$ rpki-client -vvf repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft File: 05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft (raw, json) Hash identifier: nfPmxXguzOsdddM1e4Ckx2tYiWgY2hqcVRvRLGJkAiI= Subject key identifier: 24:C2:08:72:48:C5:51:B6:F6:B1:A1:D4:BC:18:3D:28:84:83:DD:2D Authority key identifier: 05:67:1A:0A:CA:B2:6B:34:26:48:AF:FA:C0:C6:6E:CB:5A:49:3D:AB Certificate issuer: /CN=05671A0ACAB26B342648AFFAC0C66ECB5A493DAB Certificate serial: 6F09BEEEDB9C87ED1E84410C7FD56D3BC0DBD2DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft Manifest number: DB Signing time: Thu 21 Aug 2025 21:21:40 +0000 Manifest this update: Thu 21 Aug 2025 21:16:40 +0000 Manifest next update: Mon 25 Aug 2025 03:11:40 +0000 Files and hashes: 1: 323030313a6466333a393034303a3a2f34382d3438203d3e20313532343139.roa (hash: RA3iDpSCkWtT/yyfxgJEQ4woQglWjmr40o6UbmeiCAk=) 2: 05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl (hash: o0rOk/NLATThZUstX74Wkr2Ogkmio0PA/KkSQqBOVMo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 03:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:09:be:ee:db:9c:87:ed:1e:84:41:0c:7f:d5:6d:3b:c0:db:d2:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05671A0ACAB26B342648AFFAC0C66ECB5A493DAB Validity Not Before: Aug 21 21:16:40 2025 GMT Not After : Aug 25 03:11:40 2025 GMT Subject: CN=24C2087248C551B6F6B1A1D4BC183D288483DD2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a4:b3:20:47:d7:a4:c3:5e:8e:7f:a6:89:7e: 1a:04:e8:c9:3d:6d:4e:d4:b0:c8:3b:a8:6a:95:9d: 45:04:af:e4:dd:03:ee:85:c5:9a:d2:da:43:91:44: 0c:03:56:fd:81:86:28:1d:0e:86:0b:05:9e:c1:f5: 80:c0:a5:c2:8a:68:80:22:e0:29:b9:a7:cf:9f:2f: 65:3e:e7:32:6f:38:a8:fa:33:ec:e1:ec:b2:a5:1f: 73:52:2e:6f:02:62:23:b5:0a:69:cd:b7:a7:2f:c3: 67:f3:ae:be:31:d1:fa:40:40:be:9c:14:fa:78:b1: 3d:c2:b8:cb:af:36:63:93:1b:8a:d9:17:e6:df:3e: 1a:2a:b9:43:f7:4d:d4:67:51:23:d8:74:2f:0c:9d: 6f:8a:69:a4:bc:42:0f:c7:bb:f3:7f:21:82:c0:ac: 97:af:20:97:cb:84:4a:d0:64:3e:ad:b6:fc:0d:f5: d3:85:8b:d2:c0:7d:82:b3:64:5e:f8:f0:35:e8:0b: 06:30:46:8e:34:25:76:41:96:19:2b:ad:51:17:31: 86:64:14:13:2d:35:47:76:a7:9e:94:bd:15:cf:23: 2b:16:47:59:b9:ca:17:87:44:a3:b0:06:c9:14:8d: a1:7a:38:0f:4e:d6:cf:fa:77:fe:a7:65:08:b1:23: c7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C2:08:72:48:C5:51:B6:F6:B1:A1:D4:BC:18:3D:28:84:83:DD:2D X509v3 Authority Key Identifier: keyid:05:67:1A:0A:CA:B2:6B:34:26:48:AF:FA:C0:C6:6E:CB:5A:49:3D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:65:cd:15:f0:be:a0:1b:c7:d9:86:a8:08:8f:d2:7b:a2:4f: a8:d9:55:1a:e3:02:b7:55:61:71:d4:7f:80:2e:b8:63:36:bc: d3:4a:a6:63:12:7a:a1:2d:56:56:79:47:d7:24:7d:22:1c:e9: 8c:82:1c:cc:c2:5f:21:a3:0b:30:2b:7a:7c:5d:71:fd:9b:e4: 07:d7:01:25:5c:a4:2e:af:23:8a:99:df:b5:b1:a6:a1:8b:5d: 55:bd:07:50:7a:40:e6:2f:b9:c2:a4:a0:09:95:85:58:7a:f0: ef:d3:a7:f9:ae:a4:ac:ff:94:61:48:8a:3d:5f:d7:24:ba:2d: bf:fb:db:86:10:75:ae:0e:51:81:79:1d:7c:6d:e3:9f:1f:c6: 04:f0:ed:c1:08:3e:6a:54:05:8e:9f:83:24:2d:d3:e5:77:16: 28:a9:07:69:91:f3:75:20:6e:37:0d:00:fa:d0:63:6b:86:99: 8e:61:26:47:38:cf:aa:b4:0e:5c:30:63:e5:7e:f5:3d:7b:12: fd:91:4d:01:ad:62:f6:49:97:12:06:96:f6:c6:22:87:c9:89: 15:8f:f9:aa:f8:19:23:c3:86:27:63:23:30:e9:23:bf:71:56: ce:1c:64:d0:a3:be:53:5a:77:27:0e:17:b5:8f:94:31:ef:ac: aa:10:e6:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbwm+7tuch+0ehEEMf9VtO8Db0t8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZFQ0I1 QTQ5M0RBQjAeFw0yNTA4MjEyMTE2NDBaFw0yNTA4MjUwMzExNDBaMDMxMTAvBgNV BAMTKDI0QzIwODcyNDhDNTUxQjZGNkIxQTFENEJDMTgzRDI4ODQ4M0REMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClpLMgR9ekw16Of6aJfhoE6Mk9 bU7UsMg7qGqVnUUEr+TdA+6FxZrS2kORRAwDVv2BhigdDoYLBZ7B9YDApcKKaIAi 4Cm5p8+fL2U+5zJvOKj6M+zh7LKlH3NSLm8CYiO1CmnNt6cvw2fzrr4x0fpAQL6c FPp4sT3CuMuvNmOTG4rZF+bfPhoquUP3TdRnUSPYdC8MnW+KaaS8Qg/Hu/N/IYLA rJevIJfLhErQZD6ttvwN9dOFi9LAfYKzZF748DXoCwYwRo40JXZBlhkrrVEXMYZk FBMtNUd2p56UvRXPIysWR1m5yheHRKOwBskUjaF6OA9O1s/6d/6nZQixI8f1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJMIIckjFUbb2saHUvBg9KISD3S0wHwYDVR0j BBgwFoAUBWcaCsqyazQmSK/6wMZuy1pJPaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDgyM2JiMy01YTAxLTQ2NTgtYTc4My1mOGU4OWZhZGNmNDUvMS8wNTY3MUEwQUNB QjI2QjM0MjY0OEFGRkFDMEM2NkVDQjVBNDkzREFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZFQ0I1QTQ5 M0RBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4MjNiYjMtNWEwMS00NjU4LWE3 ODMtZjhlODlmYWRjZjQ1LzEvMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZF Q0I1QTQ5M0RBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEVlzRXwvqAbx9mGqAiP0nuiT6jZVRrjArdV YXHUf4AuuGM2vNNKpmMSeqEtVlZ5R9ckfSIc6YyCHMzCXyGjCzArenxdcf2b5AfX ASVcpC6vI4qZ37WxpqGLXVW9B1B6QOYvucKkoAmVhVh68O/Tp/mupKz/lGFIij1f 1yS6Lb/724YQda4OUYF5HXxt458fxgTw7cEIPmpUBY6fgyQt0+V3FiipB2mR83Ug bjcNAPrQY2uGmY5hJkc4z6q0DlwwY+V+9T17Ev2RTQGtYvZJlxIGlvbGIofJiRWP +ar4GSPDhidjIzDpI79xVs4cZNCjvlNadycOF7WPlDHvrKoQ5go= -----END CERTIFICATE-----Generated at Sat Aug 23 12:14:30 2025 by rpki-client