$ rpki-client -vvf repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft File: 5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft (raw, json) Hash identifier: T4KpT2lrs+9/3noihS8LFBwsCO2AHTAcLx7v7GjNOhM= Subject key identifier: 80:71:05:01:BF:BE:88:D8:0E:90:25:1C:8C:A2:F1:7A:EE:EC:AB:02 Authority key identifier: 5D:DD:CC:DF:3A:FC:49:2F:6C:C4:87:1D:60:72:A5:AF:A9:73:A0:60 Certificate issuer: /CN=5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060 Certificate serial: 64E7D213C079F5F47BB4F6407749D14D529C339F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft Manifest number: 01C0 Signing time: Sat 23 Aug 2025 02:11:27 +0000 Manifest this update: Sat 23 Aug 2025 02:06:27 +0000 Manifest next update: Tue 26 Aug 2025 13:06:27 +0000 Files and hashes: 1: 34392e3135362e35362e302f32342d3234203d3e203535363637.roa (hash: nwE4egVuBWgMCKw3YCKh6VmNh2jKygK5nst6ZKFNdIE=) 2: 34392e3135362e36302e302f32342d3234203d3e203535363637.roa (hash: 5nBpHkwL82Gi9NUGyKestOksjx7zZUbyEsgUlUqCAVE=) 3: 34392e3135362e35372e302f32342d3234203d3e203535363637.roa (hash: SjmKWLBiEMFhWXiRMo2sqEynUyemXFh8rKM/uEFt5LQ=) 4: 5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.crl (hash: YRI/9G5ouiz81qL08YnYMxoc+xpLJrVNtYBd9mXVIl8=) 5: 34392e3135362e35362e302f32332d3233203d3e203535363637.roa (hash: NbIqv7AUSQMS1xCn0a3rRo2bmONh2GyMw23FeabY33s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.crl rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:e7:d2:13:c0:79:f5:f4:7b:b4:f6:40:77:49:d1:4d:52:9c:33:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060 Validity Not Before: Aug 23 02:06:27 2025 GMT Not After : Aug 26 13:06:27 2025 GMT Subject: CN=80710501BFBE88D80E90251C8CA2F17AEEECAB02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:64:54:9f:21:6e:a1:81:a7:26:25:28:50:62: e4:0c:d7:10:04:5c:09:77:70:4e:f2:df:57:d0:2f: e2:ad:04:20:e1:0a:6b:fa:63:d2:e6:8c:82:5a:41: 21:d7:cb:1e:72:10:8b:69:48:31:d3:b4:a1:d9:d5: 6e:e5:35:59:31:26:66:33:5d:c9:b8:cb:9a:7c:f6: 2a:83:0f:9b:6a:7e:5f:c0:a7:02:67:c2:10:d9:ef: 49:9b:e9:ec:d5:60:8b:60:b7:c1:36:ac:f9:b1:2f: 5f:43:2e:b3:73:60:39:6f:5a:76:d4:97:68:f3:3e: 0b:6e:d5:00:d7:ce:40:57:41:0b:dc:fe:05:ff:e0: 11:43:9e:ab:b5:16:9c:f0:4e:a8:85:02:58:c3:85: d2:93:e0:ee:c6:c0:41:2e:58:c3:b9:84:ca:1c:eb: 5a:6f:4e:95:91:eb:76:9d:2e:d9:91:1d:f2:06:2c: 32:87:82:da:4f:da:e6:9b:50:15:18:7c:b3:b2:4f: ee:27:19:8c:b3:c6:c2:18:bb:2d:ed:8b:85:26:aa: 46:39:b1:44:d5:b4:4f:23:ed:0b:17:2e:3a:7a:2e: 95:19:c5:32:98:e4:3d:9b:a1:ea:83:6a:78:da:df: 2d:a8:4b:a5:a9:19:6c:9c:b4:9f:63:61:9b:c3:90: 1b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:71:05:01:BF:BE:88:D8:0E:90:25:1C:8C:A2:F1:7A:EE:EC:AB:02 X509v3 Authority Key Identifier: keyid:5D:DD:CC:DF:3A:FC:49:2F:6C:C4:87:1D:60:72:A5:AF:A9:73:A0:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:d4:c4:bf:f0:52:39:5a:90:ee:88:13:64:7e:9c:cd:f7:3b: 41:10:2e:c7:95:9e:a5:4c:bd:d0:cd:09:61:56:b5:fc:9f:fd: 23:89:1f:eb:f2:ae:f9:a2:90:f5:75:56:af:45:38:7d:66:32: 05:b9:4f:2a:5c:6a:1d:bd:35:7a:af:02:30:66:95:72:3b:0d: 96:e4:bc:ba:49:80:42:1e:dd:3d:dc:14:63:17:a8:bf:19:17: 5c:6a:81:15:df:c5:b0:6a:51:9c:f2:08:0f:79:2a:0a:48:ad: 9b:e8:25:83:70:05:74:b9:f9:cb:b6:1f:65:dd:2c:55:00:43: e2:0b:19:65:b6:71:8f:77:f8:f0:f6:17:d1:18:99:e6:19:ff: 43:af:10:7c:84:e0:0b:2b:01:65:53:1c:55:49:e7:4d:87:db: 1e:c0:fe:18:4a:a8:65:be:f3:49:83:f9:52:9a:5d:ef:aa:52: 38:cb:3f:31:dd:56:0d:a1:82:c9:6c:08:c3:47:54:3c:e0:ab: a7:a0:63:51:9a:dc:81:6d:60:b4:c0:5a:87:8f:41:65:92:ab: c9:55:39:8b:93:c9:66:62:ce:e3:82:b4:3f:e9:ab:3e:ce:ea: 78:3f:66:78:26:57:e0:ea:00:44:d7:f4:4c:6d:96:e6:da:fd: 31:ed:b9:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZOfSE8B59fR7tPZAd0nRTVKcM58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURERENDREYzQUZDNDkyRjZDQzQ4NzFENjA3MkE1QUZB OTczQTA2MDAeFw0yNTA4MjMwMjA2MjdaFw0yNTA4MjYxMzA2MjdaMDMxMTAvBgNV BAMTKDgwNzEwNTAxQkZCRTg4RDgwRTkwMjUxQzhDQTJGMTdBRUVFQ0FCMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcZFSfIW6hgacmJShQYuQM1xAE XAl3cE7y31fQL+KtBCDhCmv6Y9LmjIJaQSHXyx5yEItpSDHTtKHZ1W7lNVkxJmYz Xcm4y5p89iqDD5tqfl/ApwJnwhDZ70mb6ezVYItgt8E2rPmxL19DLrNzYDlvWnbU l2jzPgtu1QDXzkBXQQvc/gX/4BFDnqu1FpzwTqiFAljDhdKT4O7GwEEuWMO5hMoc 61pvTpWR63adLtmRHfIGLDKHgtpP2uabUBUYfLOyT+4nGYyzxsIYuy3ti4UmqkY5 sUTVtE8j7QsXLjp6LpUZxTKY5D2boeqDanja3y2oS6WpGWyctJ9jYZvDkBthAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgHEFAb++iNgOkCUcjKLxeu7sqwIwHwYDVR0j BBgwFoAUXd3M3zr8SS9sxIcdYHKlr6lzoGAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjA2Y2Y1MC1hM2QxLTRjYzktOTI2MC05ODdiMmNhMGM5MjcvMC81REREQ0NERjNB RkM0OTJGNkNDNDg3MUQ2MDcyQTVBRkE5NzNBMDYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNURERENDREYzQUZDNDkyRjZDQzQ4NzFENjA3MkE1QUZBOTcz QTA2MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjIwNmNmNTAtYTNkMS00Y2M5LTky NjAtOTg3YjJjYTBjOTI3LzAvNURERENDREYzQUZDNDkyRjZDQzQ4NzFENjA3MkE1 QUZBOTczQTA2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHUxL/wUjlakO6IE2R+nM33O0EQLseVnqVM vdDNCWFWtfyf/SOJH+vyrvmikPV1Vq9FOH1mMgW5Typcah29NXqvAjBmlXI7DZbk vLpJgEIe3T3cFGMXqL8ZF1xqgRXfxbBqUZzyCA95KgpIrZvoJYNwBXS5+cu2H2Xd LFUAQ+ILGWW2cY93+PD2F9EYmeYZ/0OvEHyE4AsrAWVTHFVJ502H2x7A/hhKqGW+ 80mD+VKaXe+qUjjLPzHdVg2hgslsCMNHVDzgq6egY1Ga3IFtYLTAWoePQWWSq8lV OYuTyWZizuOCtD/pqz7O6ng/ZngmV+DqAETX9Extluba/THtuX8= -----END CERTIFICATE-----Generated at Sat Aug 23 12:09:37 2025 by rpki-client