$ rpki-client -vvf repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft File: 5AE19AE3FA86591042AE694640539C9669DEC801.mft (raw, json) Hash identifier: r94GrBZON6MqrTVGqhp3PPKrZvy3F1HtaXRU7SKwj4g= Subject key identifier: D2:AD:2A:6A:E6:B5:A4:B6:A9:FC:3C:7B:17:C2:9E:08:8F:80:A5:85 Authority key identifier: 5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01 Certificate issuer: /CN=5AE19AE3FA86591042AE694640539C9669DEC801 Certificate serial: 12B6A81E13C24A871ED80A926C9C20ACC0DE3EE9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft Manifest number: 01DB Signing time: Fri 22 Aug 2025 14:01:40 +0000 Manifest this update: Fri 22 Aug 2025 13:56:40 +0000 Manifest next update: Tue 26 Aug 2025 01:39:40 +0000 Files and hashes: 1: 3130332e3232302e34342e302f32342d3234203d3e203438343635.roa (hash: Vw4jOV+MZ+fjdwltnh69uK5QodMXxVJ0LlNiepCYdZ0=) 2: 3130332e3232302e34352e302f32342d3234203d3e203438343635.roa (hash: m4IQs/Cui2ddwLQciv0u+g5oFPnYhzNtze79R+PFKLg=) 3: 3130332e3232302e34342e302f32342d3234203d3e20313530313939.roa (hash: JArcqatJBrG0UJiwDi1c9yEOpb8Bk4EGWPIVKLKaIwQ=) 4: 3130332e3232302e34352e302f32342d3234203d3e20313530313939.roa (hash: VspFw++2jUPUNxpc1/y0Mp4Lv1a+LwrFNdh9KUkbu+E=) 5: 5AE19AE3FA86591042AE694640539C9669DEC801.crl (hash: qgpxnVGHoi5Hkb2m96qY15tFCfbF1FDu7r4/pgDYUVQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 01:39:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:b6:a8:1e:13:c2:4a:87:1e:d8:0a:92:6c:9c:20:ac:c0:de:3e:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AE19AE3FA86591042AE694640539C9669DEC801 Validity Not Before: Aug 22 13:56:40 2025 GMT Not After : Aug 26 01:39:40 2025 GMT Subject: CN=D2AD2A6AE6B5A4B6A9FC3C7B17C29E088F80A585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f6:df:11:76:cc:1b:7a:c6:3f:f6:7e:85:f4: 4d:02:fb:cb:fa:23:d3:f3:83:db:3c:1b:87:8a:ae: 0f:0e:6a:d9:b4:29:f8:7c:be:fd:0f:dd:a5:b3:8c: f2:e1:69:d6:c9:69:d0:bd:0e:ea:47:44:2f:02:f8: 26:9b:16:ea:8a:00:16:09:45:cb:35:56:f6:89:8d: 61:64:a3:1a:a6:ee:04:ca:20:43:d0:ab:4f:15:ab: 19:15:b0:f5:9b:08:4c:c2:02:7b:00:70:34:6e:08: 00:c0:be:78:2a:d6:49:94:e7:9f:d1:c0:4a:da:f2: 09:61:5c:6e:73:5b:e6:c5:ec:44:5d:c3:36:91:23: 44:32:1f:34:3d:69:2f:19:e8:49:f2:0c:7c:70:c9: f7:b5:3d:b0:d7:bd:20:29:4b:35:a0:d5:6e:7d:45: 22:de:ef:f6:15:d6:d9:f1:14:ea:bf:42:71:aa:aa: 31:48:b1:79:54:d6:c7:17:46:6b:44:30:e3:7d:b8: 24:e2:72:80:70:5e:01:2d:74:7a:cc:b1:1a:8c:43: b4:2a:b6:43:9f:47:75:e2:5f:67:4f:fb:f8:6f:33: c5:b7:46:0f:4d:d8:8e:9b:c9:23:88:90:de:9a:73: e7:3b:6b:1a:fe:d8:81:f6:2e:9a:e3:ba:5f:82:f1: d1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:AD:2A:6A:E6:B5:A4:B6:A9:FC:3C:7B:17:C2:9E:08:8F:80:A5:85 X509v3 Authority Key Identifier: keyid:5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:2e:0c:0e:4a:9d:03:4a:12:f7:fa:9d:b8:98:ad:85:59:22: 7e:08:e7:d7:b6:b1:81:7d:eb:29:c6:2e:0e:a7:f7:79:79:b3: 21:79:8b:ea:02:99:58:a3:f4:4e:30:e8:02:2d:ab:2b:93:2c: b7:73:62:b2:9d:4b:a7:49:44:80:2c:fa:11:09:34:74:fa:e1: 2d:7e:bc:c7:97:cb:ab:56:49:7b:78:ca:29:b8:9a:b0:0c:c9: 74:d5:0b:48:e4:b5:fe:af:50:ef:51:a5:a0:39:10:59:de:f2: e2:19:bb:cf:26:1f:06:92:0e:e6:97:e7:66:58:97:39:a5:31: 14:a4:cd:b7:74:3d:c3:51:9c:fa:17:70:1c:10:6f:2e:9c:c2: ca:9f:9e:57:19:0e:96:95:7e:fe:8e:a1:bd:f8:af:54:9a:f3: b3:19:cc:a1:37:ea:27:4b:a8:cf:63:c1:dd:a1:d1:3e:1b:54: 12:0f:a2:ec:aa:b5:67:d9:24:d4:f1:8a:65:1f:ce:29:14:7f: 8b:1a:79:e5:50:6c:b3:98:83:0f:2e:af:4d:5a:d2:c3:b0:66: 6e:65:16:9a:91:21:7d:69:d6:7b:7f:b6:28:c7:5d:06:d2:20: 58:09:4e:5c:04:bb:86:b6:19:f4:ca:db:92:f8:6c:af:e1:05: ef:b8:0e:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEraoHhPCSoce2AqSbJwgrMDePukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFFMTlBRTNGQTg2NTkxMDQyQUU2OTQ2NDA1MzlDOTY2 OURFQzgwMTAeFw0yNTA4MjIxMzU2NDBaFw0yNTA4MjYwMTM5NDBaMDMxMTAvBgNV BAMTKEQyQUQyQTZBRTZCNUE0QjZBOUZDM0M3QjE3QzI5RTA4OEY4MEE1ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD9t8RdswbesY/9n6F9E0C+8v6 I9Pzg9s8G4eKrg8Oatm0Kfh8vv0P3aWzjPLhadbJadC9DupHRC8C+CabFuqKABYJ Rcs1VvaJjWFkoxqm7gTKIEPQq08VqxkVsPWbCEzCAnsAcDRuCADAvngq1kmU55/R wEra8glhXG5zW+bF7ERdwzaRI0QyHzQ9aS8Z6EnyDHxwyfe1PbDXvSApSzWg1W59 RSLe7/YV1tnxFOq/QnGqqjFIsXlU1scXRmtEMON9uCTicoBwXgEtdHrMsRqMQ7Qq tkOfR3XiX2dP+/hvM8W3Rg9N2I6bySOIkN6ac+c7axr+2IH2Lprjul+C8dFdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0q0qaua1pLap/Dx7F8KeCI+ApYUwHwYDVR0j BBgwFoAUWuGa4/qGWRBCrmlGQFOclmneyAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTcyOTI5MS1hMWE3LTRiMTktOTNmNi0xZDg0NTc0YTY3YWUvMC81QUUxOUFFM0ZB ODY1OTEwNDJBRTY5NDY0MDUzOUM5NjY5REVDODAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFFMTlBRTNGQTg2NTkxMDQyQUU2OTQ2NDA1MzlDOTY2OURF QzgwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU3MjkyOTEtYTFhNy00YjE5LTkz ZjYtMWQ4NDU3NGE2N2FlLzAvNUFFMTlBRTNGQTg2NTkxMDQyQUU2OTQ2NDA1MzlD OTY2OURFQzgwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKkuDA5KnQNKEvf6nbiYrYVZIn4I59e2sYF9 6ynGLg6n93l5syF5i+oCmVij9E4w6AItqyuTLLdzYrKdS6dJRIAs+hEJNHT64S1+ vMeXy6tWSXt4yim4mrAMyXTVC0jktf6vUO9RpaA5EFne8uIZu88mHwaSDuaX52ZY lzmlMRSkzbd0PcNRnPoXcBwQby6cwsqfnlcZDpaVfv6Oob34r1Sa87MZzKE36idL qM9jwd2h0T4bVBIPouyqtWfZJNTximUfzikUf4saeeVQbLOYgw8ur01a0sOwZm5l FpqRIX1p1nt/tijHXQbSIFgJTlwEu4a2GfTK25L4bK/hBe+4Dow= -----END CERTIFICATE-----Generated at Sat Aug 23 12:28:39 2025 by rpki-client