$ rpki-client -vvf repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft File: 5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft (raw, json) Hash identifier: RNZstXphNxw7ID98xkCAaJoRx9Eki8VCiD5+kCFnpVc= Subject key identifier: D7:29:83:14:D1:E2:73:8C:CC:59:22:21:C2:A0:5B:80:49:5E:34:EB Authority key identifier: 57:87:AD:66:59:EA:8A:5E:40:18:87:6F:5F:9D:BD:9A:AA:F9:CA:1D Certificate issuer: /CN=5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D Certificate serial: 5B84A0B520D2292D615F01852627DA262621E629 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft Manifest number: 01C2 Signing time: Sun 29 Jun 2025 15:41:44 +0000 Manifest this update: Sun 29 Jun 2025 15:36:44 +0000 Manifest next update: Wed 02 Jul 2025 20:43:44 +0000 Files and hashes: 1: 323030313a6466323a663130303a3a2f34382d3438203d3e20313336383632.roa (hash: tZ0f5MTmtWdSIb0cW5V8BnDtVprPqdA4VLQLF9yhNs4=) 2: 3130332e3130322e3235302e302f32342d3234203d3e20313336383632.roa (hash: XJaPVKL+tFj4c3WHFeXKkbEPFHc33QGCd8eyCL/ZJ7M=) 3: 5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl (hash: BluizyrZTsUxUXkinJ0BP6uuxm7STvyhwaguXw0fjWE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:84:a0:b5:20:d2:29:2d:61:5f:01:85:26:27:da:26:26:21:e6:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D Validity Not Before: Jun 29 15:36:44 2025 GMT Not After : Jul 2 20:43:44 2025 GMT Subject: CN=D7298314D1E2738CCC592221C2A05B80495E34EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:12:56:ff:be:32:34:05:d3:81:aa:b2:7d:c1: 60:be:5c:70:65:6d:81:52:df:8e:9e:0e:3c:4e:ef: 9d:da:b8:67:b8:f1:1f:82:6d:c5:a7:9d:eb:a4:df: ce:92:4a:d4:e7:98:b8:f4:19:f3:3c:6c:6a:bb:97: 81:1b:b8:cd:03:33:d7:70:49:79:8e:b2:53:96:41: 8b:df:28:36:a0:37:d6:73:a0:72:c5:cc:9f:bd:18: 6b:59:a6:e1:79:51:1a:04:39:2e:d3:a1:d7:b1:14: 47:b2:24:9f:62:03:86:92:d5:9b:93:63:d9:67:7e: b4:20:9d:a5:6d:e0:a0:e5:01:93:b9:2d:4e:62:31: 60:d2:0e:ea:9c:9e:99:45:63:c2:61:53:c0:82:4a: b7:b1:66:d8:63:2f:47:5f:68:95:8d:02:bf:73:a4: c7:1d:36:7e:70:56:c4:4e:1c:aa:51:a5:5f:22:11: 39:ab:a8:f6:2e:c6:bf:b6:d2:0e:d3:ec:60:22:c5: bf:7a:23:f0:83:70:91:80:b0:22:82:03:9e:e0:7f: 4b:2a:c8:dd:60:1f:b5:65:df:92:4b:cb:24:b9:f9: 60:2c:7f:c5:ce:14:52:51:36:16:d6:9e:1d:3f:6e: 2b:7d:d4:4f:74:88:e9:d9:83:f6:4e:ca:05:86:9b: 16:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:29:83:14:D1:E2:73:8C:CC:59:22:21:C2:A0:5B:80:49:5E:34:EB X509v3 Authority Key Identifier: keyid:57:87:AD:66:59:EA:8A:5E:40:18:87:6F:5F:9D:BD:9A:AA:F9:CA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:29:15:c5:a6:22:7e:4b:51:13:54:be:85:fc:c6:4b:23:06: 03:4d:26:47:ff:ad:df:86:d3:5a:24:1e:b4:5f:78:5e:94:7f: f8:4d:62:fe:7b:4f:8c:88:08:54:0e:cf:b8:db:bc:81:21:8d: c7:f0:57:00:95:f4:55:48:a9:7d:08:d5:01:f1:68:ca:93:de: e9:d2:31:ec:f5:f4:83:3e:d4:12:92:41:87:50:de:d9:b9:45: 9b:09:47:93:81:b8:90:3b:57:8f:31:f2:40:72:07:33:f4:34: 44:a8:cc:81:7b:f5:ae:0f:be:bd:34:1c:9d:8b:4a:26:b9:e6: 09:b6:c7:2e:4c:c8:b8:3f:90:08:93:0b:90:04:00:f7:45:ae: 8a:ce:05:59:66:91:dc:36:53:1e:b0:e2:a9:4e:ee:73:97:85: 69:11:59:88:5e:52:31:92:5e:c2:37:8a:c6:95:df:7e:68:3c: ac:53:e9:59:db:3f:5a:9e:d9:92:46:45:2d:8f:0c:92:95:55: 38:49:db:0e:e5:fb:8f:91:ae:77:81:dc:a4:42:66:b3:5b:5c: 39:d8:7d:eb:34:09:ad:b6:6d:fe:41:ae:2f:d2:92:4b:00:90: 73:3f:cf:6a:56:e4:68:26:1f:ec:1a:ec:81:e3:42:7c:34:af: 00:68:57:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW4SgtSDSKS1hXwGFJifaJiYh5ikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJEOUFB QUY5Q0ExRDAeFw0yNTA2MjkxNTM2NDRaFw0yNTA3MDIyMDQzNDRaMDMxMTAvBgNV BAMTKEQ3Mjk4MzE0RDFFMjczOENDQzU5MjIyMUMyQTA1QjgwNDk1RTM0RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgElb/vjI0BdOBqrJ9wWC+XHBl bYFS346eDjxO753auGe48R+CbcWnneuk386SStTnmLj0GfM8bGq7l4EbuM0DM9dw SXmOslOWQYvfKDagN9ZzoHLFzJ+9GGtZpuF5URoEOS7TodexFEeyJJ9iA4aS1ZuT Y9lnfrQgnaVt4KDlAZO5LU5iMWDSDuqcnplFY8JhU8CCSrexZthjL0dfaJWNAr9z pMcdNn5wVsROHKpRpV8iETmrqPYuxr+20g7T7GAixb96I/CDcJGAsCKCA57gf0sq yN1gH7Vl35JLyyS5+WAsf8XOFFJRNhbWnh0/bit91E90iOnZg/ZOygWGmxZnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1ymDFNHic4zMWSIhwqBbgEleNOswHwYDVR0j BBgwFoAUV4etZlnqil5AGIdvX529mqr5yh0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWI4ZTc3NC0xNjgzLTQ1NmQtYmJjMC0zNDMyMjVmMTdmNGMvMC81Nzg3QUQ2NjU5 RUE4QTVFNDAxODg3NkY1RjlEQkQ5QUFBRjlDQTFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJEOUFBQUY5 Q0ExRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTViOGU3NzQtMTY4My00NTZkLWJi YzAtMzQzMjI1ZjE3ZjRjLzAvNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJE OUFBQUY5Q0ExRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMUpFcWmIn5LURNUvoX8xksjBgNNJkf/rd+G 01okHrRfeF6Uf/hNYv57T4yICFQOz7jbvIEhjcfwVwCV9FVIqX0I1QHxaMqT3unS Mez19IM+1BKSQYdQ3tm5RZsJR5OBuJA7V48x8kByBzP0NESozIF79a4Pvr00HJ2L Sia55gm2xy5MyLg/kAiTC5AEAPdFrorOBVlmkdw2Ux6w4qlO7nOXhWkRWYheUjGS XsI3isaV335oPKxT6VnbP1qe2ZJGRS2PDJKVVThJ2w7l+4+RrneB3KRCZrNbXDnY fes0Ca22bf5Bri/SkksAkHM/z2pW5GgmH+wa7IHjQnw0rwBoVy4= -----END CERTIFICATE-----Generated at Sun Jun 29 23:05:51 2025 by rpki-client