$ rpki-client -vvf repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft File: 5234A428BC63559E2511B3EFFB085B82B195A8ED.mft (raw, json) Hash identifier: h/pLgtcJoGJs/nhn25pcfGB7jkhZc9POVJCGT66XFWY= Subject key identifier: 87:01:83:AA:62:21:57:B6:CD:14:16:A9:58:6F:20:E3:01:F5:3E:05 Authority key identifier: 52:34:A4:28:BC:63:55:9E:25:11:B3:EF:FB:08:5B:82:B1:95:A8:ED Certificate issuer: /CN=5234A428BC63559E2511B3EFFB085B82B195A8ED Certificate serial: 13A04E10F5687BC1C5C56AA6AD157B798119D55D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft Manifest number: 45 Signing time: Thu 21 Aug 2025 14:02:08 +0000 Manifest this update: Thu 21 Aug 2025 13:57:08 +0000 Manifest next update: Mon 25 Aug 2025 00:00:08 +0000 Files and hashes: 1: 3130332e31372e37362e302f32342d3234203d3e20313331373831.roa (hash: rB8zcfhigYxp6rZG5kgxX6r/oJS8xphHw/YAzK8Sodw=) 2: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: 3jZR/32xfuAKeJQ/xf5TVwB85F6YIOYekaTwsoIa1SY=) 3: 3130332e31372e37372e302f32342d3234203d3e20313331373831.roa (hash: 4y750PE+WZPEuQKdgW2BVnFEcTQLxauJA4sENyjZR2o=) 4: 5234A428BC63559E2511B3EFFB085B82B195A8ED.crl (hash: b91NacJ87NZ2HL97drPOhZRmqC5K6SIGPWS0Ye+YFdI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.crl rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:a0:4e:10:f5:68:7b:c1:c5:c5:6a:a6:ad:15:7b:79:81:19:d5:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5234A428BC63559E2511B3EFFB085B82B195A8ED Validity Not Before: Aug 21 13:57:08 2025 GMT Not After : Aug 25 00:00:08 2025 GMT Subject: CN=870183AA622157B6CD1416A9586F20E301F53E05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d5:72:8d:cb:da:a1:ff:33:ac:89:4b:f2:78: 45:0b:fd:d4:b3:08:2b:78:80:12:11:84:b5:80:6e: a6:53:85:1d:28:e9:e4:97:11:5f:e1:20:0c:fe:05: be:e9:d9:e6:a7:dc:a9:6f:7d:63:7f:d8:97:b7:79: 29:ef:54:b8:aa:e7:12:cc:98:53:3f:e8:b5:ea:e2: c7:bb:25:ca:b9:26:c2:33:7c:bb:26:ec:17:e5:ad: bd:0d:7f:60:96:43:c5:92:9d:ee:97:14:69:35:39: e3:4b:a0:34:23:2a:34:3e:eb:fd:46:b5:5c:6c:e3: 88:fd:3f:12:8b:66:fb:12:70:d6:2d:ea:22:3e:c4: 5d:7c:ce:cc:ec:52:41:ae:e2:7f:c3:fa:91:2a:cd: 62:d2:2d:1c:e2:1d:3c:e4:ac:66:13:78:01:63:19: 5a:28:c3:82:9c:17:08:39:ab:8c:59:f0:ae:59:41: 73:52:cd:b6:57:61:24:94:4e:6e:40:43:64:37:d8: 29:9d:ec:dd:32:d7:10:0b:ff:4e:67:51:72:8c:ac: b4:e2:fa:53:8e:4a:ed:e6:30:52:e0:c0:43:a9:8b: 39:da:6b:db:57:f8:75:e6:e3:99:51:aa:0d:48:6c: fd:51:59:7b:67:b3:c1:99:bc:ec:1f:15:95:00:d8: dd:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:01:83:AA:62:21:57:B6:CD:14:16:A9:58:6F:20:E3:01:F5:3E:05 X509v3 Authority Key Identifier: keyid:52:34:A4:28:BC:63:55:9E:25:11:B3:EF:FB:08:5B:82:B1:95:A8:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:b9:f7:eb:b9:06:5b:b3:b4:2a:54:a2:60:de:d9:d5:be:82: 98:4e:c1:be:64:08:b2:52:f7:57:ed:f3:b6:e7:28:4b:7f:7b: d6:72:8a:d9:d1:50:9b:fa:fb:df:cb:a2:5f:86:ce:b5:81:4d: df:21:e6:c8:75:e2:e9:ae:a8:ea:c2:62:06:02:ef:7d:66:0a: a7:44:75:de:e9:b8:b5:65:de:26:cc:75:36:5d:1c:b4:a2:45: 62:e4:c6:5d:15:3d:8f:6f:41:fa:ea:d3:b9:21:65:44:bc:ba: f2:d7:1b:62:3f:5a:bf:77:22:87:9b:54:91:3d:b8:f2:3a:0c: 04:59:f7:95:2e:1d:4c:3c:d7:79:d9:45:2d:83:cd:38:76:fd: 72:a5:c4:0c:50:f2:8f:a7:fc:66:57:d7:44:6a:3c:7f:23:9a: 76:14:7d:b6:5c:80:4f:ee:2f:d6:c1:f9:d9:13:fd:99:71:61: b5:e4:a7:cb:33:30:12:03:5e:dc:44:b7:08:a5:52:53:6b:e7: 5c:6c:47:53:3a:ca:66:aa:a3:41:c0:31:4d:16:20:30:42:b6: d0:96:d2:42:d0:c1:0d:d3:9e:85:23:a5:8d:a1:8c:19:3e:15: 51:9a:6e:ef:21:88:ba:b3:8f:d1:99:b4:03:ed:0c:d4:93:d0: af:2b:19:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE6BOEPVoe8HFxWqmrRV7eYEZ1V0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVCODJC MTk1QThFRDAeFw0yNTA4MjExMzU3MDhaFw0yNTA4MjUwMDAwMDhaMDMxMTAvBgNV BAMTKDg3MDE4M0FBNjIyMTU3QjZDRDE0MTZBOTU4NkYyMEUzMDFGNTNFMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC91XKNy9qh/zOsiUvyeEUL/dSz CCt4gBIRhLWAbqZThR0o6eSXEV/hIAz+Bb7p2ean3KlvfWN/2Je3eSnvVLiq5xLM mFM/6LXq4se7Jcq5JsIzfLsm7Bflrb0Nf2CWQ8WSne6XFGk1OeNLoDQjKjQ+6/1G tVxs44j9PxKLZvsScNYt6iI+xF18zszsUkGu4n/D+pEqzWLSLRziHTzkrGYTeAFj GVoow4KcFwg5q4xZ8K5ZQXNSzbZXYSSUTm5AQ2Q32Cmd7N0y1xAL/05nUXKMrLTi +lOOSu3mMFLgwEOpiznaa9tX+HXm45lRqg1IbP1RWXtns8GZvOwfFZUA2N0RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhwGDqmIhV7bNFBapWG8g4wH1PgUwHwYDVR0j BBgwFoAUUjSkKLxjVZ4lEbPv+whbgrGVqO0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YTA3MTUxNC1lNGRlLTRhY2UtYTBkZi1mN2M0YWI4MDc0YTUvMC81MjM0QTQyOEJD NjM1NTlFMjUxMUIzRUZGQjA4NUI4MkIxOTVBOEVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVCODJCMTk1 QThFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmEwNzE1MTQtZTRkZS00YWNlLWEw ZGYtZjdjNGFiODA3NGE1LzAvNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVC ODJCMTk1QThFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJO59+u5BluztCpUomDe2dW+gphOwb5kCLJS 91ft87bnKEt/e9ZyitnRUJv6+9/Lol+GzrWBTd8h5sh14umuqOrCYgYC731mCqdE dd7puLVl3ibMdTZdHLSiRWLkxl0VPY9vQfrq07khZUS8uvLXG2I/Wr93IoebVJE9 uPI6DARZ95UuHUw813nZRS2DzTh2/XKlxAxQ8o+n/GZX10RqPH8jmnYUfbZcgE/u L9bB+dkT/ZlxYbXkp8szMBIDXtxEtwilUlNr51xsR1M6ymaqo0HAMU0WIDBCttCW 0kLQwQ3TnoUjpY2hjBk+FVGabu8hiLqzj9GZtAPtDNST0K8rGWk= -----END CERTIFICATE-----Generated at Sat Aug 23 12:22:10 2025 by rpki-client