$ rpki-client -vvf repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft File: 5C7240CA135C93835F95A8E1F3526942D3214EC2.mft (raw, json) Hash identifier: p2JxDFdp4BLf+ibbJv/97hRzrV4e+VwODQoRTAHriAI= Subject key identifier: 77:5F:3E:8B:6E:8F:CA:96:D4:FD:70:3F:3E:4B:6B:79:F0:24:8C:CE Authority key identifier: 5C:72:40:CA:13:5C:93:83:5F:95:A8:E1:F3:52:69:42:D3:21:4E:C2 Certificate issuer: /CN=5C7240CA135C93835F95A8E1F3526942D3214EC2 Certificate serial: 7E746370C0DB2DF73D7D1B708AA35AA3C8ABEE58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft Manifest number: 0205 Signing time: Fri 22 Aug 2025 21:01:34 +0000 Manifest this update: Fri 22 Aug 2025 20:56:34 +0000 Manifest next update: Tue 26 Aug 2025 00:29:34 +0000 Files and hashes: 1: 5C7240CA135C93835F95A8E1F3526942D3214EC2.crl (hash: hcRcCnvz5n0qFQUok1zgt6dGx1zDdFEePnq8z29mDI4=) 2: 3130332e3139302e34362e302f32342d3234203d3e2039333431.roa (hash: jBjxNJ+007Quwhm8JkgTbciN359d/zYXuYTKIMisTrU=) 3: 3130332e3139302e34372e302f32342d3234203d3e2039333431.roa (hash: rr9ymmJLTXtCYmg7wZwMhNNVHwxbRfZ339GatX+MBVg=) 4: 3130332e3139302e34362e302f32332d3233203d3e2039333431.roa (hash: WvXqqkpLSakilobbbh3oi/iYc3pt0ZdEradB47daqG8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.crl rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 00:29:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:74:63:70:c0:db:2d:f7:3d:7d:1b:70:8a:a3:5a:a3:c8:ab:ee:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C7240CA135C93835F95A8E1F3526942D3214EC2 Validity Not Before: Aug 22 20:56:34 2025 GMT Not After : Aug 26 00:29:34 2025 GMT Subject: CN=775F3E8B6E8FCA96D4FD703F3E4B6B79F0248CCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:29:f4:8c:68:1e:9c:0e:fa:5d:41:3b:f5:10: 29:3c:c1:07:3e:d2:8e:37:a1:a7:10:aa:1a:ed:73: a4:58:74:df:a4:a7:eb:6f:fb:8b:de:1a:80:e6:43: 66:db:4d:b7:e2:80:fe:4f:1b:1f:26:9f:ad:8a:0d: c9:58:af:20:d2:06:31:1b:d8:90:e4:c8:c0:93:ef: 82:7c:18:db:bb:72:80:e4:73:36:13:51:4d:ba:2d: 9c:02:e6:41:3c:e6:24:43:26:ad:21:0e:db:b1:43: cc:62:c5:3f:c4:c5:98:6d:e8:0f:4d:b4:87:da:c3: 45:84:78:b7:c8:af:75:68:ad:05:f5:39:15:7f:6a: be:bf:cc:54:dd:13:2f:79:b5:76:12:1d:49:da:eb: 72:91:e5:d6:a1:02:77:81:51:22:0f:17:73:71:d5: 91:97:23:f8:5e:69:4f:16:3b:8d:06:08:8a:0c:0b: 8c:fc:8d:a9:93:25:1f:8c:8e:14:a9:79:b1:c2:45: f6:15:fb:a0:85:28:82:e7:14:0d:a2:34:24:e6:36: 0b:b2:50:15:3d:15:4a:a8:4b:79:b1:b1:53:cd:3b: 3a:58:3d:a5:83:61:51:6a:c5:52:da:18:9d:97:02: 6e:d0:bf:20:74:13:01:18:a0:58:46:8b:25:f6:8a: a2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:5F:3E:8B:6E:8F:CA:96:D4:FD:70:3F:3E:4B:6B:79:F0:24:8C:CE X509v3 Authority Key Identifier: keyid:5C:72:40:CA:13:5C:93:83:5F:95:A8:E1:F3:52:69:42:D3:21:4E:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:b0:4d:28:2b:b7:c8:f8:e9:06:15:f5:0a:f9:59:5f:47:e6: e3:9c:7f:07:ae:66:e0:f9:2b:1f:9d:79:3c:28:87:da:ff:ec: 6f:92:d7:94:86:4f:86:03:5c:1b:bd:2e:19:d1:b3:6d:c5:b0: 4f:ac:3c:45:7a:cc:01:e8:55:a0:4f:79:2f:0c:c1:56:30:5a: a5:db:00:40:4b:8a:f0:f6:e4:af:f3:87:f2:a2:b7:da:46:d6: cf:91:af:2f:6c:49:b4:6b:dc:a5:52:9b:1e:1f:7f:d7:ff:d5: 01:b8:37:26:ab:6b:79:d8:c6:09:d1:5e:cc:06:9a:58:31:76: 51:61:d6:e8:15:d3:b9:24:2e:76:03:83:27:c5:a3:9e:bc:bc: 00:9c:0d:db:d0:2b:c8:89:40:b8:5d:b4:ba:69:99:3f:2e:f0: 91:38:da:a3:9c:93:d0:f0:4c:90:10:e5:e0:c7:f5:e8:87:5a: 58:e5:d9:85:f7:7f:12:73:2e:cd:99:02:3f:4d:18:94:17:45: 48:b4:39:70:31:e1:e9:14:ea:aa:75:8b:2c:1e:67:cc:a3:ff: df:53:17:d4:ba:66:b3:4c:cb:8f:eb:d1:34:fb:25:24:8d:28: 2a:dc:69:65:0c:82:55:95:ce:ef:79:10:da:61:86:03:13:2b: 26:50:a1:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfnRjcMDbLfc9fRtwiqNao8ir7lgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM3MjQwQ0ExMzVDOTM4MzVGOTVBOEUxRjM1MjY5NDJE MzIxNEVDMjAeFw0yNTA4MjIyMDU2MzRaFw0yNTA4MjYwMDI5MzRaMDMxMTAvBgNV BAMTKDc3NUYzRThCNkU4RkNBOTZENEZENzAzRjNFNEI2Qjc5RjAyNDhDQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaKfSMaB6cDvpdQTv1ECk8wQc+ 0o43oacQqhrtc6RYdN+kp+tv+4veGoDmQ2bbTbfigP5PGx8mn62KDclYryDSBjEb 2JDkyMCT74J8GNu7coDkczYTUU26LZwC5kE85iRDJq0hDtuxQ8xixT/ExZht6A9N tIfaw0WEeLfIr3VorQX1ORV/ar6/zFTdEy95tXYSHUna63KR5dahAneBUSIPF3Nx 1ZGXI/heaU8WO40GCIoMC4z8jamTJR+MjhSpebHCRfYV+6CFKILnFA2iNCTmNguy UBU9FUqoS3mxsVPNOzpYPaWDYVFqxVLaGJ2XAm7QvyB0EwEYoFhGiyX2iqKNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd18+i26PypbU/XA/PktrefAkjM4wHwYDVR0j BBgwFoAUXHJAyhNck4Nflajh81JpQtMhTsIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjFmOTk5Yi1hYmNlLTRmYTktOGU3OS05M2I5YzVlNDU0ZTEvMC81QzcyNDBDQTEz NUM5MzgzNUY5NUE4RTFGMzUyNjk0MkQzMjE0RUMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM3MjQwQ0ExMzVDOTM4MzVGOTVBOEUxRjM1MjY5NDJEMzIx NEVDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIxZjk5OWItYWJjZS00ZmE5LThl NzktOTNiOWM1ZTQ1NGUxLzAvNUM3MjQwQ0ExMzVDOTM4MzVGOTVBOEUxRjM1MjY5 NDJEMzIxNEVDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG6wTSgrt8j46QYV9Qr5WV9H5uOcfweuZuD5 Kx+deTwoh9r/7G+S15SGT4YDXBu9LhnRs23FsE+sPEV6zAHoVaBPeS8MwVYwWqXb AEBLivD25K/zh/Kit9pG1s+Rry9sSbRr3KVSmx4ff9f/1QG4Nyara3nYxgnRXswG mlgxdlFh1ugV07kkLnYDgyfFo568vACcDdvQK8iJQLhdtLppmT8u8JE42qOck9Dw TJAQ5eDH9eiHWljl2YX3fxJzLs2ZAj9NGJQXRUi0OXAx4ekU6qp1iyweZ8yj/99T F9S6ZrNMy4/r0TT7JSSNKCrcaWUMglWVzu95ENphhgMTKyZQoeo= -----END CERTIFICATE-----Generated at Sat Aug 23 14:07:21 2025 by rpki-client