$ rpki-client -vvf repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft File: 5A33E6B82000487B204D2E284BCA10AF293CB41E.mft (raw, json) Hash identifier: 6z1ly3VWwN/8/BKl473dTpI8X9XbfWtsdTwgKTaD2Oc= Subject key identifier: E6:7B:FC:E6:AB:08:12:FB:CE:3D:9E:9D:6C:70:D8:54:FF:16:A7:34 Authority key identifier: 5A:33:E6:B8:20:00:48:7B:20:4D:2E:28:4B:CA:10:AF:29:3C:B4:1E Certificate issuer: /CN=5A33E6B82000487B204D2E284BCA10AF293CB41E Certificate serial: 1D0B6BA4D7563BC81B2A853AD4888645D16398A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A33E6B82000487B204D2E284BCA10AF293CB41E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft Manifest number: 0203 Signing time: Sun 07 Sep 2025 05:31:13 +0000 Manifest this update: Sun 07 Sep 2025 05:26:13 +0000 Manifest next update: Wed 10 Sep 2025 12:20:13 +0000 Files and hashes: 1: 3130332e3134322e3234312e302f32342d3234203d3e20313339333832.roa (hash: w3BBO2ojOIjj9AtoUjhdja4WPaFGOgpmIufFTP6+DqI=) 2: 3130332e3134322e3234302e302f32342d3234203d3e20313339333832.roa (hash: 1DOr2e/kf4/EN1V5niFiCSQ4eIv5NPl/rOgqgpH4ZuI=) 3: 5A33E6B82000487B204D2E284BCA10AF293CB41E.crl (hash: pC9b5y2nvhTgsHudF7N6KXf0P6iyEZctS8vi7O2AwYs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.crl rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A33E6B82000487B204D2E284BCA10AF293CB41E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:0b:6b:a4:d7:56:3b:c8:1b:2a:85:3a:d4:88:86:45:d1:63:98:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A33E6B82000487B204D2E284BCA10AF293CB41E Validity Not Before: Sep 7 05:26:13 2025 GMT Not After : Sep 10 12:20:13 2025 GMT Subject: CN=E67BFCE6AB0812FBCE3D9E9D6C70D854FF16A734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:03:ae:b9:b7:af:da:67:6a:83:17:99:9c:3c: 89:1a:74:b8:aa:01:93:56:71:53:9f:67:79:1d:1f: b7:b4:cc:df:5f:ee:23:fa:6f:1f:5e:31:56:28:73: 96:08:40:7d:27:50:91:69:9d:41:aa:6e:2d:4e:0b: e5:71:1b:f4:d7:0c:7e:c8:9b:24:3d:a2:aa:f4:a0: 72:ae:c8:1e:af:2c:6e:a0:be:11:02:5d:c1:86:cf: b0:30:fa:9a:2e:46:63:7b:45:e9:22:93:61:7c:8e: f2:a1:39:09:75:4c:a4:fd:ce:75:e7:5e:cc:ff:5d: bd:33:31:df:1c:99:64:23:4a:39:83:74:51:2a:f3: 2e:27:81:3d:8e:cd:b9:27:15:8b:d4:0b:f7:70:59: 3f:88:d2:aa:3c:bc:1f:a2:df:f1:aa:a0:c1:be:81: 6c:db:3f:bb:24:29:ce:17:c6:b6:59:43:0b:2a:42: 47:0d:13:1b:21:21:0a:eb:05:25:82:72:a5:27:4a: dd:66:5e:4f:86:2f:20:6f:11:15:af:c8:f3:11:f9: 6e:ad:48:e9:07:38:28:16:91:50:61:39:12:88:5d: 7d:5e:50:62:82:76:7f:7e:8d:60:18:21:22:a1:e8: 2f:6b:ab:8b:d4:64:8e:4a:b9:57:f8:c2:b1:9b:4e: 4d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:7B:FC:E6:AB:08:12:FB:CE:3D:9E:9D:6C:70:D8:54:FF:16:A7:34 X509v3 Authority Key Identifier: keyid:5A:33:E6:B8:20:00:48:7B:20:4D:2E:28:4B:CA:10:AF:29:3C:B4:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A33E6B82000487B204D2E284BCA10AF293CB41E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:1d:10:65:d7:71:63:c6:71:b1:87:9b:98:98:5b:8d:c6:fe: fd:e6:88:c4:5b:a2:73:31:1f:23:f6:13:f5:4e:4c:ca:ba:6c: 79:a0:77:8b:24:ce:aa:fa:7b:31:7e:a1:e5:61:ae:12:b5:8f: bd:9f:1a:bd:1d:00:81:ad:1c:b9:52:f2:42:08:44:64:69:e5: 36:dc:6a:9a:93:fb:78:9b:a8:2c:be:f3:8a:e4:17:34:38:97: cc:ca:dd:34:2f:ec:cf:29:6b:fe:3f:30:1a:d0:6c:d7:ae:4f: 15:0d:c0:6b:ce:b3:46:93:52:e1:fd:d3:de:29:f4:1b:a0:e4: 16:e5:7e:a4:12:f3:2c:f1:ec:7b:a3:04:12:80:6b:7f:63:43: a1:f6:d0:3a:29:14:1c:2b:10:10:dd:51:9d:fc:d6:a7:33:c4: 13:4c:ec:16:33:53:e6:a3:4b:92:b5:82:d1:16:e7:10:c0:34: d3:54:4f:6e:92:c9:36:e7:5e:5f:84:39:9a:f6:c6:c1:84:b1: 07:b5:19:1b:6e:fb:89:ab:8a:e6:9f:dc:2f:5c:f2:bc:45:73: 0a:04:3c:03:32:e7:37:48:65:e3:9d:60:45:22:6b:fe:bf:fa: c3:24:57:13:46:2a:a4:ee:d8:28:ff:ba:76:a6:7e:d9:b8:19: 23:9f:f0:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHQtrpNdWO8gbKoU61IiGRdFjmKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEzM0U2QjgyMDAwNDg3QjIwNEQyRTI4NEJDQTEwQUYy OTNDQjQxRTAeFw0yNTA5MDcwNTI2MTNaFw0yNTA5MTAxMjIwMTNaMDMxMTAvBgNV BAMTKEU2N0JGQ0U2QUIwODEyRkJDRTNEOUU5RDZDNzBEODU0RkYxNkE3MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzA665t6/aZ2qDF5mcPIkadLiq AZNWcVOfZ3kdH7e0zN9f7iP6bx9eMVYoc5YIQH0nUJFpnUGqbi1OC+VxG/TXDH7I myQ9oqr0oHKuyB6vLG6gvhECXcGGz7Aw+pouRmN7Rekik2F8jvKhOQl1TKT9znXn Xsz/Xb0zMd8cmWQjSjmDdFEq8y4ngT2OzbknFYvUC/dwWT+I0qo8vB+i3/GqoMG+ gWzbP7skKc4XxrZZQwsqQkcNExshIQrrBSWCcqUnSt1mXk+GLyBvERWvyPMR+W6t SOkHOCgWkVBhORKIXX1eUGKCdn9+jWAYISKh6C9rq4vUZI5KuVf4wrGbTk3vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5nv85qsIEvvOPZ6dbHDYVP8WpzQwHwYDVR0j BBgwFoAUWjPmuCAASHsgTS4oS8oQryk8tB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTQxYmE3ZS02YzQyLTRjMjItYjEzYy01NDhmYzcyNzJhM2QvMC81QTMzRTZCODIw MDA0ODdCMjA0RDJFMjg0QkNBMTBBRjI5M0NCNDFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUEzM0U2QjgyMDAwNDg3QjIwNEQyRTI4NEJDQTEwQUYyOTND QjQxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU0MWJhN2UtNmM0Mi00YzIyLWIx M2MtNTQ4ZmM3MjcyYTNkLzAvNUEzM0U2QjgyMDAwNDg3QjIwNEQyRTI4NEJDQTEw QUYyOTNDQjQxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADwdEGXXcWPGcbGHm5iYW43G/v3miMRbonMx HyP2E/VOTMq6bHmgd4skzqr6ezF+oeVhrhK1j72fGr0dAIGtHLlS8kIIRGRp5Tbc apqT+3ibqCy+84rkFzQ4l8zK3TQv7M8pa/4/MBrQbNeuTxUNwGvOs0aTUuH9094p 9Bug5BblfqQS8yzx7HujBBKAa39jQ6H20DopFBwrEBDdUZ381qczxBNM7BYzU+aj S5K1gtEW5xDANNNUT26SyTbnXl+EOZr2xsGEsQe1GRtu+4mriuaf3C9c8rxFcwoE PAMy5zdIZeOdYEUia/6/+sMkVxNGKqTu2Cj/unamftm4GSOf8Ik= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:52 2025 by rpki-client