$ rpki-client -vvf repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft File: 5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft (raw, json) Hash identifier: xkDrl340Lwic+yAVJvyzA/6tOEEiqj5qxkLkPMBZjpY= Subject key identifier: D1:47:9A:F6:09:5F:1C:59:D5:1D:5A:7B:07:9B:3C:CC:48:54:D6:D3 Authority key identifier: 53:35:07:6B:95:F2:97:8B:E3:AC:DB:39:36:0A:E5:A2:2D:0D:4B:55 Certificate issuer: /CN=5335076B95F2978BE3ACDB39360AE5A22D0D4B55 Certificate serial: 19611ADFEF11158A875C0099B3D629B4CD60E5DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft Manifest number: 01DD Signing time: Sat 06 Sep 2025 16:41:10 +0000 Manifest this update: Sat 06 Sep 2025 16:36:10 +0000 Manifest next update: Wed 10 Sep 2025 04:00:10 +0000 Files and hashes: 1: 5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl (hash: KmK+xqYlzNaU/koj4puY5Q9hC1/JaKCuzTDB4NgP2Rs=) 2: 323430353a636534303a3a2f33322d3438203d3e20313339393838.roa (hash: lyCNDP9EqWqz+HEfKh+8ATTipD904Rt+hS0G+abC8oQ=) 3: 3130332e3134382e3130302e302f32332d3234203d3e20313339393838.roa (hash: hRVeSPhdphVESxw/HVaRN7Uso4dNGcBae9fMOmvqYMU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 04:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:61:1a:df:ef:11:15:8a:87:5c:00:99:b3:d6:29:b4:cd:60:e5:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5335076B95F2978BE3ACDB39360AE5A22D0D4B55 Validity Not Before: Sep 6 16:36:10 2025 GMT Not After : Sep 10 04:00:10 2025 GMT Subject: CN=D1479AF6095F1C59D51D5A7B079B3CCC4854D6D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5e:31:ee:2f:26:1c:39:b7:6a:5e:4e:c2:f2: 30:96:a1:3e:f7:09:df:52:11:24:2b:20:de:1e:55: fe:57:ca:34:c3:79:30:9e:f6:c5:d6:e7:c0:0c:7f: 03:08:e2:a0:42:1c:37:fa:52:75:b8:9a:35:47:04: 93:78:0c:9b:52:22:24:51:4d:26:7b:6e:75:34:e0: 80:a2:b0:9c:d5:25:1a:5e:60:b8:62:00:47:77:8c: 3e:6c:7b:eb:85:80:12:ff:6b:49:4a:33:bd:d3:f3: 6e:a8:a4:8a:4a:99:42:01:2a:a6:7c:1c:3e:4a:7b: 05:cc:d8:19:ce:cc:82:45:8c:a7:39:ae:0b:15:7c: 2a:21:89:f2:70:d4:ff:e8:97:c7:ee:78:55:59:bd: f6:cc:7f:4d:43:ec:9a:68:af:3b:0f:af:46:a6:2a: 80:de:2f:95:b8:b7:cd:43:d6:74:7d:e0:55:54:32: f4:ea:25:43:1b:66:cb:45:37:d6:5a:bf:e3:9e:9b: da:62:c1:f4:2f:c5:23:7a:61:f5:d7:b2:7a:ce:3e: 95:9b:59:0f:c1:5f:2d:71:70:69:bf:ff:26:b8:d5: d7:30:3a:7e:49:fa:cd:5b:e0:6c:9f:76:54:4d:08: a8:c2:91:7e:1d:c7:0a:29:f2:04:b9:b4:54:11:f1: c8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:47:9A:F6:09:5F:1C:59:D5:1D:5A:7B:07:9B:3C:CC:48:54:D6:D3 X509v3 Authority Key Identifier: keyid:53:35:07:6B:95:F2:97:8B:E3:AC:DB:39:36:0A:E5:A2:2D:0D:4B:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:66:2e:a8:1a:4c:ba:bc:34:7d:85:5c:f2:4c:90:f0:43:b4: 7c:71:d6:19:bf:46:54:56:35:b1:5f:c9:d4:b6:69:42:38:b0: 94:ae:53:09:07:7c:20:d3:b6:17:eb:84:21:d1:0f:07:0d:bb: 1e:f2:e6:d2:9c:be:e3:95:14:71:89:f7:38:88:9b:69:39:97: 54:ea:4c:8d:af:31:c4:37:7f:82:d4:1c:b0:1f:4a:3f:ea:5c: 06:14:42:83:01:0f:21:27:8f:b7:06:a3:9e:9b:cb:ad:83:3a: 4b:9c:c0:f0:d4:8c:89:80:64:4b:a0:ff:26:0c:e7:6a:ba:0c: 69:85:d8:39:b2:1c:01:c9:59:83:7c:0a:e2:95:44:a7:b4:40: 1b:8d:55:7f:75:7a:68:aa:e3:c5:22:06:79:67:1f:e1:8a:66: e1:59:07:7c:62:2d:e0:4b:af:e5:93:f4:c9:cf:6b:9e:61:a4: fb:be:ba:9f:51:75:14:62:1b:ee:f9:2a:e2:8e:fa:c6:6d:a4: 14:ca:86:f8:e3:15:70:f9:5c:d3:c0:6b:62:b0:08:a4:19:5a: 70:79:2f:48:57:d7:b3:84:63:f3:33:a4:20:43:28:b0:34:59: 16:31:d6:04:67:3f:f1:c6:a5:4b:7b:02:a3:5a:84:40:ed:aa: 0d:ef:30:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGWEa3+8RFYqHXACZs9YptM1g5d4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMzNTA3NkI5NUYyOTc4QkUzQUNEQjM5MzYwQUU1QTIy RDBENEI1NTAeFw0yNTA5MDYxNjM2MTBaFw0yNTA5MTAwNDAwMTBaMDMxMTAvBgNV BAMTKEQxNDc5QUY2MDk1RjFDNTlENTFENUE3QjA3OUIzQ0NDNDg1NEQ2RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTXjHuLyYcObdqXk7C8jCWoT73 Cd9SESQrIN4eVf5XyjTDeTCe9sXW58AMfwMI4qBCHDf6UnW4mjVHBJN4DJtSIiRR TSZ7bnU04ICisJzVJRpeYLhiAEd3jD5se+uFgBL/a0lKM73T826opIpKmUIBKqZ8 HD5KewXM2BnOzIJFjKc5rgsVfCohifJw1P/ol8fueFVZvfbMf01D7JporzsPr0am KoDeL5W4t81D1nR94FVUMvTqJUMbZstFN9Zav+Oem9piwfQvxSN6YfXXsnrOPpWb WQ/BXy1xcGm//ya41dcwOn5J+s1b4GyfdlRNCKjCkX4dxwop8gS5tFQR8cgfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0Uea9glfHFnVHVp7B5s8zEhU1tMwHwYDVR0j BBgwFoAUUzUHa5Xyl4vjrNs5Ngrloi0NS1UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmQ2NmQxMC1iODU3LTRiZWYtOTM5NS00NWQ1YWIyYzQ0ZjkvMC81MzM1MDc2Qjk1 RjI5NzhCRTNBQ0RCMzkzNjBBRTVBMjJEMEQ0QjU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTMzNTA3NkI5NUYyOTc4QkUzQUNEQjM5MzYwQUU1QTIyRDBE NEI1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJkNjZkMTAtYjg1Ny00YmVmLTkz OTUtNDVkNWFiMmM0NGY5LzAvNTMzNTA3NkI5NUYyOTc4QkUzQUNEQjM5MzYwQUU1 QTIyRDBENEI1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACBmLqgaTLq8NH2FXPJMkPBDtHxx1hm/RlRW NbFfydS2aUI4sJSuUwkHfCDTthfrhCHRDwcNux7y5tKcvuOVFHGJ9ziIm2k5l1Tq TI2vMcQ3f4LUHLAfSj/qXAYUQoMBDyEnj7cGo56by62DOkucwPDUjImAZEug/yYM 52q6DGmF2DmyHAHJWYN8CuKVRKe0QBuNVX91emiq48UiBnlnH+GKZuFZB3xiLeBL r+WT9MnPa55hpPu+up9RdRRiG+75KuKO+sZtpBTKhvjjFXD5XNPAa2KwCKQZWnB5 L0hX17OEY/MzpCBDKLA0WRYx1gRnP/HGpUt7AqNahEDtqg3vMJQ= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:50 2025 by rpki-client