$ rpki-client -vvf repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.mft File: 5B558AD01277C8212C974318B6352FB28BF683AD.mft (raw, json) Hash identifier: IZvvhl92RvXzZURFp6tQlM3G8FZLXj+RVSH22SMUOJo= Subject key identifier: D6:39:3F:6F:5B:F2:BC:61:FA:53:01:1F:C7:3B:C3:F3:62:60:B6:EC Authority key identifier: 5B:55:8A:D0:12:77:C8:21:2C:97:43:18:B6:35:2F:B2:8B:F6:83:AD Certificate issuer: /CN=5B558AD01277C8212C974318B6352FB28BF683AD Certificate serial: 3D70D1299F7E78120A313FDFD527F3BFC777AF82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B558AD01277C8212C974318B6352FB28BF683AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.mft Manifest number: 01B8 Signing time: Sat 06 Sep 2025 23:20:48 +0000 Manifest this update: Sat 06 Sep 2025 23:15:48 +0000 Manifest next update: Wed 10 Sep 2025 02:03:48 +0000 Files and hashes: 1: 3130332e3139362e34302e302f32342d3234203d3e20313530323030.roa (hash: 2i8HfdlFIHezHTi1m8fyUROS/IcCg2re+ftnVgBoAd4=) 2: 5B558AD01277C8212C974318B6352FB28BF683AD.crl (hash: Z4UmCUlYR0MotBEGcBVHidUQo4WZTtcx1pCmAe29SmA=) 3: 3130332e3139362e34312e302f32342d3234203d3e20313530323030.roa (hash: 0shHIoNgf0pQRXh0UI7r08hqky3s0DThmjqdBQikoVM=) 4: 3130332e3139362e34302e302f32332d3233203d3e20313530323030.roa (hash: 0agQaQqzfkfho9nuxHylitEA2rT2w6YSuj3i1Cy3BUc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.crl rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B558AD01277C8212C974318B6352FB28BF683AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 02:03:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:70:d1:29:9f:7e:78:12:0a:31:3f:df:d5:27:f3:bf:c7:77:af:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B558AD01277C8212C974318B6352FB28BF683AD Validity Not Before: Sep 6 23:15:48 2025 GMT Not After : Sep 10 02:03:48 2025 GMT Subject: CN=D6393F6F5BF2BC61FA53011FC73BC3F36260B6EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8c:77:c1:1c:78:a2:ed:20:82:74:76:04:6d: ab:9d:77:61:f2:f4:36:02:6a:9c:7f:0d:fd:26:1a: ff:87:80:0d:28:b6:80:b5:6c:1c:31:7e:b5:15:c5: 7c:1e:1b:ab:02:9e:1c:94:0b:df:87:92:93:af:d5: 02:0e:03:ea:cb:0d:73:ea:7c:c7:9a:ea:e1:68:88: d9:68:05:8c:88:06:38:c3:d5:ad:1b:24:52:af:cb: b0:08:94:b3:7e:84:5d:5c:20:2e:dc:6e:cf:ca:85: df:7d:6d:f1:44:bc:2f:b2:d0:03:d4:23:65:fb:c8: 4b:90:7e:8f:80:5e:ff:0a:d8:dd:7b:f8:02:7f:98: 04:ef:d8:2b:5b:4b:69:c1:b5:5a:23:b1:05:61:e9: 66:3d:94:4f:be:69:67:6b:95:a0:8a:71:69:2a:17: f8:0f:58:54:33:69:47:21:c1:a5:d5:ce:66:f1:af: f3:c4:9b:d7:bf:8a:ed:15:69:34:5c:7c:6f:25:61: f5:2b:e6:23:d2:87:bf:67:eb:db:47:8e:47:1d:e7: 89:95:0f:8d:55:55:9a:72:f1:38:75:4c:b7:68:46: 49:de:e8:51:f3:23:bf:f2:1d:e9:4e:94:60:c2:43: 44:9a:ca:2b:60:d2:8c:da:fe:a5:4b:e8:f2:b2:36: d7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:39:3F:6F:5B:F2:BC:61:FA:53:01:1F:C7:3B:C3:F3:62:60:B6:EC X509v3 Authority Key Identifier: keyid:5B:55:8A:D0:12:77:C8:21:2C:97:43:18:B6:35:2F:B2:8B:F6:83:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B558AD01277C8212C974318B6352FB28BF683AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:0e:c4:6f:3d:b7:56:69:08:c8:6d:6a:b2:60:f3:2e:0b:44: e2:c8:b7:16:8e:7f:66:65:24:7d:62:fa:c0:6a:0a:0b:59:2b: c9:61:da:40:01:51:73:25:b9:d0:47:32:cc:a3:52:af:76:6a: 53:5a:12:f9:b2:9a:03:60:fb:0d:0f:aa:a4:8d:c1:92:a0:ac: 74:7d:f2:34:aa:80:94:8c:fd:a0:96:58:c1:cf:e3:b1:42:8d: 49:d5:6b:58:c1:62:b0:7f:99:c1:17:7c:f8:8f:4d:91:0c:f5: 06:7a:ed:fd:06:44:b0:17:4f:d1:a4:90:60:4e:02:79:17:e6: ea:42:c4:8d:c2:0f:53:4f:6e:23:1b:b8:16:b4:40:cb:f7:20: bd:04:cd:b2:8b:bc:87:07:10:8d:a5:70:6a:c4:c7:97:1f:6f: 51:90:b3:57:08:99:f4:e5:cf:4d:6e:38:41:da:aa:ce:9a:84: 1c:31:0b:c8:b1:81:7d:53:e6:60:88:c6:81:de:43:f4:14:75: a6:a7:ab:8e:26:e1:22:01:72:b6:de:43:a1:08:e7:9f:8b:c9: 18:59:63:82:1f:9b:f9:c2:f0:d0:a4:e8:be:73:af:19:4b:69: 76:a3:be:73:b4:95:49:3e:d8:14:90:54:eb:64:66:f0:56:83: bf:5b:4a:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPXDRKZ9+eBIKMT/f1Sfzv8d3r4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI1NThBRDAxMjc3QzgyMTJDOTc0MzE4QjYzNTJGQjI4 QkY2ODNBRDAeFw0yNTA5MDYyMzE1NDhaFw0yNTA5MTAwMjAzNDhaMDMxMTAvBgNV BAMTKEQ2MzkzRjZGNUJGMkJDNjFGQTUzMDExRkM3M0JDM0YzNjI2MEI2RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJjHfBHHii7SCCdHYEbaudd2Hy 9DYCapx/Df0mGv+HgA0otoC1bBwxfrUVxXweG6sCnhyUC9+HkpOv1QIOA+rLDXPq fMea6uFoiNloBYyIBjjD1a0bJFKvy7AIlLN+hF1cIC7cbs/Khd99bfFEvC+y0APU I2X7yEuQfo+AXv8K2N17+AJ/mATv2CtbS2nBtVojsQVh6WY9lE++aWdrlaCKcWkq F/gPWFQzaUchwaXVzmbxr/PEm9e/iu0VaTRcfG8lYfUr5iPSh79n69tHjkcd54mV D41VVZpy8Th1TLdoRkne6FHzI7/yHelOlGDCQ0Sayitg0oza/qVL6PKyNtfzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1jk/b1vyvGH6UwEfxzvD82JgtuwwHwYDVR0j BBgwFoAUW1WK0BJ3yCEsl0MYtjUvsov2g60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YTViNGZhNC0zMjhjLTRjZjItYWRlMy1jODY4MTMxZDRlMGQvMC81QjU1OEFEMDEy NzdDODIxMkM5NzQzMThCNjM1MkZCMjhCRjY4M0FELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUI1NThBRDAxMjc3QzgyMTJDOTc0MzE4QjYzNTJGQjI4QkY2 ODNBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmE1YjRmYTQtMzI4Yy00Y2YyLWFk ZTMtYzg2ODEzMWQ0ZTBkLzAvNUI1NThBRDAxMjc3QzgyMTJDOTc0MzE4QjYzNTJG QjI4QkY2ODNBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK0OxG89t1ZpCMhtarJg8y4LROLItxaOf2Zl JH1i+sBqCgtZK8lh2kABUXMludBHMsyjUq92alNaEvmymgNg+w0PqqSNwZKgrHR9 8jSqgJSM/aCWWMHP47FCjUnVa1jBYrB/mcEXfPiPTZEM9QZ67f0GRLAXT9GkkGBO AnkX5upCxI3CD1NPbiMbuBa0QMv3IL0EzbKLvIcHEI2lcGrEx5cfb1GQs1cImfTl z01uOEHaqs6ahBwxC8ixgX1T5mCIxoHeQ/QUdaanq44m4SIBcrbeQ6EI55+LyRhZ Y4Ifm/nC8NCk6L5zrxlLaXajvnO0lUk+2BSQVOtkZvBWg79bSr0= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:50 2025 by rpki-client