$ rpki-client -vvf repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft File: 5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft (raw, json) Hash identifier: 7+qTVCCdP+H4HghvUhPzo0mp83bjnwoqqdGp+2tDZ20= Subject key identifier: 07:8D:A1:48:98:A9:46:93:19:23:B3:D9:1C:D0:BB:C4:DF:8E:3B:06 Authority key identifier: 5A:6B:14:28:A8:72:38:DC:9D:A9:B9:28:90:E1:C9:BF:60:CC:09:4E Certificate issuer: /CN=5A6B1428A87238DC9DA9B92890E1C9BF60CC094E Certificate serial: 1E773444E2F421A4EF0F4362EDE1FFAA1EAA30EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft Manifest number: 0223 Signing time: Thu 21 Aug 2025 18:21:45 +0000 Manifest this update: Thu 21 Aug 2025 18:16:45 +0000 Manifest next update: Sun 24 Aug 2025 23:40:45 +0000 Files and hashes: 1: 3130332e3138362e31302e302f32332d3234203d3e2034383030.roa (hash: IbiWK5270mwHrnB6XT0JomBYqQc1q1mQYDwwzYu+Fp8=) 2: 5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.crl (hash: t9wsODRaCD6tZ8R4CRrgqQRl2f39/PJ/9Npq4pRT1Kw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.crl rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 23:40:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:77:34:44:e2:f4:21:a4:ef:0f:43:62:ed:e1:ff:aa:1e:aa:30:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A6B1428A87238DC9DA9B92890E1C9BF60CC094E Validity Not Before: Aug 21 18:16:45 2025 GMT Not After : Aug 24 23:40:45 2025 GMT Subject: CN=078DA14898A946931923B3D91CD0BBC4DF8E3B06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fe:6c:6f:5f:68:10:b3:0f:30:17:7e:33:cd: b6:70:ab:e5:96:39:a4:27:68:09:1b:32:a0:24:57: 11:49:37:d3:d4:d9:36:d7:8b:cd:80:10:cb:92:c0: 0f:e8:e3:e8:e8:4e:5b:af:12:96:34:1b:8d:20:01: 04:c8:2f:c0:58:42:7d:8b:45:c0:4e:f8:2c:f7:4d: f6:2c:80:d1:96:7b:42:e6:49:43:b4:5c:b2:73:0c: 08:de:9d:c3:a8:eb:72:f3:85:24:77:89:79:3f:c9: 76:37:7b:18:94:f5:d5:e3:6f:c2:a0:56:96:29:82: 07:69:6e:77:7f:86:b7:4d:99:2f:ac:0f:eb:fa:6d: d8:c5:99:ed:35:94:54:20:48:b0:82:89:8f:4b:d7: 12:46:b3:04:39:64:b8:cf:f1:b3:26:ff:cc:6c:12: 7c:e0:3e:3c:b2:4d:6b:8c:58:d3:e7:5d:f9:fb:f5: 93:8d:4f:8e:cf:59:c5:ec:e6:da:a7:b8:8a:84:30: 46:da:ed:81:69:e6:8f:ff:02:48:b4:79:6b:87:07: 51:77:54:b2:f6:90:74:97:86:b1:a3:d0:ac:04:c8: 98:4e:f6:ab:21:6a:73:d3:ec:14:41:6f:a8:ae:6a: da:f9:7f:b0:ec:7f:c4:c1:bc:21:0b:d0:d2:f7:df: ae:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:8D:A1:48:98:A9:46:93:19:23:B3:D9:1C:D0:BB:C4:DF:8E:3B:06 X509v3 Authority Key Identifier: keyid:5A:6B:14:28:A8:72:38:DC:9D:A9:B9:28:90:E1:C9:BF:60:CC:09:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:fb:6f:d4:95:7a:2b:3f:a7:4b:c3:4b:3a:45:11:b4:2e:fd: b7:df:ae:b0:4c:de:60:c6:bf:36:cf:ad:f2:03:53:39:60:86: f7:ea:62:2f:73:97:97:61:e4:d8:a7:98:7e:27:31:0b:b3:bf: 06:af:97:06:cb:84:56:fb:cc:ea:94:71:b8:68:7e:7c:00:2d: b3:9b:de:29:77:89:85:85:d1:ff:4f:c0:e4:01:7e:b0:ad:fa: aa:e7:39:1f:1b:a4:67:54:1a:0a:63:80:f2:20:7b:a8:67:58: 0b:f0:87:8d:24:14:d4:ab:e8:fa:01:31:6d:e4:75:db:40:4b: 80:fa:f7:df:9e:28:cd:03:49:8b:6d:21:23:c1:79:bb:a9:8e: 56:e4:81:45:c4:ea:a3:3f:e5:f7:aa:8a:90:63:28:55:61:87: af:c5:5b:5b:e6:cd:33:26:ab:d4:31:21:75:5b:fc:20:a4:8a: 90:54:8c:b9:a8:b1:ce:7f:8b:2a:db:ac:07:5e:0f:4c:94:ee: 1a:30:98:24:ce:cb:8d:e4:44:0a:bf:cf:91:7f:71:04:c7:a9: 5c:4c:5b:95:8e:20:e9:27:8b:7a:76:db:9b:d9:f7:e7:d5:3b: bb:77:ca:30:b4:0c:db:e3:bc:ce:b7:f4:98:49:d1:e7:bb:6b: fb:8c:22:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHnc0ROL0IaTvD0Ni7eH/qh6qMOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE2QjE0MjhBODcyMzhEQzlEQTlCOTI4OTBFMUM5QkY2 MENDMDk0RTAeFw0yNTA4MjExODE2NDVaFw0yNTA4MjQyMzQwNDVaMDMxMTAvBgNV BAMTKDA3OERBMTQ4OThBOTQ2OTMxOTIzQjNEOTFDRDBCQkM0REY4RTNCMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5/mxvX2gQsw8wF34zzbZwq+WW OaQnaAkbMqAkVxFJN9PU2TbXi82AEMuSwA/o4+joTluvEpY0G40gAQTIL8BYQn2L RcBO+Cz3TfYsgNGWe0LmSUO0XLJzDAjencOo63LzhSR3iXk/yXY3exiU9dXjb8Kg VpYpggdpbnd/hrdNmS+sD+v6bdjFme01lFQgSLCCiY9L1xJGswQ5ZLjP8bMm/8xs EnzgPjyyTWuMWNPnXfn79ZONT47PWcXs5tqnuIqEMEba7YFp5o//Aki0eWuHB1F3 VLL2kHSXhrGj0KwEyJhO9qshanPT7BRBb6iuatr5f7Dsf8TBvCEL0NL3366PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB42hSJipRpMZI7PZHNC7xN+OOwYwHwYDVR0j BBgwFoAUWmsUKKhyONydqbkokOHJv2DMCU4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ODZkZjc5MS0wMDc5LTQ1ZjYtYWE5My00YzNhMjQzMDVkODUvMC81QTZCMTQyOEE4 NzIzOERDOURBOUI5Mjg5MEUxQzlCRjYwQ0MwOTRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUE2QjE0MjhBODcyMzhEQzlEQTlCOTI4OTBFMUM5QkY2MEND MDk0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODg2ZGY3OTEtMDA3OS00NWY2LWFh OTMtNGMzYTI0MzA1ZDg1LzAvNUE2QjE0MjhBODcyMzhEQzlEQTlCOTI4OTBFMUM5 QkY2MENDMDk0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA77b9SVeis/p0vDSzpFEbQu/bffrrBM3mDG vzbPrfIDUzlghvfqYi9zl5dh5NinmH4nMQuzvwavlwbLhFb7zOqUcbhofnwALbOb 3il3iYWF0f9PwOQBfrCt+qrnOR8bpGdUGgpjgPIge6hnWAvwh40kFNSr6PoBMW3k ddtAS4D699+eKM0DSYttISPBebupjlbkgUXE6qM/5feqipBjKFVhh6/FW1vmzTMm q9QxIXVb/CCkipBUjLmosc5/iyrbrAdeD0yU7howmCTOy43kRAq/z5F/cQTHqVxM W5WOIOkni3p225vZ9+fVO7t3yjC0DNvjvM639JhJ0ee7a/uMIp0= -----END CERTIFICATE-----Generated at Sat Aug 23 12:40:07 2025 by rpki-client