$ rpki-client -vvf repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft File: 5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft (raw, json) Hash identifier: Js4wQLGM3T7kKUXcGyl2pSlq6M2yUSsSqBe8e7Q8U0g= Subject key identifier: 7D:56:5D:C8:62:FC:35:BA:C4:D9:23:F9:EC:E8:6B:7A:AE:62:1B:65 Authority key identifier: 57:87:AD:66:59:EA:8A:5E:40:18:87:6F:5F:9D:BD:9A:AA:F9:CA:1D Certificate issuer: /CN=5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D Certificate serial: 0855E2F921E3076DD9A66DDFBE2F1FBA3905B98B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft Manifest number: 01E1 Signing time: Sun 07 Sep 2025 00:31:44 +0000 Manifest this update: Sun 07 Sep 2025 00:26:44 +0000 Manifest next update: Wed 10 Sep 2025 12:28:44 +0000 Files and hashes: 1: 5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl (hash: rXZtmn62vICxvaRGPKOIhTfsfh8HBEcwKva2k1hIeow=) 2: 3130332e3130322e3235302e302f32342d3234203d3e20313336383632.roa (hash: XJaPVKL+tFj4c3WHFeXKkbEPFHc33QGCd8eyCL/ZJ7M=) 3: 323030313a6466323a663130303a3a2f34382d3438203d3e20313336383632.roa (hash: tZ0f5MTmtWdSIb0cW5V8BnDtVprPqdA4VLQLF9yhNs4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:55:e2:f9:21:e3:07:6d:d9:a6:6d:df:be:2f:1f:ba:39:05:b9:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D Validity Not Before: Sep 7 00:26:44 2025 GMT Not After : Sep 10 12:28:44 2025 GMT Subject: CN=7D565DC862FC35BAC4D923F9ECE86B7AAE621B65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:77:1e:c2:6d:24:0e:29:16:69:de:d0:6f:01: 26:9a:1d:cb:89:3e:33:e7:95:7d:2b:e2:60:49:c3: f6:4a:da:9b:32:b3:43:80:f3:33:b0:47:63:45:cc: e7:15:b5:46:0a:27:94:1f:92:cd:78:31:ed:88:85: be:4b:c6:42:9c:68:f0:8f:5b:4c:88:5a:94:94:ea: 5f:a1:42:19:1b:39:79:69:8e:9e:4d:f8:fb:6b:68: f9:2e:76:1c:06:37:bd:2e:d1:70:cd:2d:b6:4a:96: 9a:bb:bb:2d:a4:71:f9:a9:69:80:66:90:c0:10:fb: df:73:d9:37:c8:58:3e:a7:e0:d4:7b:fe:32:18:b1: d8:70:57:91:3e:0f:2b:d2:77:00:b0:8a:cd:14:77: b6:af:f2:11:35:8a:b5:fb:02:8f:54:85:03:38:54: 03:76:fe:93:d6:59:ad:8f:45:fa:87:87:db:d0:c3: 1b:29:2f:1d:64:0d:0b:b6:bf:eb:5b:c4:2f:44:d7: 0b:ce:49:85:17:e9:dd:30:b9:bd:7d:47:23:04:19: db:2a:4c:c4:d6:82:97:62:d0:08:91:5c:2a:24:c1: 51:7d:a1:71:28:90:f9:ed:12:41:aa:c7:92:11:4d: 29:f1:5f:bf:7d:de:61:e8:55:fc:7e:38:5a:23:c6: ec:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:56:5D:C8:62:FC:35:BA:C4:D9:23:F9:EC:E8:6B:7A:AE:62:1B:65 X509v3 Authority Key Identifier: keyid:57:87:AD:66:59:EA:8A:5E:40:18:87:6F:5F:9D:BD:9A:AA:F9:CA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:ae:4b:0a:2b:9a:c0:d3:01:a4:f1:ed:fe:50:3b:f5:cd:0a: 1a:82:27:15:1d:2e:80:2c:72:4a:bb:f2:f1:19:f7:6d:62:62: 4a:b4:fd:6d:d8:3f:4b:3e:d3:61:f9:75:c1:56:bb:68:01:a3: 74:c9:c0:38:f2:4f:c7:7f:73:f0:82:d2:6a:1c:db:6a:cd:fb: cb:9e:a1:68:7d:08:d2:5a:f4:29:db:29:92:bd:24:e3:b5:13: 9a:37:0b:93:41:fc:95:7f:9c:fc:3f:31:b6:72:b6:6a:ef:4d: a2:f0:66:ea:c7:ed:be:ef:f8:d7:af:4c:43:1c:bf:b2:cd:42: fd:ba:4d:cb:eb:b2:50:d6:bd:de:16:b4:4e:3b:a4:d5:33:a0: 9a:e5:3e:67:d2:76:a9:7d:94:73:ce:30:ab:3c:bf:d6:17:a2: 0b:c6:3d:13:1f:91:d8:44:11:8b:8a:7b:83:ff:ad:e6:11:a6: 08:70:8a:23:2e:67:41:47:4f:4d:00:9c:ec:df:ff:ee:aa:d6: 35:e3:51:bc:4c:5d:1e:f6:0d:f5:19:a3:e8:e7:3b:ad:74:dd: ab:27:f3:5e:f0:75:07:f2:9c:64:d6:cd:36:f5:3f:e7:9e:be: 5e:3b:8b:dd:df:14:60:8e:a5:5b:c2:2f:90:6c:9a:52:ad:65: 5e:85:db:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCFXi+SHjB23Zpm3fvi8fujkFuYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJEOUFB QUY5Q0ExRDAeFw0yNTA5MDcwMDI2NDRaFw0yNTA5MTAxMjI4NDRaMDMxMTAvBgNV BAMTKDdENTY1REM4NjJGQzM1QkFDNEQ5MjNGOUVDRTg2QjdBQUU2MjFCNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDdx7CbSQOKRZp3tBvASaaHcuJ PjPnlX0r4mBJw/ZK2psys0OA8zOwR2NFzOcVtUYKJ5Qfks14Me2Ihb5LxkKcaPCP W0yIWpSU6l+hQhkbOXlpjp5N+PtraPkudhwGN70u0XDNLbZKlpq7uy2kcfmpaYBm kMAQ+99z2TfIWD6n4NR7/jIYsdhwV5E+DyvSdwCwis0Ud7av8hE1irX7Ao9UhQM4 VAN2/pPWWa2PRfqHh9vQwxspLx1kDQu2v+tbxC9E1wvOSYUX6d0wub19RyMEGdsq TMTWgpdi0AiRXCokwVF9oXEokPntEkGqx5IRTSnxX7993mHoVfx+OFojxux9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfVZdyGL8NbrE2SP57Ohreq5iG2UwHwYDVR0j BBgwFoAUV4etZlnqil5AGIdvX529mqr5yh0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWI4ZTc3NC0xNjgzLTQ1NmQtYmJjMC0zNDMyMjVmMTdmNGMvMC81Nzg3QUQ2NjU5 RUE4QTVFNDAxODg3NkY1RjlEQkQ5QUFBRjlDQTFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJEOUFBQUY5 Q0ExRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTViOGU3NzQtMTY4My00NTZkLWJi YzAtMzQzMjI1ZjE3ZjRjLzAvNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJE OUFBQUY5Q0ExRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALyuSwormsDTAaTx7f5QO/XNChqCJxUdLoAs ckq78vEZ921iYkq0/W3YP0s+02H5dcFWu2gBo3TJwDjyT8d/c/CC0moc22rN+8ue oWh9CNJa9CnbKZK9JOO1E5o3C5NB/JV/nPw/MbZytmrvTaLwZurH7b7v+NevTEMc v7LNQv26TcvrslDWvd4WtE47pNUzoJrlPmfSdql9lHPOMKs8v9YXogvGPRMfkdhE EYuKe4P/reYRpghwiiMuZ0FHT00AnOzf/+6q1jXjUbxMXR72DfUZo+jnO6103asn 817wdQfynGTWzTb1P+eevl47i93fFGCOpVvCL5BsmlKtZV6F23Y= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:49 2025 by rpki-client