$ rpki-client -vvf repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft File: 5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft (raw, json) Hash identifier: CgG1CqwG5ssTQ/tsNrjcsMvJQGyX/IQvmnaArI4dyrk= Subject key identifier: AA:DE:BA:10:DF:86:82:6F:00:F6:D7:AC:88:15:38:4E:BD:6E:C9:92 Authority key identifier: 5A:0C:BE:2D:BC:F9:88:35:69:F8:C2:4B:FB:9E:59:54:42:D8:35:D0 Certificate issuer: /CN=5A0CBE2DBCF9883569F8C24BFB9E595442D835D0 Certificate serial: 262D31916C918BFA5AA5697FFF9CD3CC00B37005 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft Manifest number: 0504 Signing time: Thu 21 Aug 2025 05:41:45 +0000 Manifest this update: Thu 21 Aug 2025 05:36:45 +0000 Manifest next update: Sun 24 Aug 2025 17:39:45 +0000 Files and hashes: 1: 3130332e3134382e37362e302f32342d3234203d3e20313339393839.roa (hash: 4DHvFxVV4LIBkA3x8qQp+DBWnN9OK+EeEYU9y73AnvA=) 2: 323030313a6466323a633238303a3a2f34382d3438203d3e20313339393839.roa (hash: NAP8Ecg7mcF+3+EYuEqADPL2zQZENpYX/wZwvz8zK2k=) 3: 3130332e3134382e37362e302f32332d3233203d3e20313339393839.roa (hash: tHgBQBHZyelL12LDcNEGOIdBk1KUkf5Y80WNybt6NLU=) 4: 5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl (hash: Won8SE1+i+DUtWDLH2BR90h2lqrgvl5/6x2p1qJ0ubc=) 5: 3130332e3134382e37372e302f32342d3234203d3e20313339393839.roa (hash: MWm2F1DhYXk8gG9Y58JwnEVzuJMu3hmMEBr/crsMrlo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:39:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:2d:31:91:6c:91:8b:fa:5a:a5:69:7f:ff:9c:d3:cc:00:b3:70:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A0CBE2DBCF9883569F8C24BFB9E595442D835D0 Validity Not Before: Aug 21 05:36:45 2025 GMT Not After : Aug 24 17:39:45 2025 GMT Subject: CN=AADEBA10DF86826F00F6D7AC8815384EBD6EC992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5a:06:b7:51:73:4c:bf:f2:aa:1a:00:46:44: c2:99:6a:bf:35:23:d6:cd:63:26:7f:c9:18:4b:6d: dc:35:cd:e2:f2:d4:07:91:a7:f0:4f:10:6d:e9:c4: 77:ce:4c:22:79:98:e1:b1:e5:c8:28:7a:f1:a5:53: a4:09:a5:a2:76:4e:15:66:d6:f4:88:8f:72:ef:c3: b0:34:25:e3:e7:53:8f:c9:3b:fb:18:11:3b:89:9b: 55:42:c3:58:d0:cc:dd:43:a6:b9:a1:f8:a4:3d:17: 4a:d5:66:e4:ee:30:9c:28:5f:8f:39:d1:31:ef:64: 80:9c:be:96:e8:d6:93:0e:bc:b0:bf:5f:d1:a2:e8: b1:8c:40:e0:cf:66:e6:65:3d:87:56:b5:53:c9:9e: 13:23:77:a3:6c:f4:d7:20:ad:32:1c:35:45:95:13: 37:74:39:3f:55:8d:f2:30:e8:2a:35:b0:f7:f1:7f: 5c:24:0d:f4:ee:ac:5c:f7:f8:8f:40:4e:b0:34:8e: 51:5d:13:09:ef:df:29:23:01:62:f7:49:0f:e7:28: 79:72:9c:e9:79:b9:66:aa:ed:f8:71:48:01:9c:fe: b6:70:25:81:e9:db:43:0c:af:bf:6d:9c:e8:e1:31: c3:5b:5a:52:c6:6b:7f:c7:68:00:fc:82:81:31:b2: db:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:DE:BA:10:DF:86:82:6F:00:F6:D7:AC:88:15:38:4E:BD:6E:C9:92 X509v3 Authority Key Identifier: keyid:5A:0C:BE:2D:BC:F9:88:35:69:F8:C2:4B:FB:9E:59:54:42:D8:35:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:8a:2b:bc:91:0d:bb:f3:6f:2c:31:6c:02:52:b8:3b:4e:b6: 22:ef:c8:63:f9:e8:c5:9c:72:6d:47:c8:aa:59:41:a3:6f:33: 51:6c:d7:37:e5:26:50:72:59:25:7c:13:6c:bc:a3:a4:0d:c7: 49:5f:fb:17:7d:d0:c1:c1:e8:4a:23:80:57:a4:0a:3c:9d:ef: e1:2a:fc:a0:f7:6a:bb:10:c7:97:84:42:f0:97:22:71:f8:e8: d2:65:c4:c2:1b:f4:6d:b1:c1:c2:3f:d9:74:42:91:7e:74:b8: 7c:55:fd:31:31:5d:e9:e7:39:80:5f:1a:3c:25:47:7a:a4:ee: 5b:e0:2e:9b:3c:7a:64:67:41:dd:6f:07:20:f2:b8:35:8a:16: 0c:41:45:0e:4f:12:82:a7:e8:e6:60:2e:56:74:50:dc:6d:ba: b9:9f:b2:29:22:95:b8:25:b6:da:43:14:11:c7:73:ef:1d:1b: e6:b3:d9:8e:82:2e:e6:e5:c4:5d:27:ac:40:b1:9c:1f:70:d5: d9:79:78:b0:30:e5:b1:b3:b1:a6:33:44:1a:38:d0:32:35:a0: 3b:c5:f0:6f:49:aa:ad:d0:19:94:b4:75:3f:02:f4:36:13:a2: af:3a:50:56:cf:22:f6:77:d6:47:dc:76:cc:eb:5d:6f:51:8e: d7:25:85:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJi0xkWyRi/papWl//5zTzACzcAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5NTQ0 MkQ4MzVEMDAeFw0yNTA4MjEwNTM2NDVaFw0yNTA4MjQxNzM5NDVaMDMxMTAvBgNV BAMTKEFBREVCQTEwREY4NjgyNkYwMEY2RDdBQzg4MTUzODRFQkQ2RUM5OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Wga3UXNMv/KqGgBGRMKZar81 I9bNYyZ/yRhLbdw1zeLy1AeRp/BPEG3pxHfOTCJ5mOGx5cgoevGlU6QJpaJ2ThVm 1vSIj3Lvw7A0JePnU4/JO/sYETuJm1VCw1jQzN1Dprmh+KQ9F0rVZuTuMJwoX485 0THvZICcvpbo1pMOvLC/X9Gi6LGMQODPZuZlPYdWtVPJnhMjd6Ns9NcgrTIcNUWV Ezd0OT9VjfIw6Co1sPfxf1wkDfTurFz3+I9ATrA0jlFdEwnv3ykjAWL3SQ/nKHly nOl5uWaq7fhxSAGc/rZwJYHp20MMr79tnOjhMcNbWlLGa3/HaAD8goExstutAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqt66EN+Ggm8A9tesiBU4Tr1uyZIwHwYDVR0j BBgwFoAUWgy+Lbz5iDVp+MJL+55ZVELYNdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDMxNzQ2ZS1iMGY2LTQ4MjctOGM0ZS1iODE5MmRlY2MzOWEvMC81QTBDQkUyREJD Rjk4ODM1NjlGOEMyNEJGQjlFNTk1NDQyRDgzNUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5NTQ0MkQ4 MzVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAzMTc0NmUtYjBmNi00ODI3LThj NGUtYjgxOTJkZWNjMzlhLzAvNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5 NTQ0MkQ4MzVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM2KK7yRDbvzbywxbAJSuDtOtiLvyGP56MWc cm1HyKpZQaNvM1Fs1zflJlByWSV8E2y8o6QNx0lf+xd90MHB6EojgFekCjyd7+Eq /KD3arsQx5eEQvCXInH46NJlxMIb9G2xwcI/2XRCkX50uHxV/TExXennOYBfGjwl R3qk7lvgLps8emRnQd1vByDyuDWKFgxBRQ5PEoKn6OZgLlZ0UNxturmfsikilbgl ttpDFBHHc+8dG+az2Y6CLublxF0nrECxnB9w1dl5eLAw5bGzsaYzRBo40DI1oDvF 8G9Jqq3QGZS0dT8C9DYToq86UFbPIvZ31kfcdszrXW9RjtclhUA= -----END CERTIFICATE-----Generated at Sat Aug 23 13:33:36 2025 by rpki-client