$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft File: 5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft (raw, json) Hash identifier: QqK9e4A8pwHocl2MOgDQkGizJZZeN6paISG6nrEW74Y= Subject key identifier: 1C:4C:3F:AC:E0:88:B9:68:7C:79:0B:72:40:F4:C0:CF:75:68:23:9E Authority key identifier: 5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D Certificate issuer: /CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D Certificate serial: 5885DD3B23BED7186A4A7B38D3C3B96BD17BC35E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft Manifest number: CE Signing time: Sat 06 Sep 2025 20:41:07 +0000 Manifest this update: Sat 06 Sep 2025 20:36:07 +0000 Manifest next update: Wed 10 Sep 2025 02:09:07 +0000 Files and hashes: 1: 3136302e32322e362e302f32332d3233203d3e20313532373936.roa (hash: MlPD1Cp5WkgMa2H7CRUKYw5NrewBHnE4PxE2BVKQlL0=) 2: 3136302e32322e362e302f32342d3234203d3e20313532373936.roa (hash: lZoAiDIfwdwZRfkj/NcAK+vDJElzUZIJDOrxy0zEGf4=) 3: 5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl (hash: 5mlss1GrLQHwgn7Aqm/A4+sChaEV/Ygu7iabEuEaPDw=) 4: 3136302e32322e372e302f32342d3234203d3e20313532373936.roa (hash: Se9if4ahUM8UZ9DwPwRriHNSzgliBVi3qv7HNc4T4+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 02:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:85:dd:3b:23:be:d7:18:6a:4a:7b:38:d3:c3:b9:6b:d1:7b:c3:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D Validity Not Before: Sep 6 20:36:07 2025 GMT Not After : Sep 10 02:09:07 2025 GMT Subject: CN=1C4C3FACE088B9687C790B7240F4C0CF7568239E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:95:69:dd:34:91:38:41:7f:2b:9d:6b:78:b8: 46:db:4b:bc:f5:7a:2e:a9:24:2f:08:08:04:6e:58: ae:6a:bc:fe:c1:3f:17:60:1d:ee:ae:db:16:88:b2: 7b:e8:19:83:dc:c2:0c:2a:fb:f3:83:77:20:ea:49: b5:2a:50:cd:95:b2:ed:86:1e:32:db:00:fd:84:1b: f5:7c:a6:13:65:65:99:33:7b:3a:68:8f:b8:97:74: 27:c4:69:ba:65:51:de:ee:12:3b:d9:8b:27:0e:8d: b7:d7:b4:44:02:f3:d0:26:10:b2:de:d3:a7:3e:79: 06:d5:74:bb:34:ce:e3:33:b6:36:b3:e1:64:8b:d1: 45:e1:4b:45:b3:f7:4e:a3:c8:e6:36:79:93:55:ef: 08:60:7e:82:9b:60:48:83:25:0d:fa:b4:6f:d1:c5: ca:b7:25:f6:1e:c4:3d:a9:51:1d:86:4c:bc:42:65: 31:f1:35:07:44:fb:01:f6:99:5e:94:e5:ec:01:1f: e2:6e:03:91:04:9f:cf:3b:38:f7:0a:c5:ad:4e:b5: c0:85:2f:ef:6e:f2:4c:3a:80:fd:71:43:77:41:2e: a7:19:a6:d6:63:9a:0f:08:64:17:59:39:76:2f:00: d3:bc:ec:72:1c:87:a7:fe:88:20:01:19:03:d2:f5: 60:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:4C:3F:AC:E0:88:B9:68:7C:79:0B:72:40:F4:C0:CF:75:68:23:9E X509v3 Authority Key Identifier: keyid:5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:d6:98:15:25:8d:9f:d0:31:5e:00:71:92:d0:22:ad:cd:27: ea:69:b9:03:be:75:ce:f2:d6:9c:59:de:11:bd:5c:24:71:4e: 79:24:32:9e:60:cc:d6:09:c8:cc:9b:9a:54:82:72:ce:3e:98: ad:92:88:8b:55:78:52:4a:3d:00:5c:77:3c:bd:a1:fe:f0:f2: 91:74:c6:c2:5a:32:d6:23:f8:55:3f:82:4f:fa:62:a5:54:8b: ce:1e:80:73:8c:7c:2a:86:d3:c2:34:e6:ac:6f:f1:b4:7c:49: 5e:c5:a6:80:55:5f:cc:fc:56:9f:c4:0b:48:21:44:2f:b0:05: 6b:84:67:bf:3c:38:89:a1:17:9c:af:58:16:0e:03:1e:05:0d: 8e:98:d3:1f:62:39:10:c0:97:41:c6:e3:31:ef:a2:cc:ce:89: 6a:0e:23:a8:95:ae:06:6c:49:25:24:33:ab:56:22:56:69:cd: 39:a8:cd:65:0d:f3:28:f7:ae:6b:93:2f:d4:92:f4:74:6c:0f: 97:c0:68:11:2b:be:42:d0:23:e6:d7:76:79:e8:62:f6:e1:1b: 6c:69:5f:68:18:31:43:dc:8a:69:97:e3:84:58:1e:42:e5:96: 26:36:27:c1:11:f4:3f:4e:b1:e4:79:9e:bf:22:ba:39:a9:60: 2d:23:63:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWIXdOyO+1xhqSns408O5a9F7w14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2MDQy RjBCNkQ3RDAeFw0yNTA5MDYyMDM2MDdaFw0yNTA5MTAwMjA5MDdaMDMxMTAvBgNV BAMTKDFDNEMzRkFDRTA4OEI5Njg3Qzc5MEI3MjQwRjRDMENGNzU2ODIzOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWlWndNJE4QX8rnWt4uEbbS7z1 ei6pJC8ICARuWK5qvP7BPxdgHe6u2xaIsnvoGYPcwgwq+/ODdyDqSbUqUM2Vsu2G HjLbAP2EG/V8phNlZZkzezpoj7iXdCfEabplUd7uEjvZiycOjbfXtEQC89AmELLe 06c+eQbVdLs0zuMztjaz4WSL0UXhS0Wz906jyOY2eZNV7whgfoKbYEiDJQ36tG/R xcq3JfYexD2pUR2GTLxCZTHxNQdE+wH2mV6U5ewBH+JuA5EEn887OPcKxa1OtcCF L+9u8kw6gP1xQ3dBLqcZptZjmg8IZBdZOXYvANO87HIch6f+iCABGQPS9WC7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHEw/rOCIuWh8eQtyQPTAz3VoI54wHwYDVR0j BBgwFoAUXjI/nX2oTYVuukjHbps2BC8LbX0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5ODgxNi01YWY5LTQ3ZWYtYjk4OS00MmYyNzMxODQ4YmUvMC81RTMyM0Y5RDdE QTg0RDg1NkVCQTQ4Qzc2RTlCMzYwNDJGMEI2RDdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2MDQyRjBC NkQ3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzAvNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2 MDQyRjBCNkQ3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTWmBUljZ/QMV4AcZLQIq3NJ+ppuQO+dc7y 1pxZ3hG9XCRxTnkkMp5gzNYJyMybmlSCcs4+mK2SiItVeFJKPQBcdzy9of7w8pF0 xsJaMtYj+FU/gk/6YqVUi84egHOMfCqG08I05qxv8bR8SV7FpoBVX8z8Vp/EC0gh RC+wBWuEZ788OImhF5yvWBYOAx4FDY6Y0x9iORDAl0HG4zHvoszOiWoOI6iVrgZs SSUkM6tWIlZpzTmozWUN8yj3rmuTL9SS9HRsD5fAaBErvkLQI+bXdnnoYvbhG2xp X2gYMUPcimmX44RYHkLlliY2J8ER9D9OseR5nr8iujmpYC0jY/A= -----END CERTIFICATE-----Generated at Mon Sep 8 05:14:26 2025 by rpki-client