$ rpki-client -vvf repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft File: 5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft (raw, json) Hash identifier: FYpV7mN6y2LYqei1JkMpZd27FISRF328KHOD2rgZhPw= Subject key identifier: CD:54:E4:6E:7C:CE:8B:3D:BB:C9:2D:11:D0:DC:8B:5B:FA:8D:09:12 Authority key identifier: 5B:8C:3A:29:E9:0C:25:CB:F4:61:51:24:B1:17:BE:7F:C0:13:C6:1E Certificate issuer: /CN=5B8C3A29E90C25CBF4615124B117BE7FC013C61E Certificate serial: 3223E6F5B5028D81E1B0F91388459F67DFABCF9C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft Manifest number: 01C3 Signing time: Sun 07 Sep 2025 20:11:08 +0000 Manifest this update: Sun 07 Sep 2025 20:06:08 +0000 Manifest next update: Thu 11 Sep 2025 00:44:08 +0000 Files and hashes: 1: 3130332e39302e36372e302f32342d3234203d3e20313530323635.roa (hash: rSbPcUFwbUotF4iGb/0NgCE/rDZm6ThuOkAV/ZhbDr4=) 2: 3130332e39302e36362e302f32332d3233203d3e20313530323635.roa (hash: 03+kmACXHUPe0IyI3YXAvW+JekGIFfxV2tHYWD2l8nE=) 3: 5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl (hash: +Wh986sbW5szmFG2ieoVyag9N/u+8OOUtixSiXyX4F4=) 4: 3130332e39302e36362e302f32342d3234203d3e20313530323635.roa (hash: 5zPk4MUiirpmEj5/W53RgTUlrb96XIX+LjZrPDV2UMA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 00:44:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:23:e6:f5:b5:02:8d:81:e1:b0:f9:13:88:45:9f:67:df:ab:cf:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B8C3A29E90C25CBF4615124B117BE7FC013C61E Validity Not Before: Sep 7 20:06:08 2025 GMT Not After : Sep 11 00:44:08 2025 GMT Subject: CN=CD54E46E7CCE8B3DBBC92D11D0DC8B5BFA8D0912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c9:3d:64:dc:12:7e:8d:53:ba:00:78:00:1e: ac:d2:bc:0d:ca:7a:8c:c0:0c:07:8f:ed:dd:1d:e6: 2e:10:61:0b:08:37:54:c3:65:38:d2:1a:0e:32:cb: 6f:da:ec:a0:d2:0f:5d:c2:63:0e:87:fd:48:c0:7d: 77:f7:ae:ac:32:25:f0:d8:c0:be:4b:bf:37:ca:00: c2:fb:6d:3c:4a:cf:c7:5b:a3:59:d1:f8:d2:e3:37: e8:25:6f:f1:48:46:37:b0:cc:87:04:ee:ea:d1:bb: 1d:45:58:03:96:75:46:09:86:7b:55:c7:e6:78:76: fa:7c:0f:cd:24:22:74:b9:b9:73:04:d0:54:99:65: 37:0f:91:f5:4a:ac:6a:18:4f:78:d3:d2:ee:eb:e2: da:8b:6f:77:b2:f0:44:14:ad:70:f3:e4:7e:7a:fe: 66:68:16:f6:c5:1a:4a:5b:99:71:b8:a9:2a:6d:8e: 06:be:6d:31:73:c7:64:c5:09:0b:cf:a0:99:65:de: 2a:9a:b2:f2:13:56:24:e4:79:fc:e1:96:4c:dc:f9: b5:bd:59:76:ab:3d:fa:6a:c4:22:fa:a5:75:73:f3: 06:ea:16:29:42:88:22:f2:56:2a:12:68:d3:e4:c0: 94:a9:d3:15:cf:b0:94:97:7e:26:97:93:6d:f8:93: 81:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:54:E4:6E:7C:CE:8B:3D:BB:C9:2D:11:D0:DC:8B:5B:FA:8D:09:12 X509v3 Authority Key Identifier: keyid:5B:8C:3A:29:E9:0C:25:CB:F4:61:51:24:B1:17:BE:7F:C0:13:C6:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:3f:23:fb:34:28:9b:96:ae:b5:8c:25:8e:a5:2b:75:1f:52: 89:46:d4:b1:c8:df:8a:80:6d:70:be:c7:dc:03:f7:41:5e:d2: 1a:9f:92:a1:82:dd:93:c5:b4:5d:5a:ab:07:31:b1:57:67:34: 9d:53:16:11:d6:56:95:4f:b4:51:3c:10:02:ae:d4:0c:14:c6: d6:f6:73:df:79:6e:05:8d:21:f8:f5:50:b6:51:fb:00:36:65: 82:25:e0:8f:4b:8d:27:7e:ee:bc:fe:58:54:9e:fd:d0:12:b4: 0b:fc:8e:bd:cb:76:b6:07:34:8d:ed:35:c8:0f:46:b8:4f:4e: bc:d5:e6:28:d3:28:34:1e:a8:81:69:5f:b4:db:74:d4:ea:cc: 05:8e:46:44:95:a2:e7:38:97:fa:8d:8c:b9:0e:59:50:e3:95: 02:1a:9f:b5:bc:0f:7e:cf:7a:4d:4e:3a:8d:df:97:da:1b:df: 36:6c:83:49:f0:26:34:b0:62:ca:ec:7a:2d:3a:87:14:0e:b3: 87:70:16:06:87:39:81:c1:d4:e1:c2:e2:29:af:76:a0:36:92: bf:5b:77:4e:33:26:ce:90:5f:e2:28:f0:4c:75:eb:a3:c3:7a: c2:b5:af:ab:98:b9:31:cc:cf:b7:fc:29:3b:54:23:1b:64:9c: 84:b4:90:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMiPm9bUCjYHhsPkTiEWfZ9+rz5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JFN0ZD MDEzQzYxRTAeFw0yNTA5MDcyMDA2MDhaFw0yNTA5MTEwMDQ0MDhaMDMxMTAvBgNV BAMTKENENTRFNDZFN0NDRThCM0RCQkM5MkQxMUQwREM4QjVCRkE4RDA5MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbyT1k3BJ+jVO6AHgAHqzSvA3K eozADAeP7d0d5i4QYQsIN1TDZTjSGg4yy2/a7KDSD13CYw6H/UjAfXf3rqwyJfDY wL5LvzfKAML7bTxKz8dbo1nR+NLjN+glb/FIRjewzIcE7urRux1FWAOWdUYJhntV x+Z4dvp8D80kInS5uXME0FSZZTcPkfVKrGoYT3jT0u7r4tqLb3ey8EQUrXDz5H56 /mZoFvbFGkpbmXG4qSptjga+bTFzx2TFCQvPoJll3iqasvITViTkefzhlkzc+bW9 WXarPfpqxCL6pXVz8wbqFilCiCLyVioSaNPkwJSp0xXPsJSXfiaXk234k4HDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzVTkbnzOiz27yS0R0NyLW/qNCRIwHwYDVR0j BBgwFoAUW4w6KekMJcv0YVEksRe+f8ATxh4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWYzYzc2OS1jZmIxLTQyMDYtOWY1NC1jMDU4N2U2M2JhNWIvMC81QjhDM0EyOUU5 MEMyNUNCRjQ2MTUxMjRCMTE3QkU3RkMwMTNDNjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JFN0ZDMDEz QzYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzlmM2M3NjktY2ZiMS00MjA2LTlm NTQtYzA1ODdlNjNiYTViLzAvNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JF N0ZDMDEzQzYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANA/I/s0KJuWrrWMJY6lK3UfUolG1LHI34qA bXC+x9wD90Fe0hqfkqGC3ZPFtF1aqwcxsVdnNJ1TFhHWVpVPtFE8EAKu1AwUxtb2 c995bgWNIfj1ULZR+wA2ZYIl4I9LjSd+7rz+WFSe/dAStAv8jr3LdrYHNI3tNcgP RrhPTrzV5ijTKDQeqIFpX7TbdNTqzAWORkSVouc4l/qNjLkOWVDjlQIan7W8D37P ek1OOo3fl9ob3zZsg0nwJjSwYsrsei06hxQOs4dwFgaHOYHB1OHC4imvdqA2kr9b d04zJs6QX+Io8Ex166PDesK1r6uYuTHMz7f8KTtUIxtknIS0kDU= -----END CERTIFICATE-----Generated at Tue Sep 9 18:31:06 2025 by rpki-client