMS00NjU4LWE3 ODMtZjhlODlmYWRjZjQ1LzEvMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZF Q0I1QTQ5M0RBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB3fY7bnzXZlUtzTkMhQLlzDX4f9Mla6y8RL 7Dvxa5pwHExdlh9cPKIHvrKOdq+jdaeIz5oUOjG86Ve+GQEB8iG8KeLMksFuIU58 Raris11xMHdAsrp28pldkx37Mh2MtMm8deVyLUXGMjZ00IWMudYefrSl5uI7BxHs Cylki9I8BgmUhETIxLVkOrEdE9cXDcAJNzHE6AUQjpi0CZUStnxuOAKa3JSLhTIs kml1aWJ3iIiWkKLaNnh+IzJH/YfjK193eugTUy4OduLpz+i1uUEcRzW0slhK/vSs H87xoL2sT9yv8wVnRI1sMg0r2cQl2Aj71ea+hdEIqhekcLq4uaY= -----END CERTIFICATE-----Generated at Sat Sep 6 01:43:38 2025 by rpki-client