$ rpki-client -vvf repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft File: 5C413D56294D9D20E64978B7296A9DA893C32CAB.mft (raw, json) Hash identifier: 4mUZ77G3o2AKUFOnWjXGZlCmWRuMirXk88546RpUtwE= Subject key identifier: 93:C7:00:44:F0:1B:0D:A8:0C:04:1A:67:09:69:12:3B:7A:C9:7B:C5 Authority key identifier: 5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB Certificate issuer: /CN=5C413D56294D9D20E64978B7296A9DA893C32CAB Certificate serial: 27BC5617B830880DBED10075F788341E35A44870 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft Manifest number: 0398 Signing time: Sat 06 Sep 2025 21:52:21 +0000 Manifest this update: Sat 06 Sep 2025 21:47:21 +0000 Manifest next update: Tue 09 Sep 2025 22:01:21 +0000 Files and hashes: 1: 3130332e3135302e36302e302f32342d3234203d3e20313430333839.roa (hash: 4ZQwGn11qHNiVrKpaqE6sqxjVoPVYCbt4H6xntr7VWc=) 2: 5C413D56294D9D20E64978B7296A9DA893C32CAB.crl (hash: JgUJFWO3c68Bt630n6Y7XqMNgLty5uxri0DDmrC9SN0=) 3: 3130332e3135302e36312e302f32342d3234203d3e20313430333839.roa (hash: PlY/JnUtAv2FxS5Soe3wZCn6MzuK/JWnFyPZQrX/fuQ=) 4: 323030313a6466333a356238303a3a2f34382d3438203d3e20313430333839.roa (hash: JKFEKy2zDD0/MbgGmVCYEU7vyiWQJvpcUY2RjG6e1rs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.crl rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 22:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:bc:56:17:b8:30:88:0d:be:d1:00:75:f7:88:34:1e:35:a4:48:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C413D56294D9D20E64978B7296A9DA893C32CAB Validity Not Before: Sep 6 21:47:21 2025 GMT Not After : Sep 9 22:01:21 2025 GMT Subject: CN=93C70044F01B0DA80C041A670969123B7AC97BC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d1:a3:1a:b5:a4:ee:52:c1:86:51:00:34:bc: ef:50:3d:96:7a:3e:6c:92:19:22:6d:b4:65:46:ee: a0:f6:0f:80:b0:cc:22:ff:64:6a:3c:fa:ea:79:39: a9:50:01:71:e8:6c:42:c8:dd:e4:18:4d:ea:6b:8d: ef:71:9f:6c:82:53:17:eb:a4:cc:e1:d1:1e:ad:2b: ba:d0:1f:9e:92:1f:c6:e3:2b:64:7f:f6:fa:31:5c: ca:96:f9:d1:41:a7:17:b0:7f:93:e6:f4:55:40:14: fd:b2:58:88:16:c6:44:1e:74:02:e3:ea:f5:6c:b5: f0:7a:61:d0:62:2a:a8:b8:60:c9:8f:1c:05:16:c1: a7:0b:00:43:15:73:72:c1:99:c1:cc:79:cd:5a:e1: 64:e5:7a:f1:b7:46:8f:1a:a4:5e:25:fb:4a:f7:81: d3:d3:4d:a8:ce:9a:a5:11:33:f5:35:4a:d1:6f:07: 70:8f:8d:a2:b6:07:4f:26:e9:f8:70:13:fc:6c:02: 9a:b3:eb:cb:d3:0a:0e:80:dc:7b:83:37:1e:e0:63: 53:41:60:38:49:b8:30:98:1c:67:51:d1:72:86:d7: fc:89:c7:05:b6:91:f5:d0:84:37:b7:cc:8f:a4:a0: 91:43:99:1b:32:13:56:93:fa:8b:b3:bf:82:67:ba: 75:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C7:00:44:F0:1B:0D:A8:0C:04:1A:67:09:69:12:3B:7A:C9:7B:C5 X509v3 Authority Key Identifier: keyid:5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:d9:fb:14:ae:b6:f6:d0:8f:55:a2:70:59:ba:0a:d5:a7:fe: 0e:a8:24:2d:f6:41:fa:ae:31:b5:f1:7f:99:48:43:03:a8:4c: f3:d4:48:98:c1:10:61:95:84:93:e3:55:bf:9c:a9:2a:be:8b: 07:75:d8:57:f7:b8:28:d7:f7:91:f9:4f:a1:c0:8a:90:d3:1c: 48:0c:df:77:b1:9b:d9:4b:3b:43:3b:60:bc:60:ca:62:cc:61: 1e:3f:8a:5e:55:35:e6:a2:74:1b:a8:45:93:7a:f9:67:8f:a9: f4:cb:ea:69:39:93:70:2f:61:98:ab:86:f9:58:8e:39:29:02: 0d:4d:04:1d:c6:10:8e:a8:02:db:36:83:a4:5a:28:aa:e6:7e: 4a:e2:74:33:3f:ed:aa:e5:6e:2b:4a:ac:83:ba:e4:42:78:ab: 35:79:77:f7:5f:10:f0:98:26:c0:26:39:77:7f:10:20:a0:83: 7a:31:c7:1d:ad:da:b7:f0:c0:4b:29:19:0c:3d:7b:0b:5f:7b: 30:41:a9:41:89:ed:63:40:7a:5d:85:36:54:e3:aa:d3:a7:6b: 9d:6f:18:05:3e:20:f4:f7:13:f0:6d:41:6f:29:78:dc:c1:74: d1:f8:a2:dd:39:72:58:ea:f4:d5:0f:52:c6:cc:94:72:dd:c9: 1b:8b:1e:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ7xWF7gwiA2+0QB194g0HjWkSHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM0MTNENTYyOTREOUQyMEU2NDk3OEI3Mjk2QTlEQTg5 M0MzMkNBQjAeFw0yNTA5MDYyMTQ3MjFaFw0yNTA5MDkyMjAxMjFaMDMxMTAvBgNV BAMTKDkzQzcwMDQ0RjAxQjBEQTgwQzA0MUE2NzA5NjkxMjNCN0FDOTdCQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd0aMataTuUsGGUQA0vO9QPZZ6 PmySGSJttGVG7qD2D4CwzCL/ZGo8+up5OalQAXHobELI3eQYTeprje9xn2yCUxfr pMzh0R6tK7rQH56SH8bjK2R/9voxXMqW+dFBpxewf5Pm9FVAFP2yWIgWxkQedALj 6vVstfB6YdBiKqi4YMmPHAUWwacLAEMVc3LBmcHMec1a4WTlevG3Ro8apF4l+0r3 gdPTTajOmqURM/U1StFvB3CPjaK2B08m6fhwE/xsApqz68vTCg6A3HuDNx7gY1NB YDhJuDCYHGdR0XKG1/yJxwW2kfXQhDe3zI+koJFDmRsyE1aT+ouzv4JnunXPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk8cARPAbDagMBBpnCWkSO3rJe8UwHwYDVR0j BBgwFoAUXEE9VilNnSDmSXi3KWqdqJPDLKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjNlYWJiNC00ZGIzLTQzNzMtYTM0OC1mYjFlZDcwNTU2NTEvMC81QzQxM0Q1NjI5 NEQ5RDIwRTY0OTc4QjcyOTZBOURBODkzQzMyQ0FCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM0MTNENTYyOTREOUQyMEU2NDk3OEI3Mjk2QTlEQTg5M0Mz MkNBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2IzZWFiYjQtNGRiMy00MzczLWEz NDgtZmIxZWQ3MDU1NjUxLzAvNUM0MTNENTYyOTREOUQyMEU2NDk3OEI3Mjk2QTlE QTg5M0MzMkNBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7Z+xSutvbQj1WicFm6CtWn/g6oJC32Qfqu MbXxf5lIQwOoTPPUSJjBEGGVhJPjVb+cqSq+iwd12Ff3uCjX95H5T6HAipDTHEgM 33exm9lLO0M7YLxgymLMYR4/il5VNeaidBuoRZN6+WePqfTL6mk5k3AvYZirhvlY jjkpAg1NBB3GEI6oAts2g6RaKKrmfkridDM/7arlbitKrIO65EJ4qzV5d/dfEPCY JsAmOXd/ECCgg3oxxx2t2rfwwEspGQw9ewtfezBBqUGJ7WNAel2FNlTjqtOna51v GAU+IPT3E/BtQW8peNzBdNH4ot05cljq9NUPUsbMlHLdyRuLHqA= -----END CERTIFICATE-----Generated at Sun Sep 7 14:02:06 2025 by rpki-client