$ rpki-client -vvf repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft File: 5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft (raw, json) Hash identifier: u3DZfXl6DIvFv9UAsRK/ae09lSB1WkQpbLhajKiNcOY= Subject key identifier: A6:98:63:1E:B7:F7:44:53:7B:55:DE:E3:8B:7B:82:F0:AC:DB:49:92 Authority key identifier: 5E:02:7C:2A:BE:4A:1F:46:34:0E:D8:3A:3A:D8:F0:6D:BC:CD:CD:21 Certificate issuer: /CN=5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21 Certificate serial: 2075D90622E94DE1B03082D150D11D85332AB8D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft Manifest number: 0276 Signing time: Fri 22 Aug 2025 08:11:31 +0000 Manifest this update: Fri 22 Aug 2025 08:06:31 +0000 Manifest next update: Mon 25 Aug 2025 08:56:31 +0000 Files and hashes: 1: 3130332e3137392e3133362e302f32332d3234203d3e20313339393737.roa (hash: IQxk+RVCCE4pKnBFAa/I+n4PlSjcG9LFvLyIRAqgipY=) 2: 5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.crl (hash: W7k23YBvk4/QS+4R3Bazv8sGBD00bS0HjXYQj+cBu4E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.crl rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 08:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:75:d9:06:22:e9:4d:e1:b0:30:82:d1:50:d1:1d:85:33:2a:b8:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21 Validity Not Before: Aug 22 08:06:31 2025 GMT Not After : Aug 25 08:56:31 2025 GMT Subject: CN=A698631EB7F744537B55DEE38B7B82F0ACDB4992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0b:eb:8a:6d:bf:f7:fc:47:d3:04:d3:55:79: ca:18:b3:94:66:04:b9:da:91:c0:b8:67:22:97:ba: 60:27:a3:90:c2:45:75:63:0d:57:43:f1:51:d2:c9: 21:c8:54:4c:20:a0:c5:34:c4:c3:36:11:01:55:ed: 7a:6b:30:b0:95:d4:07:ac:a8:eb:7b:3b:a5:90:7c: d8:fa:76:ce:18:9b:10:f5:f8:62:4f:41:3f:1a:8b: d6:7f:96:7f:e5:70:0a:51:90:4a:43:17:a6:25:39: 92:a5:98:e5:8c:a0:4f:bf:af:e7:ad:91:6c:f0:64: a9:09:f6:db:ab:c0:5c:f4:a1:e7:4e:f8:44:19:da: bf:40:d3:55:7a:06:35:e2:4f:a9:8a:42:ec:6e:78: 86:72:24:9e:83:11:58:fb:a5:e1:7a:fc:d0:92:99: 2e:6f:06:23:47:10:3e:e9:d9:78:7c:10:26:ce:3c: b5:2d:e9:03:ee:c1:8c:3d:22:02:43:57:73:5e:13: 9f:ef:92:e3:31:22:21:0a:a3:48:9c:5f:00:30:1a: e2:23:fd:a2:9a:dd:b0:d1:0e:9c:8c:12:47:2a:a0: f5:9a:a2:76:5d:96:8e:19:c9:04:e1:70:12:dd:7c: ed:ee:dc:8c:6d:bc:35:ef:89:b3:31:6c:83:a8:44: f8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:98:63:1E:B7:F7:44:53:7B:55:DE:E3:8B:7B:82:F0:AC:DB:49:92 X509v3 Authority Key Identifier: keyid:5E:02:7C:2A:BE:4A:1F:46:34:0E:D8:3A:3A:D8:F0:6D:BC:CD:CD:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:d2:21:07:4b:ac:fa:6a:bc:63:0b:23:4e:b3:4d:92:d1:03: 98:65:0c:56:7a:a6:d7:4c:a1:ab:94:b9:c5:1e:e3:c7:ae:b8: c2:a6:5a:30:bb:59:63:78:52:ca:91:58:67:42:da:ba:9c:5d: c9:58:58:f7:31:5d:f3:b5:17:20:fd:e4:ae:ec:d5:2d:8c:4d: 63:cc:28:86:86:57:88:30:62:65:82:60:b5:fd:21:1d:77:ad: 2b:54:85:ef:04:f1:dc:ae:82:9e:81:ee:48:4d:da:cb:92:be: e3:6c:ac:cb:30:5a:85:c3:b1:f5:3f:20:65:f0:61:79:72:db: f9:6b:c7:32:d3:8c:94:86:5d:43:b2:7b:6d:d0:1f:7a:7a:3a: b2:ae:97:69:a3:71:08:5f:ef:ce:d3:fd:d3:86:95:94:10:2d: 13:25:e5:70:89:31:16:68:d9:b7:6a:49:26:97:99:1d:37:b4: 45:88:c8:0d:2e:fa:db:38:ff:c2:48:10:ce:25:23:3a:36:85: 3a:a0:59:66:fc:bf:27:e4:84:a2:81:ee:ae:2c:d3:0e:af:0f: 3a:07:96:14:99:39:b0:76:47:68:67:bc:2d:c8:b3:23:cd:44: c2:4f:f9:f8:fd:5c:85:54:3e:4d:0e:ec:69:b1:11:3d:85:48: 73:96:ed:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIHXZBiLpTeGwMILRUNEdhTMquNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUwMjdDMkFCRTRBMUY0NjM0MEVEODNBM0FEOEYwNkRC Q0NEQ0QyMTAeFw0yNTA4MjIwODA2MzFaFw0yNTA4MjUwODU2MzFaMDMxMTAvBgNV BAMTKEE2OTg2MzFFQjdGNzQ0NTM3QjU1REVFMzhCN0I4MkYwQUNEQjQ5OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKC+uKbb/3/EfTBNNVecoYs5Rm BLnakcC4ZyKXumAno5DCRXVjDVdD8VHSySHIVEwgoMU0xMM2EQFV7XprMLCV1Aes qOt7O6WQfNj6ds4YmxD1+GJPQT8ai9Z/ln/lcApRkEpDF6YlOZKlmOWMoE+/r+et kWzwZKkJ9turwFz0oedO+EQZ2r9A01V6BjXiT6mKQuxueIZyJJ6DEVj7peF6/NCS mS5vBiNHED7p2Xh8ECbOPLUt6QPuwYw9IgJDV3NeE5/vkuMxIiEKo0icXwAwGuIj /aKa3bDRDpyMEkcqoPWaonZdlo4ZyQThcBLdfO3u3IxtvDXvibMxbIOoRPjNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpphjHrf3RFN7Vd7ji3uC8KzbSZIwHwYDVR0j BBgwFoAUXgJ8Kr5KH0Y0Dtg6OtjwbbzNzSEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDgwYjMyMS1hYTMxLTQzMTctOWQzMS1jMmJkMTkwYzEzODQvMC81RTAyN0MyQUJF NEExRjQ2MzQwRUQ4M0EzQUQ4RjA2REJDQ0RDRDIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUUwMjdDMkFCRTRBMUY0NjM0MEVEODNBM0FEOEYwNkRCQ0NE Q0QyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ4MGIzMjEtYWEzMS00MzE3LTlk MzEtYzJiZDE5MGMxMzg0LzAvNUUwMjdDMkFCRTRBMUY0NjM0MEVEODNBM0FEOEYw NkRCQ0NEQ0QyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH/SIQdLrPpqvGMLI06zTZLRA5hlDFZ6ptdM oauUucUe48euuMKmWjC7WWN4UsqRWGdC2rqcXclYWPcxXfO1FyD95K7s1S2MTWPM KIaGV4gwYmWCYLX9IR13rStUhe8E8dyugp6B7khN2suSvuNsrMswWoXDsfU/IGXw YXly2/lrxzLTjJSGXUOye23QH3p6OrKul2mjcQhf787T/dOGlZQQLRMl5XCJMRZo 2bdqSSaXmR03tEWIyA0u+ts4/8JIEM4lIzo2hTqgWWb8vyfkhKKB7q4s0w6vDzoH lhSZObB2R2hnvC3IsyPNRMJP+fj9XIVUPk0O7GmxET2FSHOW7b4= -----END CERTIFICATE-----Generated at Sat Aug 23 15:27:18 2025 by rpki-client