$ rpki-client -vvf repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft File: 5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft (raw, json) Hash identifier: v0stIwHSKH0jPpJuz/cnDQkLhvK1hj1MmrOBC5aiLqQ= Subject key identifier: 4C:2F:F1:0A:CC:E4:52:F9:DC:6F:63:29:DA:A5:83:03:7C:B0:4F:63 Authority key identifier: 5C:72:06:DC:B1:B8:03:4A:48:5C:92:16:1B:2E:2C:76:62:78:0B:7F Certificate issuer: /CN=5C7206DCB1B8034A485C92161B2E2C7662780B7F Certificate serial: 4B068306784C2F1B415CA76CECDE068FBD4EE1D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft Manifest number: A6 Signing time: Sat 19 Jul 2025 19:01:29 +0000 Manifest this update: Sat 19 Jul 2025 18:56:29 +0000 Manifest next update: Wed 23 Jul 2025 00:37:29 +0000 Files and hashes: 1: 3135372e36362e36322e302f32332d3233203d3e20313431363039.roa (hash: xg9KiTNoeyCjJ74fW/vHqv0QTukciiVKjOEW4/d1ihQ=) 2: 5C7206DCB1B8034A485C92161B2E2C7662780B7F.crl (hash: CO5BGqzSlxF3bWMVQi91aT/qEYwL5lkIfy82mHX8tLs=) 3: 3135372e36362e36322e302f32342d3234203d3e20313431363039.roa (hash: kxx1JK0LdXNsTF8QfIwwHGfN62dNPCh0hebrTNAvnqQ=) 4: 3135372e36362e36332e302f32342d3234203d3e20313431363039.roa (hash: FstWtQkW9FvLUrMcKy9YxX9ooaDEiRc2J9g9PtXgNVs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.crl rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 00:37:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:06:83:06:78:4c:2f:1b:41:5c:a7:6c:ec:de:06:8f:bd:4e:e1:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C7206DCB1B8034A485C92161B2E2C7662780B7F Validity Not Before: Jul 19 18:56:29 2025 GMT Not After : Jul 23 00:37:29 2025 GMT Subject: CN=4C2FF10ACCE452F9DC6F6329DAA583037CB04F63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b5:01:56:51:69:7a:23:d5:d4:d7:9d:9c:99: 4e:67:40:5b:d6:e1:aa:75:f0:c1:ce:f2:58:e3:6d: ef:dd:99:bc:87:54:69:90:9a:13:d7:d4:2b:a8:61: fa:43:62:64:c7:99:02:d9:f0:0a:1d:0e:11:c8:87: d8:09:26:fa:d9:5b:37:f1:51:bb:c9:6d:c2:38:6b: 08:a6:27:ad:b8:0d:fb:fd:b1:c3:46:ee:d5:1a:f2: 31:ad:49:ae:66:92:e0:9e:9e:c6:c7:03:ff:3e:9b: ea:4b:e3:51:92:6b:cf:72:04:48:8d:ea:b2:b9:9d: bb:6c:c1:51:dc:7f:3d:13:62:01:4c:83:20:ed:b3: 28:15:84:b3:ec:ed:f0:73:46:29:6b:5a:1b:7b:0a: 14:d4:ac:37:37:08:f4:20:fd:90:02:2d:a4:27:f6: c9:4e:b2:78:e0:11:92:be:50:5a:a6:6f:01:ee:bd: 8d:fc:8d:b2:b2:47:e4:f9:75:38:06:bd:c1:0e:6a: 59:65:db:1c:f3:b1:fd:9d:9b:3e:30:8b:f2:d3:16: b3:cb:96:73:30:ab:e1:e2:96:1b:71:b8:de:60:f6: ac:93:d9:86:97:85:d8:51:07:61:f9:3a:24:35:42: fb:da:75:5c:48:2e:8e:74:98:1d:c8:6e:cd:49:77: b6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2F:F1:0A:CC:E4:52:F9:DC:6F:63:29:DA:A5:83:03:7C:B0:4F:63 X509v3 Authority Key Identifier: keyid:5C:72:06:DC:B1:B8:03:4A:48:5C:92:16:1B:2E:2C:76:62:78:0B:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:14:d4:fe:0e:20:e2:ef:01:1d:65:5c:fb:a9:35:69:89:57: 34:e6:28:19:84:d2:00:a4:38:9e:b9:19:72:4b:84:91:81:03: 91:f4:dc:a6:c2:d6:3f:71:ae:b9:83:76:cc:a2:52:99:36:70: 33:76:2f:30:be:96:d6:ff:ef:13:82:7b:98:9a:b7:93:3b:14: 31:52:7e:45:0c:36:36:00:c9:b8:b8:5c:4a:14:92:db:73:86: 72:4f:56:12:55:b1:dc:69:18:b6:7c:31:da:36:fe:e2:b1:49: 2e:73:8b:51:08:6a:c0:f3:b3:bc:bb:07:4b:b0:12:92:13:d5: ee:01:65:4c:04:52:79:9e:70:e2:78:62:78:bc:69:2c:13:5d: 7e:da:ff:b4:db:54:d7:55:9a:67:c3:29:1b:48:77:9a:e8:29: ad:a2:ec:a9:f1:85:5e:4e:07:72:7e:84:b1:da:3e:94:bf:b6: b2:62:63:f1:a9:52:b0:a4:fb:18:01:55:68:f5:6d:89:44:25: 67:dc:4e:01:25:5d:59:76:05:7f:b1:c9:a3:91:fa:0c:d4:f9: cc:6f:95:a3:81:dd:8a:10:57:25:d2:13:98:59:8f:e7:72:4c: fb:b8:9d:7f:28:1e:69:88:ae:47:85:6f:1f:ac:b7:d8:16:4e: 5e:95:5f:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSwaDBnhMLxtBXKds7N4Gj71O4dYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM3MjA2RENCMUI4MDM0QTQ4NUM5MjE2MUIyRTJDNzY2 Mjc4MEI3RjAeFw0yNTA3MTkxODU2MjlaFw0yNTA3MjMwMDM3MjlaMDMxMTAvBgNV BAMTKDRDMkZGMTBBQ0NFNDUyRjlEQzZGNjMyOURBQTU4MzAzN0NCMDRGNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQtQFWUWl6I9XU152cmU5nQFvW 4ap18MHO8ljjbe/dmbyHVGmQmhPX1CuoYfpDYmTHmQLZ8AodDhHIh9gJJvrZWzfx UbvJbcI4awimJ624Dfv9scNG7tUa8jGtSa5mkuCensbHA/8+m+pL41GSa89yBEiN 6rK5nbtswVHcfz0TYgFMgyDtsygVhLPs7fBzRilrWht7ChTUrDc3CPQg/ZACLaQn 9slOsnjgEZK+UFqmbwHuvY38jbKyR+T5dTgGvcEOalll2xzzsf2dmz4wi/LTFrPL lnMwq+HilhtxuN5g9qyT2YaXhdhRB2H5OiQ1QvvadVxILo50mB3Ibs1Jd7ahAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTC/xCszkUvncb2Mp2qWDA3ywT2MwHwYDVR0j BBgwFoAUXHIG3LG4A0pIXJIWGy4sdmJ4C38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZGRiYjc5Yy05ZWEyLTQ3ZjAtYjQ1Zi0xODE2NjUwYmEyM2YvMC81QzcyMDZEQ0Ix QjgwMzRBNDg1QzkyMTYxQjJFMkM3NjYyNzgwQjdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUM3MjA2RENCMUI4MDM0QTQ4NUM5MjE2MUIyRTJDNzY2Mjc4 MEI3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2RkYmI3OWMtOWVhMi00N2YwLWI0 NWYtMTgxNjY1MGJhMjNmLzAvNUM3MjA2RENCMUI4MDM0QTQ4NUM5MjE2MUIyRTJD NzY2Mjc4MEI3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABcU1P4OIOLvAR1lXPupNWmJVzTmKBmE0gCk OJ65GXJLhJGBA5H03KbC1j9xrrmDdsyiUpk2cDN2LzC+ltb/7xOCe5iat5M7FDFS fkUMNjYAybi4XEoUkttzhnJPVhJVsdxpGLZ8Mdo2/uKxSS5zi1EIasDzs7y7B0uw EpIT1e4BZUwEUnmecOJ4Yni8aSwTXX7a/7TbVNdVmmfDKRtId5roKa2i7KnxhV5O B3J+hLHaPpS/trJiY/GpUrCk+xgBVWj1bYlEJWfcTgElXVl2BX+xyaOR+gzU+cxv laOB3YoQVyXSE5hZj+dyTPu4nX8oHmmIrkeFbx+st9gWTl6VX4E= -----END CERTIFICATE-----Generated at Mon Jul 21 23:31:39 2025 by rpki-client