$ rpki-client -vvf repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft File: 5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft (raw, json) Hash identifier: rortRqCKoiS/h6ttylaIyvk6qJESxrcCXShi2TYQJFM= Subject key identifier: 12:75:15:B6:4F:42:54:3B:74:60:5B:CF:E2:41:0D:B9:61:13:15:B2 Authority key identifier: 5C:72:06:DC:B1:B8:03:4A:48:5C:92:16:1B:2E:2C:76:62:78:0B:7F Certificate issuer: /CN=5C7206DCB1B8034A485C92161B2E2C7662780B7F Certificate serial: 72058C36F0B7D6E52C6C56615C0C5182EDB3312B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft Manifest number: BC Signing time: Sun 07 Sep 2025 00:01:31 +0000 Manifest this update: Sat 06 Sep 2025 23:56:31 +0000 Manifest next update: Wed 10 Sep 2025 08:22:31 +0000 Files and hashes: 1: 3135372e36362e36322e302f32342d3234203d3e20313431363039.roa (hash: kxx1JK0LdXNsTF8QfIwwHGfN62dNPCh0hebrTNAvnqQ=) 2: 3135372e36362e36332e302f32342d3234203d3e20313431363039.roa (hash: FstWtQkW9FvLUrMcKy9YxX9ooaDEiRc2J9g9PtXgNVs=) 3: 5C7206DCB1B8034A485C92161B2E2C7662780B7F.crl (hash: Zlt5nXL0NfYIsXjFZgd2aJTmVClkyuiWHGu0OCkHghU=) 4: 3135372e36362e36322e302f32332d3233203d3e20313431363039.roa (hash: xg9KiTNoeyCjJ74fW/vHqv0QTukciiVKjOEW4/d1ihQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.crl rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 08:22:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:05:8c:36:f0:b7:d6:e5:2c:6c:56:61:5c:0c:51:82:ed:b3:31:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C7206DCB1B8034A485C92161B2E2C7662780B7F Validity Not Before: Sep 6 23:56:31 2025 GMT Not After : Sep 10 08:22:31 2025 GMT Subject: CN=127515B64F42543B74605BCFE2410DB9611315B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:a5:c0:7f:8e:a6:d2:af:42:60:73:20:11:0d: 2e:9b:5a:f5:dc:4c:e2:86:f8:55:da:0a:37:91:96: 12:80:91:8f:6e:b6:26:e1:40:37:4d:37:7b:42:6a: f0:04:5c:be:9f:15:06:91:cd:03:16:92:57:e0:50: 6c:84:96:aa:88:3e:03:9e:b0:5f:5c:88:d0:6a:e9: 07:da:69:3f:c3:88:21:b1:cf:65:8f:67:89:42:98: df:ba:d4:ea:1f:9a:c7:f5:42:9b:c3:95:c8:27:ed: b3:75:17:e7:86:de:c4:11:b4:e7:41:92:b0:9d:9f: 60:49:7f:50:1f:53:33:85:67:ce:ca:3e:ed:05:ea: b7:00:a6:f9:07:c9:a5:16:32:34:fe:b8:9e:27:3a: c7:06:63:02:bd:aa:52:ba:82:3e:a0:67:86:c5:97: 05:6c:41:6c:45:15:c1:f5:1c:fb:a0:f1:4f:15:f4: ad:a1:74:a0:ba:79:3e:7e:a9:36:1e:5f:96:f8:48: 93:b9:0b:fe:39:a5:9f:0e:1d:67:74:10:24:88:86: ea:9e:e5:f7:d2:44:96:11:b9:40:02:1f:0c:9b:d9: 57:b8:96:5d:b9:dc:47:0f:b9:b0:18:a8:e2:b3:3b: 36:0a:46:be:ee:e7:6a:66:31:68:e8:51:dd:24:79: 45:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:75:15:B6:4F:42:54:3B:74:60:5B:CF:E2:41:0D:B9:61:13:15:B2 X509v3 Authority Key Identifier: keyid:5C:72:06:DC:B1:B8:03:4A:48:5C:92:16:1B:2E:2C:76:62:78:0B:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:30:c5:bb:51:72:11:48:56:d6:43:6d:ab:d8:2e:57:63:f0: a7:80:17:e6:05:db:d6:4a:8e:e1:61:c9:3a:0a:46:4d:b2:0f: e3:a3:45:52:40:65:55:d9:61:4a:fb:08:0c:35:7d:c5:f4:fd: f3:ba:59:06:f7:22:4c:ce:fd:05:14:00:ad:f2:d1:6a:13:24: d8:dc:0a:ab:d0:73:dc:da:1f:4f:fa:d5:5f:9b:80:e6:8d:41: 92:ff:6c:b7:d6:b7:ba:1c:74:d1:c2:74:1c:e7:8b:2e:20:1a: 8d:d6:fa:f2:0b:b0:b0:4e:b9:84:b6:eb:0a:79:97:cf:bd:5d: 11:8c:54:ca:92:14:c8:c5:06:91:40:24:bc:b6:47:0b:a9:e4: 0c:32:fb:17:a5:6b:2e:2f:5c:e9:1e:46:17:a6:b9:a6:a5:b1: aa:f5:88:db:8f:da:0d:9d:29:1f:64:ac:63:9d:98:d1:0b:6f: 39:bb:49:c8:61:49:56:6c:b0:54:80:22:3c:27:23:f1:7f:79: e9:f8:ac:e5:5d:df:43:bb:4e:3f:b4:e9:3c:6b:b3:bd:8b:7c: 32:42:6a:37:05:f3:e9:cf:5e:c6:b2:c3:98:32:a9:9f:57:21: 0f:d6:12:61:96:b3:85:ce:1c:75:0f:ec:30:7b:d4:5f:d7:57: 76:7b:d3:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcgWMNvC31uUsbFZhXAxRgu2zMSswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM3MjA2RENCMUI4MDM0QTQ4NUM5MjE2MUIyRTJDNzY2 Mjc4MEI3RjAeFw0yNTA5MDYyMzU2MzFaFw0yNTA5MTAwODIyMzFaMDMxMTAvBgNV BAMTKDEyNzUxNUI2NEY0MjU0M0I3NDYwNUJDRkUyNDEwREI5NjExMzE1QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDupcB/jqbSr0JgcyARDS6bWvXc TOKG+FXaCjeRlhKAkY9utibhQDdNN3tCavAEXL6fFQaRzQMWklfgUGyElqqIPgOe sF9ciNBq6QfaaT/DiCGxz2WPZ4lCmN+61Oofmsf1QpvDlcgn7bN1F+eG3sQRtOdB krCdn2BJf1AfUzOFZ87KPu0F6rcApvkHyaUWMjT+uJ4nOscGYwK9qlK6gj6gZ4bF lwVsQWxFFcH1HPug8U8V9K2hdKC6eT5+qTYeX5b4SJO5C/45pZ8OHWd0ECSIhuqe 5ffSRJYRuUACHwyb2Ve4ll253EcPubAYqOKzOzYKRr7u52pmMWjoUd0keUVTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEnUVtk9CVDt0YFvP4kENuWETFbIwHwYDVR0j BBgwFoAUXHIG3LG4A0pIXJIWGy4sdmJ4C38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZGRiYjc5Yy05ZWEyLTQ3ZjAtYjQ1Zi0xODE2NjUwYmEyM2YvMC81QzcyMDZEQ0Ix QjgwMzRBNDg1QzkyMTYxQjJFMkM3NjYyNzgwQjdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUM3MjA2RENCMUI4MDM0QTQ4NUM5MjE2MUIyRTJDNzY2Mjc4 MEI3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2RkYmI3OWMtOWVhMi00N2YwLWI0 NWYtMTgxNjY1MGJhMjNmLzAvNUM3MjA2RENCMUI4MDM0QTQ4NUM5MjE2MUIyRTJD NzY2Mjc4MEI3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAwxbtRchFIVtZDbavYLldj8KeAF+YF29ZK juFhyToKRk2yD+OjRVJAZVXZYUr7CAw1fcX0/fO6WQb3IkzO/QUUAK3y0WoTJNjc CqvQc9zaH0/61V+bgOaNQZL/bLfWt7ocdNHCdBzniy4gGo3W+vILsLBOuYS26wp5 l8+9XRGMVMqSFMjFBpFAJLy2Rwup5Awy+xelay4vXOkeRhemuaalsar1iNuP2g2d KR9krGOdmNELbzm7SchhSVZssFSAIjwnI/F/een4rOVd30O7Tj+06Txrs72LfDJC ajcF8+nPXsayw5gyqZ9XIQ/WEmGWs4XOHHUP7DB71F/XV3Z70/o= -----END CERTIFICATE-----Generated at Mon Sep 8 05:09:05 2025 by rpki-client