$ rpki-client -vvf repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft File: 5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft (raw, json) Hash identifier: kk7+QZLetq3jOaKAN479xqicD/vCinJ4cp+fnf1jldc= Subject key identifier: 0D:4E:9E:FA:FB:78:F8:97:55:E3:1B:C7:AD:0B:E9:5D:32:A9:F5:ED Authority key identifier: 5A:CB:0F:96:C2:B1:25:5E:AB:AA:EB:C1:42:6E:CD:9E:6D:F6:C4:AD Certificate issuer: /CN=5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD Certificate serial: 7F652CE7413CC619C8504D2AFB43064EDB51F695 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft Manifest number: 0171 Signing time: Sat 23 Aug 2025 03:10:59 +0000 Manifest this update: Sat 23 Aug 2025 03:05:59 +0000 Manifest next update: Tue 26 Aug 2025 03:24:59 +0000 Files and hashes: 1: 3130332e3235322e34382e302f32342d3234203d3e20313530393931.roa (hash: 3eXzK+GorV6w9BT+6P2VQObNrkmn7G3kB6eMdcv66zE=) 2: 5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.crl (hash: +K0XdMlazDupSpr4VTSOU1PXaiDlpJHujoQeYr1Wpes=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.crl rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 03:24:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:65:2c:e7:41:3c:c6:19:c8:50:4d:2a:fb:43:06:4e:db:51:f6:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD Validity Not Before: Aug 23 03:05:59 2025 GMT Not After : Aug 26 03:24:59 2025 GMT Subject: CN=0D4E9EFAFB78F89755E31BC7AD0BE95D32A9F5ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:91:ad:13:74:1a:40:fc:7c:4a:20:b4:02:41: a5:6b:2c:58:02:3b:18:88:7d:b2:7a:2c:69:19:31: e1:27:be:4b:cc:41:80:c0:f1:4a:5c:fa:8e:7a:4f: fd:bd:de:d1:fc:54:2a:fe:90:3b:44:8f:e6:b7:46: 8b:4b:67:c4:5c:60:00:ea:6c:06:10:be:b5:c0:f2: cc:d2:62:fd:b7:d4:10:d7:7f:e5:11:3c:9a:98:04: 4f:0d:0e:70:10:41:28:5b:95:ff:c7:d0:e5:bc:44: de:dd:7b:09:e7:d8:85:ce:db:9c:39:27:f0:1a:dc: cd:0f:d3:3a:0a:ce:22:f5:b4:4f:2f:df:7f:b2:d7: 73:d9:a4:8d:45:3c:f0:7e:e1:97:df:22:ac:f3:32: a7:c7:9c:f8:a7:7d:6e:05:83:1d:f9:c2:64:7a:bf: fe:f1:1b:bd:27:b1:01:8a:77:c0:4f:f4:9b:61:e9: fd:c7:51:aa:40:52:bc:ba:48:01:6a:99:f9:89:7a: c3:16:15:81:bd:31:f0:00:34:6e:5f:c6:d9:e9:c0: 0b:97:1b:72:11:93:2e:d4:7b:13:fc:ed:ea:21:35: 6f:1b:02:c2:e0:97:4c:a5:5c:4e:a5:86:8a:be:52: 50:b3:e1:a0:9a:6a:32:27:48:b8:25:4f:2d:4e:a3: 64:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:4E:9E:FA:FB:78:F8:97:55:E3:1B:C7:AD:0B:E9:5D:32:A9:F5:ED X509v3 Authority Key Identifier: keyid:5A:CB:0F:96:C2:B1:25:5E:AB:AA:EB:C1:42:6E:CD:9E:6D:F6:C4:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:c0:a6:48:db:43:e1:67:19:5c:a6:60:c4:4f:0d:b0:80:c6: f1:da:14:6c:48:2d:5a:b7:9d:74:4a:69:50:cb:d5:64:87:73: 66:0c:b0:bf:9f:16:9c:86:4c:93:49:74:27:8d:d7:85:28:4b: 35:97:3b:3a:41:9c:1d:cc:ca:3b:95:92:bf:16:be:23:55:b3: 40:83:56:a0:b0:18:67:31:dd:63:3e:4f:7c:3b:ec:5a:9b:a3: a5:e6:05:dc:99:2b:05:57:f1:54:f9:8c:9c:4e:ba:ff:b0:7c: 1d:39:a6:56:9e:b1:c0:1d:b4:9b:e8:44:8f:9b:3f:cc:d5:97: 24:e2:e4:81:85:4a:81:1b:6b:43:0b:13:1d:99:cb:c2:ce:ec: 3b:c4:eb:3e:50:70:11:d7:2c:a8:46:91:96:65:1f:5d:a0:55: d9:25:15:f7:c2:24:b3:a8:02:97:d8:f0:23:01:15:5e:92:0c: 61:f9:14:cc:81:f2:1e:5d:c1:5b:ea:d9:ed:01:a2:36:d2:c9: 55:cb:9a:9e:31:39:ea:44:55:01:58:b7:ef:7b:9c:a4:1c:48: d0:0c:30:ae:1f:4a:d6:ad:26:74:ae:1d:a9:d6:55:ca:50:51: 2d:f9:6e:67:07:8a:bd:96:be:b2:11:d3:b0:8c:17:f4:e5:5f: 74:4f:4f:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf2Us50E8xhnIUE0q+0MGTttR9pUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFDQjBGOTZDMkIxMjU1RUFCQUFFQkMxNDI2RUNEOUU2 REY2QzRBRDAeFw0yNTA4MjMwMzA1NTlaFw0yNTA4MjYwMzI0NTlaMDMxMTAvBgNV BAMTKDBENEU5RUZBRkI3OEY4OTc1NUUzMUJDN0FEMEJFOTVEMzJBOUY1RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXka0TdBpA/HxKILQCQaVrLFgC OxiIfbJ6LGkZMeEnvkvMQYDA8Upc+o56T/293tH8VCr+kDtEj+a3RotLZ8RcYADq bAYQvrXA8szSYv231BDXf+URPJqYBE8NDnAQQShblf/H0OW8RN7dewnn2IXO25w5 J/Aa3M0P0zoKziL1tE8v33+y13PZpI1FPPB+4ZffIqzzMqfHnPinfW4Fgx35wmR6 v/7xG70nsQGKd8BP9Jth6f3HUapAUry6SAFqmfmJesMWFYG9MfAANG5fxtnpwAuX G3IRky7UexP87eohNW8bAsLgl0ylXE6lhoq+UlCz4aCaajInSLglTy1Oo2QdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDU6e+vt4+JdV4xvHrQvpXTKp9e0wHwYDVR0j BBgwFoAUWssPlsKxJV6rquvBQm7Nnm32xK0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MTNlZWQyYi05NTVlLTQwOTMtODhhNC1mNGRlM2NjOWI5Y2QvMC81QUNCMEY5NkMy QjEyNTVFQUJBQUVCQzE0MjZFQ0Q5RTZERjZDNEFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFDQjBGOTZDMkIxMjU1RUFCQUFFQkMxNDI2RUNEOUU2REY2 QzRBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTEzZWVkMmItOTU1ZS00MDkzLTg4 YTQtZjRkZTNjYzliOWNkLzAvNUFDQjBGOTZDMkIxMjU1RUFCQUFFQkMxNDI2RUNE OUU2REY2QzRBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALDApkjbQ+FnGVymYMRPDbCAxvHaFGxILVq3 nXRKaVDL1WSHc2YMsL+fFpyGTJNJdCeN14UoSzWXOzpBnB3MyjuVkr8WviNVs0CD VqCwGGcx3WM+T3w77Fqbo6XmBdyZKwVX8VT5jJxOuv+wfB05plaescAdtJvoRI+b P8zVlyTi5IGFSoEba0MLEx2Zy8LO7DvE6z5QcBHXLKhGkZZlH12gVdklFffCJLOo ApfY8CMBFV6SDGH5FMyB8h5dwVvq2e0BojbSyVXLmp4xOepEVQFYt+97nKQcSNAM MK4fStatJnSuHanWVcpQUS35bmcHir2WvrIR07CMF/TlX3RPT30= -----END CERTIFICATE-----Generated at Sat Aug 23 12:03:46 2025 by rpki-client