$ rpki-client -vvf repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft File: C5CA2999FE7612F56CCCB7441743B05181458ED0.mft (raw, json) Hash identifier: rZpZF72Kf5vMCxuSZmwcNwyHzaofmGrd7K4asK+mNO4= Subject key identifier: D2:88:D4:CF:CB:FC:9F:02:04:F4:7C:F3:AB:C3:55:FB:FB:55:8C:B8 Authority key identifier: C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0 Certificate issuer: /CN=C5CA2999FE7612F56CCCB7441743B05181458ED0 Certificate serial: 0A2E85143332F19D089019B2C8519A7EB7C7485B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft Manifest number: 0504 Signing time: Sat 06 Sep 2025 10:30:39 +0000 Manifest this update: Sat 06 Sep 2025 10:25:39 +0000 Manifest next update: Tue 09 Sep 2025 16:54:39 +0000 Files and hashes: 1: 3130332e3134322e3230322e302f32332d3233203d3e20313339333738.roa (hash: aOFDhPstKOFaNipOEFwONnhh/OGsZlp5fuQdDXOoo9E=) 2: C5CA2999FE7612F56CCCB7441743B05181458ED0.crl (hash: JKYORIAvotjCffQ0Auh0Axo7vuYsiHwLvQpQe/pRtC4=) 3: 3130332e3134322e3230322e302f32342d3234203d3e20313339333738.roa (hash: kZ/7LdQ98yA+6ycYvld45u3DxaVBg4NMh+WZ028gPpU=) 4: 3130332e3134322e3230332e302f32342d3234203d3e20313339333738.roa (hash: TJhHkKwr35GRF8gqIxcj9n16SqAaRRuK8PF46Ie+LXg=) 5: 323030313a6466313a353638303a3a2f34382d3438203d3e20313339333738.roa (hash: q7ox9dPZeS59odB2IJMVaFXBFhKkSZPWVMJt5aLWrRc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 16:54:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:2e:85:14:33:32:f1:9d:08:90:19:b2:c8:51:9a:7e:b7:c7:48:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5CA2999FE7612F56CCCB7441743B05181458ED0 Validity Not Before: Sep 6 10:25:39 2025 GMT Not After : Sep 9 16:54:39 2025 GMT Subject: CN=D288D4CFCBFC9F0204F47CF3ABC355FBFB558CB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0c:bb:07:a2:78:07:92:f8:31:79:c7:85:ec: 6c:75:86:df:40:80:d2:77:ff:de:e0:76:f0:33:c5: 7c:ff:1f:50:6d:98:8c:e2:30:cf:08:ff:95:4c:98: ca:3b:4c:cb:f9:a4:7d:3b:11:49:c3:89:24:4e:f7: 60:5e:d3:b5:aa:cb:67:84:ae:b6:5a:6b:98:a5:62: c5:81:6b:5f:bb:3d:b3:ae:12:65:54:b1:7d:6f:d7: 26:77:81:93:3d:2a:1f:b6:ef:3d:49:f2:0e:1d:ed: bc:83:f6:62:0f:fa:1e:5a:dd:9c:9d:6b:f5:86:15: fb:e4:e6:19:95:33:9e:f0:f7:71:3b:a9:a9:83:de: 52:0e:f0:63:7c:7b:de:38:6a:cc:8c:d1:87:f4:18: 02:2c:72:28:0e:54:e5:ee:a8:69:1c:bb:4e:72:ad: 15:f1:f7:9c:a3:9f:1d:17:e8:20:5a:81:b5:e0:e3: 1b:6d:70:6e:1e:94:e1:01:48:a4:a9:0f:89:ba:a7: b7:49:95:f9:b9:70:47:0d:55:f3:d9:64:75:c7:79: ce:30:80:73:86:bc:eb:cc:12:2c:4a:75:58:48:da: 02:a2:5c:6c:5b:f3:65:07:c2:c1:a7:43:a1:3f:e7: e8:51:3b:14:98:24:32:39:b2:48:19:5d:dd:f2:9b: 3a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:88:D4:CF:CB:FC:9F:02:04:F4:7C:F3:AB:C3:55:FB:FB:55:8C:B8 X509v3 Authority Key Identifier: keyid:C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:58:2f:04:c3:c5:f2:e0:b3:ba:09:e9:78:8d:35:18:54:be: a7:2b:ca:e4:48:97:b0:a1:10:6f:f8:12:43:2f:c9:c8:b8:5b: a5:b8:4b:ae:0f:d9:2b:b7:ef:63:4a:3a:c7:7e:63:4a:10:b1: 7b:25:5a:20:cb:4c:18:16:74:38:bc:30:01:ab:c9:f9:ac:e9: 0f:1f:03:96:04:e4:a0:b0:92:56:e6:c2:20:da:54:67:86:68: 00:94:5e:71:5e:7e:43:4c:16:7b:80:dc:4a:9e:3c:9a:91:1f: b4:a0:81:36:a8:88:46:cf:b9:cf:aa:6e:f3:6b:44:91:6b:9c: c7:22:ad:41:53:e8:0d:10:90:26:f5:33:40:aa:d5:50:7d:af: 60:c9:46:cb:82:fb:b5:43:dd:dc:44:fd:3e:9f:df:c3:aa:91: b6:02:1d:9c:6c:2e:71:fc:f7:f1:45:3d:0e:7d:31:75:63:12: a2:39:8e:2c:eb:0c:91:74:02:83:a1:0c:c8:41:6e:67:9a:fc: 81:9e:b5:9b:39:50:a5:21:dd:16:d3:cf:5b:3a:2d:f3:81:c4: 49:96:b5:68:ea:45:94:e2:78:3b:4b:02:94:e4:42:47:1b:ad: ca:19:39:28:1b:9f:89:8f:7f:6d:4b:05:6d:08:fb:d8:cd:55: 8d:00:f1:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCi6FFDMy8Z0IkBmyyFGafrfHSFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0IwNTE4 MTQ1OEVEMDAeFw0yNTA5MDYxMDI1MzlaFw0yNTA5MDkxNjU0MzlaMDMxMTAvBgNV BAMTKEQyODhENENGQ0JGQzlGMDIwNEY0N0NGM0FCQzM1NUZCRkI1NThDQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcDLsHongHkvgxeceF7Gx1ht9A gNJ3/97gdvAzxXz/H1BtmIziMM8I/5VMmMo7TMv5pH07EUnDiSRO92Be07Wqy2eE rrZaa5ilYsWBa1+7PbOuEmVUsX1v1yZ3gZM9Kh+27z1J8g4d7byD9mIP+h5a3Zyd a/WGFfvk5hmVM57w93E7qamD3lIO8GN8e944asyM0Yf0GAIscigOVOXuqGkcu05y rRXx95yjnx0X6CBagbXg4xttcG4elOEBSKSpD4m6p7dJlfm5cEcNVfPZZHXHec4w gHOGvOvMEixKdVhI2gKiXGxb82UHwsGnQ6E/5+hROxSYJDI5skgZXd3ymzq1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0ojUz8v8nwIE9Hzzq8NV+/tVjLgwHwYDVR0j BBgwFoAUxcopmf52EvVszLdEF0OwUYFFjtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjdmYjgzNy0xYjJmLTRjNGUtYjk5OS02ZTk5MGRkYzE0OTkvMC9DNUNBMjk5OUZF NzYxMkY1NkNDQ0I3NDQxNzQzQjA1MTgxNDU4RUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0IwNTE4MTQ1 OEVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDY3ZmI4MzctMWIyZi00YzRlLWI5 OTktNmU5OTBkZGMxNDk5LzAvQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0Iw NTE4MTQ1OEVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKZYLwTDxfLgs7oJ6XiNNRhUvqcryuRIl7Ch EG/4EkMvyci4W6W4S64P2Su372NKOsd+Y0oQsXslWiDLTBgWdDi8MAGryfms6Q8f A5YE5KCwklbmwiDaVGeGaACUXnFefkNMFnuA3EqePJqRH7SggTaoiEbPuc+qbvNr RJFrnMcirUFT6A0QkCb1M0Cq1VB9r2DJRsuC+7VD3dxE/T6f38OqkbYCHZxsLnH8 9/FFPQ59MXVjEqI5jizrDJF0AoOhDMhBbmea/IGetZs5UKUh3RbTz1s6LfOBxEmW tWjqRZTieDtLApTkQkcbrcoZOSgbn4mPf21LBW0I+9jNVY0A8cQ= -----END CERTIFICATE-----Generated at Sun Sep 7 15:36:48 2025 by rpki-client