$ rpki-client -vvf repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft File: 5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft (raw, json) Hash identifier: uQ1Bnj5GCMdXv54SAarf4NE0iqSq41JbnZ1ZBizjfmM= Subject key identifier: 08:DE:01:2B:D9:8F:B4:E9:22:7B:19:06:A2:AB:EA:8E:C0:00:53:08 Authority key identifier: 5B:8C:3A:29:E9:0C:25:CB:F4:61:51:24:B1:17:BE:7F:C0:13:C6:1E Certificate issuer: /CN=5B8C3A29E90C25CBF4615124B117BE7FC013C61E Certificate serial: 3125FD407A99A3FE04F3331F5FDDBE9401D28F8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft Manifest number: 01BC Signing time: Fri 22 Aug 2025 20:11:06 +0000 Manifest this update: Fri 22 Aug 2025 20:06:06 +0000 Manifest next update: Tue 26 Aug 2025 01:13:06 +0000 Files and hashes: 1: 5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl (hash: vcK0Wr/YBIukCm32jnE57Vxq2VsKxkMQusQKRL96wOs=) 2: 3130332e39302e36362e302f32332d3233203d3e20313530323635.roa (hash: 03+kmACXHUPe0IyI3YXAvW+JekGIFfxV2tHYWD2l8nE=) 3: 3130332e39302e36372e302f32342d3234203d3e20313530323635.roa (hash: rSbPcUFwbUotF4iGb/0NgCE/rDZm6ThuOkAV/ZhbDr4=) 4: 3130332e39302e36362e302f32342d3234203d3e20313530323635.roa (hash: 5zPk4MUiirpmEj5/W53RgTUlrb96XIX+LjZrPDV2UMA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 01:13:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:25:fd:40:7a:99:a3:fe:04:f3:33:1f:5f:dd:be:94:01:d2:8f:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B8C3A29E90C25CBF4615124B117BE7FC013C61E Validity Not Before: Aug 22 20:06:06 2025 GMT Not After : Aug 26 01:13:06 2025 GMT Subject: CN=08DE012BD98FB4E9227B1906A2ABEA8EC0005308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:69:bb:56:c9:b2:5f:59:e2:0d:ac:bd:fd:2f: 67:cc:c2:02:84:2c:77:71:e9:12:e3:d5:b9:a9:13: e3:aa:20:77:3f:f7:e0:4b:06:27:58:62:1e:e3:d4: fa:37:c7:0e:f9:eb:09:fa:1e:e4:2a:5e:e1:59:a0: 9a:6f:c1:ce:84:23:86:34:1b:df:b5:bf:57:35:ba: e4:eb:63:d2:66:23:70:69:7c:2b:5f:68:a4:f0:a7: 40:d2:dd:4b:20:09:43:38:fa:e6:c8:dc:ab:d2:01: c6:fa:ae:b7:24:53:aa:9d:b4:2c:59:12:62:9e:b7: 96:3f:83:b5:1e:c3:81:04:5f:e5:50:7e:c0:72:2d: aa:5d:e9:12:d4:36:b8:a7:67:b8:34:0a:d0:96:2e: d5:55:7f:d7:67:be:64:44:2a:bb:e9:4b:b5:5d:ea: 70:d6:76:11:1c:e9:af:90:25:31:c5:3b:f0:c7:05: ca:82:cf:f3:5a:41:f0:cd:fa:d3:38:53:9d:7e:a1: 31:1a:9c:63:c5:2b:41:0f:12:c8:f1:bf:45:37:51: 7f:cd:00:bc:e3:5c:04:1a:cf:c4:b7:d3:00:cf:ca: ce:ed:07:43:7a:4b:d3:3a:aa:83:55:6d:5f:bc:a0: 1b:76:66:32:d9:0f:99:7b:7c:13:39:af:43:99:ea: 6f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:DE:01:2B:D9:8F:B4:E9:22:7B:19:06:A2:AB:EA:8E:C0:00:53:08 X509v3 Authority Key Identifier: keyid:5B:8C:3A:29:E9:0C:25:CB:F4:61:51:24:B1:17:BE:7F:C0:13:C6:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:94:f0:1e:47:a4:e6:98:e9:9a:35:38:88:2e:7c:68:8b:38: ea:cd:18:ab:d9:29:07:bc:df:c1:ec:c3:c4:cb:5d:3d:b1:60: e1:8a:ab:88:01:ed:70:2c:0a:35:9d:16:c5:63:b2:df:cf:1c: 50:6a:e7:c1:0e:86:11:98:65:11:28:a5:17:d9:5f:e6:97:68: 8f:db:fa:9d:3b:63:9a:95:65:67:4e:e3:4b:01:95:63:c4:ca: 55:dc:74:b3:b9:ee:83:fd:84:eb:69:8d:ed:e0:3c:40:da:9c: 74:d0:b4:07:38:03:35:1c:6f:c8:2b:04:41:a9:96:4e:e3:29: 51:f1:83:fc:85:2e:80:0e:39:37:b1:ee:9d:30:83:d1:0d:2d: 7d:db:e5:4b:0c:00:11:7a:c0:de:c8:72:4a:03:32:6e:db:90: 54:87:8b:a8:f6:51:df:7e:47:45:b7:ad:9b:45:60:62:10:0a: 3b:74:9f:47:58:0e:ff:e4:92:7d:08:fc:0c:37:aa:d5:74:31: a0:20:df:ee:cd:a0:33:2e:06:dc:4d:e5:65:06:b8:de:34:ef: 6f:39:ec:cc:da:4e:ae:a1:08:69:30:41:9d:93:54:a1:b9:14: 11:83:5f:b0:b5:31:00:3f:9d:91:3b:30:c2:92:f5:f6:c3:ef: b9:75:6a:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMSX9QHqZo/4E8zMfX92+lAHSj44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JFN0ZD MDEzQzYxRTAeFw0yNTA4MjIyMDA2MDZaFw0yNTA4MjYwMTEzMDZaMDMxMTAvBgNV BAMTKDA4REUwMTJCRDk4RkI0RTkyMjdCMTkwNkEyQUJFQThFQzAwMDUzMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8abtWybJfWeINrL39L2fMwgKE LHdx6RLj1bmpE+OqIHc/9+BLBidYYh7j1Po3xw756wn6HuQqXuFZoJpvwc6EI4Y0 G9+1v1c1uuTrY9JmI3BpfCtfaKTwp0DS3UsgCUM4+ubI3KvSAcb6rrckU6qdtCxZ EmKet5Y/g7Uew4EEX+VQfsByLapd6RLUNrinZ7g0CtCWLtVVf9dnvmREKrvpS7Vd 6nDWdhEc6a+QJTHFO/DHBcqCz/NaQfDN+tM4U51+oTEanGPFK0EPEsjxv0U3UX/N ALzjXAQaz8S30wDPys7tB0N6S9M6qoNVbV+8oBt2ZjLZD5l7fBM5r0OZ6m8TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCN4BK9mPtOkiexkGoqvqjsAAUwgwHwYDVR0j BBgwFoAUW4w6KekMJcv0YVEksRe+f8ATxh4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWYzYzc2OS1jZmIxLTQyMDYtOWY1NC1jMDU4N2U2M2JhNWIvMC81QjhDM0EyOUU5 MEMyNUNCRjQ2MTUxMjRCMTE3QkU3RkMwMTNDNjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JFN0ZDMDEz QzYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzlmM2M3NjktY2ZiMS00MjA2LTlm NTQtYzA1ODdlNjNiYTViLzAvNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JF N0ZDMDEzQzYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAqU8B5HpOaY6Zo1OIgufGiLOOrNGKvZKQe8 38Hsw8TLXT2xYOGKq4gB7XAsCjWdFsVjst/PHFBq58EOhhGYZREopRfZX+aXaI/b +p07Y5qVZWdO40sBlWPEylXcdLO57oP9hOtpje3gPEDanHTQtAc4AzUcb8grBEGp lk7jKVHxg/yFLoAOOTex7p0wg9ENLX3b5UsMABF6wN7IckoDMm7bkFSHi6j2Ud9+ R0W3rZtFYGIQCjt0n0dYDv/kkn0I/Aw3qtV0MaAg3+7NoDMuBtxN5WUGuN407285 7MzaTq6hCGkwQZ2TVKG5FBGDX7C1MQA/nZE7MMKS9fbD77l1alE= -----END CERTIFICATE-----Generated at Sat Aug 23 12:18:54 2025 by rpki-client