$ rpki-client -vvf repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft File: C5CA2999FE7612F56CCCB7441743B05181458ED0.mft (raw, json) Hash identifier: ynSINUwOlTg+kgGgKD53Pp3bVjEfWvpOnjjXQU3JXKk= Subject key identifier: 45:CB:08:53:7C:54:C2:0C:85:B1:A1:F0:03:D0:87:59:C3:B6:92:E6 Authority key identifier: C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0 Certificate issuer: /CN=C5CA2999FE7612F56CCCB7441743B05181458ED0 Certificate serial: 2293AF5F1F686C0DC1956A8B88AB9DCB20B2DFBC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft Manifest number: 04FD Signing time: Fri 22 Aug 2025 02:40:39 +0000 Manifest this update: Fri 22 Aug 2025 02:35:39 +0000 Manifest next update: Mon 25 Aug 2025 07:23:39 +0000 Files and hashes: 1: 3130332e3134322e3230332e302f32342d3234203d3e20313339333738.roa (hash: TJhHkKwr35GRF8gqIxcj9n16SqAaRRuK8PF46Ie+LXg=) 2: 3130332e3134322e3230322e302f32342d3234203d3e20313339333738.roa (hash: kZ/7LdQ98yA+6ycYvld45u3DxaVBg4NMh+WZ028gPpU=) 3: 323030313a6466313a353638303a3a2f34382d3438203d3e20313339333738.roa (hash: q7ox9dPZeS59odB2IJMVaFXBFhKkSZPWVMJt5aLWrRc=) 4: C5CA2999FE7612F56CCCB7441743B05181458ED0.crl (hash: k65N1ahHQ78AmkjYfwA4ANlAPB6tSsCwK6gbAsQKsvI=) 5: 3130332e3134322e3230322e302f32332d3233203d3e20313339333738.roa (hash: aOFDhPstKOFaNipOEFwONnhh/OGsZlp5fuQdDXOoo9E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 07:23:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:93:af:5f:1f:68:6c:0d:c1:95:6a:8b:88:ab:9d:cb:20:b2:df:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5CA2999FE7612F56CCCB7441743B05181458ED0 Validity Not Before: Aug 22 02:35:39 2025 GMT Not After : Aug 25 07:23:39 2025 GMT Subject: CN=45CB08537C54C20C85B1A1F003D08759C3B692E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a3:be:50:45:d5:58:70:89:22:1c:72:2b:9c: 7c:a6:e6:ea:40:5b:e7:53:f5:f3:18:46:fc:39:f8: 89:9c:04:e7:8d:61:8f:4d:49:86:7d:32:9d:76:ce: 26:a5:84:5d:a8:2c:c9:50:0e:8d:d6:2a:fd:22:67: 64:e9:2c:40:8e:04:73:3b:c4:ae:85:ea:d8:04:a9: 47:c7:14:91:47:01:c6:5e:38:5b:3b:91:02:87:bf: e5:b4:1a:62:ab:e5:64:1b:17:5b:a1:54:07:33:cb: 13:52:57:d1:5f:e6:63:1b:da:85:b5:7a:3e:e9:3a: 7e:47:3a:37:21:91:48:80:84:70:77:1d:ce:c3:fc: 95:58:6a:87:91:22:eb:2a:d5:be:b7:8e:3d:d2:8e: bf:5c:fa:49:b1:82:67:83:e2:e2:0d:bb:88:04:d8: 14:28:95:aa:0e:00:8b:ae:be:68:26:5b:33:46:c3: eb:ac:7f:7c:12:6e:e2:84:8a:07:e7:cb:2c:69:44: 6b:e6:db:69:b9:85:31:38:1a:44:6f:68:93:55:50: f2:c2:bf:ba:16:42:ee:9e:27:70:27:15:88:58:f8: 34:d1:2b:30:67:2d:20:6f:c7:3c:3e:9e:ec:49:34: 1e:3c:29:ba:48:19:5d:d1:74:93:98:c3:af:1a:48: 91:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:CB:08:53:7C:54:C2:0C:85:B1:A1:F0:03:D0:87:59:C3:B6:92:E6 X509v3 Authority Key Identifier: keyid:C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:07:01:83:5a:35:81:9f:f9:48:6b:d2:53:b0:eb:e7:2a:98: 2f:e0:af:b0:21:d3:34:68:31:e3:b8:a3:56:ed:a4:19:32:57: 5f:70:b6:b8:f1:f5:fe:f0:2f:da:93:72:12:c6:59:01:12:e8: 43:40:03:3b:ce:27:53:5b:cc:2b:47:d5:63:b7:1a:9e:e2:2c: 30:1f:c9:9f:6a:ee:ab:64:a3:8d:c4:d9:04:42:69:59:bc:e9: 46:c0:e1:65:25:45:63:a8:e6:b6:ac:63:17:00:ec:c5:db:70: 6a:c9:8f:2c:42:e9:f6:24:3e:fb:70:87:e9:51:b2:f4:46:d1: 6b:94:fe:28:87:9a:2b:11:64:20:40:38:bd:86:a8:cc:23:16: 2b:0c:eb:a8:d3:22:14:c4:af:19:0d:d5:61:20:b7:42:33:4f: 29:c2:90:49:fc:7b:f0:1f:ae:e0:ee:5d:9e:45:d2:de:a6:9b: 4c:17:f1:08:6a:c2:2f:db:ad:e7:c1:52:3c:70:da:96:1f:ee: 1d:ea:ef:7e:3b:72:6a:55:04:3c:03:80:70:5e:e7:cd:e6:b5: 02:02:94:99:3d:97:f5:19:b9:6f:ba:3d:b3:86:2f:05:04:34: 16:86:60:91:c0:34:02:19:c7:89:08:d4:d8:0d:49:58:cc:19: c4:af:d6:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIpOvXx9obA3BlWqLiKudyyCy37wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0IwNTE4 MTQ1OEVEMDAeFw0yNTA4MjIwMjM1MzlaFw0yNTA4MjUwNzIzMzlaMDMxMTAvBgNV BAMTKDQ1Q0IwODUzN0M1NEMyMEM4NUIxQTFGMDAzRDA4NzU5QzNCNjkyRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClo75QRdVYcIkiHHIrnHym5upA W+dT9fMYRvw5+ImcBOeNYY9NSYZ9Mp12zialhF2oLMlQDo3WKv0iZ2TpLECOBHM7 xK6F6tgEqUfHFJFHAcZeOFs7kQKHv+W0GmKr5WQbF1uhVAczyxNSV9Ff5mMb2oW1 ej7pOn5HOjchkUiAhHB3Hc7D/JVYaoeRIusq1b63jj3Sjr9c+kmxgmeD4uINu4gE 2BQolaoOAIuuvmgmWzNGw+usf3wSbuKEigfnyyxpRGvm22m5hTE4GkRvaJNVUPLC v7oWQu6eJ3AnFYhY+DTRKzBnLSBvxzw+nuxJNB48KbpIGV3RdJOYw68aSJFRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURcsIU3xUwgyFsaHwA9CHWcO2kuYwHwYDVR0j BBgwFoAUxcopmf52EvVszLdEF0OwUYFFjtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjdmYjgzNy0xYjJmLTRjNGUtYjk5OS02ZTk5MGRkYzE0OTkvMC9DNUNBMjk5OUZF NzYxMkY1NkNDQ0I3NDQxNzQzQjA1MTgxNDU4RUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0IwNTE4MTQ1 OEVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDY3ZmI4MzctMWIyZi00YzRlLWI5 OTktNmU5OTBkZGMxNDk5LzAvQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0Iw NTE4MTQ1OEVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFEHAYNaNYGf+Uhr0lOw6+cqmC/gr7Ah0zRo MeO4o1btpBkyV19wtrjx9f7wL9qTchLGWQES6ENAAzvOJ1NbzCtH1WO3Gp7iLDAf yZ9q7qtko43E2QRCaVm86UbA4WUlRWOo5rasYxcA7MXbcGrJjyxC6fYkPvtwh+lR svRG0WuU/iiHmisRZCBAOL2GqMwjFisM66jTIhTErxkN1WEgt0IzTynCkEn8e/Af ruDuXZ5F0t6mm0wX8Qhqwi/brefBUjxw2pYf7h3q7347cmpVBDwDgHBe583mtQIC lJk9l/UZuW+6PbOGLwUENBaGYJHANAIZx4kI1NgNSVjMGcSv1qw= -----END CERTIFICATE-----Generated at Sat Aug 23 15:34:50 2025 by rpki-client