$ rpki-client -vvf repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft File: 5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft (raw, json) Hash identifier: MeuYi9fSHRZ8Mr0172WjIEAWkjNXwdwJS2eLvINz3P4= Subject key identifier: 79:66:BA:7E:FA:5D:AF:8A:E2:36:3A:1B:C9:42:3A:1D:1C:2C:3B:9B Authority key identifier: 5C:9F:B8:0D:F9:C5:DB:E8:91:6F:73:49:A5:DD:8E:06:99:EA:3B:7A Certificate issuer: /CN=5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A Certificate serial: 3E7EF729D542BFACDC326CC92380AD4EAD9C535A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft Manifest number: 0249 Signing time: Fri 22 Aug 2025 22:41:47 +0000 Manifest this update: Fri 22 Aug 2025 22:36:47 +0000 Manifest next update: Tue 26 Aug 2025 05:33:47 +0000 Files and hashes: 1: 3130332e3138312e3138322e302f32342d3234203d3e20313439333931.roa (hash: /YMKURBm9TwSTxyzf2Kmx28ZIOeUEZGW5o7BX+kYPo0=) 2: 3130332e3138312e3138332e302f32342d3234203d3e20313439333931.roa (hash: I97S8ZLukPT3OvIAQZGbDvFdPCncrJKV5+kzzspVF2Q=) 3: 5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl (hash: rd0AxWekTY171fSOqLAl5WIa8tRDuI8eRs4h6oRdvT0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 05:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:7e:f7:29:d5:42:bf:ac:dc:32:6c:c9:23:80:ad:4e:ad:9c:53:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A Validity Not Before: Aug 22 22:36:47 2025 GMT Not After : Aug 26 05:33:47 2025 GMT Subject: CN=7966BA7EFA5DAF8AE2363A1BC9423A1D1C2C3B9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:60:2b:da:c8:c3:71:7b:92:52:55:84:a3:a0: 4a:e4:80:94:16:eb:a4:92:a7:bf:c9:0a:2b:70:dd: 68:64:a9:7b:91:12:a3:cd:cd:cd:ec:93:d4:e0:7e: 6f:95:c7:9f:ba:b7:db:88:ad:38:cb:49:7c:a2:52: 3e:ef:38:aa:62:c9:22:56:2b:26:7a:e1:96:24:92: 17:b4:66:9a:05:95:83:2d:93:a4:0a:b5:5a:ff:18: a7:17:9b:f0:72:95:7b:70:c1:fc:a6:ad:5a:8b:b0: 5d:8b:f7:c7:44:05:01:dd:45:0a:d0:02:14:5c:15: c2:8d:76:3a:26:ce:34:a6:ea:0b:3e:8b:b5:78:18: 4f:5f:c6:c3:6b:e7:26:94:79:94:be:84:93:85:f4: 21:93:c3:0e:58:14:44:0e:47:a6:a4:2f:e0:d9:4e: 90:97:66:53:ee:22:07:c9:a6:63:37:25:d2:e9:c4: a4:47:c8:d4:30:41:11:90:bc:19:2e:34:61:51:43: 2f:46:5f:a4:11:35:08:1b:47:fe:24:df:59:95:cb: 0c:da:e5:d1:a6:06:d4:4c:ca:1d:54:94:2d:76:7a: c3:00:0e:5e:a6:de:c6:9c:01:9a:3c:76:30:d5:6f: e5:52:6e:c7:66:74:a9:9b:4f:a0:59:81:31:fb:ba: 2a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:66:BA:7E:FA:5D:AF:8A:E2:36:3A:1B:C9:42:3A:1D:1C:2C:3B:9B X509v3 Authority Key Identifier: keyid:5C:9F:B8:0D:F9:C5:DB:E8:91:6F:73:49:A5:DD:8E:06:99:EA:3B:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:39:a4:6c:bb:11:1d:76:49:fa:ea:57:da:36:a3:b1:9e:03: 4a:72:f8:11:24:03:66:02:17:b1:a9:d4:8c:02:7b:4e:06:f8: 9b:e4:1c:fc:bc:e7:52:5a:92:7b:9e:f4:dd:3f:15:4d:56:03: 86:59:2c:91:c4:33:dd:3a:7a:98:fc:87:c8:09:72:21:ce:53: 78:1d:48:7e:f7:4b:87:ed:c6:c3:7e:a4:ca:34:7e:ce:d9:28: da:1c:5d:28:ea:ad:6a:83:6a:bd:f6:21:fc:66:39:be:ec:e8: cd:71:cf:ef:46:6b:90:42:03:1d:7f:aa:82:87:4a:73:45:a9: 5e:37:ba:7d:76:02:dd:e6:ef:1a:79:06:4f:ee:cb:7c:14:7b: ae:a4:2d:e5:08:cc:65:c8:2f:e3:13:10:22:e0:ec:7a:e3:a7: 82:bc:2c:d0:fc:dd:a1:24:3a:5d:c2:73:2d:4f:98:25:3d:37: dc:77:6d:61:a3:c8:6d:ec:f5:7c:01:8d:29:dd:58:89:9e:7b: f9:0c:6f:5e:1d:da:48:89:77:a8:76:60:32:6d:8b:72:8b:06: b7:73:a7:75:16:a3:7b:66:15:70:7a:b9:4f:4b:90:81:dc:0a: 2f:e1:f3:2b:26:81:91:d3:68:b8:ab:3d:6d:e8:35:93:2f:ec: 4d:42:61:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPn73KdVCv6zcMmzJI4CtTq2cU1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM5RkI4MERGOUM1REJFODkxNkY3MzQ5QTVERDhFMDY5 OUVBM0I3QTAeFw0yNTA4MjIyMjM2NDdaFw0yNTA4MjYwNTMzNDdaMDMxMTAvBgNV BAMTKDc5NjZCQTdFRkE1REFGOEFFMjM2M0ExQkM5NDIzQTFEMUMyQzNCOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkYCvayMNxe5JSVYSjoErkgJQW 66SSp7/JCitw3WhkqXuREqPNzc3sk9Tgfm+Vx5+6t9uIrTjLSXyiUj7vOKpiySJW KyZ64ZYkkhe0ZpoFlYMtk6QKtVr/GKcXm/BylXtwwfymrVqLsF2L98dEBQHdRQrQ AhRcFcKNdjomzjSm6gs+i7V4GE9fxsNr5yaUeZS+hJOF9CGTww5YFEQOR6akL+DZ TpCXZlPuIgfJpmM3JdLpxKRHyNQwQRGQvBkuNGFRQy9GX6QRNQgbR/4k31mVywza 5dGmBtRMyh1UlC12esMADl6m3sacAZo8djDVb+VSbsdmdKmbT6BZgTH7uiorAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeWa6fvpdr4riNjobyUI6HRwsO5swHwYDVR0j BBgwFoAUXJ+4DfnF2+iRb3NJpd2OBpnqO3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmMyZjQ4ZC01MTg1LTQxZjktYjZkMi0yMjhmYmNhYzRlMjkvMC81QzlGQjgwREY5 QzVEQkU4OTE2RjczNDlBNUREOEUwNjk5RUEzQjdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM5RkI4MERGOUM1REJFODkxNkY3MzQ5QTVERDhFMDY5OUVB M0I3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJjMmY0OGQtNTE4NS00MWY5LWI2 ZDItMjI4ZmJjYWM0ZTI5LzAvNUM5RkI4MERGOUM1REJFODkxNkY3MzQ5QTVERDhF MDY5OUVBM0I3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALc5pGy7ER12SfrqV9o2o7GeA0py+BEkA2YC F7Gp1IwCe04G+JvkHPy851Jaknue9N0/FU1WA4ZZLJHEM906epj8h8gJciHOU3gd SH73S4ftxsN+pMo0fs7ZKNocXSjqrWqDar32IfxmOb7s6M1xz+9Ga5BCAx1/qoKH SnNFqV43un12At3m7xp5Bk/uy3wUe66kLeUIzGXIL+MTECLg7Hrjp4K8LND83aEk Ol3Ccy1PmCU9N9x3bWGjyG3s9XwBjSndWImee/kMb14d2kiJd6h2YDJti3KLBrdz p3UWo3tmFXB6uU9LkIHcCi/h8ysmgZHTaLirPW3oNZMv7E1CYQw= -----END CERTIFICATE-----Generated at Sat Aug 23 13:58:33 2025 by rpki-client