$ rpki-client -vvf repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft File: 5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft (raw, json) Hash identifier: X9x4nqeDd/mbABqhX6uit4OXIRorILhGs/59r03FkFw= Subject key identifier: 66:B3:96:EA:E4:E1:B4:0F:0B:A4:89:DA:1E:AC:61:71:9F:EE:FF:26 Authority key identifier: 55:62:ED:3E:2B:75:AA:4C:E3:61:65:EE:02:F7:69:6C:CB:80:45:E1 Certificate issuer: /CN=5562ED3E2B75AA4CE36165EE02F7696CCB8045E1 Certificate serial: 3A9F49E9829398CF913E88D81341EC56436E0D59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft Manifest number: 034D Signing time: Sat 06 Sep 2025 04:12:00 +0000 Manifest this update: Sat 06 Sep 2025 04:07:00 +0000 Manifest next update: Tue 09 Sep 2025 08:29:00 +0000 Files and hashes: 1: 3130332e3137322e33342e302f32332d3234203d3e203538383231.roa (hash: FHzMEbRY0GUv7uZMGg/BZG/YZusPXZ52OHFP1+MW/+A=) 2: 5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl (hash: bXlcRDCyoOmZP30OElw89DWhTsPGuIEen6y1gy+M4D4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 08:29:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:9f:49:e9:82:93:98:cf:91:3e:88:d8:13:41:ec:56:43:6e:0d:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5562ED3E2B75AA4CE36165EE02F7696CCB8045E1 Validity Not Before: Sep 6 04:07:00 2025 GMT Not After : Sep 9 08:29:00 2025 GMT Subject: CN=66B396EAE4E1B40F0BA489DA1EAC61719FEEFF26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5f:67:97:f1:4c:67:a1:60:64:14:0b:83:ac: 80:67:1d:06:4a:03:97:65:26:8f:e7:a0:0f:5f:20: 92:bc:24:5d:e4:1b:ee:66:7b:37:5e:62:b5:59:c7: f0:e9:fa:d6:0d:8c:95:22:1c:95:b4:35:23:66:ee: 7a:29:53:03:84:77:fd:b6:c0:d4:28:d1:97:ef:09: f8:27:65:0e:58:62:54:d4:54:5e:ff:93:fb:24:3a: 2d:3a:42:17:59:69:bd:e4:44:93:41:18:01:66:b1: 45:c9:4d:99:83:7c:46:9d:93:7a:a9:ef:34:43:e1: ea:1d:ce:67:52:20:8f:0a:80:97:eb:85:43:72:ca: 76:83:a8:44:9f:72:41:77:cc:e3:8a:ef:ef:2b:a2: 58:0d:ea:00:fe:fa:f1:aa:61:f0:e4:6f:b0:5c:a7: 67:27:f2:5b:81:11:a9:26:72:83:11:40:a6:b7:01: 5d:77:54:59:d0:81:78:55:6c:9b:d8:3f:b9:44:fe: 8d:a9:0c:c5:e7:cc:e1:4f:21:f0:86:24:18:62:d7: 50:56:8f:96:8e:64:07:85:60:41:d2:14:a0:55:25: a1:d0:7f:b8:4b:15:2a:70:c5:d1:71:1a:f2:15:d9: 15:34:75:08:8e:ed:c6:29:68:03:93:d9:f9:2a:40: 55:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B3:96:EA:E4:E1:B4:0F:0B:A4:89:DA:1E:AC:61:71:9F:EE:FF:26 X509v3 Authority Key Identifier: keyid:55:62:ED:3E:2B:75:AA:4C:E3:61:65:EE:02:F7:69:6C:CB:80:45:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:1d:37:51:bf:a1:6c:f4:c8:64:4c:c9:a1:0b:fb:61:31:65: 6a:bb:c4:3a:16:c1:1d:1a:1c:84:a5:76:42:c5:49:98:18:2e: b0:ea:3d:47:ec:e9:17:20:15:ae:68:ad:24:07:7a:93:84:fc: 8b:29:9f:5f:e4:ca:a2:da:26:0c:1f:cb:c9:4a:b9:0d:3e:a1: ac:06:c3:4b:27:05:80:f6:49:40:94:62:20:de:57:36:b3:81: d7:b9:7f:54:1f:74:80:26:52:a0:66:79:55:38:c0:e7:77:15: 15:82:77:db:41:39:c5:eb:80:72:a9:87:26:22:cb:b3:39:06: d5:dc:d9:41:c4:eb:bc:29:f9:14:e2:25:10:4a:5f:58:18:8e: d7:00:8c:c1:f7:22:45:08:5c:04:4b:3c:37:fa:07:c9:2e:5e: 9c:0f:f8:ac:da:7a:cb:41:22:45:f5:c4:45:dc:dc:d5:7b:27: 69:3f:66:ea:5e:08:72:63:38:e8:8d:bc:d8:31:5e:31:63:bf: ea:a8:11:46:84:27:4d:2a:d9:18:b0:c2:f2:e4:8d:b6:a5:05: e9:53:c3:88:3e:b0:44:22:e3:f9:90:85:58:4f:0b:cc:19:9b: 8d:40:7d:4a:fa:19:0b:97:72:54:46:c6:4d:2d:6d:b5:54:ac: 7e:e4:2c:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOp9J6YKTmM+RPojYE0HsVkNuDVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU2MkVEM0UyQjc1QUE0Q0UzNjE2NUVFMDJGNzY5NkND QjgwNDVFMTAeFw0yNTA5MDYwNDA3MDBaFw0yNTA5MDkwODI5MDBaMDMxMTAvBgNV BAMTKDY2QjM5NkVBRTRFMUI0MEYwQkE0ODlEQTFFQUM2MTcxOUZFRUZGMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUX2eX8UxnoWBkFAuDrIBnHQZK A5dlJo/noA9fIJK8JF3kG+5mezdeYrVZx/Dp+tYNjJUiHJW0NSNm7nopUwOEd/22 wNQo0ZfvCfgnZQ5YYlTUVF7/k/skOi06QhdZab3kRJNBGAFmsUXJTZmDfEadk3qp 7zRD4eodzmdSII8KgJfrhUNyynaDqESfckF3zOOK7+8rolgN6gD++vGqYfDkb7Bc p2cn8luBEakmcoMRQKa3AV13VFnQgXhVbJvYP7lE/o2pDMXnzOFPIfCGJBhi11BW j5aOZAeFYEHSFKBVJaHQf7hLFSpwxdFxGvIV2RU0dQiO7cYpaAOT2fkqQFUrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZrOW6uThtA8LpInaHqxhcZ/u/yYwHwYDVR0j BBgwFoAUVWLtPit1qkzjYWXuAvdpbMuAReEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l N2EzZTkwYS0wMzNhLTRjOGQtOTA3Ny0wZGFmODA1MGZhOGIvMC81NTYyRUQzRTJC NzVBQTRDRTM2MTY1RUUwMkY3Njk2Q0NCODA0NUUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU2MkVEM0UyQjc1QUE0Q0UzNjE2NUVFMDJGNzY5NkNDQjgw NDVFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTdhM2U5MGEtMDMzYS00YzhkLTkw NzctMGRhZjgwNTBmYThiLzAvNTU2MkVEM0UyQjc1QUE0Q0UzNjE2NUVFMDJGNzY5 NkNDQjgwNDVFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0dN1G/oWz0yGRMyaEL+2ExZWq7xDoWwR0a HISldkLFSZgYLrDqPUfs6RcgFa5orSQHepOE/Ispn1/kyqLaJgwfy8lKuQ0+oawG w0snBYD2SUCUYiDeVzazgde5f1QfdIAmUqBmeVU4wOd3FRWCd9tBOcXrgHKphyYi y7M5BtXc2UHE67wp+RTiJRBKX1gYjtcAjMH3IkUIXARLPDf6B8kuXpwP+KzaestB IkX1xEXc3NV7J2k/ZupeCHJjOOiNvNgxXjFjv+qoEUaEJ00q2RiwwvLkjbalBelT w4g+sEQi4/mQhVhPC8wZm41AfUr6GQuXclRGxk0tbbVUrH7kLAk= -----END CERTIFICATE-----Generated at Sun Sep 7 14:03:57 2025 by rpki-client