$ rpki-client -vvf repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft File: 5AE57F3F97F40888F93913350A218863E705CD34.mft (raw, json) Hash identifier: 5/kgAAwZe4nb49gH3Kc2vEHYeDY9BdKNIEB4PsW9QTk= Subject key identifier: C8:44:E5:9D:41:65:EB:31:BA:02:A8:D5:1E:FB:83:7E:F2:A0:40:B6 Authority key identifier: 5A:E5:7F:3F:97:F4:08:88:F9:39:13:35:0A:21:88:63:E7:05:CD:34 Certificate issuer: /CN=5AE57F3F97F40888F93913350A218863E705CD34 Certificate serial: 4BD8386CDA3839969A802DD53178117DE90ABD4F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft Manifest number: 0238 Signing time: Fri 22 Aug 2025 08:41:28 +0000 Manifest this update: Fri 22 Aug 2025 08:36:28 +0000 Manifest next update: Mon 25 Aug 2025 09:04:28 +0000 Files and hashes: 1: 3130332e3138332e31312e302f32342d3234203d3e20313339393637.roa (hash: NfTWOpBX5TEsx2AN4GNz4kZXIBLNbd1V2CGYNCmRu/U=) 2: 3130332e3138332e31302e302f32342d3234203d3e20313339393637.roa (hash: lDreBV2a5k+F2nOzqdVDXyLmxgTFmhT5IbglBwCmDnU=) 3: 5AE57F3F97F40888F93913350A218863E705CD34.crl (hash: 4ZV564d253HnhnCjO0+arbP9YaC3ZHg23M8ujjayim8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.crl rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 09:04:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:d8:38:6c:da:38:39:96:9a:80:2d:d5:31:78:11:7d:e9:0a:bd:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AE57F3F97F40888F93913350A218863E705CD34 Validity Not Before: Aug 22 08:36:28 2025 GMT Not After : Aug 25 09:04:28 2025 GMT Subject: CN=C844E59D4165EB31BA02A8D51EFB837EF2A040B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b5:ad:3b:00:95:6b:91:16:40:63:c0:32:ca: e7:b5:d4:e1:6a:4d:e0:9a:45:40:9c:8e:0a:19:f9: fd:c6:e2:9d:d3:1f:cb:15:6a:a2:92:1e:ae:c4:8a: 76:46:7d:d5:49:32:90:7e:f4:cb:a1:03:9d:35:91: 03:69:82:3e:de:dd:71:c5:c0:59:30:89:c4:35:73: 52:07:28:c7:65:21:be:d4:a7:73:36:fd:58:76:83: 08:0e:6f:de:2e:0a:e5:9b:bc:68:d7:aa:2a:c1:aa: df:b9:74:0a:fa:0f:94:aa:3d:38:44:d2:c7:bf:73: bc:10:ab:a6:50:6d:67:e9:80:e2:b9:2e:24:50:e7: a7:5a:18:23:fe:20:e1:95:9b:81:aa:09:9d:90:22: 4a:1d:cd:f8:ae:5d:e6:c7:69:f3:c4:e7:0a:b3:95: 5d:8b:29:8a:c1:53:ff:83:36:5c:69:22:42:91:79: d7:68:dd:8d:6b:0b:1a:c2:3c:c9:b2:60:0c:2b:2f: 5c:0f:bc:7b:2d:ce:28:86:ff:10:b8:ec:e9:8b:a1: 7b:46:b9:6a:3a:75:04:f8:5a:69:12:7c:e0:9f:3a: ec:bc:57:d1:7a:7e:cd:a9:60:c6:6f:af:17:70:c3: d4:60:a5:7b:78:c7:34:af:77:64:93:c8:b1:37:27: 2d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:44:E5:9D:41:65:EB:31:BA:02:A8:D5:1E:FB:83:7E:F2:A0:40:B6 X509v3 Authority Key Identifier: keyid:5A:E5:7F:3F:97:F4:08:88:F9:39:13:35:0A:21:88:63:E7:05:CD:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:c3:9c:be:62:34:3d:dd:d1:59:6d:92:3b:31:59:57:65:ad: 87:e5:1b:e4:7b:f5:68:5a:8b:1e:ef:9c:7a:92:e2:d2:87:21: bb:2a:7a:02:0d:37:77:24:ac:7d:71:aa:04:8f:59:df:b9:0b: e7:c5:3f:97:d8:fa:1c:f1:9d:ea:21:29:bb:06:8a:c7:8f:f2: 54:8f:f0:f5:35:b0:42:6b:05:3f:42:55:f5:61:b0:f0:52:c0: 1c:d4:70:7b:c3:24:50:5f:ff:9d:5b:b7:cb:9e:a6:8d:e9:41: fd:82:94:cf:08:6f:b2:3d:bf:77:1d:b6:91:64:e9:86:14:df: 23:cc:89:87:8f:75:30:b0:04:d5:79:04:76:69:94:fe:9b:31: d2:30:fb:cd:7c:b0:f2:8e:7c:06:2d:aa:fe:f9:d8:88:3e:4b: 12:cd:1d:1f:bb:fe:f1:34:0f:f4:d6:f7:07:b8:70:4c:bf:1b: 98:cd:34:db:b9:c0:06:95:01:e2:ad:24:48:8e:38:35:b5:8a: 54:77:29:27:14:cc:a0:41:f1:3f:da:55:bb:bc:ed:2e:ae:70: 3e:ab:25:ef:0b:ab:75:c7:d5:74:0e:c4:96:ba:09:84:c6:1d: 0c:e3:bf:66:e2:d3:17:a1:a8:29:12:b6:5b:b7:93:a4:09:2d: 30:69:aa:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS9g4bNo4OZaagC3VMXgRfekKvU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4NjNF NzA1Q0QzNDAeFw0yNTA4MjIwODM2MjhaFw0yNTA4MjUwOTA0MjhaMDMxMTAvBgNV BAMTKEM4NDRFNTlENDE2NUVCMzFCQTAyQThENTFFRkI4MzdFRjJBMDQwQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUta07AJVrkRZAY8Ayyue11OFq TeCaRUCcjgoZ+f3G4p3TH8sVaqKSHq7EinZGfdVJMpB+9MuhA501kQNpgj7e3XHF wFkwicQ1c1IHKMdlIb7Up3M2/Vh2gwgOb94uCuWbvGjXqirBqt+5dAr6D5SqPThE 0se/c7wQq6ZQbWfpgOK5LiRQ56daGCP+IOGVm4GqCZ2QIkodzfiuXebHafPE5wqz lV2LKYrBU/+DNlxpIkKReddo3Y1rCxrCPMmyYAwrL1wPvHstziiG/xC47OmLoXtG uWo6dQT4WmkSfOCfOuy8V9F6fs2pYMZvrxdww9RgpXt4xzSvd2STyLE3Jy2rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyETlnUFl6zG6AqjVHvuDfvKgQLYwHwYDVR0j BBgwFoAUWuV/P5f0CIj5ORM1CiGIY+cFzTQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDhjZGY1YS1iOWE3LTQ0NjktYTY1My1jOWZmMmEwMDM3NzMvMC81QUU1N0YzRjk3 RjQwODg4RjkzOTEzMzUwQTIxODg2M0U3MDVDRDM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4NjNFNzA1 Q0QzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ4Y2RmNWEtYjlhNy00NDY5LWE2 NTMtYzlmZjJhMDAzNzczLzAvNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4 NjNFNzA1Q0QzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvDnL5iND3d0VltkjsxWVdlrYflG+R79Wha ix7vnHqS4tKHIbsqegINN3ckrH1xqgSPWd+5C+fFP5fY+hzxneohKbsGiseP8lSP 8PU1sEJrBT9CVfVhsPBSwBzUcHvDJFBf/51bt8uepo3pQf2ClM8Ib7I9v3cdtpFk 6YYU3yPMiYePdTCwBNV5BHZplP6bMdIw+818sPKOfAYtqv752Ig+SxLNHR+7/vE0 D/TW9we4cEy/G5jNNNu5wAaVAeKtJEiOODW1ilR3KScUzKBB8T/aVbu87S6ucD6r Je8Lq3XH1XQOxJa6CYTGHQzjv2bi0xehqCkStlu3k6QJLTBpqrY= -----END CERTIFICATE-----Generated at Sat Aug 23 17:26:41 2025 by rpki-client