$ rpki-client -vvf repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft File: 5AE19AE3FA86591042AE694640539C9669DEC801.mft (raw, json) Hash identifier: JZ4txyoEM4UfyoheI5AfWqlYkfr/naNrQ/vWU9NmzCM= Subject key identifier: DB:8F:E5:BB:01:33:0C:08:19:E9:DA:22:0C:07:0B:AB:48:DB:0B:0F Authority key identifier: 5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01 Certificate issuer: /CN=5AE19AE3FA86591042AE694640539C9669DEC801 Certificate serial: 2E9DE7C74EA1BFA898094E79EC8EB7EC6FA8E400 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft Manifest number: 01E0 Signing time: Wed 03 Sep 2025 14:01:43 +0000 Manifest this update: Wed 03 Sep 2025 13:56:43 +0000 Manifest next update: Sat 06 Sep 2025 14:48:43 +0000 Files and hashes: 1: 3130332e3232302e34352e302f32342d3234203d3e203438343635.roa (hash: m4IQs/Cui2ddwLQciv0u+g5oFPnYhzNtze79R+PFKLg=) 2: 3130332e3232302e34352e302f32342d3234203d3e20313530313939.roa (hash: VspFw++2jUPUNxpc1/y0Mp4Lv1a+LwrFNdh9KUkbu+E=) 3: 5AE19AE3FA86591042AE694640539C9669DEC801.crl (hash: d2GubWb2lg5HSypAFTOaozuTpmBVjOmLvu1xkpYXbP4=) 4: 3130332e3232302e34342e302f32342d3234203d3e20313530313939.roa (hash: JArcqatJBrG0UJiwDi1c9yEOpb8Bk4EGWPIVKLKaIwQ=) 5: 3130332e3232302e34342e302f32342d3234203d3e203438343635.roa (hash: Vw4jOV+MZ+fjdwltnh69uK5QodMXxVJ0LlNiepCYdZ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:9d:e7:c7:4e:a1:bf:a8:98:09:4e:79:ec:8e:b7:ec:6f:a8:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AE19AE3FA86591042AE694640539C9669DEC801 Validity Not Before: Sep 3 13:56:43 2025 GMT Not After : Sep 6 14:48:43 2025 GMT Subject: CN=DB8FE5BB01330C0819E9DA220C070BAB48DB0B0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3c:e1:ed:54:79:08:7e:a0:bb:8c:01:20:62: b4:53:b8:84:11:29:aa:78:8e:b7:bf:ef:bc:09:61: 8b:7e:28:d8:dd:22:cf:41:ce:94:4a:e0:a9:2a:95: 8f:9a:fd:bb:bc:f5:17:e7:f2:19:c4:92:c3:a4:bf: ab:4d:fb:17:0e:fc:73:e2:2e:f6:89:44:80:5d:c6: 89:ae:03:02:0c:ca:fe:73:58:21:67:38:73:a3:66: f3:c7:49:c6:1e:9a:77:8c:dc:bd:52:39:19:d1:5b: f6:30:b1:71:08:84:b9:47:20:e6:93:37:01:d0:54: 54:52:c5:17:7d:ba:3d:66:ee:1d:2f:90:63:f3:2b: 73:a3:59:fd:73:37:ff:a6:cc:b1:0b:c8:9b:67:12: 18:bd:29:d2:cd:a2:ba:0e:7c:c4:48:d5:6b:16:e9: c5:11:88:42:0d:7f:6d:fd:ce:d0:1c:94:16:8e:74: 2a:47:bd:67:89:16:58:84:bd:16:38:2a:38:79:9e: 8d:b2:b6:46:00:aa:ce:08:53:f7:a5:6b:e9:e7:9d: 05:f7:f0:7d:f3:e5:23:54:7e:26:b4:25:f2:05:e1: ba:b2:5a:6a:1f:50:d7:cb:d5:65:c2:cd:68:20:0e: 61:94:10:ac:6c:60:7e:71:fb:ca:d3:f4:d7:44:47: 30:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:8F:E5:BB:01:33:0C:08:19:E9:DA:22:0C:07:0B:AB:48:DB:0B:0F X509v3 Authority Key Identifier: keyid:5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:d1:a7:d5:45:f9:38:bc:94:2b:78:46:cc:ba:53:8d:1d:37: 2b:39:79:c5:94:73:c6:80:04:4e:9a:dd:67:5f:5d:d8:2b:94: 8e:13:35:25:a0:bb:5f:f4:a8:6f:b8:21:a7:4d:5d:e0:f3:63: be:05:95:d3:33:81:98:0f:a0:fd:59:a8:58:54:1b:04:84:94: aa:de:83:3d:0f:a2:a8:de:e2:da:66:48:84:30:b6:bf:2c:14: 0e:20:b2:d1:f1:c8:c0:7f:89:25:41:dd:ed:9e:44:b9:d0:da: 2a:19:be:a6:6e:7f:52:79:45:a8:7c:68:09:73:be:1f:ff:cb: 80:d6:64:3f:17:28:49:98:61:54:46:fa:fc:3d:f8:10:74:a7: 9e:71:cc:86:9e:ea:54:70:89:18:9e:38:ec:86:0c:a7:56:11: dc:f3:9f:b2:ca:22:f8:71:b7:38:f6:f9:8f:6f:4a:19:14:99: fe:a3:09:1a:96:f7:e6:80:fb:bf:75:55:99:1a:a4:f0:05:e5: 13:1e:19:ea:f0:83:9f:68:06:14:27:2f:20:7c:26:90:ee:e7: f0:d2:5a:ec:f3:7c:56:51:eb:b0:e5:06:3e:4c:5c:4d:3c:c0: b1:c7:e4:6c:5d:31:2c:b0:32:bf:84:f4:5d:f7:71:ba:aa:87: 79:4e:07:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULp3nx06hv6iYCU557I637G+o5AAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFFMTlBRTNGQTg2NTkxMDQyQUU2OTQ2NDA1MzlDOTY2 OURFQzgwMTAeFw0yNTA5MDMxMzU2NDNaFw0yNTA5MDYxNDQ4NDNaMDMxMTAvBgNV BAMTKERCOEZFNUJCMDEzMzBDMDgxOUU5REEyMjBDMDcwQkFCNDhEQjBCMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVPOHtVHkIfqC7jAEgYrRTuIQR Kap4jre/77wJYYt+KNjdIs9BzpRK4KkqlY+a/bu89Rfn8hnEksOkv6tN+xcO/HPi LvaJRIBdxomuAwIMyv5zWCFnOHOjZvPHScYemneM3L1SORnRW/YwsXEIhLlHIOaT NwHQVFRSxRd9uj1m7h0vkGPzK3OjWf1zN/+mzLELyJtnEhi9KdLNoroOfMRI1WsW 6cURiEINf239ztAclBaOdCpHvWeJFliEvRY4Kjh5no2ytkYAqs4IU/ela+nnnQX3 8H3z5SNUfia0JfIF4bqyWmofUNfL1WXCzWggDmGUEKxsYH5x+8rT9NdERzATAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU24/luwEzDAgZ6doiDAcLq0jbCw8wHwYDVR0j BBgwFoAUWuGa4/qGWRBCrmlGQFOclmneyAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTcyOTI5MS1hMWE3LTRiMTktOTNmNi0xZDg0NTc0YTY3YWUvMC81QUUxOUFFM0ZB ODY1OTEwNDJBRTY5NDY0MDUzOUM5NjY5REVDODAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFFMTlBRTNGQTg2NTkxMDQyQUU2OTQ2NDA1MzlDOTY2OURF QzgwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU3MjkyOTEtYTFhNy00YjE5LTkz ZjYtMWQ4NDU3NGE2N2FlLzAvNUFFMTlBRTNGQTg2NTkxMDQyQUU2OTQ2NDA1MzlD OTY2OURFQzgwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE3Rp9VF+Ti8lCt4Rsy6U40dNys5ecWUc8aA BE6a3WdfXdgrlI4TNSWgu1/0qG+4IadNXeDzY74FldMzgZgPoP1ZqFhUGwSElKre gz0Poqje4tpmSIQwtr8sFA4gstHxyMB/iSVB3e2eRLnQ2ioZvqZuf1J5Rah8aAlz vh//y4DWZD8XKEmYYVRG+vw9+BB0p55xzIae6lRwiRieOOyGDKdWEdzzn7LKIvhx tzj2+Y9vShkUmf6jCRqW9+aA+791VZkapPAF5RMeGerwg59oBhQnLyB8JpDu5/DS WuzzfFZR67DlBj5MXE08wLHH5GxdMSywMr+E9F33cbqqh3lOB8E= -----END CERTIFICATE-----Generated at Fri Sep 5 10:34:34 2025 by rpki-client