$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft File: 5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft (raw, json) Hash identifier: ChPost12xUdfOQarmYyfNMINULRWg9WsrBMl5WUyCHU= Subject key identifier: C6:1D:E3:49:39:28:36:5E:98:4A:3C:2F:EA:07:D3:49:7D:04:93:DB Authority key identifier: 5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D Certificate issuer: /CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D Certificate serial: 26F4F636E01DF6472CD7CCF7D9D2C2F10C5FE2B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft Manifest number: B8 Signing time: Sat 19 Jul 2025 12:51:04 +0000 Manifest this update: Sat 19 Jul 2025 12:46:04 +0000 Manifest next update: Tue 22 Jul 2025 18:25:04 +0000 Files and hashes: 1: 3136302e32322e372e302f32342d3234203d3e20313532373936.roa (hash: Se9if4ahUM8UZ9DwPwRriHNSzgliBVi3qv7HNc4T4+A=) 2: 3136302e32322e362e302f32332d3233203d3e20313532373936.roa (hash: MlPD1Cp5WkgMa2H7CRUKYw5NrewBHnE4PxE2BVKQlL0=) 3: 3136302e32322e362e302f32342d3234203d3e20313532373936.roa (hash: lZoAiDIfwdwZRfkj/NcAK+vDJElzUZIJDOrxy0zEGf4=) 4: 5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl (hash: bXSzVtChhH2uLx8HAD88B1Z1k+rmthXtjkvo1BEUjYA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 18:25:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:f4:f6:36:e0:1d:f6:47:2c:d7:cc:f7:d9:d2:c2:f1:0c:5f:e2:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D Validity Not Before: Jul 19 12:46:04 2025 GMT Not After : Jul 22 18:25:04 2025 GMT Subject: CN=C61DE3493928365E984A3C2FEA07D3497D0493DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b3:4e:81:ef:a5:19:6e:7f:32:80:89:a6:0e: 3e:7b:5e:56:1f:f8:fb:da:c2:12:6c:a2:a6:2e:9b: fd:5a:6a:53:91:4d:fe:38:eb:44:ed:fa:8e:64:78: da:1c:d7:16:f6:6d:14:ea:de:21:84:01:6a:71:6a: 46:eb:8e:18:8c:45:b0:f6:42:af:c8:c7:0c:cf:15: 3e:18:f7:24:da:f0:44:ab:92:7e:d5:29:08:f3:08: 61:c1:54:16:d5:1d:68:23:9e:fc:04:21:de:4b:9d: 54:f9:39:43:59:17:1d:6c:68:a5:d1:6b:2a:77:ba: 00:68:a2:f0:8f:5b:ab:8d:e5:96:6d:79:a9:b5:54: ac:8d:6c:c9:1e:20:bb:3d:d4:7c:f3:22:61:18:e8: ef:5f:f2:90:8d:ca:10:f8:23:f0:cb:63:42:b8:78: ac:b0:16:fe:68:46:5e:9a:ca:5b:99:54:02:72:5c: 0b:30:3e:f8:d3:67:9d:b2:da:72:f0:be:5b:6d:87: 99:15:24:d1:3f:e0:ef:48:e7:34:79:33:98:f3:3a: d5:0b:b2:2b:06:c1:fd:01:8f:7f:e4:93:0f:43:e4: d6:73:ef:ae:e8:52:dd:22:bc:05:c4:e9:fe:67:8b: 8c:e8:ae:a2:5d:36:85:ab:66:72:86:e7:14:6c:23: 93:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:1D:E3:49:39:28:36:5E:98:4A:3C:2F:EA:07:D3:49:7D:04:93:DB X509v3 Authority Key Identifier: keyid:5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:46:1f:21:a3:91:53:0b:cc:43:ec:bd:31:13:5a:c2:67:dc: 6f:a1:8d:bb:d2:05:7e:2d:1c:9a:90:34:1d:56:f6:5a:16:bb: e3:a0:2f:30:1e:4a:5d:5a:a0:bd:75:47:b8:81:34:1f:d2:ce: a8:9c:86:a5:91:8e:40:b0:c5:3b:90:92:02:72:47:16:16:37: 5a:f2:65:01:a2:0a:29:5b:0c:01:bd:37:2b:6a:2b:48:a6:5e: fe:35:12:a2:d1:88:c8:a9:db:61:d4:4c:66:47:6f:df:bb:08: 7b:2d:fd:f5:de:89:2b:90:06:46:5b:e9:01:34:5f:6a:98:53: f7:38:17:7e:15:ac:39:f1:aa:a9:d9:c8:80:7c:fa:19:05:2d: ee:a1:f9:66:ea:50:c7:6c:d2:ea:84:e3:63:ff:19:5e:6c:66: ff:85:6d:b9:72:ef:0f:c0:a3:0a:f7:75:e4:b5:a9:e8:2c:32: 75:89:8f:75:e5:f6:3e:9b:85:3b:e1:2e:e7:88:0e:bf:01:0d: e0:e6:a0:9c:4f:95:2b:fe:fb:92:4e:ed:27:14:23:bb:a1:f5: d8:7d:df:3b:6d:7e:1f:ff:50:a3:56:06:e0:6b:dc:d6:2e:5e: fa:d4:9f:b8:09:e2:44:1e:c3:92:fe:0e:49:e0:d2:0b:0b:03: db:39:48:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJvT2NuAd9kcs18z32dLC8Qxf4rAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2MDQy RjBCNkQ3RDAeFw0yNTA3MTkxMjQ2MDRaFw0yNTA3MjIxODI1MDRaMDMxMTAvBgNV BAMTKEM2MURFMzQ5MzkyODM2NUU5ODRBM0MyRkVBMDdEMzQ5N0QwNDkzREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0s06B76UZbn8ygImmDj57XlYf +PvawhJsoqYum/1aalORTf4460Tt+o5keNoc1xb2bRTq3iGEAWpxakbrjhiMRbD2 Qq/IxwzPFT4Y9yTa8ESrkn7VKQjzCGHBVBbVHWgjnvwEId5LnVT5OUNZFx1saKXR ayp3ugBoovCPW6uN5ZZteam1VKyNbMkeILs91HzzImEY6O9f8pCNyhD4I/DLY0K4 eKywFv5oRl6ayluZVAJyXAswPvjTZ52y2nLwvltth5kVJNE/4O9I5zR5M5jzOtUL sisGwf0Bj3/kkw9D5NZz767oUt0ivAXE6f5ni4zorqJdNoWrZnKG5xRsI5MZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxh3jSTkoNl6YSjwv6gfTSX0Ek9swHwYDVR0j BBgwFoAUXjI/nX2oTYVuukjHbps2BC8LbX0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5ODgxNi01YWY5LTQ3ZWYtYjk4OS00MmYyNzMxODQ4YmUvMC81RTMyM0Y5RDdE QTg0RDg1NkVCQTQ4Qzc2RTlCMzYwNDJGMEI2RDdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2MDQyRjBC NkQ3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzAvNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2 MDQyRjBCNkQ3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAVGHyGjkVMLzEPsvTETWsJn3G+hjbvSBX4t HJqQNB1W9loWu+OgLzAeSl1aoL11R7iBNB/SzqichqWRjkCwxTuQkgJyRxYWN1ry ZQGiCilbDAG9NytqK0imXv41EqLRiMip22HUTGZHb9+7CHst/fXeiSuQBkZb6QE0 X2qYU/c4F34VrDnxqqnZyIB8+hkFLe6h+WbqUMds0uqE42P/GV5sZv+Fbbly7w/A owr3deS1qegsMnWJj3Xl9j6bhTvhLueIDr8BDeDmoJxPlSv++5JO7ScUI7uh9dh9 3zttfh//UKNWBuBr3NYuXvrUn7gJ4kQew5L+Dkng0gsLA9s5SGY= -----END CERTIFICATE-----Generated at Mon Jul 21 10:54:15 2025 by rpki-client