$ rpki-client -vvf repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft File: 5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft (raw, json) Hash identifier: Dhk1XrfAR07zUWAIikjl6YdNo6eKtxMen71oVMa1kdc= Subject key identifier: 25:91:8D:65:16:8F:EF:0D:4C:96:CC:94:A7:E0:91:AB:D0:7B:E0:BC Authority key identifier: 5A:8D:4D:EC:5F:C2:9B:E6:E2:49:04:62:F5:80:90:3D:D4:A9:84:EB Certificate issuer: /CN=5A8D4DEC5FC29BE6E2490462F580903DD4A984EB Certificate serial: 475F6853D9B302BD9F017B5AC1234A0DF8270469 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft Manifest number: C1 Signing time: Mon 21 Jul 2025 22:21:05 +0000 Manifest this update: Mon 21 Jul 2025 22:16:05 +0000 Manifest next update: Fri 25 Jul 2025 03:31:05 +0000 Files and hashes: 1: 3135372e36362e3132322e302f32342d3234203d3e203633383538.roa (hash: 4USC1AQzGKvJLoaILHyi8/vcN8nVPul2782sFf1fdxE=) 2: 5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.crl (hash: qzRE/zy6mitX9H3AtbOArHihM2C00zDA+BmviNhpACg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.crl rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 03:31:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:5f:68:53:d9:b3:02:bd:9f:01:7b:5a:c1:23:4a:0d:f8:27:04:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A8D4DEC5FC29BE6E2490462F580903DD4A984EB Validity Not Before: Jul 21 22:16:05 2025 GMT Not After : Jul 25 03:31:05 2025 GMT Subject: CN=25918D65168FEF0D4C96CC94A7E091ABD07BE0BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:86:6f:21:5d:0f:50:f5:f4:6e:f6:e8:0a:c9: bd:ad:74:1d:bc:66:eb:a0:02:2e:a4:cd:ab:ab:77: 90:a5:fc:ad:b8:d3:be:fb:bf:b9:bf:25:fd:99:18: f2:19:55:a7:fb:00:d4:1e:de:ca:27:ac:4f:09:a6: 95:6f:51:b5:6c:a9:32:a0:24:5b:84:5a:31:e4:b8: 43:3a:42:67:a9:64:2c:c1:37:7d:ed:bb:04:33:2f: 69:bf:01:c2:f1:e7:8a:4e:02:96:1c:20:e1:06:19: c7:34:4d:34:b3:dc:4d:96:64:23:6f:9b:0f:1a:cc: 4b:23:50:4f:00:99:de:f5:03:74:12:60:01:60:d7: c2:e4:69:59:94:42:74:06:61:69:10:6d:b5:b5:33: 54:29:ad:23:c2:1e:51:db:5d:7e:ae:05:e1:64:c0: bb:80:d3:66:e3:80:5c:f9:30:9b:2f:fe:9d:9e:b0: 73:8a:d1:2d:63:91:e6:db:61:7f:46:5b:27:1e:f9: 01:8c:56:66:10:3a:9b:52:44:7f:40:85:ba:cf:9e: ec:58:47:2d:41:be:3d:b4:ed:76:8f:18:fa:0e:62: d4:69:15:64:5a:71:8b:e7:7a:ea:3b:e2:c1:57:9c: b1:46:02:73:c6:d6:59:9e:7b:ee:a9:e5:b4:cc:a4: 4e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:91:8D:65:16:8F:EF:0D:4C:96:CC:94:A7:E0:91:AB:D0:7B:E0:BC X509v3 Authority Key Identifier: keyid:5A:8D:4D:EC:5F:C2:9B:E6:E2:49:04:62:F5:80:90:3D:D4:A9:84:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:8a:fd:d2:b2:c9:f6:c3:9a:00:9e:e0:a0:ea:35:bd:e9:1b: d7:4a:49:a6:63:40:27:6c:cd:1e:7e:3c:d4:59:1c:fe:e1:be: f4:ae:1b:6e:bc:62:ae:32:35:92:49:35:27:75:89:cc:16:90: b2:94:40:00:bc:35:c2:9d:ce:b6:e3:09:d2:8d:8c:1c:7f:f3: 55:1a:67:48:ca:2c:87:95:8a:62:28:c6:ec:b8:8c:7d:ec:e9: f7:da:12:92:c2:79:9f:73:e3:4f:47:94:09:f5:13:71:3b:d5: 8b:e1:65:58:dd:ce:76:70:f0:a7:97:9a:ca:8e:d0:5c:54:0e: aa:79:6b:00:40:d3:bb:d2:93:c5:c7:41:8d:f1:d0:1d:9b:4b: 4a:4f:2e:c3:6c:d0:72:b7:8f:2f:8c:2c:e7:d7:93:3b:bd:98: 68:f2:49:c0:cb:94:ec:21:02:76:18:6c:cc:4a:87:09:28:f7: 26:be:d3:dc:c7:01:9d:d2:c8:5f:43:f8:aa:66:b2:96:91:79: 60:57:5c:ab:15:b8:2e:b7:08:46:6f:92:8d:15:01:aa:5b:7d: cc:71:46:94:32:7d:e0:3c:6b:44:bc:d2:5c:74:c9:ed:8b:ee: 71:04:ec:f3:ec:01:71:c9:15:c5:34:c4:bb:7e:66:9c:53:6e: ea:0e:f2:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR19oU9mzAr2fAXtawSNKDfgnBGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE4RDRERUM1RkMyOUJFNkUyNDkwNDYyRjU4MDkwM0RE NEE5ODRFQjAeFw0yNTA3MjEyMjE2MDVaFw0yNTA3MjUwMzMxMDVaMDMxMTAvBgNV BAMTKDI1OTE4RDY1MTY4RkVGMEQ0Qzk2Q0M5NEE3RTA5MUFCRDA3QkUwQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6hm8hXQ9Q9fRu9ugKyb2tdB28 ZuugAi6kzaurd5Cl/K240777v7m/Jf2ZGPIZVaf7ANQe3sonrE8JppVvUbVsqTKg JFuEWjHkuEM6QmepZCzBN33tuwQzL2m/AcLx54pOApYcIOEGGcc0TTSz3E2WZCNv mw8azEsjUE8Amd71A3QSYAFg18LkaVmUQnQGYWkQbbW1M1QprSPCHlHbXX6uBeFk wLuA02bjgFz5MJsv/p2esHOK0S1jkebbYX9GWyce+QGMVmYQOptSRH9AhbrPnuxY Ry1Bvj207XaPGPoOYtRpFWRacYvneuo74sFXnLFGAnPG1lmee+6p5bTMpE5LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJZGNZRaP7w1MlsyUp+CRq9B74LwwHwYDVR0j BBgwFoAUWo1N7F/Cm+biSQRi9YCQPdSphOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZWNmNWQ5NC03ZjFmLTQzYmYtYjdhYS0yMjBmMGMxNTZlYzAvMC81QThENERFQzVG QzI5QkU2RTI0OTA0NjJGNTgwOTAzREQ0QTk4NEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUE4RDRERUM1RkMyOUJFNkUyNDkwNDYyRjU4MDkwM0RENEE5 ODRFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2VjZjVkOTQtN2YxZi00M2JmLWI3 YWEtMjIwZjBjMTU2ZWMwLzAvNUE4RDRERUM1RkMyOUJFNkUyNDkwNDYyRjU4MDkw M0RENEE5ODRFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCK/dKyyfbDmgCe4KDqNb3pG9dKSaZjQCds zR5+PNRZHP7hvvSuG268Yq4yNZJJNSd1icwWkLKUQAC8NcKdzrbjCdKNjBx/81Ua Z0jKLIeVimIoxuy4jH3s6ffaEpLCeZ9z409HlAn1E3E71YvhZVjdznZw8KeXmsqO 0FxUDqp5awBA07vSk8XHQY3x0B2bS0pPLsNs0HK3jy+MLOfXkzu9mGjyScDLlOwh AnYYbMxKhwko9ya+09zHAZ3SyF9D+KpmspaReWBXXKsVuC63CEZvko0VAapbfcxx RpQyfeA8a0S80lx0ye2L7nEE7PPsAXHJFcU0xLt+ZpxTbuoO8kw= -----END CERTIFICATE-----Generated at Wed Jul 23 06:02:09 2025 by rpki-client