$ rpki-client -vvf repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft File: 5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft (raw, json) Hash identifier: VAPws3L91uHzljqphPgQe16cYmYAyVXZ01G530y+Pmg= Subject key identifier: 6A:68:8E:BB:6E:93:8E:89:FE:1F:42:92:E7:4B:1A:0B:F3:F6:2F:7F Authority key identifier: 5E:02:7C:2A:BE:4A:1F:46:34:0E:D8:3A:3A:D8:F0:6D:BC:CD:CD:21 Certificate issuer: /CN=5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21 Certificate serial: 6259880B8BB3D457AE13E1ECB19DF2B70D8C0926 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft Manifest number: 027D Signing time: Sun 07 Sep 2025 07:01:26 +0000 Manifest this update: Sun 07 Sep 2025 06:56:26 +0000 Manifest next update: Wed 10 Sep 2025 10:23:26 +0000 Files and hashes: 1: 5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.crl (hash: UMbayMaXlUPqsRj7x2n5dubZKAY8qniHwqUHl9okmyE=) 2: 3130332e3137392e3133362e302f32332d3234203d3e20313339393737.roa (hash: IQxk+RVCCE4pKnBFAa/I+n4PlSjcG9LFvLyIRAqgipY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.crl rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:59:88:0b:8b:b3:d4:57:ae:13:e1:ec:b1:9d:f2:b7:0d:8c:09:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21 Validity Not Before: Sep 7 06:56:26 2025 GMT Not After : Sep 10 10:23:26 2025 GMT Subject: CN=6A688EBB6E938E89FE1F4292E74B1A0BF3F62F7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6c:07:40:4c:d4:18:95:e2:ae:88:b8:39:7f: 47:40:45:2d:c4:54:56:3f:52:99:f6:f2:58:36:c1: cd:d2:42:5d:8b:e0:79:9b:19:b0:ac:88:9d:9f:fe: 9a:5a:54:6a:e0:83:bc:80:83:a2:8a:5e:96:e1:c9: d8:4b:4f:84:33:bd:81:45:30:7f:07:d7:fe:d5:11: 0a:7a:c0:36:38:55:13:45:b5:78:61:37:88:7d:77: 56:b6:83:9d:08:ec:c5:04:a5:c2:2f:4d:1b:d9:fe: cd:32:73:6a:2b:b3:a2:0a:60:22:70:a1:2c:01:f1: 7d:18:45:be:b0:ed:17:04:f5:23:12:5a:0e:7b:7e: d2:21:e6:ac:ca:4c:b7:d2:69:67:bc:05:20:a3:48: 19:c0:8a:a6:73:4e:4b:6b:b2:e3:34:ca:0b:92:8c: 00:94:79:d8:52:cc:eb:4c:9c:61:ed:7a:38:de:95: c3:b4:31:bc:ca:f2:18:0f:04:cd:9e:be:5b:8b:8b: 10:22:b1:87:a4:a5:b9:a6:2f:c6:b3:0f:59:80:4b: b1:92:f4:1c:94:f0:df:1e:3f:e0:9f:35:18:74:7e: a1:95:2b:f6:8d:6d:85:30:96:5f:00:2f:20:ee:4f: 12:c0:a5:14:0c:53:ef:3e:26:45:f8:e9:b9:55:96: 4f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:68:8E:BB:6E:93:8E:89:FE:1F:42:92:E7:4B:1A:0B:F3:F6:2F:7F X509v3 Authority Key Identifier: keyid:5E:02:7C:2A:BE:4A:1F:46:34:0E:D8:3A:3A:D8:F0:6D:BC:CD:CD:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:6f:01:43:21:46:ee:c3:20:6a:b1:fb:a8:07:52:60:56:ec: a6:7d:21:99:b5:10:3c:d1:92:d1:dd:4e:cf:41:52:a8:54:4a: 6c:d5:90:10:f0:97:31:3c:66:62:52:e3:e0:63:1f:9f:f9:af: 14:53:d2:79:53:cc:48:f7:1f:ad:dd:41:4b:ef:8a:0a:72:08: 94:06:c9:37:8e:42:ca:b4:37:7a:d1:9d:fc:f6:35:20:8e:d0: 91:48:c9:03:95:1b:76:c2:5d:2a:a1:07:55:69:d7:ff:c4:eb: 07:ba:52:31:76:6a:37:0d:e3:1f:3f:a1:88:9f:ad:c3:28:c3: 86:d5:a2:43:22:57:51:7d:0f:c7:36:73:a0:7a:08:d4:1b:7c: db:59:80:68:3d:13:4c:60:6c:c7:64:b1:b9:90:39:ea:bb:d0: 5e:de:25:2f:f0:12:ba:8e:d1:25:57:d3:8e:6f:80:9b:46:22: 37:e3:23:a1:3f:1f:c7:f8:28:50:0a:d0:ef:58:22:b4:9e:b1: ef:03:2c:18:e0:9c:64:52:68:1c:09:fa:08:65:f6:ea:5a:a4: bd:41:01:b5:f9:12:b1:6d:b4:50:a1:e6:0c:84:9a:49:95:df: 93:72:8d:22:91:6b:cf:76:90:82:a1:8e:52:8c:05:f8:31:ef: 5b:4a:75:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYlmIC4uz1FeuE+HssZ3ytw2MCSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUwMjdDMkFCRTRBMUY0NjM0MEVEODNBM0FEOEYwNkRC Q0NEQ0QyMTAeFw0yNTA5MDcwNjU2MjZaFw0yNTA5MTAxMDIzMjZaMDMxMTAvBgNV BAMTKDZBNjg4RUJCNkU5MzhFODlGRTFGNDI5MkU3NEIxQTBCRjNGNjJGN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9bAdATNQYleKuiLg5f0dARS3E VFY/Upn28lg2wc3SQl2L4HmbGbCsiJ2f/ppaVGrgg7yAg6KKXpbhydhLT4QzvYFF MH8H1/7VEQp6wDY4VRNFtXhhN4h9d1a2g50I7MUEpcIvTRvZ/s0yc2ors6IKYCJw oSwB8X0YRb6w7RcE9SMSWg57ftIh5qzKTLfSaWe8BSCjSBnAiqZzTktrsuM0yguS jACUedhSzOtMnGHtejjelcO0MbzK8hgPBM2evluLixAisYekpbmmL8azD1mAS7GS 9ByU8N8eP+CfNRh0fqGVK/aNbYUwll8ALyDuTxLApRQMU+8+JkX46blVlk/rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUamiOu26Tjon+H0KS50saC/P2L38wHwYDVR0j BBgwFoAUXgJ8Kr5KH0Y0Dtg6OtjwbbzNzSEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDgwYjMyMS1hYTMxLTQzMTctOWQzMS1jMmJkMTkwYzEzODQvMC81RTAyN0MyQUJF NEExRjQ2MzQwRUQ4M0EzQUQ4RjA2REJDQ0RDRDIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUUwMjdDMkFCRTRBMUY0NjM0MEVEODNBM0FEOEYwNkRCQ0NE Q0QyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ4MGIzMjEtYWEzMS00MzE3LTlk MzEtYzJiZDE5MGMxMzg0LzAvNUUwMjdDMkFCRTRBMUY0NjM0MEVEODNBM0FEOEYw NkRCQ0NEQ0QyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL9vAUMhRu7DIGqx+6gHUmBW7KZ9IZm1EDzR ktHdTs9BUqhUSmzVkBDwlzE8ZmJS4+BjH5/5rxRT0nlTzEj3H63dQUvvigpyCJQG yTeOQsq0N3rRnfz2NSCO0JFIyQOVG3bCXSqhB1Vp1//E6we6UjF2ajcN4x8/oYif rcMow4bVokMiV1F9D8c2c6B6CNQbfNtZgGg9E0xgbMdksbmQOeq70F7eJS/wErqO 0SVX045vgJtGIjfjI6E/H8f4KFAK0O9YIrSese8DLBjgnGRSaBwJ+ghl9upapL1B AbX5ErFttFCh5gyEmkmV35NyjSKRa892kIKhjlKMBfgx71tKdY4= -----END CERTIFICATE-----Generated at Sun Sep 7 14:05:28 2025 by rpki-client