$ rpki-client -vvf repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft File: 5DC5D36558922295B85E7AE3A79178FB430FD34B.mft (raw, json) Hash identifier: GcJstpGXikZzpid9Idvk/erOUZLS88a32iVTTUQA8n4= Subject key identifier: E4:4C:73:48:4D:0E:DC:DE:88:D0:F8:8D:EE:6A:79:ED:4F:B3:29:2E Authority key identifier: 5D:C5:D3:65:58:92:22:95:B8:5E:7A:E3:A7:91:78:FB:43:0F:D3:4B Certificate issuer: /CN=5DC5D36558922295B85E7AE3A79178FB430FD34B Certificate serial: 52DFA6F236822EF853E6984D21DEF189B9484B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DC5D36558922295B85E7AE3A79178FB430FD34B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft Manifest number: 04B3 Signing time: Thu 21 Aug 2025 21:52:23 +0000 Manifest this update: Thu 21 Aug 2025 21:47:23 +0000 Manifest next update: Sun 24 Aug 2025 23:07:23 +0000 Files and hashes: 1: 5DC5D36558922295B85E7AE3A79178FB430FD34B.crl (hash: +1p2LMzxUsB1Rk86cSp3TFfKzlK0N6aGi3qcfzey8CY=) 2: 3130332e3135362e3233342e302f32342d3234203d3e20313431303939.roa (hash: 2Ij3trthgvVTDLtbPd9soaDl21FzUqm6uc+fi+je0/U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.crl rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DC5D36558922295B85E7AE3A79178FB430FD34B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 23:07:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:df:a6:f2:36:82:2e:f8:53:e6:98:4d:21:de:f1:89:b9:48:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DC5D36558922295B85E7AE3A79178FB430FD34B Validity Not Before: Aug 21 21:47:23 2025 GMT Not After : Aug 24 23:07:23 2025 GMT Subject: CN=E44C73484D0EDCDE88D0F88DEE6A79ED4FB3292E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:03:f8:76:90:83:38:be:af:04:33:04:de:e2: 90:29:12:9a:a2:0e:e9:13:b7:7f:ce:06:3c:90:87: 58:e7:30:b9:af:8a:8a:cc:16:b9:0a:30:65:75:6d: 96:68:75:3a:b7:bb:b7:3f:37:b0:dc:75:dd:26:2d: f8:ab:7a:3e:b7:46:f0:67:8d:68:c6:77:5e:10:cd: a5:c5:f9:bf:ab:0b:0c:7a:83:3f:8f:10:03:3b:c5: f7:17:05:20:11:7e:11:16:d1:70:e9:71:6b:e5:16: ee:70:83:44:85:a1:2a:0b:37:81:0a:99:bb:aa:e8: 81:96:1b:c6:e5:11:38:5d:be:56:fc:0a:4d:25:24: 34:23:f4:5d:6b:0f:66:23:8a:0f:07:a4:50:19:05: 25:28:7e:d6:16:93:ae:02:58:4e:f5:bb:31:3d:f2: 62:ab:db:37:a1:43:e1:64:76:75:a5:79:65:55:f6: cd:ec:a6:a6:6e:51:b5:8f:d5:a8:ed:b5:7a:8f:23: f7:a0:b6:1b:48:fd:4b:00:11:df:72:fe:23:2f:37: 25:bb:bf:92:c2:41:83:6f:50:f2:4a:1c:bb:31:e7: 76:a6:80:ec:ed:21:95:48:bf:f9:0d:53:e8:d7:d3: 5a:f5:8b:75:29:63:0a:0d:14:6e:5a:32:16:c3:3e: 02:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:4C:73:48:4D:0E:DC:DE:88:D0:F8:8D:EE:6A:79:ED:4F:B3:29:2E X509v3 Authority Key Identifier: keyid:5D:C5:D3:65:58:92:22:95:B8:5E:7A:E3:A7:91:78:FB:43:0F:D3:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DC5D36558922295B85E7AE3A79178FB430FD34B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e3a138e-a2b2-4604-ad50-3cab750a75e7/0/5DC5D36558922295B85E7AE3A79178FB430FD34B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:4a:ba:56:58:67:fd:e0:2e:dc:d5:80:e6:83:3c:0a:b4:e1: 01:ee:3d:6b:7c:24:74:88:1b:a7:26:90:3b:84:ea:93:96:74: 83:af:ff:8c:c0:c7:b1:39:78:ff:87:7f:e0:fa:9e:0b:93:b7: 79:05:64:e0:aa:15:59:13:07:4a:4c:7b:6b:18:bb:db:fe:9b: fa:5e:f3:04:43:c5:25:5c:ca:06:40:a5:00:12:b3:9c:b4:f0: 0c:f4:f4:b9:fd:9c:69:fa:a7:b3:fd:c9:7b:d1:8a:4f:7e:ec: 04:f4:66:e4:e4:95:8e:28:b6:d1:0c:20:25:92:05:72:3a:6a: b1:cd:01:8a:82:e6:e6:9e:9d:70:54:e3:e8:aa:cf:39:e4:bf: ca:f8:41:da:91:3f:22:e7:74:01:f1:90:61:92:3c:ff:76:fc: 5f:79:d6:fb:a3:f6:35:ed:a6:a1:df:e8:f7:a0:56:85:2e:c6: 76:90:c8:b2:a5:fa:d2:f7:59:8f:fc:44:72:87:aa:ab:4e:58: 68:1f:12:d2:1a:5d:7c:0a:6d:36:85:6c:b0:56:b4:c0:b3:7b: 22:53:03:0a:53:42:b1:31:2e:7a:27:d6:a1:bd:99:01:a6:19: a0:65:92:0e:a9:e5:e7:3e:52:c0:d2:ad:89:c2:25:91:6b:70: b2:95:64:ca -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITUt+m8jaCLvhT5phNId7xiblISzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg1REM1RDM2NTU4OTIyMjk1Qjg1RTdBRTNBNzkxNzhGQjQz MEZEMzRCMB4XDTI1MDgyMTIxNDcyM1oXDTI1MDgyNDIzMDcyM1owMzExMC8GA1UE AxMoRTQ0QzczNDg0RDBFRENERTg4RDBGODhERUU2QTc5RUQ0RkIzMjkyRTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANUD+HaQgzi+rwQzBN7ikCkSmqIO 6RO3f84GPJCHWOcwua+KiswWuQowZXVtlmh1Ore7tz83sNx13SYt+Kt6PrdG8GeN aMZ3XhDNpcX5v6sLDHqDP48QAzvF9xcFIBF+ERbRcOlxa+UW7nCDRIWhKgs3gQqZ u6rogZYbxuUROF2+VvwKTSUkNCP0XWsPZiOKDwekUBkFJSh+1haTrgJYTvW7MT3y YqvbN6FD4WR2daV5ZVX2zeympm5RtY/VqO21eo8j96C2G0j9SwAR33L+Iy83Jbu/ ksJBg29Q8kocuzHndqaA7O0hlUi/+Q1T6NfTWvWLdSljCg0UbloyFsM+AkECAwEA AaOCAjwwggI4MB0GA1UdDgQWBBTkTHNITQ7c3ojQ+I3uanntT7MpLjAfBgNVHSME GDAWgBRdxdNlWJIilbheeuOnkXj7Qw/TSzAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJl M2ExMzhlLWEyYjItNDYwNC1hZDUwLTNjYWI3NTBhNzVlNy8wLzVEQzVEMzY1NTg5 MjIyOTVCODVFN0FFM0E3OTE3OEZCNDMwRkQzNEIuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi81REM1RDM2NTU4OTIyMjk1Qjg1RTdBRTNBNzkxNzhGQjQzMEZE MzRCLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8yZTNhMTM4ZS1hMmIyLTQ2MDQtYWQ1 MC0zY2FiNzUwYTc1ZTcvMC81REM1RDM2NTU4OTIyMjk1Qjg1RTdBRTNBNzkxNzhG QjQzMEZEMzRCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAbUq6Vlhn/eAu3NWA5oM8CrThAe49a3wkdIgb pyaQO4Tqk5Z0g6//jMDHsTl4/4d/4PqeC5O3eQVk4KoVWRMHSkx7axi72/6b+l7z BEPFJVzKBkClABKznLTwDPT0uf2cafqns/3Je9GKT37sBPRm5OSVjii20QwgJZIF cjpqsc0BioLm5p6dcFTj6KrPOeS/yvhB2pE/Iud0AfGQYZI8/3b8X3nW+6P2Ne2m od/o96BWhS7GdpDIsqX60vdZj/xEcoeqq05YaB8S0hpdfAptNoVssFa0wLN7IlMD ClNCsTEueifWob2ZAaYZoGWSDqnl5z5SwNKticIlkWtwspVkyg== -----END CERTIFICATE-----Generated at Sat Aug 23 17:47:55 2025 by rpki-client