$ rpki-client -vvf repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft File: C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft (raw, json) Hash identifier: +ySMBVPm9QJrDNF3uA/jyi2EUiwsJMMBSDizvOI19ro= Subject key identifier: E1:AE:2A:1B:D5:DE:12:1B:24:5F:99:04:54:29:65:CE:C4:C0:E9:90 Authority key identifier: C5:F2:AF:A0:AB:7A:B2:DD:BD:8F:87:5B:21:B8:EC:0C:3F:F8:31:F6 Certificate issuer: /CN=C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6 Certificate serial: 2A33B0D2CF6C68A9DB405E9B2558B53E6C2C5090 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft Manifest number: 0440 Signing time: Fri 22 Aug 2025 00:21:22 +0000 Manifest this update: Fri 22 Aug 2025 00:16:22 +0000 Manifest next update: Mon 25 Aug 2025 01:09:22 +0000 Files and hashes: 1: C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.crl (hash: 8/5pnQ3r2QYCVqMpi9kAsN41HwXZkMY7yxTMSmp7z18=) 2: 3130332e3234362e3138342e302f32342d3234203d3e203538333833.roa (hash: oUvHJzeVfm7zuZGvqOXSprt6gWL11zoVCa7SzfOTCA0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.crl rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 01:09:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:33:b0:d2:cf:6c:68:a9:db:40:5e:9b:25:58:b5:3e:6c:2c:50:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6 Validity Not Before: Aug 22 00:16:22 2025 GMT Not After : Aug 25 01:09:22 2025 GMT Subject: CN=E1AE2A1BD5DE121B245F9904542965CEC4C0E990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6f:70:75:78:8a:32:59:ac:be:20:62:1c:3a: 17:65:2b:2e:f3:ff:b5:98:18:57:e9:8a:43:05:2d: 5f:4b:f9:37:1b:23:60:22:6c:e1:21:5c:c7:b8:0a: ff:f5:fb:31:2d:11:38:95:e5:10:fd:92:35:16:25: c6:21:23:d1:5c:96:e1:71:99:2f:c5:e7:54:a7:26: 43:fc:b5:2b:a9:9a:80:44:50:99:5e:18:f3:bd:31: 33:cf:ca:03:73:5b:3c:5c:5b:0d:96:a9:79:ef:2c: 57:c5:91:a0:d2:a8:7e:fc:68:90:4a:1a:b7:d6:e3: 7b:87:f9:a5:d3:0e:0f:f1:97:7f:b4:3d:7a:f8:97: 66:d5:c3:cf:1c:ca:ad:7d:37:d4:d3:42:0b:a9:66: a0:07:30:51:4e:08:5f:4b:5d:1e:50:98:33:24:be: 64:54:0c:aa:fb:42:41:53:dd:de:95:2b:f4:3f:f7: b1:40:1f:8b:2e:63:5d:7c:48:43:99:94:8b:0b:68: 75:f3:15:50:56:c7:ba:a7:73:e8:66:e3:03:01:42: 24:a3:ea:7e:73:02:26:00:45:2c:ce:b7:18:f2:d9: f8:83:e0:d4:d7:42:e4:28:1d:54:ae:ea:2d:91:6f: 1c:e2:43:27:26:35:a3:a6:15:22:da:df:8b:f3:e2: c9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:AE:2A:1B:D5:DE:12:1B:24:5F:99:04:54:29:65:CE:C4:C0:E9:90 X509v3 Authority Key Identifier: keyid:C5:F2:AF:A0:AB:7A:B2:DD:BD:8F:87:5B:21:B8:EC:0C:3F:F8:31:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76a5ab54-7844-4602-8aea-3c2e641f6a3c/0/C5F2AFA0AB7AB2DDBD8F875B21B8EC0C3FF831F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:a7:73:ce:da:78:d9:4a:c3:f7:4b:7f:c7:35:68:80:99:e1: 3a:f6:76:7e:da:60:ed:55:81:0c:86:13:2f:5d:29:79:53:5a: 3b:1f:fd:3f:ec:9f:a1:eb:99:f6:34:a3:68:8e:a3:49:28:df: f4:1f:96:c1:5f:43:c4:46:f4:7b:b3:0a:af:80:59:7e:d3:35: 1b:71:6b:e5:3c:c2:bd:52:4d:fd:1a:74:8b:8b:44:3d:b6:07: 8c:95:d9:f3:dc:ae:53:4c:d2:ed:80:f6:af:64:54:18:6a:87: d9:e5:2f:fd:fe:a1:40:85:a9:3b:41:c6:8a:60:5a:ad:9a:af: 0f:30:ef:1b:59:f6:a6:c7:c4:6f:a9:a9:fd:31:df:b7:b0:73: fe:f0:48:1b:b6:1d:ee:15:fb:c1:43:48:a2:fe:74:d9:4d:35: 69:d7:13:9e:9b:d6:da:6a:bd:7a:bc:74:c2:ff:60:4c:27:f5: 87:39:1c:6b:95:9a:51:c5:a6:de:82:56:1d:76:7f:a6:4e:1f: cc:b0:ab:11:60:2b:1a:3e:cb:f3:7f:39:31:73:aa:97:b5:d7: f8:8f:88:8f:14:00:bc:20:4c:7c:be:d6:83:65:9e:eb:83:a4: fe:35:8a:8e:64:9e:1b:68:c0:d4:27:73:c5:a5:6c:ee:e4:18: 12:fc:5f:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKjOw0s9saKnbQF6bJVi1PmwsUJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVGMkFGQTBBQjdBQjJEREJEOEY4NzVCMjFCOEVDMEMz RkY4MzFGNjAeFw0yNTA4MjIwMDE2MjJaFw0yNTA4MjUwMTA5MjJaMDMxMTAvBgNV BAMTKEUxQUUyQTFCRDVERTEyMUIyNDVGOTkwNDU0Mjk2NUNFQzRDMEU5OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6b3B1eIoyWay+IGIcOhdlKy7z /7WYGFfpikMFLV9L+TcbI2AibOEhXMe4Cv/1+zEtETiV5RD9kjUWJcYhI9FcluFx mS/F51SnJkP8tSupmoBEUJleGPO9MTPPygNzWzxcWw2WqXnvLFfFkaDSqH78aJBK GrfW43uH+aXTDg/xl3+0PXr4l2bVw88cyq19N9TTQgupZqAHMFFOCF9LXR5QmDMk vmRUDKr7QkFT3d6VK/Q/97FAH4suY118SEOZlIsLaHXzFVBWx7qnc+hm4wMBQiSj 6n5zAiYARSzOtxjy2fiD4NTXQuQoHVSu6i2RbxziQycmNaOmFSLa34vz4smjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4a4qG9XeEhskX5kEVCllzsTA6ZAwHwYDVR0j BBgwFoAUxfKvoKt6st29j4dbIbjsDD/4MfYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmE1YWI1NC03ODQ0LTQ2MDItOGFlYS0zYzJlNjQxZjZhM2MvMC9DNUYyQUZBMEFC N0FCMkREQkQ4Rjg3NUIyMUI4RUMwQzNGRjgzMUY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVGMkFGQTBBQjdBQjJEREJEOEY4NzVCMjFCOEVDMEMzRkY4 MzFGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZhNWFiNTQtNzg0NC00NjAyLThh ZWEtM2MyZTY0MWY2YTNjLzAvQzVGMkFGQTBBQjdBQjJEREJEOEY4NzVCMjFCOEVD MEMzRkY4MzFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAECnc87aeNlKw/dLf8c1aICZ4Tr2dn7aYO1V gQyGEy9dKXlTWjsf/T/sn6HrmfY0o2iOo0ko3/QflsFfQ8RG9HuzCq+AWX7TNRtx a+U8wr1STf0adIuLRD22B4yV2fPcrlNM0u2A9q9kVBhqh9nlL/3+oUCFqTtBxopg Wq2arw8w7xtZ9qbHxG+pqf0x37ewc/7wSBu2He4V+8FDSKL+dNlNNWnXE56b1tpq vXq8dML/YEwn9Yc5HGuVmlHFpt6CVh12f6ZOH8ywqxFgKxo+y/N/OTFzqpe11/iP iI8UALwgTHy+1oNlnuuDpP41io5knhtowNQnc8WlbO7kGBL8XzA= -----END CERTIFICATE-----Generated at Sat Aug 23 12:29:25 2025 by rpki-client