$ rpki-client -vvf repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft File: 5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft (raw, json) Hash identifier: N8VVB/B9onkg9HeRTzoyvs4Wbe/ObmXw6yLgY7Tv1q4= Subject key identifier: AA:10:C1:F6:1A:C3:10:72:C6:69:79:3A:B2:19:0E:D4:C9:8E:07:F0 Authority key identifier: 5C:55:87:61:8B:4E:1C:1F:4C:EF:C6:99:B0:1F:FC:3C:EC:E3:B6:6C Certificate issuer: /CN=5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C Certificate serial: 2839FBB597E4E9499963F70DFAF22837F6974DEE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft Manifest number: 0218 Signing time: Thu 04 Sep 2025 08:21:34 +0000 Manifest this update: Thu 04 Sep 2025 08:16:34 +0000 Manifest next update: Sun 07 Sep 2025 09:33:34 +0000 Files and hashes: 1: 323030313a6466353a6338303a3a2f34382d3438203d3e20313431313038.roa (hash: X6Rsg1TfWPdkmJNWv+FJnlS7WWkveBK6RzkbYc8aDOc=) 2: 3130332e3135372e32352e302f32342d3234203d3e20313431313038.roa (hash: oDfouRUG9Q3gP76+cJluUeYjhwxX116YwTG/X1UiEKo=) 3: 5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl (hash: lHF+kA99zS5Vktu+DzNDopckUA32wjtQM1WSO2kkXiU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 09:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:39:fb:b5:97:e4:e9:49:99:63:f7:0d:fa:f2:28:37:f6:97:4d:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C Validity Not Before: Sep 4 08:16:34 2025 GMT Not After : Sep 7 09:33:34 2025 GMT Subject: CN=AA10C1F61AC31072C669793AB2190ED4C98E07F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:cd:58:89:b6:f9:05:f5:6e:66:92:8f:ad:65: 58:7b:0b:ca:6a:c6:7e:53:b0:bf:61:17:84:b2:31: 4d:31:ca:e3:67:c8:09:8c:4d:e2:4b:c2:56:a8:f6: e3:42:24:54:79:6a:47:50:47:2d:ae:99:65:48:c0: 8c:fe:db:0e:21:ce:5b:23:76:8e:d5:65:e5:d8:f5: b0:32:7d:47:17:8d:e8:a1:5d:9a:75:14:0c:6e:d7: 17:ab:30:28:b3:d2:46:d0:b6:62:51:9f:33:18:e5: 2a:fe:37:6b:13:b8:a7:5b:69:36:5b:08:38:ab:11: 98:b2:27:dc:97:6a:51:8c:08:4f:be:a5:59:a1:22: 2e:2c:70:90:1f:51:da:93:39:9f:ff:cb:28:86:f2: 56:ec:32:61:25:b8:01:f2:50:e2:c1:9a:18:d0:6d: a8:d2:b1:ba:85:de:f0:24:e9:c6:09:e8:d0:b2:d7: 22:ee:85:12:2a:22:2b:5a:2b:45:93:f4:6e:d1:21: c3:3f:78:52:6d:eb:60:61:a1:4f:be:a8:9b:0e:43: 58:2a:fc:15:a2:fb:72:d9:b9:61:e6:cf:5c:b9:53: 43:b1:c2:c7:a9:8e:84:55:1f:00:a0:1e:9d:6e:1b: 6a:80:9c:de:d4:a4:9a:5f:bb:f3:99:c1:de:2f:97: 87:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:10:C1:F6:1A:C3:10:72:C6:69:79:3A:B2:19:0E:D4:C9:8E:07:F0 X509v3 Authority Key Identifier: keyid:5C:55:87:61:8B:4E:1C:1F:4C:EF:C6:99:B0:1F:FC:3C:EC:E3:B6:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:ac:c8:b3:89:cc:9e:fa:11:ab:ee:9d:cb:7b:e5:73:14:32: 3b:83:fd:f9:06:a1:98:24:58:a9:ed:cf:40:68:e1:ed:83:8a: bb:8b:d3:0a:a5:ee:25:85:9c:7b:10:57:49:be:7f:4f:51:53: 19:8d:fe:fa:55:6b:6f:4c:ce:40:45:1e:24:99:8d:ef:57:54: 9f:7f:9a:fd:7d:01:ea:8b:1c:60:04:f4:3c:8e:8d:01:e9:24: 00:3d:03:36:d5:aa:64:54:c0:06:16:ad:da:0a:05:a6:95:46: b2:89:35:19:68:0e:82:2f:01:33:71:7a:1b:33:65:3a:de:d2: 61:32:7c:7a:06:d1:7c:1f:ca:17:a6:bd:53:be:be:22:82:f7: fe:dc:ae:d0:20:59:ea:43:5c:c5:e3:d3:cb:64:36:28:2a:ae: bc:eb:d7:ac:20:fa:65:f1:7d:a5:3a:c2:aa:e0:1d:7d:a2:23: 49:d1:24:80:3b:7c:24:eb:4b:1c:62:21:a2:2c:cd:5f:d2:08: 25:2f:2d:a9:8f:89:7c:a6:a2:9e:13:52:41:a2:d5:ee:11:40: a7:18:2f:58:98:cf:2c:1b:0e:0b:af:ea:33:42:55:c7:c5:44: c3:5c:ca:70:e3:80:dc:4f:bb:59:14:96:08:ff:ff:07:16:68: 71:43:eb:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKDn7tZfk6UmZY/cN+vIoN/aXTe4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZDM0NF Q0UzQjY2QzAeFw0yNTA5MDQwODE2MzRaFw0yNTA5MDcwOTMzMzRaMDMxMTAvBgNV BAMTKEFBMTBDMUY2MUFDMzEwNzJDNjY5NzkzQUIyMTkwRUQ0Qzk4RTA3RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZzViJtvkF9W5mko+tZVh7C8pq xn5TsL9hF4SyMU0xyuNnyAmMTeJLwlao9uNCJFR5akdQRy2umWVIwIz+2w4hzlsj do7VZeXY9bAyfUcXjeihXZp1FAxu1xerMCiz0kbQtmJRnzMY5Sr+N2sTuKdbaTZb CDirEZiyJ9yXalGMCE++pVmhIi4scJAfUdqTOZ//yyiG8lbsMmEluAHyUOLBmhjQ bajSsbqF3vAk6cYJ6NCy1yLuhRIqIitaK0WT9G7RIcM/eFJt62BhoU++qJsOQ1gq /BWi+3LZuWHmz1y5U0OxwsepjoRVHwCgHp1uG2qAnN7UpJpfu/OZwd4vl4f9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqhDB9hrDEHLGaXk6shkO1MmOB/AwHwYDVR0j BBgwFoAUXFWHYYtOHB9M78aZsB/8POzjtmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDFiNzlhYy0zMzUxLTQ3MDUtOGMzZC02MDJhZGNkNzliYjcvMC81QzU1ODc2MThC NEUxQzFGNENFRkM2OTlCMDFGRkMzQ0VDRTNCNjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZDM0NFQ0Uz QjY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODAxYjc5YWMtMzM1MS00NzA1LThj M2QtNjAyYWRjZDc5YmI3LzAvNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZD M0NFQ0UzQjY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABesyLOJzJ76Eavunct75XMUMjuD/fkGoZgk WKntz0Bo4e2DiruL0wql7iWFnHsQV0m+f09RUxmN/vpVa29MzkBFHiSZje9XVJ9/ mv19AeqLHGAE9DyOjQHpJAA9AzbVqmRUwAYWrdoKBaaVRrKJNRloDoIvATNxehsz ZTre0mEyfHoG0XwfyhemvVO+viKC9/7crtAgWepDXMXj08tkNigqrrzr16wg+mXx faU6wqrgHX2iI0nRJIA7fCTrSxxiIaIszV/SCCUvLamPiXymop4TUkGi1e4RQKcY L1iYzywbDguv6jNCVcfFRMNcynDjgNxPu1kUlgj//wcWaHFD6yc= -----END CERTIFICATE-----Generated at Fri Sep 5 10:16:55 2025 by rpki-client