$ rpki-client -vvf repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft File: 5C413D56294D9D20E64978B7296A9DA893C32CAB.mft (raw, json) Hash identifier: MeMzyLSuqgM8F2DtAqf2JNYIo/+lOHbNVFz6GBjPi90= Subject key identifier: A5:84:F9:08:71:7E:EC:88:E8:3C:AB:05:2A:0F:04:CD:43:2F:3C:62 Authority key identifier: 5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB Certificate issuer: /CN=5C413D56294D9D20E64978B7296A9DA893C32CAB Certificate serial: 64940D37B6D4D6048127C834A32F2B62A02A3F54 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft Manifest number: 0391 Signing time: Fri 22 Aug 2025 06:52:27 +0000 Manifest this update: Fri 22 Aug 2025 06:47:27 +0000 Manifest next update: Mon 25 Aug 2025 16:27:27 +0000 Files and hashes: 1: 323030313a6466333a356238303a3a2f34382d3438203d3e20313430333839.roa (hash: JKFEKy2zDD0/MbgGmVCYEU7vyiWQJvpcUY2RjG6e1rs=) 2: 5C413D56294D9D20E64978B7296A9DA893C32CAB.crl (hash: yxbRNDKC7hTq3WCmocp/J6Vl2i405hoK90/rvcFqsWQ=) 3: 3130332e3135302e36302e302f32342d3234203d3e20313430333839.roa (hash: 4ZQwGn11qHNiVrKpaqE6sqxjVoPVYCbt4H6xntr7VWc=) 4: 3130332e3135302e36312e302f32342d3234203d3e20313430333839.roa (hash: PlY/JnUtAv2FxS5Soe3wZCn6MzuK/JWnFyPZQrX/fuQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.crl rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 16:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:94:0d:37:b6:d4:d6:04:81:27:c8:34:a3:2f:2b:62:a0:2a:3f:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C413D56294D9D20E64978B7296A9DA893C32CAB Validity Not Before: Aug 22 06:47:27 2025 GMT Not After : Aug 25 16:27:27 2025 GMT Subject: CN=A584F908717EEC88E83CAB052A0F04CD432F3C62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7e:63:c5:8e:fd:46:1a:a4:a6:dc:3c:80:88: 18:6f:7f:b0:e2:ce:c2:d9:39:bd:22:0c:f2:c1:89: 8e:57:ea:55:ff:95:bc:f1:64:4b:b9:3a:ef:72:4c: 62:d8:f4:6e:3a:f7:9b:12:8a:90:f8:79:13:f1:e8: b5:76:e6:ed:4b:0a:f9:dc:db:92:0b:ab:57:8c:a8: d5:5d:9a:03:9c:02:9e:1c:6c:c7:6c:71:63:fc:95: 33:8b:bc:7d:75:9a:48:5e:03:ca:52:64:b4:0a:15: f3:c8:63:5f:6d:3d:a1:90:5f:92:63:13:b0:82:0f: 8c:1d:35:ae:95:3f:fd:b2:38:37:3b:0b:56:1b:dc: 55:5a:f6:9e:08:da:60:65:d3:00:4d:e3:f6:9a:40: c1:dc:9a:e7:f8:e6:f1:cc:96:f6:62:ce:88:64:ae: a4:08:d6:2f:f2:87:0b:a6:76:27:ce:8f:1a:52:66: 99:e8:03:d8:33:d0:65:d7:d6:5d:b6:4a:dd:e3:cf: 66:ab:27:a0:89:72:f1:8c:52:18:55:ec:ac:d2:90: 0a:6d:8e:78:53:d1:1d:77:b1:49:5f:29:66:66:6e: bb:a0:60:16:2d:1a:f0:c4:90:d2:e9:0f:59:1a:74: 00:fd:f9:18:b7:ec:34:f1:e7:fa:58:ed:d7:77:9e: 8c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:84:F9:08:71:7E:EC:88:E8:3C:AB:05:2A:0F:04:CD:43:2F:3C:62 X509v3 Authority Key Identifier: keyid:5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:7b:4a:ef:3e:4d:94:4b:9b:37:94:55:5c:0b:29:71:49:64: 66:b5:9a:64:ab:81:41:25:d9:70:8b:a6:84:25:d0:06:15:48: 68:ba:5d:54:22:26:42:59:26:27:9b:92:f8:51:3d:2f:ce:b5: f1:90:a0:c5:1e:37:15:c6:e2:82:78:0a:e4:db:18:e9:40:b7: 53:af:63:73:a5:2a:ac:8b:ed:3e:4b:f4:64:62:8c:c5:b0:e4: 52:96:e1:35:bd:6e:98:b2:26:70:68:e0:22:77:e4:1c:77:da: fb:88:f8:01:af:69:ea:14:eb:7a:b0:08:ba:13:f7:0e:81:dc: 21:0d:ca:7f:e6:27:37:ed:08:01:ec:f3:e9:a2:f9:15:99:43: de:3c:39:48:03:9e:13:0a:16:32:14:d9:ea:aa:05:e7:07:56: 63:fe:75:cf:85:ad:2e:1b:25:14:11:6c:8f:54:fd:c8:b9:0b: 4f:90:76:aa:d7:b6:48:78:1e:7a:09:d3:77:8d:12:4c:25:15: 24:09:7e:31:74:a5:a5:4f:15:a8:64:3c:d5:da:16:cd:de:6a: 20:9e:fa:30:0b:80:47:d7:58:27:b6:2a:5e:01:aa:e4:13:12: 6f:80:0a:db:55:e6:83:cb:93:31:00:aa:75:d0:f8:8a:da:79: 61:5d:74:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZJQNN7bU1gSBJ8g0oy8rYqAqP1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM0MTNENTYyOTREOUQyMEU2NDk3OEI3Mjk2QTlEQTg5 M0MzMkNBQjAeFw0yNTA4MjIwNjQ3MjdaFw0yNTA4MjUxNjI3MjdaMDMxMTAvBgNV BAMTKEE1ODRGOTA4NzE3RUVDODhFODNDQUIwNTJBMEYwNENENDMyRjNDNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9fmPFjv1GGqSm3DyAiBhvf7Di zsLZOb0iDPLBiY5X6lX/lbzxZEu5Ou9yTGLY9G4695sSipD4eRPx6LV25u1LCvnc 25ILq1eMqNVdmgOcAp4cbMdscWP8lTOLvH11mkheA8pSZLQKFfPIY19tPaGQX5Jj E7CCD4wdNa6VP/2yODc7C1Yb3FVa9p4I2mBl0wBN4/aaQMHcmuf45vHMlvZizohk rqQI1i/yhwumdifOjxpSZpnoA9gz0GXX1l22St3jz2arJ6CJcvGMUhhV7KzSkApt jnhT0R13sUlfKWZmbrugYBYtGvDEkNLpD1kadAD9+Ri37DTx5/pY7dd3noy5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpYT5CHF+7IjoPKsFKg8EzUMvPGIwHwYDVR0j BBgwFoAUXEE9VilNnSDmSXi3KWqdqJPDLKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjNlYWJiNC00ZGIzLTQzNzMtYTM0OC1mYjFlZDcwNTU2NTEvMC81QzQxM0Q1NjI5 NEQ5RDIwRTY0OTc4QjcyOTZBOURBODkzQzMyQ0FCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM0MTNENTYyOTREOUQyMEU2NDk3OEI3Mjk2QTlEQTg5M0Mz MkNBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2IzZWFiYjQtNGRiMy00MzczLWEz NDgtZmIxZWQ3MDU1NjUxLzAvNUM0MTNENTYyOTREOUQyMEU2NDk3OEI3Mjk2QTlE QTg5M0MzMkNBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJF7Su8+TZRLmzeUVVwLKXFJZGa1mmSrgUEl 2XCLpoQl0AYVSGi6XVQiJkJZJiebkvhRPS/OtfGQoMUeNxXG4oJ4CuTbGOlAt1Ov Y3OlKqyL7T5L9GRijMWw5FKW4TW9bpiyJnBo4CJ35Bx32vuI+AGvaeoU63qwCLoT 9w6B3CENyn/mJzftCAHs8+mi+RWZQ948OUgDnhMKFjIU2eqqBecHVmP+dc+FrS4b JRQRbI9U/ci5C0+QdqrXtkh4HnoJ03eNEkwlFSQJfjF0paVPFahkPNXaFs3eaiCe +jALgEfXWCe2Kl4BquQTEm+ACttV5oPLkzEAqnXQ+IraeWFddPM= -----END CERTIFICATE-----Generated at Sat Aug 23 14:20:27 2025 by rpki-client