$ rpki-client -vvf repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft File: 5A33E6B82000487B204D2E284BCA10AF293CB41E.mft (raw, json) Hash identifier: SoAO+qih77GS6s2h9xABuNwMyNdvAIqMGRKdjPfGqh0= Subject key identifier: D0:D6:85:8F:8B:A1:58:5B:C3:5F:AA:55:E8:89:AD:F2:E0:89:7E:09 Authority key identifier: 5A:33:E6:B8:20:00:48:7B:20:4D:2E:28:4B:CA:10:AF:29:3C:B4:1E Certificate issuer: /CN=5A33E6B82000487B204D2E284BCA10AF293CB41E Certificate serial: 2275C5DA0CDAF012F59AD750087B3FFC336ACF45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A33E6B82000487B204D2E284BCA10AF293CB41E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft Manifest number: 01FC Signing time: Sat 23 Aug 2025 10:31:15 +0000 Manifest this update: Sat 23 Aug 2025 10:26:15 +0000 Manifest next update: Tue 26 Aug 2025 12:06:15 +0000 Files and hashes: 1: 5A33E6B82000487B204D2E284BCA10AF293CB41E.crl (hash: NronIWv1Ns4ZqVKmO30B/psflHVcLJo9a2PNNquaLzk=) 2: 3130332e3134322e3234302e302f32342d3234203d3e20313339333832.roa (hash: 1DOr2e/kf4/EN1V5niFiCSQ4eIv5NPl/rOgqgpH4ZuI=) 3: 3130332e3134322e3234312e302f32342d3234203d3e20313339333832.roa (hash: w3BBO2ojOIjj9AtoUjhdja4WPaFGOgpmIufFTP6+DqI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.crl rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A33E6B82000487B204D2E284BCA10AF293CB41E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:75:c5:da:0c:da:f0:12:f5:9a:d7:50:08:7b:3f:fc:33:6a:cf:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A33E6B82000487B204D2E284BCA10AF293CB41E Validity Not Before: Aug 23 10:26:15 2025 GMT Not After : Aug 26 12:06:15 2025 GMT Subject: CN=D0D6858F8BA1585BC35FAA55E889ADF2E0897E09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:aa:cf:45:cf:35:b7:e8:94:26:60:83:b0:1a: 72:08:56:2a:dc:9f:85:2c:4c:66:ea:e2:7d:c6:b5: 18:de:1c:82:e8:dc:e2:07:4d:2c:fb:fd:ad:f4:8a: 0a:0d:a0:f6:c4:c6:e6:a7:d3:3e:69:4d:f5:a0:e2: 87:2e:d1:2f:da:0d:b8:67:1c:d2:a4:7e:b1:83:09: ad:b4:a9:1c:dd:a8:a8:1c:32:d9:64:a7:4c:aa:c0: 68:55:95:1c:65:07:4f:cc:68:e5:d3:cb:df:82:ee: d7:6e:82:c1:b2:24:95:b6:59:74:c3:3c:64:ae:e8: 68:fa:07:45:9e:ee:95:f2:0d:0a:2d:fb:15:13:d6: 08:e7:7d:68:99:d3:10:6c:75:a9:7f:da:07:4e:32: 57:03:cc:f2:c8:6d:dc:69:51:f7:ec:87:1f:f5:ec: 0a:28:ae:ef:a9:ea:f3:c3:fb:05:84:eb:11:57:f5: 29:be:12:4d:41:91:46:f2:86:f9:05:c2:9e:41:32: 69:1e:24:47:63:85:5d:2b:cd:0b:a9:73:c1:e8:68: 28:22:97:b1:fc:08:67:3c:fd:3e:f4:8c:54:a4:c4: e3:b5:2f:a4:56:1e:64:8d:ad:7d:a7:b5:c1:ff:bf: 4b:eb:44:8f:95:b9:02:40:93:1f:62:dc:d6:38:63: 9b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D6:85:8F:8B:A1:58:5B:C3:5F:AA:55:E8:89:AD:F2:E0:89:7E:09 X509v3 Authority Key Identifier: keyid:5A:33:E6:B8:20:00:48:7B:20:4D:2E:28:4B:CA:10:AF:29:3C:B4:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A33E6B82000487B204D2E284BCA10AF293CB41E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:14:b9:1c:72:7d:76:01:9d:15:84:70:b3:9e:6b:f8:8e:7d: 8d:01:75:7a:de:6a:59:6c:05:43:12:c6:d6:2b:5a:d9:c5:36: 9b:8b:71:74:d1:f0:06:da:e1:b0:12:6e:5d:6b:bf:d5:68:f9: f0:3c:5a:54:e8:64:c5:3f:a4:65:90:dc:2c:bd:de:44:0e:72: f5:63:6d:90:4b:74:7e:e3:1b:dd:82:d9:3a:47:59:e9:69:90: 8a:aa:40:2e:f1:24:6c:5d:2c:ce:d7:39:4c:f2:75:78:7d:f4: cc:fb:0f:58:d9:45:d8:0c:4f:18:d6:d1:68:a2:3b:08:5e:33: aa:fb:7e:df:54:5e:01:1c:bd:83:b4:84:99:4a:c3:8a:64:0d: 35:51:63:5a:ed:bb:c8:8c:8f:09:28:db:a3:22:ac:74:4e:60: a3:e6:1b:73:da:aa:ae:2c:7c:74:7d:89:27:b1:d8:5c:f3:fd: 9e:56:67:19:ae:17:80:ff:0b:88:04:bc:cb:8a:46:a2:96:b1: b8:38:4b:2c:20:b8:48:ce:fd:3b:cf:60:a3:53:f0:57:86:b8: 38:56:2a:e9:2e:f4:71:a0:93:6b:02:c0:d8:67:2e:78:94:8e: cf:28:0b:52:80:f2:41:ad:db:97:f7:9d:0a:ab:47:07:34:49: 77:b6:e7:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUInXF2gza8BL1mtdQCHs//DNqz0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEzM0U2QjgyMDAwNDg3QjIwNEQyRTI4NEJDQTEwQUYy OTNDQjQxRTAeFw0yNTA4MjMxMDI2MTVaFw0yNTA4MjYxMjA2MTVaMDMxMTAvBgNV BAMTKEQwRDY4NThGOEJBMTU4NUJDMzVGQUE1NUU4ODlBREYyRTA4OTdFMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDqs9FzzW36JQmYIOwGnIIVirc n4UsTGbq4n3GtRjeHILo3OIHTSz7/a30igoNoPbExuan0z5pTfWg4ocu0S/aDbhn HNKkfrGDCa20qRzdqKgcMtlkp0yqwGhVlRxlB0/MaOXTy9+C7tdugsGyJJW2WXTD PGSu6Gj6B0We7pXyDQot+xUT1gjnfWiZ0xBsdal/2gdOMlcDzPLIbdxpUffshx/1 7Aooru+p6vPD+wWE6xFX9Sm+Ek1BkUbyhvkFwp5BMmkeJEdjhV0rzQupc8HoaCgi l7H8CGc8/T70jFSkxOO1L6RWHmSNrX2ntcH/v0vrRI+VuQJAkx9i3NY4Y5uFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0NaFj4uhWFvDX6pV6Imt8uCJfgkwHwYDVR0j BBgwFoAUWjPmuCAASHsgTS4oS8oQryk8tB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTQxYmE3ZS02YzQyLTRjMjItYjEzYy01NDhmYzcyNzJhM2QvMC81QTMzRTZCODIw MDA0ODdCMjA0RDJFMjg0QkNBMTBBRjI5M0NCNDFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUEzM0U2QjgyMDAwNDg3QjIwNEQyRTI4NEJDQTEwQUYyOTND QjQxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU0MWJhN2UtNmM0Mi00YzIyLWIx M2MtNTQ4ZmM3MjcyYTNkLzAvNUEzM0U2QjgyMDAwNDg3QjIwNEQyRTI4NEJDQTEw QUYyOTNDQjQxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGgUuRxyfXYBnRWEcLOea/iOfY0BdXrealls BUMSxtYrWtnFNpuLcXTR8Aba4bASbl1rv9Vo+fA8WlToZMU/pGWQ3Cy93kQOcvVj bZBLdH7jG92C2TpHWelpkIqqQC7xJGxdLM7XOUzydXh99Mz7D1jZRdgMTxjW0Wii OwheM6r7ft9UXgEcvYO0hJlKw4pkDTVRY1rtu8iMjwko26MirHROYKPmG3Paqq4s fHR9iSex2Fzz/Z5WZxmuF4D/C4gEvMuKRqKWsbg4SywguEjO/TvPYKNT8FeGuDhW Kuku9HGgk2sCwNhnLniUjs8oC1KA8kGt25f3nQqrRwc0SXe254o= -----END CERTIFICATE-----Generated at Sat Aug 23 12:20:27 2025 by rpki-client