$ rpki-client -vvf repo-rpki.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/5EF007981390128F8F14B087123454D686E41CB8.mft File: 5EF007981390128F8F14B087123454D686E41CB8.mft (raw, json) Hash identifier: NqqN8s5MVR1s/VtQmkRqRgqGuIFsT0GuKSz4eDHGhkM= Subject key identifier: 8E:D4:6F:FA:51:81:0A:F1:25:94:5F:12:5A:DC:1D:90:28:D9:A1:EE Authority key identifier: 5E:F0:07:98:13:90:12:8F:8F:14:B0:87:12:34:54:D6:86:E4:1C:B8 Certificate issuer: /CN=5EF007981390128F8F14B087123454D686E41CB8 Certificate serial: 6A84E2FE65797ED408383984378D1216252B27CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EF007981390128F8F14B087123454D686E41CB8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/5EF007981390128F8F14B087123454D686E41CB8.mft Manifest number: 01D9 Signing time: Fri 22 Aug 2025 01:51:51 +0000 Manifest this update: Fri 22 Aug 2025 01:46:51 +0000 Manifest next update: Mon 25 Aug 2025 05:52:51 +0000 Files and hashes: 1: 5EF007981390128F8F14B087123454D686E41CB8.crl (hash: 80hIYO9mEMg7yqDfhL/WOLSCt5Xzs8tD5asK2Ov8VUI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/5EF007981390128F8F14B087123454D686E41CB8.crl rsync://repo-rpki.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/5EF007981390128F8F14B087123454D686E41CB8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EF007981390128F8F14B087123454D686E41CB8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 05:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:84:e2:fe:65:79:7e:d4:08:38:39:84:37:8d:12:16:25:2b:27:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EF007981390128F8F14B087123454D686E41CB8 Validity Not Before: Aug 22 01:46:51 2025 GMT Not After : Aug 25 05:52:51 2025 GMT Subject: CN=8ED46FFA51810AF125945F125ADC1D9028D9A1EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f7:37:59:d4:4c:56:e4:4c:2c:db:fe:f6:29: 11:1d:34:a4:3f:cd:b5:bc:73:22:20:83:6d:74:7e: 57:4e:8f:de:c5:ac:d9:1c:02:9b:e1:21:7f:9e:ba: db:c3:d2:63:fb:ab:25:14:be:78:4d:f2:e4:db:89: 2c:73:23:52:d5:53:d4:dc:92:92:29:21:0a:95:de: dd:e9:2d:98:b3:04:6e:01:c4:a0:18:3c:95:43:8b: 91:84:67:97:7f:fb:f0:e9:1a:d1:00:eb:d6:86:6c: 46:c7:1f:e9:09:ef:7d:57:2a:07:a0:56:ec:91:31: 4c:cc:10:80:1d:50:57:ec:44:db:c9:61:24:11:65: 8f:5a:62:07:ea:cc:b2:90:0e:89:b8:8a:ac:bd:c0: 80:02:0e:82:21:de:dc:77:9d:fa:fb:53:f9:97:a5: 35:a1:28:44:09:ff:a9:d4:bf:da:14:86:44:62:84: f9:bb:5b:b3:44:1e:f5:d8:63:5a:65:bf:d2:22:06: 6a:7b:02:77:92:b8:7a:ee:10:67:d2:35:38:3b:c3: 81:25:bf:02:0d:60:90:d3:e9:80:3b:a6:43:8a:4b: e3:ab:53:60:d3:bc:1a:53:43:d7:a0:23:c8:cc:7f: 4a:30:d2:39:6a:d9:1a:0f:c7:92:4e:6a:c5:3c:cb: c8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D4:6F:FA:51:81:0A:F1:25:94:5F:12:5A:DC:1D:90:28:D9:A1:EE X509v3 Authority Key Identifier: keyid:5E:F0:07:98:13:90:12:8F:8F:14:B0:87:12:34:54:D6:86:E4:1C:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/5EF007981390128F8F14B087123454D686E41CB8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EF007981390128F8F14B087123454D686E41CB8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/5EF007981390128F8F14B087123454D686E41CB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:8f:8c:89:d5:a5:aa:35:85:e5:ff:4c:cd:a7:fa:b9:12:bf: a6:e7:20:81:43:b5:c6:ba:c6:79:0c:4f:e3:fa:d5:31:8c:65: ef:12:fe:23:a9:0f:e0:3e:a2:8a:b5:52:6b:0b:1e:a1:fd:32: f4:7f:3a:d9:1a:08:58:71:b6:01:01:bf:76:fe:c4:ce:74:88: e8:6a:40:87:a5:28:6a:6d:32:e0:fb:85:a9:9e:8c:77:be:34: 25:2d:08:5a:07:76:32:26:7b:2f:e7:c6:0c:0f:4a:44:5b:65: 21:41:76:34:97:6b:fe:be:56:0b:8d:46:b4:27:0d:d5:93:bc: 66:a9:17:1c:d5:0f:61:31:ab:62:21:a7:ba:d4:50:1a:42:1f: 82:e9:75:28:c8:58:2f:57:a9:9c:72:45:d0:d1:53:d0:cf:2c: 11:a1:f8:08:80:63:24:73:d0:75:97:54:b1:f4:f0:a3:c9:28: b6:dd:5b:a8:bd:6c:7d:47:46:0a:c2:e9:39:9d:d5:07:eb:ef: 51:da:93:5a:bc:4c:6e:f0:7c:41:7b:08:0a:31:c1:2e:69:a5: 8c:6c:86:2b:b6:70:14:0a:eb:24:1e:f9:ca:3d:84:c5:a9:4f: 5c:53:1e:e2:11:84:9f:0b:43:08:9f:27:c4:9a:b6:0a:86:76: 2d:9d:1d:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaoTi/mV5ftQIODmEN40SFiUrJ84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVGMDA3OTgxMzkwMTI4RjhGMTRCMDg3MTIzNDU0RDY4 NkU0MUNCODAeFw0yNTA4MjIwMTQ2NTFaFw0yNTA4MjUwNTUyNTFaMDMxMTAvBgNV BAMTKDhFRDQ2RkZBNTE4MTBBRjEyNTk0NUYxMjVBREMxRDkwMjhEOUExRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz9zdZ1ExW5Ews2/72KREdNKQ/ zbW8cyIgg210fldOj97FrNkcApvhIX+eutvD0mP7qyUUvnhN8uTbiSxzI1LVU9Tc kpIpIQqV3t3pLZizBG4BxKAYPJVDi5GEZ5d/+/DpGtEA69aGbEbHH+kJ731XKgeg VuyRMUzMEIAdUFfsRNvJYSQRZY9aYgfqzLKQDom4iqy9wIACDoIh3tx3nfr7U/mX pTWhKEQJ/6nUv9oUhkRihPm7W7NEHvXYY1plv9IiBmp7AneSuHruEGfSNTg7w4El vwINYJDT6YA7pkOKS+OrU2DTvBpTQ9egI8jMf0ow0jlq2RoPx5JOasU8y8iTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjtRv+lGBCvEllF8SWtwdkCjZoe4wHwYDVR0j BBgwFoAUXvAHmBOQEo+PFLCHEjRU1obkHLgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjU5OTQ3NC1mNmI2LTQwODctYTk3ZS03ODhiNTk0OWQ1N2IvMC81RUYwMDc5ODEz OTAxMjhGOEYxNEIwODcxMjM0NTRENjg2RTQxQ0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUVGMDA3OTgxMzkwMTI4RjhGMTRCMDg3MTIzNDU0RDY4NkU0 MUNCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY1OTk0NzQtZjZiNi00MDg3LWE5 N2UtNzg4YjU5NDlkNTdiLzAvNUVGMDA3OTgxMzkwMTI4RjhGMTRCMDg3MTIzNDU0 RDY4NkU0MUNCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADiPjInVpao1heX/TM2n+rkSv6bnIIFDtca6 xnkMT+P61TGMZe8S/iOpD+A+ooq1UmsLHqH9MvR/OtkaCFhxtgEBv3b+xM50iOhq QIelKGptMuD7hamejHe+NCUtCFoHdjImey/nxgwPSkRbZSFBdjSXa/6+VguNRrQn DdWTvGapFxzVD2Exq2Ihp7rUUBpCH4LpdSjIWC9XqZxyRdDRU9DPLBGh+AiAYyRz 0HWXVLH08KPJKLbdW6i9bH1HRgrC6Tmd1Qfr71Hak1q8TG7wfEF7CAoxwS5ppYxs hiu2cBQK6yQe+co9hMWpT1xTHuIRhJ8LQwifJ8SatgqGdi2dHdo= -----END CERTIFICATE-----Generated at Sat Aug 23 19:26:46 2025 by rpki-client