$ rpki-client -vvf repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft File: 5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft (raw, json) Hash identifier: M+PFKeUgmoORWoTJuTCanIF8PxUjUT+Qw/osxlZ3KtY= Subject key identifier: 78:E8:28:7C:99:02:14:EF:A2:C4:0F:31:11:EC:3A:6E:1F:4A:A7:4E Authority key identifier: 5A:CB:0F:96:C2:B1:25:5E:AB:AA:EB:C1:42:6E:CD:9E:6D:F6:C4:AD Certificate issuer: /CN=5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD Certificate serial: 700580E675EC12DEEABF3986B99F88B7BA8E146E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft Manifest number: 0177 Signing time: Fri 05 Sep 2025 13:40:58 +0000 Manifest this update: Fri 05 Sep 2025 13:35:58 +0000 Manifest next update: Mon 08 Sep 2025 19:43:58 +0000 Files and hashes: 1: 5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.crl (hash: tXAlIEff/z095sV/nelmGA09nXVM0Lkz8i0/kkVeISQ=) 2: 3130332e3235322e34382e302f32342d3234203d3e20313530393931.roa (hash: 3eXzK+GorV6w9BT+6P2VQObNrkmn7G3kB6eMdcv66zE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.crl rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 19:43:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:05:80:e6:75:ec:12:de:ea:bf:39:86:b9:9f:88:b7:ba:8e:14:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD Validity Not Before: Sep 5 13:35:58 2025 GMT Not After : Sep 8 19:43:58 2025 GMT Subject: CN=78E8287C990214EFA2C40F3111EC3A6E1F4AA74E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ca:94:40:3e:90:5b:b9:f3:66:53:82:10:89: 57:69:3f:c2:9f:d3:9e:6c:3c:d6:65:62:f9:2f:b8: a4:64:c9:b6:0d:b0:09:cd:e9:fc:18:40:79:ed:8d: 20:ff:ee:a1:8e:0a:b4:81:96:94:2d:de:d8:51:cb: 5e:57:26:ab:43:2d:83:90:12:35:10:f1:4e:03:52: 53:7b:3e:19:24:28:eb:3c:24:8e:6b:0c:e0:c4:4b: 30:79:ed:9e:13:55:22:5e:59:e8:47:c6:d0:e0:ec: 43:46:d3:29:29:df:15:67:5b:ca:9c:11:ee:f5:67: 95:70:88:2a:76:fa:cb:58:3d:49:bf:28:2a:f6:80: 0a:8f:27:0e:af:96:b4:6b:07:ad:17:57:3f:a8:e3: d2:ab:d9:23:d6:e8:95:b9:61:e8:25:73:64:30:b4: 9c:29:81:8f:15:c5:9a:df:4e:f7:d8:f5:57:ad:d7: 4a:5a:1f:f6:de:d1:c7:76:47:c4:af:27:52:04:8d: bf:ac:ac:5b:7e:a2:d7:2e:a3:45:d8:47:f0:bb:31: db:cf:3c:0c:f1:c3:c6:d4:0d:e0:d2:2e:9d:3c:a5: 5c:9a:80:7d:13:7d:01:ea:8f:7a:1b:25:71:76:1c: d1:d6:20:39:c2:76:9c:53:b9:7c:b1:27:a9:f2:2a: 8a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E8:28:7C:99:02:14:EF:A2:C4:0F:31:11:EC:3A:6E:1F:4A:A7:4E X509v3 Authority Key Identifier: keyid:5A:CB:0F:96:C2:B1:25:5E:AB:AA:EB:C1:42:6E:CD:9E:6D:F6:C4:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:a2:ec:be:8b:c0:26:83:d3:7e:89:9c:60:d3:85:15:fa:a7: 92:e1:95:71:c5:47:ec:97:41:76:cd:d0:60:7f:c5:58:aa:49: 30:73:f0:dc:01:4a:ae:e8:1a:51:fb:1b:3f:01:fa:f3:0b:4d: 01:00:70:05:db:d7:9b:ca:58:0e:22:c8:76:b6:e1:3c:80:12: 34:dd:ad:28:17:72:d2:c0:3b:43:45:10:d0:fe:5c:12:87:d8: f6:b1:a3:1c:72:ec:5d:e5:27:d5:b8:e1:1f:03:f3:a4:c4:a6: fb:4b:e9:0e:a5:6f:ae:a8:e2:4d:8a:a5:09:ee:1c:9f:bc:e2: 3e:51:7a:27:9a:fe:c0:57:01:ac:45:1d:47:d2:d8:4f:7b:07: 13:68:0e:24:1d:33:12:d9:91:a2:8f:4b:61:cc:89:57:53:e6: 49:d9:96:5a:2a:08:63:60:d2:a5:53:9f:05:aa:f1:c0:2d:50: 17:a1:a2:4e:f3:c0:ac:7f:ba:ea:25:cc:fb:91:10:cf:11:5c: 2b:2a:b1:22:fd:20:b6:62:e8:ac:20:a1:f2:7a:7b:77:5c:8c: d6:43:49:4d:93:3d:f8:55:1e:c1:0d:6e:7f:fa:64:e3:cc:16: 18:e6:97:99:c0:df:cc:7a:ce:41:db:c5:76:ac:73:47:6b:e1: 77:71:3f:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcAWA5nXsEt7qvzmGuZ+It7qOFG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFDQjBGOTZDMkIxMjU1RUFCQUFFQkMxNDI2RUNEOUU2 REY2QzRBRDAeFw0yNTA5MDUxMzM1NThaFw0yNTA5MDgxOTQzNThaMDMxMTAvBgNV BAMTKDc4RTgyODdDOTkwMjE0RUZBMkM0MEYzMTExRUMzQTZFMUY0QUE3NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZypRAPpBbufNmU4IQiVdpP8Kf 055sPNZlYvkvuKRkybYNsAnN6fwYQHntjSD/7qGOCrSBlpQt3thRy15XJqtDLYOQ EjUQ8U4DUlN7PhkkKOs8JI5rDODESzB57Z4TVSJeWehHxtDg7ENG0ykp3xVnW8qc Ee71Z5VwiCp2+stYPUm/KCr2gAqPJw6vlrRrB60XVz+o49Kr2SPW6JW5Yeglc2Qw tJwpgY8VxZrfTvfY9Vet10paH/be0cd2R8SvJ1IEjb+srFt+otcuo0XYR/C7MdvP PAzxw8bUDeDSLp08pVyagH0TfQHqj3obJXF2HNHWIDnCdpxTuXyxJ6nyKorpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeOgofJkCFO+ixA8xEew6bh9Kp04wHwYDVR0j BBgwFoAUWssPlsKxJV6rquvBQm7Nnm32xK0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MTNlZWQyYi05NTVlLTQwOTMtODhhNC1mNGRlM2NjOWI5Y2QvMC81QUNCMEY5NkMy QjEyNTVFQUJBQUVCQzE0MjZFQ0Q5RTZERjZDNEFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFDQjBGOTZDMkIxMjU1RUFCQUFFQkMxNDI2RUNEOUU2REY2 QzRBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTEzZWVkMmItOTU1ZS00MDkzLTg4 YTQtZjRkZTNjYzliOWNkLzAvNUFDQjBGOTZDMkIxMjU1RUFCQUFFQkMxNDI2RUNE OUU2REY2QzRBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACSi7L6LwCaD036JnGDThRX6p5LhlXHFR+yX QXbN0GB/xViqSTBz8NwBSq7oGlH7Gz8B+vMLTQEAcAXb15vKWA4iyHa24TyAEjTd rSgXctLAO0NFEND+XBKH2Paxoxxy7F3lJ9W44R8D86TEpvtL6Q6lb66o4k2KpQnu HJ+84j5Reiea/sBXAaxFHUfS2E97BxNoDiQdMxLZkaKPS2HMiVdT5knZlloqCGNg 0qVTnwWq8cAtUBehok7zwKx/uuolzPuREM8RXCsqsSL9ILZi6KwgofJ6e3dcjNZD SU2TPfhVHsENbn/6ZOPMFhjml5nA38x6zkHbxXasc0dr4XdxP6Y= -----END CERTIFICATE-----Generated at Sun Sep 7 15:25:42 2025 by rpki-client