$ rpki-client -vvf repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft File: 5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft (raw, json) Hash identifier: 1mOr5FGr2zRcVYdkINiWEEztqSLxDnGACs/xODjTeLE= Subject key identifier: EB:90:AB:BD:EC:DC:B8:83:68:E2:B8:5E:13:09:1C:50:8B:3E:94:7E Authority key identifier: 5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F Certificate issuer: /CN=5EC2C02340FBFA79A3352FA18934C1E7B1D9216F Certificate serial: 42285231CC0CC6C9A4FD032F417CC87E97A18276 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft Manifest number: 0205 Signing time: Mon 08 Sep 2025 20:42:06 +0000 Manifest this update: Mon 08 Sep 2025 20:37:06 +0000 Manifest next update: Fri 12 Sep 2025 02:09:06 +0000 Files and hashes: 1: 3130332e3138392e3230302e302f32332d3233203d3e2039333431.roa (hash: gvBia+LW2/7IKDQVvnVoZBUClWDY/4rfXyS+EBiBMPI=) 2: 5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl (hash: rft3xnpKYe8xYtCarTSvHIKWEXipT2RTQkkPeHAoCyY=) 3: 3130332e3138392e3230302e302f32342d3234203d3e2039333431.roa (hash: IarCEKLylnrJ7AZkdxFWJNi+xmNEExkQb+M5jNKDEHk=) 4: 3130332e3138392e3230312e302f32342d3234203d3e2039333431.roa (hash: Dh9fcAyZ65O9TDEVPO/dqbyH2BI/vOdtlvtC7u5HK34=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 14:59:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:28:52:31:cc:0c:c6:c9:a4:fd:03:2f:41:7c:c8:7e:97:a1:82:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EC2C02340FBFA79A3352FA18934C1E7B1D9216F Validity Not Before: Sep 8 20:37:06 2025 GMT Not After : Sep 12 02:09:06 2025 GMT Subject: CN=EB90ABBDECDCB88368E2B85E13091C508B3E947E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7b:28:1c:1e:34:29:2e:b8:5e:be:95:bb:93: fc:e5:27:8b:3e:e6:56:bd:b9:c8:84:b3:ec:3a:af: 39:24:a2:a6:c6:f9:45:28:7e:66:02:89:af:1b:5a: a5:6a:cc:3e:35:49:98:55:e6:91:5b:bb:91:c3:5d: db:54:74:2f:5b:bf:81:6c:d9:15:9e:98:5a:4c:47: 5e:d5:29:fd:7d:9e:d3:fc:5e:49:56:c5:0d:de:a3: 7d:01:af:e9:91:86:17:95:37:40:06:79:c2:9e:ea: 81:da:be:04:34:03:b9:99:d4:93:73:6e:5b:ab:32: 1c:39:e4:f1:8b:15:79:17:96:91:ca:3a:37:ef:54: 2c:d7:98:cb:cc:84:b6:8b:e2:65:47:38:dc:ab:02: 9e:c7:9f:a0:0b:40:e5:b2:9a:c6:6a:df:61:9b:89: 9e:ef:95:02:c1:4d:ce:5a:cc:1f:0e:df:15:7c:b3: e9:85:37:71:38:08:5a:17:51:a3:f2:42:53:be:e5: 5c:58:8a:f9:81:2a:e0:37:44:62:fc:59:fc:3c:fe: 24:18:a5:e0:43:d5:ad:db:d7:2b:e6:53:be:0d:d4: 17:61:b3:04:8d:1e:cf:e2:3e:6f:f5:b4:61:9d:33: 9a:cd:d6:25:3c:4b:83:84:0b:f7:57:a4:2e:29:cc: d3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:90:AB:BD:EC:DC:B8:83:68:E2:B8:5E:13:09:1C:50:8B:3E:94:7E X509v3 Authority Key Identifier: keyid:5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:42:0d:87:41:57:ef:bd:97:b3:3b:5e:be:84:cb:7b:a1:16: 81:57:4b:aa:f3:24:5d:99:a3:b7:4a:9f:49:e6:de:18:40:fa: 3c:f9:ed:96:64:6c:a9:3c:a8:37:32:af:32:f8:f3:20:b7:43: 22:c2:ef:d2:f7:0f:5b:10:8e:f6:8a:0d:45:67:a5:39:ac:7a: dd:6d:a4:e4:8f:e5:46:a5:a9:a8:9b:db:9c:a7:e6:cf:1f:7d: 3d:ff:6d:53:0c:00:e7:7b:76:d3:e5:02:1a:51:68:ce:c4:25: fa:36:95:7b:9e:3e:ec:ae:c9:72:fa:f5:0a:81:1a:7b:95:27: 98:ec:de:52:a6:e2:51:4e:01:f6:8e:1d:f0:65:8d:b5:5f:69: e1:56:70:fc:ad:2f:7b:fa:e3:c1:e9:47:92:d9:bd:4e:2a:3e: 54:08:6e:ff:a3:f5:c5:5b:d7:af:94:df:e0:18:4e:1b:fb:1e: 45:d4:e4:21:f2:95:9a:6d:64:6a:e6:27:9f:1e:05:67:dd:77: 2c:0f:74:ba:bb:8b:12:d8:dc:23:ff:0b:42:8d:03:49:3e:0d: f2:8b:6f:be:f4:74:6a:54:db:30:34:9f:bd:c9:45:b2:be:04: 40:07:42:ae:dd:f0:71:31:45:a6:5f:70:3e:1b:4a:02:ad:03: b5:07:96:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQihSMcwMxsmk/QMvQXzIfpehgnYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMxRTdC MUQ5MjE2RjAeFw0yNTA5MDgyMDM3MDZaFw0yNTA5MTIwMjA5MDZaMDMxMTAvBgNV BAMTKEVCOTBBQkJERUNEQ0I4ODM2OEUyQjg1RTEzMDkxQzUwOEIzRTk0N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKeygcHjQpLrhevpW7k/zlJ4s+ 5la9uciEs+w6rzkkoqbG+UUofmYCia8bWqVqzD41SZhV5pFbu5HDXdtUdC9bv4Fs 2RWemFpMR17VKf19ntP8XklWxQ3eo30Br+mRhheVN0AGecKe6oHavgQ0A7mZ1JNz blurMhw55PGLFXkXlpHKOjfvVCzXmMvMhLaL4mVHONyrAp7Hn6ALQOWymsZq32Gb iZ7vlQLBTc5azB8O3xV8s+mFN3E4CFoXUaPyQlO+5VxYivmBKuA3RGL8Wfw8/iQY peBD1a3b1yvmU74N1BdhswSNHs/iPm/1tGGdM5rN1iU8S4OEC/dXpC4pzNM9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU65CrvezcuINo4rheEwkcUIs+lH4wHwYDVR0j BBgwFoAUXsLAI0D7+nmjNS+hiTTB57HZIW8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTJlNWYwMy1iZjk2LTRiNDAtYmQ0YS02ZTM4ODhjNDAyMDUvMC81RUMyQzAyMzQw RkJGQTc5QTMzNTJGQTE4OTM0QzFFN0IxRDkyMTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMxRTdCMUQ5 MjE2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EyZTVmMDMtYmY5Ni00YjQwLWJk NGEtNmUzODg4YzQwMjA1LzAvNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMx RTdCMUQ5MjE2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtCDYdBV++9l7M7Xr6Ey3uhFoFXS6rzJF2Z o7dKn0nm3hhA+jz57ZZkbKk8qDcyrzL48yC3QyLC79L3D1sQjvaKDUVnpTmset1t pOSP5Ualqaib25yn5s8ffT3/bVMMAOd7dtPlAhpRaM7EJfo2lXuePuyuyXL69QqB GnuVJ5js3lKm4lFOAfaOHfBljbVfaeFWcPytL3v648HpR5LZvU4qPlQIbv+j9cVb 16+U3+AYThv7HkXU5CHylZptZGrmJ58eBWfddywPdLq7ixLY3CP/C0KNA0k+DfKL b770dGpU2zA0n73JRbK+BEAHQq7d8HExRaZfcD4bSgKtA7UHlmY= -----END CERTIFICATE-----Generated at Tue Sep 9 01:16:48 2025 by rpki-client