$ rpki-client -vvf repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft File: 5E8D1116F8C66182B65521C899B56E89DDB84C57.mft (raw, json) Hash identifier: bcL9L5OJ+B3MZyqBeFTEMVXXzfOSUii1lGRhwecVV4o= Subject key identifier: A3:25:36:90:DC:A5:AA:16:06:45:4A:33:B8:14:F3:41:7A:49:34:95 Authority key identifier: 5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 Certificate issuer: /CN=5E8D1116F8C66182B65521C899B56E89DDB84C57 Certificate serial: 7328DE6F7DDFAD841A0FAAFDC378E8A4C2FCCFDD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft Manifest number: 04BA Signing time: Fri 22 Aug 2025 09:52:42 +0000 Manifest this update: Fri 22 Aug 2025 09:47:42 +0000 Manifest next update: Mon 25 Aug 2025 18:12:42 +0000 Files and hashes: 1: 3230332e3132382e36342e302f31392d3234203d3e203138313033.roa (hash: s7VSPqD5oiLwDB/oYr/1xD8uJ4/fL3Fk5/v33teavRk=) 2: 323430313a316230303a3a2f33322d3438203d3e203138313033.roa (hash: w+rn3hr3SMqGHiqqz9FiRvR/Sg9nolhzcrhUpRbqWiI=) 3: 34332e3234382e32342e302f32322d3234203d3e203138313033.roa (hash: RgeUIHscM2Mr9tXUcr4QUTfcftnTlsp6MIokq2QekbI=) 4: 3230332e3230312e35302e302f32332d3234203d3e203138313033.roa (hash: 0P4/KgKZcqup91feF2ZQ2rwCC9K7mFefhTwIQ1GZnuc=) 5: 5E8D1116F8C66182B65521C899B56E89DDB84C57.crl (hash: tv8d7ZbqTwQ79r0mJXLXmNcXhSBmgNnFlBr2LZNu59w=) 6: 3130332e31302e39362e302f32322d3234203d3e203138313033.roa (hash: Nh5W/QyNw1TBkrXlduer6Su77QtA37Kqc35mOSl9RrM=) 7: 3130332e32332e3234302e302f32322d3234203d3e203138313033.roa (hash: p8gVCnY66Os0DqkzQCJfTN/fhC+u5g4F7liSBfJAUxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.crl rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 18:12:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:28:de:6f:7d:df:ad:84:1a:0f:aa:fd:c3:78:e8:a4:c2:fc:cf:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E8D1116F8C66182B65521C899B56E89DDB84C57 Validity Not Before: Aug 22 09:47:42 2025 GMT Not After : Aug 25 18:12:42 2025 GMT Subject: CN=A3253690DCA5AA1606454A33B814F3417A493495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e4:ae:7b:6d:c5:75:06:11:53:66:a9:c6:7b: 47:2c:a7:8a:dc:3c:01:27:a1:c7:12:f8:71:05:2b: 2e:02:b7:f3:a1:18:0c:2d:29:c9:8f:95:ef:20:7c: 60:f9:60:83:56:2c:8f:e2:91:eb:f4:2d:34:5d:17: 86:4d:0a:b0:36:0c:fd:6a:00:b1:a9:27:66:bd:98: dc:9e:73:aa:ab:fc:7c:95:d5:78:8c:73:5e:d1:66: 56:a4:d5:01:27:f9:a0:62:31:87:1a:44:61:db:99: 83:6b:55:bc:7b:5c:5b:97:c1:a3:a0:c9:ca:23:ca: 58:b3:94:78:40:a3:ba:4c:b3:b9:44:b5:49:7d:7d: bc:a3:dc:e7:b6:4c:75:c2:b9:8b:9b:18:df:9a:ac: aa:3e:22:1e:ae:57:f8:2b:20:9f:6c:57:53:55:d4: 6a:45:b0:8a:b2:e6:ac:53:50:27:8a:3f:62:e5:dc: 4e:2b:1b:c0:61:e0:fb:62:c8:31:af:1f:db:0f:07: 5c:98:9a:59:cf:1d:90:5a:3d:21:8f:97:cf:04:8c: 2c:5b:6c:eb:48:5d:f9:d8:9a:b2:cf:b5:c1:14:9d: 7c:21:03:62:d3:6b:c0:83:e6:87:32:a1:0b:48:9d: 19:fa:e2:20:70:22:7d:31:19:48:63:c7:bf:ca:6b: d5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:25:36:90:DC:A5:AA:16:06:45:4A:33:B8:14:F3:41:7A:49:34:95 X509v3 Authority Key Identifier: keyid:5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:d1:18:9c:1c:de:4c:6e:eb:02:3a:1e:93:30:0b:8f:cc:57: 8f:00:46:96:b4:a8:f3:62:49:50:24:28:c9:f1:ef:e9:81:43: 7f:ce:90:9a:58:4f:f2:63:95:bd:3b:59:cf:c9:51:eb:f0:18: 51:c1:19:37:06:36:d4:99:54:08:25:85:dd:7a:54:a6:ef:76: da:cc:cc:73:b8:bd:70:0d:86:07:cc:8b:0a:d3:b8:07:1f:b2: 9a:42:6b:dd:31:d2:c0:75:6a:4a:16:d7:48:9f:33:62:ac:be: 31:de:8a:8d:2e:68:69:51:eb:66:12:e0:bf:4f:41:e4:b5:83: 81:61:e1:2c:81:e8:c1:4d:af:3a:c7:eb:ba:5e:af:32:56:98: 42:55:cc:8e:db:94:a4:7b:9f:c4:91:df:ef:af:b1:d1:07:70: 26:f2:43:e1:15:89:75:43:7f:a9:ce:b5:da:a3:23:94:c9:a9: 87:4c:f0:2a:d6:e6:4b:41:98:02:2b:dc:8f:1d:c5:23:c8:0e: 68:0e:cd:0c:34:9c:3c:eb:77:e2:09:99:5a:91:c3:a3:48:d1: 0a:b4:05:09:cd:1a:77:1c:02:38:be:3f:2c:df:55:8f:b9:89: 41:82:cc:c6:12:c6:a5:52:8c:bc:fd:ea:90:c0:6c:e6:9e:51: 09:82:78:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcyjeb33frYQaD6r9w3jopML8z90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZFODlE REI4NEM1NzAeFw0yNTA4MjIwOTQ3NDJaFw0yNTA4MjUxODEyNDJaMDMxMTAvBgNV BAMTKEEzMjUzNjkwRENBNUFBMTYwNjQ1NEEzM0I4MTRGMzQxN0E0OTM0OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+5K57bcV1BhFTZqnGe0csp4rc PAEnoccS+HEFKy4Ct/OhGAwtKcmPle8gfGD5YINWLI/ikev0LTRdF4ZNCrA2DP1q ALGpJ2a9mNyec6qr/HyV1XiMc17RZlak1QEn+aBiMYcaRGHbmYNrVbx7XFuXwaOg ycojylizlHhAo7pMs7lEtUl9fbyj3Oe2THXCuYubGN+arKo+Ih6uV/grIJ9sV1NV 1GpFsIqy5qxTUCeKP2Ll3E4rG8Bh4PtiyDGvH9sPB1yYmlnPHZBaPSGPl88EjCxb bOtIXfnYmrLPtcEUnXwhA2LTa8CD5ocyoQtInRn64iBwIn0xGUhjx7/Ka9VzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoyU2kNylqhYGRUozuBTzQXpJNJUwHwYDVR0j BBgwFoAUXo0RFvjGYYK2VSHImbVuid24TFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTk5YzFhZi1kOWM3LTRmZmQtYmEwMy1hM2UxY2RkOGFlZTAvMC81RThEMTExNkY4 QzY2MTgyQjY1NTIxQzg5OUI1NkU4OUREQjg0QzU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZFODlEREI4 NEM1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjE5OWMxYWYtZDljNy00ZmZkLWJh MDMtYTNlMWNkZDhhZWUwLzAvNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZF ODlEREI4NEM1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIbRGJwc3kxu6wI6HpMwC4/MV48ARpa0qPNi SVAkKMnx7+mBQ3/OkJpYT/Jjlb07Wc/JUevwGFHBGTcGNtSZVAglhd16VKbvdtrM zHO4vXANhgfMiwrTuAcfsppCa90x0sB1akoW10ifM2KsvjHeio0uaGlR62YS4L9P QeS1g4Fh4SyB6MFNrzrH67perzJWmEJVzI7blKR7n8SR3++vsdEHcCbyQ+EViXVD f6nOtdqjI5TJqYdM8CrW5ktBmAIr3I8dxSPIDmgOzQw0nDzrd+IJmVqRw6NI0Qq0 BQnNGnccAji+PyzfVY+5iUGCzMYSxqVSjLz96pDAbOaeUQmCeDQ= -----END CERTIFICATE-----Generated at Sat Aug 23 15:31:55 2025 by rpki-client