$ rpki-client -vvf repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft File: 5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft (raw, json) Hash identifier: 3Bnclw9Hpfhkkpb8eBsLIACYlGZJ/baY0kqkkSCGua4= Subject key identifier: 4B:C7:4D:CC:8C:F2:21:5A:BD:63:A8:6D:AE:0C:FD:1C:2B:51:04:CB Authority key identifier: 5A:8D:4D:EC:5F:C2:9B:E6:E2:49:04:62:F5:80:90:3D:D4:A9:84:EB Certificate issuer: /CN=5A8D4DEC5FC29BE6E2490462F580903DD4A984EB Certificate serial: 6286790514C61CE3551DC2F56102593DCFC3B6DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft Manifest number: CF Signing time: Fri 22 Aug 2025 17:01:02 +0000 Manifest this update: Fri 22 Aug 2025 16:56:02 +0000 Manifest next update: Mon 25 Aug 2025 17:41:02 +0000 Files and hashes: 1: 5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.crl (hash: S1vcfylDPsvcerDgubZpMziwBbJkbt8VgxwfvSgTl2w=) 2: 3135372e36362e3132322e302f32342d3234203d3e203633383538.roa (hash: 4USC1AQzGKvJLoaILHyi8/vcN8nVPul2782sFf1fdxE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.crl rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 17:41:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:86:79:05:14:c6:1c:e3:55:1d:c2:f5:61:02:59:3d:cf:c3:b6:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A8D4DEC5FC29BE6E2490462F580903DD4A984EB Validity Not Before: Aug 22 16:56:02 2025 GMT Not After : Aug 25 17:41:02 2025 GMT Subject: CN=4BC74DCC8CF2215ABD63A86DAE0CFD1C2B5104CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:41:68:f1:29:93:d0:93:d6:f0:70:c2:08:e5: c2:40:ae:0c:af:a0:5d:c3:54:ac:b9:a7:72:ed:e7: c0:48:19:a0:5f:5f:03:f5:b4:71:32:63:e1:fc:87: 54:7f:d6:ff:b5:a4:46:4c:35:a1:cf:8e:1f:22:cd: e8:0c:30:20:c1:62:52:e5:a2:cf:b3:97:39:60:c9: 3b:2e:ad:cc:94:39:7e:40:0d:75:3c:d0:47:bc:d9: a3:5f:ea:36:b3:bb:51:4c:ae:d7:8e:ff:cc:73:df: b0:6a:37:75:90:be:c0:23:ad:e9:1e:ac:cc:4e:84: b3:87:63:87:fd:60:93:fe:93:65:3c:45:3f:9e:26: 38:b4:3c:5b:cb:05:c5:57:31:dd:9a:26:37:63:88: 8c:49:f8:9b:d5:83:91:f0:31:8a:64:c4:59:78:79: a4:b8:43:7f:89:bf:5c:dc:6d:b5:0f:70:69:94:17: c7:eb:95:f3:9e:ee:d3:a5:58:19:27:8e:fb:05:dd: dd:3d:bd:d3:2d:94:f2:2d:97:98:d5:4d:b8:10:e3: d3:53:fd:22:5e:df:91:c6:68:b8:53:09:06:a0:5f: 7c:56:5a:fb:eb:99:11:ee:59:45:e4:e1:de:ad:99: 2d:16:9d:a6:ea:b3:d8:4a:ae:cc:10:c9:7a:76:10: 20:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C7:4D:CC:8C:F2:21:5A:BD:63:A8:6D:AE:0C:FD:1C:2B:51:04:CB X509v3 Authority Key Identifier: keyid:5A:8D:4D:EC:5F:C2:9B:E6:E2:49:04:62:F5:80:90:3D:D4:A9:84:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/5A8D4DEC5FC29BE6E2490462F580903DD4A984EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:90:10:f1:51:e9:cd:a0:69:56:ad:a8:67:16:fa:5c:ca:f0: 52:95:8e:d3:07:38:80:d3:6d:dc:2e:ab:59:88:aa:dd:c7:2c: c9:2f:87:22:80:c2:ef:f6:55:2d:8e:b2:49:42:bd:ef:bc:74: 74:84:48:87:d8:4b:ac:48:40:fb:39:4a:cc:f3:79:86:f7:32: ed:2e:f7:06:29:53:ce:e2:fd:1e:97:c0:f3:8f:8f:48:e7:17: dc:ea:73:a3:95:76:46:a8:d0:1b:8a:81:d4:19:17:2d:45:5d: 0f:2a:0e:dd:d8:0e:91:f0:f8:f1:68:89:29:3d:be:e6:21:e1: 27:2b:af:d2:32:37:aa:91:53:e1:e2:2d:bb:d3:66:8f:f2:2d: ac:34:2c:a6:9f:0a:73:7d:ef:40:7e:79:af:fa:9e:e7:02:8e: 3d:7a:8f:38:c6:50:d2:a9:a5:f1:31:a7:c8:e1:b9:15:8c:95: 10:33:b2:67:5d:8e:0d:cc:d9:6d:8e:c6:1e:74:9a:00:55:96: b3:07:07:18:c4:ef:0f:b3:28:06:04:f6:f9:17:fc:87:2c:4b: 7b:7c:86:ea:73:c1:38:7e:d3:3f:c5:08:3a:f0:5f:2f:3c:33: 04:8e:55:4e:b2:9f:f1:d4:30:30:c9:75:95:d1:61:e9:31:04: 64:c7:f3:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYoZ5BRTGHONVHcL1YQJZPc/Dtt4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE4RDRERUM1RkMyOUJFNkUyNDkwNDYyRjU4MDkwM0RE NEE5ODRFQjAeFw0yNTA4MjIxNjU2MDJaFw0yNTA4MjUxNzQxMDJaMDMxMTAvBgNV BAMTKDRCQzc0RENDOENGMjIxNUFCRDYzQTg2REFFMENGRDFDMkI1MTA0Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnQWjxKZPQk9bwcMII5cJArgyv oF3DVKy5p3Lt58BIGaBfXwP1tHEyY+H8h1R/1v+1pEZMNaHPjh8izegMMCDBYlLl os+zlzlgyTsurcyUOX5ADXU80Ee82aNf6jazu1FMrteO/8xz37BqN3WQvsAjreke rMxOhLOHY4f9YJP+k2U8RT+eJji0PFvLBcVXMd2aJjdjiIxJ+JvVg5HwMYpkxFl4 eaS4Q3+Jv1zcbbUPcGmUF8frlfOe7tOlWBknjvsF3d09vdMtlPItl5jVTbgQ49NT /SJe35HGaLhTCQagX3xWWvvrmRHuWUXk4d6tmS0Wnabqs9hKrswQyXp2ECDhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS8dNzIzyIVq9Y6htrgz9HCtRBMswHwYDVR0j BBgwFoAUWo1N7F/Cm+biSQRi9YCQPdSphOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZWNmNWQ5NC03ZjFmLTQzYmYtYjdhYS0yMjBmMGMxNTZlYzAvMC81QThENERFQzVG QzI5QkU2RTI0OTA0NjJGNTgwOTAzREQ0QTk4NEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUE4RDRERUM1RkMyOUJFNkUyNDkwNDYyRjU4MDkwM0RENEE5 ODRFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2VjZjVkOTQtN2YxZi00M2JmLWI3 YWEtMjIwZjBjMTU2ZWMwLzAvNUE4RDRERUM1RkMyOUJFNkUyNDkwNDYyRjU4MDkw M0RENEE5ODRFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAKQEPFR6c2gaVatqGcW+lzK8FKVjtMHOIDT bdwuq1mIqt3HLMkvhyKAwu/2VS2OsklCve+8dHSESIfYS6xIQPs5SszzeYb3Mu0u 9wYpU87i/R6XwPOPj0jnF9zqc6OVdkao0BuKgdQZFy1FXQ8qDt3YDpHw+PFoiSk9 vuYh4Scrr9IyN6qRU+HiLbvTZo/yLaw0LKafCnN970B+ea/6nucCjj16jzjGUNKp pfExp8jhuRWMlRAzsmddjg3M2W2Oxh50mgBVlrMHBxjE7w+zKAYE9vkX/IcsS3t8 hupzwTh+0z/FCDrwXy88MwSOVU6yn/HUMDDJdZXRYekxBGTH84A= -----END CERTIFICATE-----Generated at Sun Aug 24 05:27:26 2025 by rpki-client