$ rpki-client -vvf repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft File: 5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft (raw, json) Hash identifier: ms91HVMUvlXXAw1F9nbFxyo4MqMNOlZOD7Blp/F5YqE= Subject key identifier: D1:B5:3A:0F:B1:DF:25:1B:27:33:4C:26:33:6B:65:10:1A:98:6B:D8 Authority key identifier: 5A:6B:14:28:A8:72:38:DC:9D:A9:B9:28:90:E1:C9:BF:60:CC:09:4E Certificate issuer: /CN=5A6B1428A87238DC9DA9B92890E1C9BF60CC094E Certificate serial: 11D1B61513BD59C3784B20B2690F92A70D29B0CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft Manifest number: 022E Signing time: Mon 15 Sep 2025 12:31:45 +0000 Manifest this update: Mon 15 Sep 2025 12:26:45 +0000 Manifest next update: Thu 18 Sep 2025 15:57:45 +0000 Files and hashes: 1: 3130332e3138362e31302e302f32332d3234203d3e2034383030.roa (hash: IbiWK5270mwHrnB6XT0JomBYqQc1q1mQYDwwzYu+Fp8=) 2: 5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.crl (hash: RCup9eJsgosKOcqo3WdbvWBdMjTJIqeHtxiRKyT0S48=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.crl rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Sep 2025 15:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:d1:b6:15:13:bd:59:c3:78:4b:20:b2:69:0f:92:a7:0d:29:b0:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A6B1428A87238DC9DA9B92890E1C9BF60CC094E Validity Not Before: Sep 15 12:26:45 2025 GMT Not After : Sep 18 15:57:45 2025 GMT Subject: CN=D1B53A0FB1DF251B27334C26336B65101A986BD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5f:46:a8:b2:c6:c7:45:63:ef:c7:75:aa:93: 9d:8a:8b:e2:23:27:be:ef:4f:0b:f0:e6:2d:44:e3: b6:a5:3f:80:cf:77:05:52:2e:4f:af:f9:be:37:37: b7:2a:73:3f:07:91:74:b7:05:54:b7:ad:08:22:83: 80:1b:71:ef:9f:0c:33:96:18:58:f9:1c:bb:90:9b: 9c:0e:bb:3a:b9:ab:96:73:1a:f0:dd:9f:e1:cb:de: 5e:d7:fd:1b:c5:e6:51:f9:6d:2a:4c:ed:87:eb:a6: 68:61:a4:ed:4b:4a:fe:c2:53:64:b2:97:ac:94:21: 00:4d:bf:62:36:36:bc:2d:0b:cd:89:5e:f4:da:a4: c0:58:5e:a8:be:a3:bb:50:fa:6b:f8:6c:ac:34:58: 84:cc:b8:2e:29:d8:ad:cb:a1:54:33:0f:94:69:c0: 60:2c:6b:47:bf:e8:fd:ae:8f:92:34:af:b3:ad:7e: aa:3f:bf:78:a4:52:9f:a2:02:0f:2b:87:fd:21:02: 9c:5a:ed:13:a2:2d:95:c7:91:97:1b:05:06:af:74: ba:df:17:e6:3e:44:d9:1b:11:90:12:64:d8:c8:f7: 27:79:08:e2:cc:30:79:65:21:79:5a:7a:4b:e8:38: 9e:38:43:2f:2d:8f:4f:7d:48:38:bc:2d:b2:b8:3a: 25:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B5:3A:0F:B1:DF:25:1B:27:33:4C:26:33:6B:65:10:1A:98:6B:D8 X509v3 Authority Key Identifier: keyid:5A:6B:14:28:A8:72:38:DC:9D:A9:B9:28:90:E1:C9:BF:60:CC:09:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:d8:12:74:62:8e:68:38:c8:1b:8f:0a:ac:b6:18:0f:56:84: 40:16:16:96:f7:8c:4d:6d:ba:e0:83:2f:e0:c7:5c:44:53:4b: 57:7b:e6:ba:6e:cb:35:c9:b3:d2:9d:5b:4e:38:38:4e:4f:ed: 7b:46:b2:cb:19:93:62:95:77:0f:da:c2:b8:49:8d:cd:4d:cc: 4b:8f:e7:c9:e1:6c:95:55:32:db:1f:a5:c0:f0:72:88:df:5c: 32:de:ff:4c:b2:29:69:f4:e4:71:be:12:dc:68:81:d1:97:f7: 66:e1:aa:4f:8b:47:23:cc:b7:0d:a2:56:58:7b:dd:8e:b3:a8: 98:5a:7f:8a:ad:ff:39:21:46:10:c9:9d:c1:59:e0:17:19:b3: a6:1f:56:32:be:c1:cf:f7:03:8a:5b:1c:1b:38:b0:ee:d8:ee: 81:64:08:23:4a:46:e1:34:c1:f5:6c:32:22:cf:50:e9:76:63: f3:07:60:34:58:5d:b9:f1:b6:93:52:1f:18:af:51:88:f6:c5: ad:da:3f:1e:16:89:44:28:72:cc:bb:a8:07:36:ca:ba:00:04: da:8a:9a:1c:39:8c:3e:37:ce:b6:ae:8b:93:ef:82:a7:56:e7: 88:bc:a1:82:72:7a:cb:40:88:6f:01:17:2f:d6:d1:0a:b0:ba: bc:7b:ed:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEdG2FRO9WcN4SyCyaQ+Spw0psM8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE2QjE0MjhBODcyMzhEQzlEQTlCOTI4OTBFMUM5QkY2 MENDMDk0RTAeFw0yNTA5MTUxMjI2NDVaFw0yNTA5MTgxNTU3NDVaMDMxMTAvBgNV BAMTKEQxQjUzQTBGQjFERjI1MUIyNzMzNEMyNjMzNkI2NTEwMUE5ODZCRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9X0aossbHRWPvx3Wqk52Ki+Ij J77vTwvw5i1E47alP4DPdwVSLk+v+b43N7cqcz8HkXS3BVS3rQgig4Abce+fDDOW GFj5HLuQm5wOuzq5q5ZzGvDdn+HL3l7X/RvF5lH5bSpM7YfrpmhhpO1LSv7CU2Sy l6yUIQBNv2I2NrwtC82JXvTapMBYXqi+o7tQ+mv4bKw0WITMuC4p2K3LoVQzD5Rp wGAsa0e/6P2uj5I0r7Otfqo/v3ikUp+iAg8rh/0hApxa7ROiLZXHkZcbBQavdLrf F+Y+RNkbEZASZNjI9yd5COLMMHllIXlaekvoOJ44Qy8tj099SDi8LbK4OiVlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0bU6D7HfJRsnM0wmM2tlEBqYa9gwHwYDVR0j BBgwFoAUWmsUKKhyONydqbkokOHJv2DMCU4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ODZkZjc5MS0wMDc5LTQ1ZjYtYWE5My00YzNhMjQzMDVkODUvMC81QTZCMTQyOEE4 NzIzOERDOURBOUI5Mjg5MEUxQzlCRjYwQ0MwOTRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUE2QjE0MjhBODcyMzhEQzlEQTlCOTI4OTBFMUM5QkY2MEND MDk0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODg2ZGY3OTEtMDA3OS00NWY2LWFh OTMtNGMzYTI0MzA1ZDg1LzAvNUE2QjE0MjhBODcyMzhEQzlEQTlCOTI4OTBFMUM5 QkY2MENDMDk0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbYEnRijmg4yBuPCqy2GA9WhEAWFpb3jE1t uuCDL+DHXERTS1d75rpuyzXJs9KdW044OE5P7XtGsssZk2KVdw/awrhJjc1NzEuP 58nhbJVVMtsfpcDwcojfXDLe/0yyKWn05HG+EtxogdGX92bhqk+LRyPMtw2iVlh7 3Y6zqJhaf4qt/zkhRhDJncFZ4BcZs6YfVjK+wc/3A4pbHBs4sO7Y7oFkCCNKRuE0 wfVsMiLPUOl2Y/MHYDRYXbnxtpNSHxivUYj2xa3aPx4WiUQocsy7qAc2yroABNqK mhw5jD43zraui5PvgqdW54i8oYJyestAiG8BFy/W0Qqwurx77bc= -----END CERTIFICATE-----Generated at Tue Sep 16 09:51:48 2025 by rpki-client