$ rpki-client -vvf repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft File: 5DF7F909917C4DA09D7486E2B70323E7972B7675.mft (raw, json) Hash identifier: lro5sPS4TnVYrey7ZUlWBaag4QzYAmxEpWQoQ/AP030= Subject key identifier: 25:AE:26:67:E6:5C:0B:F8:B5:BE:53:ED:D9:75:04:28:7D:B3:1B:4F Authority key identifier: 5D:F7:F9:09:91:7C:4D:A0:9D:74:86:E2:B7:03:23:E7:97:2B:76:75 Certificate issuer: /CN=5DF7F909917C4DA09D7486E2B70323E7972B7675 Certificate serial: 14F99C4B77031D0AC30794A3C8DCD3510B7493D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DF7F909917C4DA09D7486E2B70323E7972B7675.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft Manifest number: 021B Signing time: Sat 06 Sep 2025 18:51:42 +0000 Manifest this update: Sat 06 Sep 2025 18:46:42 +0000 Manifest next update: Wed 10 Sep 2025 02:00:42 +0000 Files and hashes: 1: 3130332e3138362e3136372e302f32342d3234203d3e20313439373033.roa (hash: uTV9a8fdyT6ZmJ8NRNVsn4KQvmLK6xkJNJmzdYWe1pQ=) 2: 5DF7F909917C4DA09D7486E2B70323E7972B7675.crl (hash: U1VzALxUAIbauLAxzd2xtUAUcarz0FCUxtQgQrwR+u4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.crl rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DF7F909917C4DA09D7486E2B70323E7972B7675.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:f9:9c:4b:77:03:1d:0a:c3:07:94:a3:c8:dc:d3:51:0b:74:93:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DF7F909917C4DA09D7486E2B70323E7972B7675 Validity Not Before: Sep 6 18:46:42 2025 GMT Not After : Sep 10 02:00:42 2025 GMT Subject: CN=25AE2667E65C0BF8B5BE53EDD97504287DB31B4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:04:ef:76:65:42:07:3b:37:e0:9f:b6:94:53: 0e:92:51:8d:fe:5f:8a:14:b1:58:72:fb:e7:ae:41: 8a:eb:e0:e5:9d:4a:e0:76:32:61:c2:b7:f8:02:8b: 21:2e:c9:29:34:6b:96:4f:23:8f:d7:1d:a8:bb:68: 43:72:cb:a8:b2:06:4a:5b:38:e5:a2:db:37:f8:14: 13:3b:43:97:24:af:4e:12:9f:62:b5:81:e9:ad:ea: 66:9f:5a:d5:73:f9:7f:a0:5c:1e:a9:1c:b6:12:7f: 71:ce:1a:58:e6:e9:80:a6:3f:aa:06:67:2b:db:a8: 73:f6:eb:f8:01:de:87:cd:a6:a4:11:d7:05:86:5b: 00:3b:c2:b6:8e:db:cd:f8:88:03:38:41:d6:79:48: ff:a4:c6:ff:96:dc:54:e8:d4:53:23:64:f1:de:f3: 35:84:69:35:6f:6e:6d:50:30:08:c4:4e:be:7b:36: 44:d4:5e:ff:4c:89:e0:23:a5:32:7e:4a:91:2c:17: 16:24:58:d3:58:a6:88:80:1f:f0:0f:26:9b:40:7e: e6:43:b5:8f:99:25:c1:05:ff:3d:13:0a:19:66:c1: da:6b:f0:ed:8f:22:11:75:5c:19:0f:83:21:b2:dd: 10:3d:7a:1f:73:38:9b:9c:a3:52:8f:73:61:d8:59: e2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:AE:26:67:E6:5C:0B:F8:B5:BE:53:ED:D9:75:04:28:7D:B3:1B:4F X509v3 Authority Key Identifier: keyid:5D:F7:F9:09:91:7C:4D:A0:9D:74:86:E2:B7:03:23:E7:97:2B:76:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DF7F909917C4DA09D7486E2B70323E7972B7675.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:f8:e1:72:dd:f2:ac:8f:a5:f9:c7:66:3e:7a:4f:ca:d7:86: 99:89:44:80:7e:a0:02:a4:9e:59:83:22:4c:94:0a:48:11:d6: 4f:a7:85:a8:0a:e0:3e:f1:49:bc:1d:47:42:7c:75:ba:f0:ce: 23:57:8f:7e:9e:ac:d8:8f:f1:bc:25:6a:27:e9:e6:b0:85:84: 26:d1:ee:5f:3c:74:e0:74:87:fa:27:88:dd:a3:db:18:09:0b: 09:48:d5:2b:20:8a:1d:61:56:eb:01:71:10:42:32:fe:88:a4: b7:8c:fa:a4:6d:2a:f2:d7:12:9e:e7:15:9f:bc:9c:1e:a4:eb: 0c:86:c7:61:3a:40:6c:a7:b2:70:f4:d9:4c:4e:9e:06:1f:2a: 62:95:9b:70:6c:c6:be:d4:d8:8c:25:6e:3e:bc:94:27:8c:5a: 55:c3:ea:cf:c1:ad:dc:dd:72:72:3b:35:69:6d:05:fd:d9:71: 0a:fa:82:21:12:c3:fd:04:92:87:e3:4e:53:31:78:40:ed:30: 02:d4:68:24:81:8a:6e:a5:c1:b6:a8:35:b4:14:ba:43:74:18: bf:0c:90:76:64:42:15:a3:01:3e:41:ab:cd:c7:0f:ee:00:a9: d4:1d:ef:32:ff:00:46:00:f7:c0:f0:97:f2:c4:9f:bd:52:79: 1a:63:5b:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFPmcS3cDHQrDB5SjyNzTUQt0k9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGN0Y5MDk5MTdDNERBMDlENzQ4NkUyQjcwMzIzRTc5 NzJCNzY3NTAeFw0yNTA5MDYxODQ2NDJaFw0yNTA5MTAwMjAwNDJaMDMxMTAvBgNV BAMTKDI1QUUyNjY3RTY1QzBCRjhCNUJFNTNFREQ5NzUwNDI4N0RCMzFCNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoBO92ZUIHOzfgn7aUUw6SUY3+ X4oUsVhy++euQYrr4OWdSuB2MmHCt/gCiyEuySk0a5ZPI4/XHai7aENyy6iyBkpb OOWi2zf4FBM7Q5ckr04Sn2K1gemt6mafWtVz+X+gXB6pHLYSf3HOGljm6YCmP6oG ZyvbqHP26/gB3ofNpqQR1wWGWwA7wraO2834iAM4QdZ5SP+kxv+W3FTo1FMjZPHe 8zWEaTVvbm1QMAjETr57NkTUXv9MieAjpTJ+SpEsFxYkWNNYpoiAH/APJptAfuZD tY+ZJcEF/z0TChlmwdpr8O2PIhF1XBkPgyGy3RA9eh9zOJuco1KPc2HYWeJVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJa4mZ+ZcC/i1vlPt2XUEKH2zG08wHwYDVR0j BBgwFoAUXff5CZF8TaCddIbitwMj55crdnUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2I2NGMzZS1iMTNkLTQyN2EtYjk4Mi00Mzk0MDczZTVjZjUvMC81REY3RjkwOTkx N0M0REEwOUQ3NDg2RTJCNzAzMjNFNzk3MkI3Njc1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNURGN0Y5MDk5MTdDNERBMDlENzQ4NkUyQjcwMzIzRTc5NzJC NzY3NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdiNjRjM2UtYjEzZC00MjdhLWI5 ODItNDM5NDA3M2U1Y2Y1LzAvNURGN0Y5MDk5MTdDNERBMDlENzQ4NkUyQjcwMzIz RTc5NzJCNzY3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFP44XLd8qyPpfnHZj56T8rXhpmJRIB+oAKk nlmDIkyUCkgR1k+nhagK4D7xSbwdR0J8dbrwziNXj36erNiP8bwlaifp5rCFhCbR 7l88dOB0h/oniN2j2xgJCwlI1Ssgih1hVusBcRBCMv6IpLeM+qRtKvLXEp7nFZ+8 nB6k6wyGx2E6QGynsnD02UxOngYfKmKVm3Bsxr7U2Iwlbj68lCeMWlXD6s/Brdzd cnI7NWltBf3ZcQr6giESw/0EkofjTlMxeEDtMALUaCSBim6lwbaoNbQUukN0GL8M kHZkQhWjAT5Bq83HD+4AqdQd7zL/AEYA98Dwl/LEn71SeRpjW8E= -----END CERTIFICATE-----Generated at Sun Sep 7 15:13:28 2025 by rpki-client