$ rpki-client -vvf repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft File: 5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft (raw, json) Hash identifier: muKM65/ISKsZnP+cLAmtgBlkEeLJoFd3JQrU+3UW+Nc= Subject key identifier: E2:B4:F2:80:5C:E9:EA:11:21:16:0F:E2:A1:CE:F7:81:67:97:AE:F3 Authority key identifier: 51:97:E2:A7:8B:BA:1E:8C:9E:B8:08:E4:5A:99:DD:2B:E7:B4:12:97 Certificate issuer: /CN=5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297 Certificate serial: 38367334E0365FF9649C0E61B9E8B7596C78825E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft Manifest number: 01A2 Signing time: Thu 21 Aug 2025 10:31:24 +0000 Manifest this update: Thu 21 Aug 2025 10:26:24 +0000 Manifest next update: Sun 24 Aug 2025 14:17:24 +0000 Files and hashes: 1: 3130332e3132392e32302e302f32332d3234203d3e20313335343738.roa (hash: YByKLIatw2VYf9uIqdHXeYjHhsev8w+x71A+omd++qw=) 2: 3130332e3132392e32322e302f32332d3234203d3e20313335343738.roa (hash: FwEnmWvpQPi3X//OQNwFe+4W6d+oidU+6VtbWJyAezc=) 3: 5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl (hash: C/xQKiyOsjgB6jd2YImneTomGII9cPia7et7flbNQic=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 14:17:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:36:73:34:e0:36:5f:f9:64:9c:0e:61:b9:e8:b7:59:6c:78:82:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297 Validity Not Before: Aug 21 10:26:24 2025 GMT Not After : Aug 24 14:17:24 2025 GMT Subject: CN=E2B4F2805CE9EA1121160FE2A1CEF7816797AEF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ea:24:40:54:2b:c9:fb:0b:28:7e:2e:fd:78: 91:f9:21:cb:ae:b2:47:6f:ba:7d:59:88:b4:cb:14: e7:2b:39:a6:26:7a:c9:cd:4e:03:30:46:00:ed:2b: 27:7d:53:cc:d8:0e:c8:18:e0:f7:79:2e:bc:46:e9: 60:de:5f:b1:32:1f:6f:a1:bb:a0:f8:fa:24:0e:9a: 85:fb:a7:2d:e0:0a:0a:b8:30:de:e1:a1:38:62:36: c4:35:f7:27:57:07:f3:45:eb:0d:59:24:40:33:bd: ef:fb:8c:b9:87:a2:d2:8e:8c:8d:9e:21:e6:50:35: ae:f4:3a:3c:81:17:02:eb:97:13:b4:2e:a8:7c:72: 8d:92:90:b3:43:2b:2b:fc:ad:e1:c8:02:b0:ce:bf: 79:b2:7a:81:91:4f:4e:1e:60:25:fe:84:8d:20:3b: f5:9e:65:60:c6:fc:65:ae:4b:d0:1a:ea:81:16:4e: 58:fa:96:c6:6a:40:22:1d:02:ef:df:1e:da:91:67: 52:a2:c3:d1:7c:5b:e3:f4:f9:47:fa:ad:5e:5c:83: 34:3e:b5:ec:be:5a:f9:81:04:f2:54:84:62:fe:7a: 94:f1:cd:3b:b8:15:11:63:14:95:dd:1b:58:93:bb: 11:2e:12:a4:ad:9b:e7:2f:0c:0e:37:2a:9b:2e:e0: 00:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B4:F2:80:5C:E9:EA:11:21:16:0F:E2:A1:CE:F7:81:67:97:AE:F3 X509v3 Authority Key Identifier: keyid:51:97:E2:A7:8B:BA:1E:8C:9E:B8:08:E4:5A:99:DD:2B:E7:B4:12:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:90:21:9d:f6:d6:aa:06:0d:07:72:00:06:b3:95:53:01:95: 00:2d:63:be:11:9c:e7:e0:ea:f6:91:83:de:1c:d2:fc:95:33: 9e:a3:15:1d:4e:67:3a:18:95:4d:ad:5a:ea:5b:60:32:e2:7c: d3:08:f3:ea:d4:ed:eb:89:8e:fa:7e:ab:fb:86:6e:1f:5a:e3: 95:99:ea:fa:04:7f:01:74:b7:77:99:27:d9:cb:af:95:df:a7: c1:cb:55:16:7b:63:b1:c5:c0:5d:e1:91:7c:76:20:c8:22:69: 71:22:ec:b9:57:9b:4c:34:ac:e7:11:77:fb:02:ea:c6:53:57: b1:38:bb:bd:ef:14:c3:66:67:77:43:bf:13:56:1a:bc:a5:52: a0:21:1c:a7:77:5e:72:75:2e:08:da:5f:ee:f9:60:4f:b1:1a: 8d:3d:f1:40:54:ce:86:d7:c6:dd:e4:ff:e7:6f:8f:96:fa:76: e1:f3:f0:6a:85:39:55:41:31:9e:71:fe:ed:33:00:9c:89:72: f3:0e:b8:ca:32:fe:49:9b:f4:74:2a:e0:05:0e:65:09:53:5a: 37:db:1b:ab:05:0f:8c:1f:62:92:05:06:b5:82:fb:7f:26:29: 46:cf:78:b9:f5:2c:99:e6:ac:f3:d2:07:01:c8:a7:3a:33:4b: ed:b5:2d:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUODZzNOA2X/lknA5huei3WWx4gl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE5N0UyQTc4QkJBMUU4QzlFQjgwOEU0NUE5OUREMkJF N0I0MTI5NzAeFw0yNTA4MjExMDI2MjRaFw0yNTA4MjQxNDE3MjRaMDMxMTAvBgNV BAMTKEUyQjRGMjgwNUNFOUVBMTEyMTE2MEZFMkExQ0VGNzgxNjc5N0FFRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ6iRAVCvJ+wsofi79eJH5Icuu skdvun1ZiLTLFOcrOaYmesnNTgMwRgDtKyd9U8zYDsgY4Pd5LrxG6WDeX7EyH2+h u6D4+iQOmoX7py3gCgq4MN7hoThiNsQ19ydXB/NF6w1ZJEAzve/7jLmHotKOjI2e IeZQNa70OjyBFwLrlxO0Lqh8co2SkLNDKyv8reHIArDOv3myeoGRT04eYCX+hI0g O/WeZWDG/GWuS9Aa6oEWTlj6lsZqQCIdAu/fHtqRZ1Kiw9F8W+P0+Uf6rV5cgzQ+ tey+WvmBBPJUhGL+epTxzTu4FRFjFJXdG1iTuxEuEqStm+cvDA43Kpsu4ADHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4rTygFzp6hEhFg/ioc73gWeXrvMwHwYDVR0j BBgwFoAUUZfip4u6HoyeuAjkWpndK+e0EpcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjU0MjgzOS0yODU4LTQ5ZjAtYWNkZi1mYTdkM2FiOWM1NTgvMC81MTk3RTJBNzhC QkExRThDOUVCODA4RTQ1QTk5REQyQkU3QjQxMjk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTE5N0UyQTc4QkJBMUU4QzlFQjgwOEU0NUE5OUREMkJFN0I0 MTI5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY1NDI4MzktMjg1OC00OWYwLWFj ZGYtZmE3ZDNhYjljNTU4LzAvNTE5N0UyQTc4QkJBMUU4QzlFQjgwOEU0NUE5OURE MkJFN0I0MTI5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEqQIZ321qoGDQdyAAazlVMBlQAtY74RnOfg 6vaRg94c0vyVM56jFR1OZzoYlU2tWupbYDLifNMI8+rU7euJjvp+q/uGbh9a45WZ 6voEfwF0t3eZJ9nLr5Xfp8HLVRZ7Y7HFwF3hkXx2IMgiaXEi7LlXm0w0rOcRd/sC 6sZTV7E4u73vFMNmZ3dDvxNWGrylUqAhHKd3XnJ1LgjaX+75YE+xGo098UBUzobX xt3k/+dvj5b6duHz8GqFOVVBMZ5x/u0zAJyJcvMOuMoy/kmb9HQq4AUOZQlTWjfb G6sFD4wfYpIFBrWC+38mKUbPeLn1LJnmrPPSBwHIpzozS+21LZg= -----END CERTIFICATE-----Generated at Sat Aug 23 14:14:37 2025 by rpki-client