$ rpki-client -vvf repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft File: 5DFC46925E2D4B3FB044F284111222A8B4C78392.mft (raw, json) Hash identifier: 56gvCWDZaEBb7U/uLgxOd2tihYzyuyQpVFnn+rgPUtU= Subject key identifier: 0E:0F:68:6D:2D:2A:E7:F0:A9:E7:DC:E5:31:C7:4D:52:18:6A:A9:68 Authority key identifier: 5D:FC:46:92:5E:2D:4B:3F:B0:44:F2:84:11:12:22:A8:B4:C7:83:92 Certificate issuer: /CN=5DFC46925E2D4B3FB044F284111222A8B4C78392 Certificate serial: 3E9C699FD4028B3BC9451EC36655D960A130971D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft Manifest number: 01A3 Signing time: Sat 23 Aug 2025 02:11:06 +0000 Manifest this update: Sat 23 Aug 2025 02:06:06 +0000 Manifest next update: Tue 26 Aug 2025 09:53:06 +0000 Files and hashes: 1: 5DFC46925E2D4B3FB044F284111222A8B4C78392.crl (hash: XcYt6r3Xl+G7HN85A+/vpSVmu43SiCn4a4w9jAGw22k=) 2: 3130332e32322e39382e302f32342d3234203d3e20313530323433.roa (hash: RBUkVebuQcs/eoD+DsobzhNFA6Y0GlvHxLIjvG85Lgo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.crl rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 09:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:9c:69:9f:d4:02:8b:3b:c9:45:1e:c3:66:55:d9:60:a1:30:97:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DFC46925E2D4B3FB044F284111222A8B4C78392 Validity Not Before: Aug 23 02:06:06 2025 GMT Not After : Aug 26 09:53:06 2025 GMT Subject: CN=0E0F686D2D2AE7F0A9E7DCE531C74D52186AA968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2b:c4:d7:37:26:31:9e:cc:2a:05:ad:40:81: cf:91:02:da:27:55:2d:0f:01:f4:ff:62:7d:7a:fe: 6e:6a:3e:76:8c:56:2f:a2:88:31:ab:38:c0:d9:72: 41:d3:72:25:4e:d0:9e:c8:1b:72:28:db:5e:2a:20: 7f:42:a8:fc:13:a8:29:7b:15:de:cc:46:8c:89:e4: 86:82:2e:10:1b:fa:29:e3:1c:07:1d:6e:4e:c5:b9: 32:b4:95:c8:56:ec:aa:b8:d1:0e:b0:37:4e:d4:98: db:ef:13:44:2a:33:06:63:d6:a2:d2:ba:8b:ab:2f: 52:9f:3e:c9:b3:38:2d:48:15:70:7d:b2:eb:74:36: ae:24:1d:47:db:5b:45:ad:cb:1d:3e:6f:f5:b4:c9: 5a:36:ad:81:ab:fb:6d:e2:f5:14:0a:5a:14:1a:05: 46:33:7c:9b:39:0b:53:da:b1:d9:3a:fe:de:a2:23: 14:b2:c3:57:ce:3e:b7:fc:6f:8d:80:13:33:f7:08: b2:df:42:1a:e0:a0:f3:72:78:88:b6:f2:1e:2c:7d: 41:86:4f:59:e0:b9:1c:47:d1:21:4b:99:ee:5d:71: e2:74:48:ef:9a:f7:9b:26:16:14:52:a8:ce:06:fb: b8:96:f8:27:01:b4:b8:cf:64:27:f9:39:4a:55:32: bd:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:0F:68:6D:2D:2A:E7:F0:A9:E7:DC:E5:31:C7:4D:52:18:6A:A9:68 X509v3 Authority Key Identifier: keyid:5D:FC:46:92:5E:2D:4B:3F:B0:44:F2:84:11:12:22:A8:B4:C7:83:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:3c:11:2f:5a:a4:f2:b5:04:af:3f:2c:fc:05:cc:56:88:86: 8c:ee:01:7f:41:f0:33:74:af:fd:0f:ee:1d:a3:c3:d8:b3:22: 3c:4f:3c:a9:41:72:3d:cb:f3:14:30:70:02:8d:bc:41:58:09: 94:d5:14:a3:08:a0:6c:72:cb:e9:84:a4:77:ad:9f:48:00:d1: 4a:98:b8:70:26:d0:54:cb:a0:79:16:e6:9d:19:c6:57:61:30: ff:4f:81:85:35:70:38:11:15:41:5d:9c:df:c2:98:88:dd:1f: 8f:0a:33:e8:1c:c4:16:c8:8e:85:91:6c:5c:a6:29:3b:7c:d1: a4:94:ec:2a:f2:55:57:d8:33:f3:34:1c:46:5f:e3:84:a6:73: 27:b6:cd:22:26:cc:6d:6d:2e:27:39:d6:d5:08:2c:60:04:71: cd:dc:10:d6:ac:aa:7f:33:50:e2:35:18:fe:50:fb:a9:3b:62: 8f:38:f9:f2:a6:d1:4a:8d:b1:8a:72:c6:62:7d:4f:b3:22:01: 3d:b8:66:e2:ed:be:50:a0:4a:bb:4a:db:e2:37:a5:89:37:c8: 8b:fd:37:a4:f8:ba:a5:07:06:74:a7:0c:92:a9:29:38:ff:12: ec:10:6f:eb:40:f7:71:4b:b1:c3:6a:84:be:de:92:93:4f:93: 50:a2:5a:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPpxpn9QCizvJRR7DZlXZYKEwlx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIyQThC NEM3ODM5MjAeFw0yNTA4MjMwMjA2MDZaFw0yNTA4MjYwOTUzMDZaMDMxMTAvBgNV BAMTKDBFMEY2ODZEMkQyQUU3RjBBOUU3RENFNTMxQzc0RDUyMTg2QUE5NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoK8TXNyYxnswqBa1Agc+RAton VS0PAfT/Yn16/m5qPnaMVi+iiDGrOMDZckHTciVO0J7IG3Io214qIH9CqPwTqCl7 Fd7MRoyJ5IaCLhAb+injHAcdbk7FuTK0lchW7Kq40Q6wN07UmNvvE0QqMwZj1qLS uourL1KfPsmzOC1IFXB9sut0Nq4kHUfbW0Wtyx0+b/W0yVo2rYGr+23i9RQKWhQa BUYzfJs5C1Pasdk6/t6iIxSyw1fOPrf8b42AEzP3CLLfQhrgoPNyeIi28h4sfUGG T1nguRxH0SFLme5dceJ0SO+a95smFhRSqM4G+7iW+CcBtLjPZCf5OUpVMr3jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDg9obS0q5/Cp59zlMcdNUhhqqWgwHwYDVR0j BBgwFoAUXfxGkl4tSz+wRPKEERIiqLTHg5IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzAxYjI3Ny1jODBjLTQ1ZDUtODA4OS1hOWVmYTM0MDU0MmEvMC81REZDNDY5MjVF MkQ0QjNGQjA0NEYyODQxMTEyMjJBOEI0Qzc4MzkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIyQThCNEM3 ODM5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDcwMWIyNzctYzgwYy00NWQ1LTgw ODktYTllZmEzNDA1NDJhLzAvNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIy QThCNEM3ODM5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABQ8ES9apPK1BK8/LPwFzFaIhozuAX9B8DN0 r/0P7h2jw9izIjxPPKlBcj3L8xQwcAKNvEFYCZTVFKMIoGxyy+mEpHetn0gA0UqY uHAm0FTLoHkW5p0ZxldhMP9PgYU1cDgRFUFdnN/CmIjdH48KM+gcxBbIjoWRbFym KTt80aSU7CryVVfYM/M0HEZf44Smcye2zSImzG1tLic51tUILGAEcc3cENasqn8z UOI1GP5Q+6k7Yo84+fKm0UqNsYpyxmJ9T7MiAT24ZuLtvlCgSrtK2+I3pYk3yIv9 N6T4uqUHBnSnDJKpKTj/EuwQb+tA93FLscNqhL7ekpNPk1CiWh0= -----END CERTIFICATE-----Generated at Sat Aug 23 19:44:04 2025 by rpki-client