$ rpki-client -vvf repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft File: C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft (raw, json) Hash identifier: I69MZolBigxHg/w9Pz6p/JzbKDDuhXvjjrCboGlHl4k= Subject key identifier: 07:EF:10:74:88:59:CC:35:23:81:78:B4:7A:2D:8D:77:45:7F:88:6C Authority key identifier: C5:F2:AF:A0:AB:7A:B2:DD:BD:8F:87:5B:21:B8:EC:0C:3F:F8:31:F6 Certificate issuer: /CN=C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6 Certificate serial: 165EE0C390317998E5B7274D61495331F24F8D88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft Manifest number: 0447 Signing time: Sat 06 Sep 2025 10:21:18 +0000 Manifest this update: Sat 06 Sep 2025 10:16:18 +0000 Manifest next update: Tue 09 Sep 2025 20:02:18 +0000 Files and hashes: 1: C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.crl (hash: Dig0zUIIy4diGLkjSlG1y9kTX095hlRPMw2eh2qElFo=) 2: 3130332e3234362e3138342e302f32342d3234203d3e203538333833.roa (hash: oUvHJzeVfm7zuZGvqOXSprt6gWL11zoVCa7SzfOTCA0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.crl rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 20:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:5e:e0:c3:90:31:79:98:e5:b7:27:4d:61:49:53:31:f2:4f:8d:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6 Validity Not Before: Sep 6 10:16:18 2025 GMT Not After : Sep 9 20:02:18 2025 GMT Subject: CN=07EF10748859CC35238178B47A2D8D77457F886C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:09:74:2e:86:3d:2e:0c:52:ad:99:41:17:e6: c1:78:3f:f5:cf:d9:53:66:57:d3:66:8b:55:a2:2c: 80:bf:69:7b:be:3d:09:85:15:47:4e:15:ee:61:1f: 41:a9:d1:0c:82:dc:01:a2:cc:72:d6:10:28:b3:b6: 6d:a4:ba:a5:f3:f6:b9:da:c6:c4:dd:6c:d1:1c:f1: 41:a3:5e:09:db:11:1d:b8:20:4f:36:82:85:f3:56: 43:18:c0:b7:d1:91:3b:e5:ff:70:a2:bc:78:f1:23: ed:94:3d:21:1c:11:75:bf:65:92:db:71:ac:8d:47: dd:ab:1a:c8:21:2f:23:17:1b:24:0e:2a:cd:c4:c9: 0f:91:b0:85:1d:cb:ae:63:fb:18:5f:92:28:3c:a1: e0:d1:09:40:6d:6d:50:29:fb:f2:9f:91:d9:c6:66: 27:c3:5c:85:b9:cc:7a:09:5d:04:75:41:06:5a:eb: 2a:26:f5:ac:49:d6:e0:05:01:48:f0:ed:e7:15:8f: a6:64:ae:ec:ce:30:56:f1:16:f9:13:c1:9d:42:61: f8:e6:da:87:68:cb:75:2f:a8:2b:c3:b2:f6:2f:1f: f7:20:b5:57:38:9f:7f:44:e6:ab:c4:67:09:e6:32: 35:73:ff:58:3e:d9:4a:3d:83:ff:35:35:83:1f:9b: fb:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:EF:10:74:88:59:CC:35:23:81:78:B4:7A:2D:8D:77:45:7F:88:6C X509v3 Authority Key Identifier: keyid:C5:F2:AF:A0:AB:7A:B2:DD:BD:8F:87:5B:21:B8:EC:0C:3F:F8:31:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:f5:a4:30:87:c9:80:1c:f5:14:76:26:14:ec:04:3f:2e:6d: 4a:af:26:5e:0b:b7:8f:0b:85:20:a7:ac:c6:bd:b4:91:e3:35: 3c:a4:19:8a:b0:b4:43:e2:85:f4:74:ce:07:85:19:e8:fd:94: f3:af:72:90:42:84:78:91:20:db:f5:29:72:2e:17:5e:34:34: 9f:43:43:a4:df:7c:ff:e0:3d:85:3c:ce:28:2d:a5:56:a1:82: 5f:76:5d:c9:8a:d4:91:3a:07:a8:af:9c:1d:c3:4a:a4:52:d9: e1:9f:83:8b:1b:4a:16:36:20:d9:d2:56:04:f1:18:bc:03:32: 8f:72:c1:f6:20:f7:e9:c0:de:c6:3b:61:96:31:1f:0a:f4:37: 11:d2:78:06:32:f9:45:11:74:19:0d:74:d6:d7:6b:ca:83:ee: bd:a9:ae:a7:94:96:20:49:fc:75:aa:82:95:38:99:0e:25:01: 15:56:ce:fc:b8:64:bc:a1:28:90:04:57:b2:d0:a4:08:43:bb: 7f:3c:04:d6:de:f1:f4:f6:67:24:95:b1:75:6b:fc:58:65:4a: e8:92:96:81:ad:1a:ab:ca:c8:d6:b0:84:3a:f5:45:64:a4:40: 26:a1:19:49:5d:1c:db:0a:94:3b:96:29:82:26:ef:55:c2:50: 95:00:83:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFl7gw5AxeZjltydNYUlTMfJPjYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVGMkFGQTBBQjdBQjJEREJEOEY4NzVCMjFCOEVDMEMz RkY4MzFGNjAeFw0yNTA5MDYxMDE2MThaFw0yNTA5MDkyMDAyMThaMDMxMTAvBgNV BAMTKDA3RUYxMDc0ODg1OUNDMzUyMzgxNzhCNDdBMkQ4RDc3NDU3Rjg4NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRCXQuhj0uDFKtmUEX5sF4P/XP 2VNmV9Nmi1WiLIC/aXu+PQmFFUdOFe5hH0Gp0QyC3AGizHLWECiztm2kuqXz9rna xsTdbNEc8UGjXgnbER24IE82goXzVkMYwLfRkTvl/3CivHjxI+2UPSEcEXW/ZZLb cayNR92rGsghLyMXGyQOKs3EyQ+RsIUdy65j+xhfkig8oeDRCUBtbVAp+/KfkdnG ZifDXIW5zHoJXQR1QQZa6yom9axJ1uAFAUjw7ecVj6ZkruzOMFbxFvkTwZ1CYfjm 2odoy3UvqCvDsvYvH/cgtVc4n39E5qvEZwnmMjVz/1g+2Uo9g/81NYMfm/ujAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB+8QdIhZzDUjgXi0ei2Nd0V/iGwwHwYDVR0j BBgwFoAUxfKvoKt6st29j4dbIbjsDD/4MfYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmE1YWI1NC03ODQ0LTQ2MDItOGFlYS0zYzJlNjQxZjZhM2MvMC9DNUYyQUZBMEFC N0FCMkREQkQ4Rjg3NUIyMUI4RUMwQzNGRjgzMUY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVGMkFGQTBBQjdBQjJEREJEOEY4NzVCMjFCOEVDMEMzRkY4 MzFGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZhNWFiNTQtNzg0NC00NjAyLThh ZWEtM2MyZTY0MWY2YTNjLzAvQzVGMkFGQTBBQjdBQjJEREJEOEY4NzVCMjFCOEVD MEMzRkY4MzFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEn1pDCHyYAc9RR2JhTsBD8ubUqvJl4Lt48L hSCnrMa9tJHjNTykGYqwtEPihfR0zgeFGej9lPOvcpBChHiRINv1KXIuF140NJ9D Q6TffP/gPYU8zigtpVahgl92XcmK1JE6B6ivnB3DSqRS2eGfg4sbShY2INnSVgTx GLwDMo9ywfYg9+nA3sY7YZYxHwr0NxHSeAYy+UURdBkNdNbXa8qD7r2prqeUliBJ /HWqgpU4mQ4lARVWzvy4ZLyhKJAEV7LQpAhDu388BNbe8fT2ZySVsXVr/FhlSuiS loGtGqvKyNawhDr1RWSkQCahGUldHNsKlDuWKYIm71XCUJUAgxo= -----END CERTIFICATE-----Generated at Sun Sep 7 14:02:09 2025 by rpki-client