$ rpki-client -vvf repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft File: 5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft (raw, json) Hash identifier: 8lw0unxQdVj3QO/qyQ0BD7QiRO49Pf5EpZFS+mJH+W8= Subject key identifier: C5:A2:39:50:15:79:00:11:1C:03:50:57:44:75:3B:FB:B4:39:DC:9A Authority key identifier: 5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B Certificate issuer: /CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B Certificate serial: 0AF269F45AF088C5C4914E333B2512D42B3AC5B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft Manifest number: 022A Signing time: Fri 22 Aug 2025 23:52:20 +0000 Manifest this update: Fri 22 Aug 2025 23:47:20 +0000 Manifest next update: Tue 26 Aug 2025 04:53:20 +0000 Files and hashes: 1: 3130332e3138342e31392e302f32342d3234203d3e20313439363735.roa (hash: i4XCxm32VCNZ/zacmmSjbAzxATWwcS43fZzejb3pvRo=) 2: 3130332e3138342e31392e302f32342d3234203d3e203438343635.roa (hash: QzihEc5MkFa7NqybYwRpohd7XvTO9rPruJzvUalzVM8=) 3: 3130332e3138342e31382e302f32342d3234203d3e203438343635.roa (hash: 0IGopCvXSRXbCg3kz6wjCn1/1Kczl4zkhji2/R4GIz4=) 4: 5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl (hash: ueHYpKkJB6oCE9EXiZbkF/fbDvEnN+Jjym57JOp2fEs=) 5: 3130332e3138342e31382e302f32342d3234203d3e20313439363735.roa (hash: 4BUtx10alv/ZZ9FJolZJ3I8WhlB5v1F5iKW6alQrr7c=) 6: 3130332e3138342e31382e302f32332d3233203d3e20313439363735.roa (hash: 8hPXkuW34xkK66/r5oL+jYYUmOueTjKMrZh36goENDw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 04:53:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:f2:69:f4:5a:f0:88:c5:c4:91:4e:33:3b:25:12:d4:2b:3a:c5:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B Validity Not Before: Aug 22 23:47:20 2025 GMT Not After : Aug 26 04:53:20 2025 GMT Subject: CN=C5A23950157900111C03505744753BFBB439DC9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f9:4a:cd:84:f1:30:7c:0f:0f:3d:45:35:ae: c9:86:2b:33:a1:d3:db:9d:b1:f2:5d:8a:11:0f:d0: 7e:97:24:73:21:09:81:2e:b3:dc:95:c5:ae:bc:32: 1a:4a:a9:1f:ad:a3:1d:01:af:89:6a:ba:98:c5:29: 04:bb:d9:f5:ec:92:30:e4:ef:57:1d:35:26:af:a5: 97:bb:a1:04:d4:44:31:02:a3:17:62:a6:9d:ed:7c: 9b:6f:26:98:96:e2:82:71:3b:b4:5a:47:aa:90:c2: 1e:05:97:ec:67:86:a3:98:0e:72:fb:f7:68:5f:a4: 0a:96:93:df:22:78:51:1b:5c:53:76:8f:a7:b4:db: 3d:67:2d:20:4f:23:9d:fe:da:3a:18:f3:b4:59:45: 1f:f4:91:91:0f:6a:6b:d7:53:bb:9b:fd:b5:d5:81: 09:ce:6f:ff:c8:12:14:45:f2:b6:d5:8b:2b:b2:de: 4d:9f:5f:4a:ee:a5:aa:e5:5f:47:ea:c1:c9:12:28: 08:54:d8:22:ee:c5:f0:c5:68:8b:6b:78:44:07:0d: 3c:dd:82:57:bf:81:99:82:6e:44:ee:94:92:b4:08: 18:4c:1d:21:24:b4:4b:46:4b:e1:cc:4e:ba:31:5d: e7:4f:2e:fe:92:0c:24:87:67:b2:fd:0a:73:ad:d0: e5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A2:39:50:15:79:00:11:1C:03:50:57:44:75:3B:FB:B4:39:DC:9A X509v3 Authority Key Identifier: keyid:5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:cd:48:2b:7d:bc:b1:92:8b:99:42:79:d3:e7:80:73:c4:69: dc:d9:c5:94:64:03:33:bb:06:79:9b:f9:4c:8b:05:6e:20:1b: 58:65:3f:67:83:87:a4:d8:48:97:b0:d9:4a:e0:0b:57:f1:a4: 80:97:5b:4c:3d:26:b0:de:f1:7d:12:c2:e4:5b:5a:68:38:b6: b4:08:11:aa:d1:72:20:dd:02:7d:dd:60:9e:a9:f6:b4:1d:5b: bd:23:e4:4e:f3:e4:2e:fe:a1:68:7c:1b:a4:1d:fb:74:d9:94: c0:b1:a5:ee:6b:53:9a:6a:58:49:3c:85:4b:44:70:d6:58:60: b1:43:cb:aa:8b:38:bd:cd:d4:97:70:e6:7f:ea:55:76:c0:0a: 48:4e:3c:a9:f8:79:ca:2d:6b:65:ab:fc:cd:01:c9:9d:f9:b3: 23:83:b3:f2:0f:8a:01:6b:e5:8e:67:b4:0e:58:34:56:e1:99: 03:4d:f5:5d:76:e0:6a:f7:19:5f:79:58:0f:e3:cf:50:cf:ea: 79:e4:bb:c1:55:e8:fb:f8:74:b4:db:1d:6b:8a:85:4b:6e:d2: ae:57:d3:8d:94:e6:06:21:62:dc:19:dc:09:d6:0e:d9:65:bf: fd:5d:da:98:3a:0e:45:28:66:53:88:33:6b:37:2c:fc:5a:75: da:ce:62:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCvJp9FrwiMXEkU4zOyUS1Cs6xbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIyMkY5 MDg5NTUyQjAeFw0yNTA4MjIyMzQ3MjBaFw0yNTA4MjYwNDUzMjBaMDMxMTAvBgNV BAMTKEM1QTIzOTUwMTU3OTAwMTExQzAzNTA1NzQ0NzUzQkZCQjQzOURDOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs+UrNhPEwfA8PPUU1rsmGKzOh 09udsfJdihEP0H6XJHMhCYEus9yVxa68MhpKqR+tox0Br4lqupjFKQS72fXskjDk 71cdNSavpZe7oQTURDECoxdipp3tfJtvJpiW4oJxO7RaR6qQwh4Fl+xnhqOYDnL7 92hfpAqWk98ieFEbXFN2j6e02z1nLSBPI53+2joY87RZRR/0kZEPamvXU7ub/bXV gQnOb//IEhRF8rbViyuy3k2fX0ruparlX0fqwckSKAhU2CLuxfDFaItreEQHDTzd gle/gZmCbkTulJK0CBhMHSEktEtGS+HMTroxXedPLv6SDCSHZ7L9CnOt0OXjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxaI5UBV5ABEcA1BXRHU7+7Q53JowHwYDVR0j BBgwFoAUWkD9GeLdU4DLblAvFtsiL5CJVSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MGQ5MTRlZi0wYjFmLTQ5MGItODA4ZC1hMjdiODNmZjlhM2UvMC81QTQwRkQxOUUy REQ1MzgwQ0I2RTUwMkYxNkRCMjIyRjkwODk1NTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIyMkY5MDg5 NTUyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjBkOTE0ZWYtMGIxZi00OTBiLTgw OGQtYTI3YjgzZmY5YTNlLzAvNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIy MkY5MDg5NTUyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHbNSCt9vLGSi5lCedPngHPEadzZxZRkAzO7 Bnmb+UyLBW4gG1hlP2eDh6TYSJew2UrgC1fxpICXW0w9JrDe8X0SwuRbWmg4trQI EarRciDdAn3dYJ6p9rQdW70j5E7z5C7+oWh8G6Qd+3TZlMCxpe5rU5pqWEk8hUtE cNZYYLFDy6qLOL3N1Jdw5n/qVXbACkhOPKn4ecota2Wr/M0ByZ35syODs/IPigFr 5Y5ntA5YNFbhmQNN9V124Gr3GV95WA/jz1DP6nnku8FV6Pv4dLTbHWuKhUtu0q5X 042U5gYhYtwZ3AnWDtllv/1d2pg6DkUoZlOIM2s3LPxaddrOYr4= -----END CERTIFICATE-----Generated at Sat Aug 23 21:45:13 2025 by rpki-client