$ rpki-client -vvf repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft File: C5247B1CF64591B1DB27280B439B507E56BF0232.mft (raw, json) Hash identifier: GT0T7Ky9T7jHm6ksSXcktbq6CzXNOKGkJPCPGm2r8RI= Subject key identifier: 71:26:32:51:61:3F:14:14:16:5C:00:1F:5F:04:33:20:2F:5B:16:30 Authority key identifier: C5:24:7B:1C:F6:45:91:B1:DB:27:28:0B:43:9B:50:7E:56:BF:02:32 Certificate issuer: /CN=C5247B1CF64591B1DB27280B439B507E56BF0232 Certificate serial: 61754EF01D0D82C518B10F6F5175BD8BCEEF1078 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5247B1CF64591B1DB27280B439B507E56BF0232.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft Manifest number: 044C Signing time: Wed 03 Sep 2025 21:21:14 +0000 Manifest this update: Wed 03 Sep 2025 21:16:14 +0000 Manifest next update: Sun 07 Sep 2025 06:08:14 +0000 Files and hashes: 1: C5247B1CF64591B1DB27280B439B507E56BF0232.crl (hash: 2m+fq6v90EAg1v81rCq3g1dgDLRz9qzG73JnmL6iWmk=) 2: 3230332e38312e3138342e302f32312d3234203d3e203234353338.roa (hash: MMjEYaklE81WaDCrUueGQmjdNC6x98nzJuWl2kfKoDE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.crl rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5247B1CF64591B1DB27280B439B507E56BF0232.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 06:08:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:75:4e:f0:1d:0d:82:c5:18:b1:0f:6f:51:75:bd:8b:ce:ef:10:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5247B1CF64591B1DB27280B439B507E56BF0232 Validity Not Before: Sep 3 21:16:14 2025 GMT Not After : Sep 7 06:08:14 2025 GMT Subject: CN=71263251613F1414165C001F5F0433202F5B1630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:89:66:86:19:07:55:21:db:d3:30:6c:3b:53: 16:53:52:a9:3f:df:79:6c:ab:71:e8:aa:59:58:81: c7:cf:b0:e7:ff:3d:52:5e:57:b9:94:4c:63:7e:82: 4b:f0:6d:50:bf:50:95:38:ec:ff:ac:e3:f8:1c:cf: e8:3f:96:16:8c:c0:d9:86:df:4d:b1:b5:59:a9:98: 80:a0:6f:17:3e:a9:d9:fb:42:c0:9b:52:c2:78:ca: 8f:81:01:19:db:d9:98:b0:9e:af:ac:1b:2c:88:12: 94:61:a4:5f:90:8e:ff:44:11:17:69:4f:b0:23:e2: 63:e4:36:15:b9:63:4f:16:92:d1:b5:ab:82:fd:9f: 6d:93:fd:f4:84:bd:ef:59:80:2f:f0:69:46:c8:2a: 1f:99:4c:5b:b8:4a:6d:d0:46:ca:27:07:2f:d2:cb: e2:06:4a:ad:aa:f4:b1:7e:f3:de:29:24:29:fa:6e: 5c:97:a1:fb:07:e8:14:da:f3:5e:5c:b7:8a:90:2f: be:e1:41:50:e6:17:f1:52:76:c9:7b:20:1e:52:6c: 1b:b3:8e:0a:5d:f2:02:9c:f8:3c:bd:53:d6:8e:34: 33:f3:29:d4:e4:94:4c:f8:a3:61:8e:18:f3:e0:6b: 8c:59:28:3a:24:85:57:08:2f:4d:da:55:a7:9b:ef: 6d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:26:32:51:61:3F:14:14:16:5C:00:1F:5F:04:33:20:2F:5B:16:30 X509v3 Authority Key Identifier: keyid:C5:24:7B:1C:F6:45:91:B1:DB:27:28:0B:43:9B:50:7E:56:BF:02:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5247B1CF64591B1DB27280B439B507E56BF0232.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:44:6c:68:50:a6:13:f8:d5:2a:0e:a9:3f:6a:36:6a:f5:1d: 87:99:1d:3a:93:ef:53:7c:56:c7:88:fe:d5:03:80:1b:08:1d: 87:cd:86:c3:6d:1d:93:71:80:ea:20:14:1a:70:3f:4b:4b:ab: e6:02:f7:e9:bb:2b:ea:7c:9e:34:bb:35:57:32:63:13:3f:31: 21:50:ca:13:f4:00:3d:1e:13:2c:ca:6c:13:b9:db:e9:db:3a: 4b:8c:d3:6f:e9:00:19:84:16:eb:e6:fe:df:82:6a:37:1c:ef: 88:44:04:93:02:d7:86:9c:13:55:06:c1:69:1b:5a:62:f3:d1: af:65:d9:9c:81:ee:90:8f:1f:c2:15:c0:d1:2d:b0:24:c5:4c: d5:4e:9d:1f:6b:ce:fe:04:07:a6:be:83:f0:a7:d6:47:03:4d: 0c:59:8d:dc:c0:a4:fc:81:cc:a8:13:22:1d:46:ed:8e:28:ff: fc:9e:93:f7:47:2e:0c:41:3b:25:67:af:8f:14:29:37:0a:57: 84:be:b3:05:4b:c2:bb:8b:3e:24:93:95:34:b0:75:a5:fe:94: 3c:b4:b8:9b:1b:91:9f:c1:61:7e:5a:f4:a4:34:62:22:c1:b1: 12:15:54:a6:ff:d5:ff:f0:65:93:bf:41:64:83:6f:6d:8b:c3: d8:43:89:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYXVO8B0NgsUYsQ9vUXW9i87vEHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUyNDdCMUNGNjQ1OTFCMURCMjcyODBCNDM5QjUwN0U1 NkJGMDIzMjAeFw0yNTA5MDMyMTE2MTRaFw0yNTA5MDcwNjA4MTRaMDMxMTAvBgNV BAMTKDcxMjYzMjUxNjEzRjE0MTQxNjVDMDAxRjVGMDQzMzIwMkY1QjE2MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbiWaGGQdVIdvTMGw7UxZTUqk/ 33lsq3HoqllYgcfPsOf/PVJeV7mUTGN+gkvwbVC/UJU47P+s4/gcz+g/lhaMwNmG 302xtVmpmICgbxc+qdn7QsCbUsJ4yo+BARnb2Ziwnq+sGyyIEpRhpF+Qjv9EERdp T7Aj4mPkNhW5Y08WktG1q4L9n22T/fSEve9ZgC/waUbIKh+ZTFu4Sm3QRsonBy/S y+IGSq2q9LF+894pJCn6blyXofsH6BTa815ct4qQL77hQVDmF/FSdsl7IB5SbBuz jgpd8gKc+Dy9U9aONDPzKdTklEz4o2GOGPPga4xZKDokhVcIL03aVaeb723tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcSYyUWE/FBQWXAAfXwQzIC9bFjAwHwYDVR0j BBgwFoAUxSR7HPZFkbHbJygLQ5tQfla/AjIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWEyOWE3NS1jNWI5LTQ3NWItOWQ5Ni02ZDFhMTVlYWUyNGQvMC9DNTI0N0IxQ0Y2 NDU5MUIxREIyNzI4MEI0MzlCNTA3RTU2QkYwMjMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUyNDdCMUNGNjQ1OTFCMURCMjcyODBCNDM5QjUwN0U1NkJG MDIzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFhMjlhNzUtYzViOS00NzViLTlk OTYtNmQxYTE1ZWFlMjRkLzAvQzUyNDdCMUNGNjQ1OTFCMURCMjcyODBCNDM5QjUw N0U1NkJGMDIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALxEbGhQphP41SoOqT9qNmr1HYeZHTqT71N8 VseI/tUDgBsIHYfNhsNtHZNxgOogFBpwP0tLq+YC9+m7K+p8njS7NVcyYxM/MSFQ yhP0AD0eEyzKbBO52+nbOkuM02/pABmEFuvm/t+Cajcc74hEBJMC14acE1UGwWkb WmLz0a9l2ZyB7pCPH8IVwNEtsCTFTNVOnR9rzv4EB6a+g/Cn1kcDTQxZjdzApPyB zKgTIh1G7Y4o//yek/dHLgxBOyVnr48UKTcKV4S+swVLwruLPiSTlTSwdaX+lDy0 uJsbkZ/BYX5a9KQ0YiLBsRIVVKb/1f/wZZO/QWSDb22Lw9hDiZA= -----END CERTIFICATE-----Generated at Fri Sep 5 10:27:09 2025 by rpki-client