$ rpki-client -vvf repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft File: 5CC6B0489E576BC0D642B626195A0AA0560DC792.mft (raw, json) Hash identifier: LJ2AooHyEPO7c99ZTxvxkEmKXUJujysqNHhNjnOVi5w= Subject key identifier: D6:9D:04:74:C9:01:3E:0B:98:7B:0E:1E:8C:A7:97:D8:8F:99:72:B6 Authority key identifier: 5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92 Certificate issuer: /CN=5CC6B0489E576BC0D642B626195A0AA0560DC792 Certificate serial: 47150BB9ABBA204348CB6E96F02E08E9E5BF79FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft Manifest number: 01A2 Signing time: Fri 22 Aug 2025 01:20:36 +0000 Manifest this update: Fri 22 Aug 2025 01:15:36 +0000 Manifest next update: Mon 25 Aug 2025 11:53:36 +0000 Files and hashes: 1: 5CC6B0489E576BC0D642B626195A0AA0560DC792.crl (hash: Y5tYOm0FOXwaPClkfB7ErNHMxyJbL1UJccpAJdJf4e0=) 2: 3130332e3132312e3133382e302f32332d3234203d3e20313335343738.roa (hash: IYSPzv0ipkmDqn5ZyXeN0f328BkzkZ8Pmn6bIzAKtQc=) 3: 3130332e3132312e3133362e302f32332d3234203d3e20313335343738.roa (hash: XTHSvGcaRTEV+p1Y+pj9uwCkeA4dOjhqgF5dBEY4xig=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.crl rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 11:53:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:15:0b:b9:ab:ba:20:43:48:cb:6e:96:f0:2e:08:e9:e5:bf:79:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CC6B0489E576BC0D642B626195A0AA0560DC792 Validity Not Before: Aug 22 01:15:36 2025 GMT Not After : Aug 25 11:53:36 2025 GMT Subject: CN=D69D0474C9013E0B987B0E1E8CA797D88F9972B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:73:be:cb:c9:e7:91:ed:cf:2f:6f:f2:cb:86: dd:e6:8e:6c:1f:10:52:54:cb:61:be:f7:85:7c:2f: 58:60:35:e6:ca:57:8d:cc:69:2f:15:f6:f9:0a:d2: 2e:23:92:be:41:cc:ac:95:e9:e6:ee:c6:73:59:7a: 2b:53:1f:55:9b:ca:05:78:08:d8:71:d3:74:0c:cf: 04:ff:e3:93:0b:bd:13:65:50:43:e8:b7:9c:11:55: 87:fc:91:99:59:ae:01:93:72:f9:ff:6f:d5:82:01: 78:93:62:de:7d:ca:2a:87:80:40:cf:5c:b1:0f:b3: 52:8e:2a:e0:f0:6a:37:e5:8c:6a:e3:d9:dc:79:db: 55:58:45:e4:7b:f5:c1:1d:02:d1:5d:43:b9:fe:15: 64:86:0b:a2:65:62:77:ca:4b:fc:d5:8a:89:6c:0f: 58:33:ab:bd:84:1a:76:0c:1e:43:af:56:be:3d:ea: 44:ab:96:2d:65:5d:dc:ec:13:b4:8c:33:d8:46:86: 18:b7:0c:02:90:db:89:f0:3e:78:cd:3e:a2:89:03: 1c:ae:3c:7f:24:ff:c1:0e:b2:72:36:ff:a9:98:a9: 7c:66:f9:c2:da:e6:61:3b:ad:41:ff:0d:5d:0e:0a: 49:5c:4d:08:23:33:b8:f0:09:b3:7c:0f:a1:5f:54: 6b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:9D:04:74:C9:01:3E:0B:98:7B:0E:1E:8C:A7:97:D8:8F:99:72:B6 X509v3 Authority Key Identifier: keyid:5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:61:5b:82:39:11:58:d3:08:16:bd:45:ac:6f:2c:80:32:82: 3c:7c:21:da:7f:41:70:1f:86:d3:ee:7b:da:39:75:2c:4f:b0: bb:de:a0:25:6d:8c:4c:78:64:71:1a:e8:9a:a2:42:ab:23:6c: 30:76:1a:c4:8a:d7:c8:45:5c:76:b8:4e:e1:4a:2c:9b:3e:be: e4:4b:e9:97:cd:2e:01:99:61:83:85:e5:cb:2a:47:60:1c:80: 32:74:60:8b:47:6e:11:69:fd:ba:dc:0e:4f:e3:2c:a9:4b:36: e8:6e:60:60:c2:e2:15:82:16:81:13:da:e2:ea:e7:43:2c:65: c9:b2:75:91:4e:8c:a3:82:7a:8b:d9:b0:3b:35:a4:bc:a3:aa: b7:cc:fe:14:ea:17:81:22:ae:11:6f:4d:42:f3:be:3a:56:7c: 0a:6b:4d:ef:72:4e:cf:28:e3:11:c8:ad:7d:77:0f:6b:8d:aa: 45:f5:6a:96:97:9a:ec:29:48:b9:98:39:28:07:ae:c9:84:26: a6:c6:92:d2:1c:7b:74:88:ad:92:0f:ad:1f:f8:5a:05:40:eb: 7f:a7:d4:36:3a:7d:b1:9b:dc:f4:6e:89:a6:9a:9d:17:c2:d7: 5f:2b:de:98:1b:ae:23:38:e3:ed:96:dd:1f:1e:41:60:96:44: 0f:a3:96:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURxULuau6IENIy26W8C4I6eW/efowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBBQTA1 NjBEQzc5MjAeFw0yNTA4MjIwMTE1MzZaFw0yNTA4MjUxMTUzMzZaMDMxMTAvBgNV BAMTKEQ2OUQwNDc0QzkwMTNFMEI5ODdCMEUxRThDQTc5N0Q4OEY5OTcyQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzc77LyeeR7c8vb/LLht3mjmwf EFJUy2G+94V8L1hgNebKV43MaS8V9vkK0i4jkr5BzKyV6ebuxnNZeitTH1WbygV4 CNhx03QMzwT/45MLvRNlUEPot5wRVYf8kZlZrgGTcvn/b9WCAXiTYt59yiqHgEDP XLEPs1KOKuDwajfljGrj2dx521VYReR79cEdAtFdQ7n+FWSGC6JlYnfKS/zViols D1gzq72EGnYMHkOvVr496kSrli1lXdzsE7SMM9hGhhi3DAKQ24nwPnjNPqKJAxyu PH8k/8EOsnI2/6mYqXxm+cLa5mE7rUH/DV0OCklcTQgjM7jwCbN8D6FfVGv7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1p0EdMkBPguYew4ejKeX2I+ZcrYwHwYDVR0j BBgwFoAUXMawSJ5Xa8DWQrYmGVoKoFYNx5IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjRmYTdiOC01MzAyLTQ5MGItOTJlNC0yN2YyOGM2NjU3NWMvMC81Q0M2QjA0ODlF NTc2QkMwRDY0MkI2MjYxOTVBMEFBMDU2MERDNzkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBBQTA1NjBE Qzc5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY0ZmE3YjgtNTMwMi00OTBiLTky ZTQtMjdmMjhjNjY1NzVjLzAvNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBB QTA1NjBEQzc5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9hW4I5EVjTCBa9RaxvLIAygjx8Idp/QXAf htPue9o5dSxPsLveoCVtjEx4ZHEa6JqiQqsjbDB2GsSK18hFXHa4TuFKLJs+vuRL 6ZfNLgGZYYOF5csqR2AcgDJ0YItHbhFp/brcDk/jLKlLNuhuYGDC4hWCFoET2uLq 50MsZcmydZFOjKOCeovZsDs1pLyjqrfM/hTqF4EirhFvTULzvjpWfAprTe9yTs8o 4xHIrX13D2uNqkX1apaXmuwpSLmYOSgHrsmEJqbGktIce3SIrZIPrR/4WgVA63+n 1DY6fbGb3PRuiaaanRfC118r3pgbriM44+2W3R8eQWCWRA+jlhY= -----END CERTIFICATE-----Generated at Sat Aug 23 12:13:45 2025 by rpki-client