$ rpki-client -vvf repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft File: 5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft (raw, json) Hash identifier: JNURwVhUg6yOJYy8xJesYgirWsI7PuMTzsD3xOEhwLo= Subject key identifier: 3A:34:A5:36:5D:BC:3F:17:CE:69:14:01:79:E6:BB:53:CB:38:27:A6 Authority key identifier: 5E:68:3D:8B:34:5B:B6:E0:F6:3C:D1:A8:F3:2C:3B:5E:CC:B2:B9:B0 Certificate issuer: /CN=5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0 Certificate serial: 4299F1E6A3305ACF3E927E82491B85DD9C8D358E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft Manifest number: 0478 Signing time: Thu 04 Sep 2025 02:20:53 +0000 Manifest this update: Thu 04 Sep 2025 02:15:53 +0000 Manifest next update: Sun 07 Sep 2025 05:55:53 +0000 Files and hashes: 1: 5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl (hash: YAEGsYYKz7e1t9u+xRym+7XcHiYqF7eKDdrk+7b38tY=) 2: 3130332e3135362e3231362e302f32342d3234203d3e203538333639.roa (hash: XGzaH0iWdCy5zsUnP4rW+qurcQNiJokFY8tcDg0B9Wg=) 3: 3130332e3135362e3231372e302f32342d3234203d3e203538333639.roa (hash: BvednQirMsdE9Wqe4ixR538inDj4noipljhyRht7q1c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 05:55:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:99:f1:e6:a3:30:5a:cf:3e:92:7e:82:49:1b:85:dd:9c:8d:35:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0 Validity Not Before: Sep 4 02:15:53 2025 GMT Not After : Sep 7 05:55:53 2025 GMT Subject: CN=3A34A5365DBC3F17CE69140179E6BB53CB3827A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f6:29:3b:48:2f:35:8a:3f:6e:d3:54:c6:f7: d7:41:b6:d2:95:d6:12:c4:29:ba:38:a6:61:40:0b: 52:b1:58:ad:a5:24:0e:6b:10:c5:19:1b:e6:6b:bd: e4:d9:64:ea:29:31:f4:ba:22:23:b7:ac:56:02:94: bf:a0:76:a2:2d:97:8f:24:10:1c:92:bc:8e:92:63: d1:f4:0d:b4:49:d0:d0:68:48:0d:78:12:30:91:c0: 63:7b:b4:20:9c:ea:40:fd:cb:aa:60:05:75:65:b7: 0d:67:34:36:df:dc:d0:07:28:18:4b:35:69:0f:96: 6c:06:be:60:2c:c3:67:38:05:8e:ba:9a:de:41:51: 72:17:1a:12:76:60:31:60:4a:99:f0:f2:6b:a8:ff: 8b:ad:df:da:bb:d6:e0:c9:fe:42:c4:e5:11:3f:d3: ac:16:6e:ea:03:2d:c3:38:4b:f1:c3:4d:49:b3:b7: 1b:6b:97:12:4a:99:f5:3a:16:f0:96:c2:e4:fc:78: c9:e8:b9:4d:25:c9:d0:89:f3:fa:f5:18:0f:0f:96: a3:c9:95:d9:f5:a9:63:62:1b:19:c8:d4:74:ba:91: af:e8:79:d0:bc:fd:c1:d0:f8:50:24:59:b7:f8:19: d1:64:f8:52:48:9b:03:1d:23:7f:47:c2:e7:9a:e9: 8d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:34:A5:36:5D:BC:3F:17:CE:69:14:01:79:E6:BB:53:CB:38:27:A6 X509v3 Authority Key Identifier: keyid:5E:68:3D:8B:34:5B:B6:E0:F6:3C:D1:A8:F3:2C:3B:5E:CC:B2:B9:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:58:d1:94:44:78:c8:53:0e:fd:ce:c7:47:eb:67:31:92:37: 23:d4:e7:98:5a:68:1b:c3:2c:a1:20:3b:b8:d0:a6:72:56:56: 88:df:d6:0a:24:a4:af:ac:e2:02:ec:c8:e0:31:40:d8:12:5a: 62:d1:85:28:1c:15:da:b9:6b:79:3c:01:4b:d1:84:e8:ae:12: 4c:c9:48:b8:04:45:74:c9:a2:c5:aa:33:96:0c:77:b8:5c:60: e4:5b:41:3d:f7:6d:8e:e7:02:20:71:50:eb:e7:28:f8:f2:f7: 83:91:9f:fd:48:c6:ba:33:2e:b6:2b:c4:0b:18:01:9b:9d:0d: 50:03:b7:ec:a2:b5:9d:da:6a:3c:31:cf:a1:a0:0c:a9:f6:fe: f5:a8:28:ea:01:57:34:3e:87:c5:0c:47:e2:0c:ed:12:1c:2a: 85:2f:cb:ef:d5:95:3d:78:e1:41:e5:76:bd:88:16:f8:c5:0f: 2a:ef:69:bb:fb:46:13:06:50:04:2c:d1:d7:d6:71:6a:61:f6: 32:59:24:7b:68:62:78:5a:67:55:07:82:5e:aa:0d:f5:ae:e3: 84:47:67:2f:d3:d6:9a:ec:5f:cc:74:90:03:22:98:60:81:8b: 35:65:35:c7:b9:9d:70:c0:e4:94:18:d2:69:e0:6f:c5:1c:84: 24:2d:5f:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQpnx5qMwWs8+kn6CSRuF3ZyNNY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU2ODNEOEIzNDVCQjZFMEY2M0NEMUE4RjMyQzNCNUVD Q0IyQjlCMDAeFw0yNTA5MDQwMjE1NTNaFw0yNTA5MDcwNTU1NTNaMDMxMTAvBgNV BAMTKDNBMzRBNTM2NURCQzNGMTdDRTY5MTQwMTc5RTZCQjUzQ0IzODI3QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC29ik7SC81ij9u01TG99dBttKV 1hLEKbo4pmFAC1KxWK2lJA5rEMUZG+ZrveTZZOopMfS6IiO3rFYClL+gdqItl48k EBySvI6SY9H0DbRJ0NBoSA14EjCRwGN7tCCc6kD9y6pgBXVltw1nNDbf3NAHKBhL NWkPlmwGvmAsw2c4BY66mt5BUXIXGhJ2YDFgSpnw8muo/4ut39q71uDJ/kLE5RE/ 06wWbuoDLcM4S/HDTUmztxtrlxJKmfU6FvCWwuT8eMnouU0lydCJ8/r1GA8PlqPJ ldn1qWNiGxnI1HS6ka/oedC8/cHQ+FAkWbf4GdFk+FJImwMdI39Hwuea6Y17AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOjSlNl28PxfOaRQBeea7U8s4J6YwHwYDVR0j BBgwFoAUXmg9izRbtuD2PNGo8yw7XsyyubAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 M2E3ZjM0Yy02M2I4LTQ5NzMtODIyNi1lMTA2OTViMjVkOTQvMC81RTY4M0Q4QjM0 NUJCNkUwRjYzQ0QxQThGMzJDM0I1RUNDQjJCOUIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUU2ODNEOEIzNDVCQjZFMEY2M0NEMUE4RjMyQzNCNUVDQ0Iy QjlCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTNhN2YzNGMtNjNiOC00OTczLTgy MjYtZTEwNjk1YjI1ZDk0LzAvNUU2ODNEOEIzNDVCQjZFMEY2M0NEMUE4RjMyQzNC NUVDQ0IyQjlCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACNY0ZREeMhTDv3Ox0frZzGSNyPU55haaBvD LKEgO7jQpnJWVojf1gokpK+s4gLsyOAxQNgSWmLRhSgcFdq5a3k8AUvRhOiuEkzJ SLgERXTJosWqM5YMd7hcYORbQT33bY7nAiBxUOvnKPjy94ORn/1IxrozLrYrxAsY AZudDVADt+yitZ3aajwxz6GgDKn2/vWoKOoBVzQ+h8UMR+IM7RIcKoUvy+/VlT14 4UHldr2IFvjFDyrvabv7RhMGUAQs0dfWcWph9jJZJHtoYnhaZ1UHgl6qDfWu44RH Zy/T1prsX8x0kAMimGCBizVlNce5nXDA5JQY0mngb8UchCQtX5E= -----END CERTIFICATE-----Generated at Fri Sep 5 20:25:16 2025 by rpki-client