$ rpki-client -vvf repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft File: 5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft (raw, json) Hash identifier: C6gBVevnjMuEBmWCyjyhyquWs/+jes0lvjEVbsCjTco= Subject key identifier: 81:ED:9C:30:53:39:95:D7:23:D9:E5:04:AD:05:96:17:3A:FE:CF:9A Authority key identifier: 5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F Certificate issuer: /CN=5EC2C02340FBFA79A3352FA18934C1E7B1D9216F Certificate serial: 2A566EA34C4694AFD4E7BA97386ECA986D519C63 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft Manifest number: 01FD Signing time: Thu 21 Aug 2025 07:03:26 +0000 Manifest this update: Thu 21 Aug 2025 06:58:26 +0000 Manifest next update: Sun 24 Aug 2025 16:17:26 +0000 Files and hashes: 1: 5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl (hash: 5/dwXOqwHzJD8D2QYOwXQfsg8Kv/3FwVRh3gwds6dNY=) 2: 3130332e3138392e3230302e302f32342d3234203d3e2039333431.roa (hash: IarCEKLylnrJ7AZkdxFWJNi+xmNEExkQb+M5jNKDEHk=) 3: 3130332e3138392e3230302e302f32332d3233203d3e2039333431.roa (hash: gvBia+LW2/7IKDQVvnVoZBUClWDY/4rfXyS+EBiBMPI=) 4: 3130332e3138392e3230312e302f32342d3234203d3e2039333431.roa (hash: Dh9fcAyZ65O9TDEVPO/dqbyH2BI/vOdtlvtC7u5HK34=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 16:17:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:56:6e:a3:4c:46:94:af:d4:e7:ba:97:38:6e:ca:98:6d:51:9c:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EC2C02340FBFA79A3352FA18934C1E7B1D9216F Validity Not Before: Aug 21 06:58:26 2025 GMT Not After : Aug 24 16:17:26 2025 GMT Subject: CN=81ED9C30533995D723D9E504AD0596173AFECF9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c4:d5:48:ce:68:e6:71:2c:b9:49:c4:9a:2e: 66:70:dd:37:4f:49:68:ae:5f:20:47:ea:b4:de:f4: 8c:70:e7:1a:e0:7d:a5:14:87:df:59:94:8c:b7:af: 78:23:d6:d2:fa:30:9e:3d:ab:f2:c7:f8:f2:97:67: 74:9f:0f:b1:00:a7:7d:bf:08:85:ed:20:76:88:a3: 2d:ae:8d:4f:be:fa:29:89:d9:e8:13:41:b8:ee:bb: 6c:0b:e5:2d:1a:c6:cf:5e:8b:d9:28:26:d8:bb:e8: 8b:9c:b4:b4:71:62:3a:f0:6c:8f:58:19:59:6e:76: c3:f2:5e:ac:3a:7c:d8:4a:4a:b7:4e:c1:31:71:88: 83:f8:51:20:dc:3b:bb:fe:73:f5:75:d6:65:ae:bd: 8c:87:79:cd:97:1a:ee:7e:3b:3a:8e:ec:3b:34:57: 51:0d:7b:f1:38:5b:98:b0:b8:d0:5c:16:49:8c:44: fb:9b:a6:76:10:07:22:7c:01:05:df:3c:93:04:64: ec:ae:8b:4b:bc:5c:3b:f8:22:d5:bd:88:7f:f4:2f: 8c:8c:28:bf:41:c5:d0:b7:08:75:5c:1c:2e:4f:c5: 84:11:d6:cc:35:44:89:63:90:08:b3:51:94:f3:d6: 7f:1b:54:b4:6c:0b:7b:d3:e7:2c:c9:67:0c:19:00: bc:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:ED:9C:30:53:39:95:D7:23:D9:E5:04:AD:05:96:17:3A:FE:CF:9A X509v3 Authority Key Identifier: keyid:5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:39:17:61:e5:22:33:e0:79:6a:d1:aa:24:08:ac:ab:f8:b8: 61:9d:36:08:90:ea:ce:1b:d6:d4:76:f6:ba:c0:7d:18:f6:6e: 10:69:0a:79:42:9b:5a:c9:67:70:e4:ca:dd:aa:cc:53:d7:68: 88:38:5b:6c:78:33:58:3e:0c:d4:6c:81:01:b4:a8:24:c9:84: 83:7b:fb:db:75:3c:91:31:c1:dc:68:a6:1e:b9:54:6d:d5:63: 2e:69:77:81:c6:61:74:97:c1:3a:7f:ad:3b:78:75:73:55:61: b7:0d:75:d2:9f:40:07:97:a8:d1:74:4e:c1:8c:e4:a6:17:67: 7a:51:69:1b:1c:88:e7:bd:ad:c4:3b:96:9f:db:81:ca:f5:ce: 0b:aa:c8:37:ad:66:9b:e4:3e:00:72:00:20:03:c7:a4:3a:5b: 66:70:fe:45:0f:13:f7:86:b3:3f:b0:7e:83:7b:46:a5:c0:76: ea:8b:25:25:33:b9:eb:07:b3:32:bd:2f:fc:72:5b:18:3e:ea: 3d:04:1b:68:96:c1:29:29:ec:4f:8a:1e:e4:d8:ff:8e:2e:f9: c5:d5:7d:43:ad:af:50:58:45:37:97:18:ff:61:b1:96:7c:6f: 56:b1:ce:a0:71:0e:58:e9:a7:6a:76:0c:de:ce:44:01:87:1f: 6a:24:e2:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKlZuo0xGlK/U57qXOG7KmG1RnGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMxRTdC MUQ5MjE2RjAeFw0yNTA4MjEwNjU4MjZaFw0yNTA4MjQxNjE3MjZaMDMxMTAvBgNV BAMTKDgxRUQ5QzMwNTMzOTk1RDcyM0Q5RTUwNEFEMDU5NjE3M0FGRUNGOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6xNVIzmjmcSy5ScSaLmZw3TdP SWiuXyBH6rTe9Ixw5xrgfaUUh99ZlIy3r3gj1tL6MJ49q/LH+PKXZ3SfD7EAp32/ CIXtIHaIoy2ujU+++imJ2egTQbjuu2wL5S0axs9ei9koJti76IuctLRxYjrwbI9Y GVludsPyXqw6fNhKSrdOwTFxiIP4USDcO7v+c/V11mWuvYyHec2XGu5+OzqO7Ds0 V1ENe/E4W5iwuNBcFkmMRPubpnYQByJ8AQXfPJMEZOyui0u8XDv4ItW9iH/0L4yM KL9BxdC3CHVcHC5PxYQR1sw1RIljkAizUZTz1n8bVLRsC3vT5yzJZwwZALwTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUge2cMFM5ldcj2eUErQWWFzr+z5owHwYDVR0j BBgwFoAUXsLAI0D7+nmjNS+hiTTB57HZIW8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTJlNWYwMy1iZjk2LTRiNDAtYmQ0YS02ZTM4ODhjNDAyMDUvMC81RUMyQzAyMzQw RkJGQTc5QTMzNTJGQTE4OTM0QzFFN0IxRDkyMTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMxRTdCMUQ5 MjE2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EyZTVmMDMtYmY5Ni00YjQwLWJk NGEtNmUzODg4YzQwMjA1LzAvNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMx RTdCMUQ5MjE2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGM5F2HlIjPgeWrRqiQIrKv4uGGdNgiQ6s4b 1tR29rrAfRj2bhBpCnlCm1rJZ3Dkyt2qzFPXaIg4W2x4M1g+DNRsgQG0qCTJhIN7 +9t1PJExwdxoph65VG3VYy5pd4HGYXSXwTp/rTt4dXNVYbcNddKfQAeXqNF0TsGM 5KYXZ3pRaRsciOe9rcQ7lp/bgcr1zguqyDetZpvkPgByACADx6Q6W2Zw/kUPE/eG sz+wfoN7RqXAduqLJSUzuesHszK9L/xyWxg+6j0EG2iWwSkp7E+KHuTY/44u+cXV fUOtr1BYRTeXGP9hsZZ8b1axzqBxDljpp2p2DN7ORAGHH2ok4hg= -----END CERTIFICATE-----Generated at Sat Aug 23 16:42:34 2025 by rpki-client