$ rpki-client -vvf repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft File: 5EC928AFD73AFC70F10C468E21482031920DF521.mft (raw, json) Hash identifier: fqZwga3GTCFANWtlzog2PvdIvVTMBiMHM2Xkzei6Uuc= Subject key identifier: CB:1C:0B:79:F9:E3:9F:C2:B5:F9:F1:61:BE:98:D4:A2:BD:7D:07:CF Authority key identifier: 5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21 Certificate issuer: /CN=5EC928AFD73AFC70F10C468E21482031920DF521 Certificate serial: 6398D0BE8ED50342B4C36F9D84037FA33034BBDA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft Manifest number: 0105 Signing time: Tue 22 Jul 2025 08:00:37 +0000 Manifest this update: Tue 22 Jul 2025 07:55:37 +0000 Manifest next update: Fri 25 Jul 2025 18:44:37 +0000 Files and hashes: 1: 3135372e31302e39302e302f32342d3234203d3e20313532303836.roa (hash: G+zk6B4j6LBv4VXf/ZrduIBLIatUxzNWyMHjZfotW/M=) 2: 5EC928AFD73AFC70F10C468E21482031920DF521.crl (hash: sz1o7nkrO3JxUeA1IEg1iQ3b8XSSDYlTRrAwsHBRp8E=) 3: 3135372e31302e39302e302f32332d3233203d3e20313532303836.roa (hash: sqhh6fhWizwXoH9l3XVTNUts+MHffcu11O/8GZa+UZk=) 4: 3135372e31302e39312e302f32342d3234203d3e20313532303836.roa (hash: aoRUG5CQtzRZGdloOpfTrb2fX3fCFwbxN1OMSRI1BYY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.crl rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 16:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:98:d0:be:8e:d5:03:42:b4:c3:6f:9d:84:03:7f:a3:30:34:bb:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EC928AFD73AFC70F10C468E21482031920DF521 Validity Not Before: Jul 22 07:55:37 2025 GMT Not After : Jul 25 18:44:37 2025 GMT Subject: CN=CB1C0B79F9E39FC2B5F9F161BE98D4A2BD7D07CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:05:29:9d:a9:4a:81:d4:56:4d:a9:89:30:08: e8:2d:66:f0:c8:b8:0e:0b:f7:79:7f:de:e2:9e:44: b8:cb:a4:68:b5:bb:fe:20:ee:07:f0:a6:34:fd:c0: f7:74:e4:c5:f5:6c:39:96:ca:af:93:bc:1e:24:5a: 19:0c:a8:27:88:21:bf:dd:e7:cf:fa:8a:e9:3b:87: 9b:17:fe:ba:89:d2:30:26:93:68:99:a2:de:0c:03: d4:80:a6:81:b0:80:bb:dd:5e:b2:4e:cd:5d:72:e6: 95:f0:24:84:ba:b4:9b:23:b7:bf:33:1f:66:54:84: be:92:d4:d9:78:c2:65:7c:e9:c4:69:06:c3:6d:6b: 58:11:4b:28:3f:ab:01:5c:97:02:a4:a0:bd:03:3b: 85:be:a8:f1:72:89:8a:2c:1a:f3:d1:37:35:29:9a: fc:36:78:23:81:ce:90:9f:b8:a0:8e:7b:89:64:5c: 8a:8c:ef:7b:68:b0:4e:e1:07:cf:13:b8:fc:a4:fc: 22:ec:cd:c9:0b:8a:0d:ff:5e:61:06:9a:e8:8d:d6: 24:ac:24:dc:f9:9b:05:43:ef:a6:2a:a2:53:d2:eb: 6d:54:76:9b:59:f6:38:2a:88:13:04:39:b3:94:c0: dc:32:d9:41:a4:40:de:60:bb:e7:8c:a8:d9:b7:4a: ee:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:1C:0B:79:F9:E3:9F:C2:B5:F9:F1:61:BE:98:D4:A2:BD:7D:07:CF X509v3 Authority Key Identifier: keyid:5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:fb:6a:0d:d9:da:2e:5c:51:3c:e9:4d:cf:fc:b6:4b:37:15: eb:c2:4e:8a:10:b4:c8:e7:ae:1f:11:d4:08:c2:fd:29:96:53: 58:eb:aa:5f:20:ba:9c:85:a9:c7:af:6c:a0:38:43:88:f4:e5: 2f:dc:5b:14:2e:5d:dc:76:c4:17:74:fb:c5:fe:58:65:0c:42: 34:44:67:00:0d:41:90:35:89:38:08:5e:8d:77:8e:b7:36:f0: 4c:1d:a9:b8:cc:7a:46:33:bc:03:8c:18:86:2a:64:38:20:08: cb:9a:78:17:b0:b3:51:46:f9:8d:1b:58:12:45:df:c1:28:8e: 42:c5:1d:e0:cb:bc:7a:de:e6:04:13:57:74:25:6b:ea:34:e0: d0:3a:a1:74:9c:3d:e5:76:58:7f:0b:9f:d3:fe:41:d1:77:c5: d4:8c:4c:8e:e7:28:4a:76:03:5c:38:12:37:83:bf:51:29:c6: 66:68:62:f7:eb:cc:8e:5a:3f:c0:0c:1c:dc:98:1b:3d:b5:31: 19:03:c4:75:27:ca:16:cd:9a:63:d3:7d:72:c2:6d:96:0a:4d: f7:14:b5:f3:00:81:8a:1f:b2:fc:80:34:d8:39:62:60:e2:d6: 49:0e:14:c1:10:85:34:ae:f9:4b:8c:2d:fc:8a:7e:97:c3:b4: f3:57:27:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY5jQvo7VA0K0w2+dhAN/ozA0u9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIwMzE5 MjBERjUyMTAeFw0yNTA3MjIwNzU1MzdaFw0yNTA3MjUxODQ0MzdaMDMxMTAvBgNV BAMTKENCMUMwQjc5RjlFMzlGQzJCNUY5RjE2MUJFOThENEEyQkQ3RDA3Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHBSmdqUqB1FZNqYkwCOgtZvDI uA4L93l/3uKeRLjLpGi1u/4g7gfwpjT9wPd05MX1bDmWyq+TvB4kWhkMqCeIIb/d 58/6iuk7h5sX/rqJ0jAmk2iZot4MA9SApoGwgLvdXrJOzV1y5pXwJIS6tJsjt78z H2ZUhL6S1Nl4wmV86cRpBsNta1gRSyg/qwFclwKkoL0DO4W+qPFyiYosGvPRNzUp mvw2eCOBzpCfuKCOe4lkXIqM73tosE7hB88TuPyk/CLszckLig3/XmEGmuiN1iSs JNz5mwVD76YqolPS621UdptZ9jgqiBMEObOUwNwy2UGkQN5gu+eMqNm3Su6vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyxwLefnjn8K1+fFhvpjUor19B88wHwYDVR0j BBgwFoAUXskor9c6/HDxDEaOIUggMZIN9SEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2YzZjhjOC0wNDA2LTRiMzgtYTdhOC1kY2IxNWU0MWYyYjcvMC81RUM5MjhBRkQ3 M0FGQzcwRjEwQzQ2OEUyMTQ4MjAzMTkyMERGNTIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIwMzE5MjBE RjUyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNmM2Y4YzgtMDQwNi00YjM4LWE3 YTgtZGNiMTVlNDFmMmI3LzAvNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIw MzE5MjBERjUyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFb7ag3Z2i5cUTzpTc/8tks3FevCTooQtMjn rh8R1AjC/SmWU1jrql8gupyFqcevbKA4Q4j05S/cWxQuXdx2xBd0+8X+WGUMQjRE ZwANQZA1iTgIXo13jrc28EwdqbjMekYzvAOMGIYqZDggCMuaeBews1FG+Y0bWBJF 38EojkLFHeDLvHre5gQTV3Qla+o04NA6oXScPeV2WH8Ln9P+QdF3xdSMTI7nKEp2 A1w4EjeDv1EpxmZoYvfrzI5aP8AMHNyYGz21MRkDxHUnyhbNmmPTfXLCbZYKTfcU tfMAgYofsvyANNg5YmDi1kkOFMEQhTSu+UuMLfyKfpfDtPNXJx0= -----END CERTIFICATE-----Generated at Tue Jul 22 19:29:15 2025 by rpki-client