$ rpki-client -vvf repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft File: C5247B1CF64591B1DB27280B439B507E56BF0232.mft (raw, json) Hash identifier: 8P4/XFeKBIUCnyY4ZpvyXZLUQVoJ7iBh97x4SqIGopw= Subject key identifier: 1E:24:5E:D5:FC:D1:C8:95:B4:7D:5F:EB:59:6B:DA:A9:2A:50:4C:8A Authority key identifier: C5:24:7B:1C:F6:45:91:B1:DB:27:28:0B:43:9B:50:7E:56:BF:02:32 Certificate issuer: /CN=C5247B1CF64591B1DB27280B439B507E56BF0232 Certificate serial: 2038358CA96FBA327DCABD2FB9BC40A4F6EEE6EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5247B1CF64591B1DB27280B439B507E56BF0232.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft Manifest number: 0446 Signing time: Thu 21 Aug 2025 03:21:15 +0000 Manifest this update: Thu 21 Aug 2025 03:16:15 +0000 Manifest next update: Sun 24 Aug 2025 12:11:15 +0000 Files and hashes: 1: 3230332e38312e3138342e302f32312d3234203d3e203234353338.roa (hash: MMjEYaklE81WaDCrUueGQmjdNC6x98nzJuWl2kfKoDE=) 2: C5247B1CF64591B1DB27280B439B507E56BF0232.crl (hash: JJVBmBnDdLqASgvkZa7b7f9EEltfARHbO9mGHUsYK6E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.crl rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5247B1CF64591B1DB27280B439B507E56BF0232.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 12:11:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:38:35:8c:a9:6f:ba:32:7d:ca:bd:2f:b9:bc:40:a4:f6:ee:e6:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5247B1CF64591B1DB27280B439B507E56BF0232 Validity Not Before: Aug 21 03:16:15 2025 GMT Not After : Aug 24 12:11:15 2025 GMT Subject: CN=1E245ED5FCD1C895B47D5FEB596BDAA92A504C8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ed:0b:71:e1:c2:37:22:64:78:30:64:12:c3: 19:90:4b:8b:5e:bd:a6:78:70:f4:e0:a6:79:9e:12: 24:6e:b8:29:a7:e9:39:53:0b:01:61:72:98:ed:13: 2f:76:67:ab:4a:f0:fe:91:db:2c:74:e0:23:d7:ad: 06:10:37:45:00:7d:28:4b:46:37:f1:7c:14:47:be: b6:4c:7b:16:8a:bf:f9:5c:aa:ab:6d:d0:73:0c:1b: 03:84:cd:3e:f1:e5:10:3f:78:ff:d2:c5:44:db:1d: 6a:6d:05:3c:a2:5a:19:39:cd:bb:44:e1:73:29:e7: b2:c4:03:f7:96:dd:64:94:12:7e:fb:5e:d7:25:10: 13:d6:02:78:80:58:72:59:b6:4a:ed:00:99:43:5f: 7d:2e:c3:fb:c2:c0:e1:bb:e7:ef:bb:98:dc:31:ca: 48:af:fc:79:51:9b:4e:b3:78:6d:24:a4:70:89:37: 71:15:04:dc:27:0c:70:bd:40:ea:db:75:0c:7f:be: c7:07:7c:38:45:77:9e:54:ed:65:b0:79:1c:da:e9: 4c:c7:61:25:57:ef:d4:64:2c:54:be:3f:93:eb:17: 64:c7:c3:e1:cd:6d:9e:5b:8c:b1:74:8e:13:4f:0a: a4:d2:fa:fb:67:46:f3:cd:52:1c:13:8f:a1:89:c0: 08:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:24:5E:D5:FC:D1:C8:95:B4:7D:5F:EB:59:6B:DA:A9:2A:50:4C:8A X509v3 Authority Key Identifier: keyid:C5:24:7B:1C:F6:45:91:B1:DB:27:28:0B:43:9B:50:7E:56:BF:02:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5247B1CF64591B1DB27280B439B507E56BF0232.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:05:d5:89:d2:92:59:bb:82:bc:71:01:ef:9f:66:d3:17:c8: 7f:7d:44:96:cc:5a:af:8d:0f:0a:23:7e:cb:f3:38:01:22:29: dc:91:50:48:73:cb:dd:f4:8b:07:b0:77:58:80:a9:67:be:8a: 5b:4f:fa:2b:95:5a:75:5c:45:e9:61:48:51:96:31:7e:31:c5: 1e:82:35:ef:63:4e:41:ec:b8:8f:99:d7:9f:76:06:fe:15:cd: 01:bf:10:e7:af:db:ba:04:f6:a4:e4:54:fb:57:3b:37:ac:4e: d3:d2:d3:2e:a2:67:49:b1:d9:15:62:13:91:58:d9:b2:2b:40: ac:51:12:79:72:4e:65:6c:4b:b0:3a:ee:05:9c:18:bf:66:7d: d0:7d:1d:5a:38:45:66:77:b4:93:b4:1b:ed:b4:e8:c9:ca:ae: 90:48:4d:0e:04:4b:57:7e:f4:24:d5:b3:0c:1a:09:15:b2:be: 9a:cb:ae:0b:aa:e1:e7:71:ac:29:46:02:a5:19:7e:bc:69:41: 31:58:43:34:05:ff:b4:99:73:e1:90:1c:cf:ff:3c:d0:87:78: 4b:b2:dc:b3:be:3b:6e:f9:35:d8:f9:23:a6:db:a1:bc:74:a9: ef:15:35:f4:9d:9b:6d:6a:96:3e:d1:d9:c2:ad:65:8e:bb:20: 5e:d0:cc:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIDg1jKlvujJ9yr0vubxApPbu5u4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUyNDdCMUNGNjQ1OTFCMURCMjcyODBCNDM5QjUwN0U1 NkJGMDIzMjAeFw0yNTA4MjEwMzE2MTVaFw0yNTA4MjQxMjExMTVaMDMxMTAvBgNV BAMTKDFFMjQ1RUQ1RkNEMUM4OTVCNDdENUZFQjU5NkJEQUE5MkE1MDRDOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq7Qtx4cI3ImR4MGQSwxmQS4te vaZ4cPTgpnmeEiRuuCmn6TlTCwFhcpjtEy92Z6tK8P6R2yx04CPXrQYQN0UAfShL RjfxfBRHvrZMexaKv/lcqqtt0HMMGwOEzT7x5RA/eP/SxUTbHWptBTyiWhk5zbtE 4XMp57LEA/eW3WSUEn77XtclEBPWAniAWHJZtkrtAJlDX30uw/vCwOG75++7mNwx ykiv/HlRm06zeG0kpHCJN3EVBNwnDHC9QOrbdQx/vscHfDhFd55U7WWweRza6UzH YSVX79RkLFS+P5PrF2THw+HNbZ5bjLF0jhNPCqTS+vtnRvPNUhwTj6GJwAi7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHiRe1fzRyJW0fV/rWWvaqSpQTIowHwYDVR0j BBgwFoAUxSR7HPZFkbHbJygLQ5tQfla/AjIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWEyOWE3NS1jNWI5LTQ3NWItOWQ5Ni02ZDFhMTVlYWUyNGQvMC9DNTI0N0IxQ0Y2 NDU5MUIxREIyNzI4MEI0MzlCNTA3RTU2QkYwMjMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUyNDdCMUNGNjQ1OTFCMURCMjcyODBCNDM5QjUwN0U1NkJG MDIzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFhMjlhNzUtYzViOS00NzViLTlk OTYtNmQxYTE1ZWFlMjRkLzAvQzUyNDdCMUNGNjQ1OTFCMURCMjcyODBCNDM5QjUw N0U1NkJGMDIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJcF1YnSklm7grxxAe+fZtMXyH99RJbMWq+N DwojfsvzOAEiKdyRUEhzy930iwewd1iAqWe+iltP+iuVWnVcRelhSFGWMX4xxR6C Ne9jTkHsuI+Z1592Bv4VzQG/EOev27oE9qTkVPtXOzesTtPS0y6iZ0mx2RViE5FY 2bIrQKxREnlyTmVsS7A67gWcGL9mfdB9HVo4RWZ3tJO0G+206MnKrpBITQ4ES1d+ 9CTVswwaCRWyvprLrguq4edxrClGAqUZfrxpQTFYQzQF/7SZc+GQHM//PNCHeEuy 3LO+O275Ndj5I6bbobx0qe8VNfSdm21qlj7R2cKtZY67IF7QzD8= -----END CERTIFICATE-----Generated at Sat Aug 23 12:07:20 2025 by rpki-client