$ rpki-client -vvf repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/5782DE79396EB62186D082F936F3AB7084CB59CB.mft File: 5782DE79396EB62186D082F936F3AB7084CB59CB.mft (raw, json) Hash identifier: Narbemy3onTM9aJKyvjCaWtmQVTfpJeMRc3jZzaMoAY= Subject key identifier: 08:D6:96:DE:24:4F:29:5E:77:FC:DE:2B:73:F4:B6:9C:64:40:A3:CA Authority key identifier: 57:82:DE:79:39:6E:B6:21:86:D0:82:F9:36:F3:AB:70:84:CB:59:CB Certificate issuer: /CN=5782DE79396EB62186D082F936F3AB7084CB59CB Certificate serial: 1BE78FD47653B086AF852F6C3A83C5CBD6C46EC3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5782DE79396EB62186D082F936F3AB7084CB59CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/5782DE79396EB62186D082F936F3AB7084CB59CB.mft Manifest number: 0500 Signing time: Fri 22 Aug 2025 21:10:05 +0000 Manifest this update: Fri 22 Aug 2025 21:05:05 +0000 Manifest next update: Tue 26 Aug 2025 08:41:05 +0000 Files and hashes: 1: 323030313a6466373a316130303a3a2f34382d3438203d3e203634333135.roa (hash: TlLgfmGQ1DMmuAK+BXUyggQ3UC8als6n9Rt5GMTQoTk=) 2: 5782DE79396EB62186D082F936F3AB7084CB59CB.crl (hash: 4WWzKa2OEqyjI787OqaOELfxuxrICDepqnQDs949P4s=) 3: 3130332e38302e3233362e302f32322d3234203d3e203634333135.roa (hash: uAsTJXI8kvPM+rUqNizg2euNYcTs9wRlPxWjqYq3wog=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/5782DE79396EB62186D082F936F3AB7084CB59CB.crl rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/5782DE79396EB62186D082F936F3AB7084CB59CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5782DE79396EB62186D082F936F3AB7084CB59CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 08:41:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:e7:8f:d4:76:53:b0:86:af:85:2f:6c:3a:83:c5:cb:d6:c4:6e:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5782DE79396EB62186D082F936F3AB7084CB59CB Validity Not Before: Aug 22 21:05:05 2025 GMT Not After : Aug 26 08:41:05 2025 GMT Subject: CN=08D696DE244F295E77FCDE2B73F4B69C6440A3CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:07:f1:cb:d2:3e:12:38:bf:f1:3a:e4:b5:a7: 1e:ab:2c:3f:6c:da:9e:77:43:6b:e8:6f:3c:92:d1: 0b:32:6f:c9:ad:fd:33:6e:df:0c:d0:bf:1c:42:0c: c7:55:21:8c:f3:4c:48:e9:fe:9d:48:05:0a:fb:ee: 44:56:f6:61:73:93:87:89:90:2f:82:d6:d3:2d:31: 29:24:ab:19:a9:b5:d3:15:2a:02:55:50:bf:19:fe: fa:08:9b:f1:9d:9e:39:5d:17:ec:0e:d0:89:43:03: 27:9b:e7:5e:0f:3b:cf:e4:2b:b7:5f:49:a6:09:1d: ce:e7:2e:e6:59:21:67:af:b8:48:85:76:c6:d0:f8: 16:66:45:04:0b:04:14:7b:76:5f:e1:1d:19:ec:97: 4c:47:a7:34:eb:60:e2:dc:ee:b5:eb:4c:7f:71:ef: 57:e0:d8:11:2c:1e:7f:b0:b7:df:6b:80:36:f9:b0: 44:d0:0d:4d:78:95:e4:ef:b5:d8:40:69:58:69:cf: be:ce:83:bb:b7:41:8b:3d:32:cf:59:0b:a3:e9:2d: aa:01:14:77:86:0c:c5:9b:38:c4:3c:39:d9:d0:5a: bd:0b:d2:75:9d:1c:57:8e:d3:92:d5:f9:e0:49:99: 5c:e7:72:6e:fe:88:d5:3a:b7:34:d2:73:63:f3:25: 35:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D6:96:DE:24:4F:29:5E:77:FC:DE:2B:73:F4:B6:9C:64:40:A3:CA X509v3 Authority Key Identifier: keyid:57:82:DE:79:39:6E:B6:21:86:D0:82:F9:36:F3:AB:70:84:CB:59:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/5782DE79396EB62186D082F936F3AB7084CB59CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5782DE79396EB62186D082F936F3AB7084CB59CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/5782DE79396EB62186D082F936F3AB7084CB59CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:f7:4e:6a:b4:56:a4:1a:0e:59:20:7c:65:99:11:df:89:c8: 86:54:1f:0a:d9:e2:bd:47:80:ca:1d:95:0b:53:57:33:80:e1: 2d:79:af:c0:f3:e7:2a:c8:e5:a8:0a:2b:40:ec:8a:f9:88:0b: 32:7b:51:af:dd:b4:a4:e0:f0:c4:c7:4f:4b:2c:b1:98:a2:d4: fb:74:44:65:92:4e:14:80:10:5c:ac:4d:fa:4c:1c:92:f7:d0: 2c:8a:8f:46:5a:e0:94:bd:5a:a8:1d:88:7a:e8:4f:1a:8f:26: 9a:50:b7:57:4b:56:63:3d:5a:96:82:ea:82:56:a2:a9:13:8b: 8f:4c:4a:a6:3a:b1:7c:8b:3a:a8:08:41:2f:d2:e0:b9:8c:ac: 6f:a9:1b:1b:af:53:21:90:64:40:b0:5c:9b:83:9f:46:9d:cb: db:16:01:4a:d8:d5:a4:7f:c0:95:42:a6:c0:e5:46:05:c3:5c: 1c:5c:19:80:34:f8:00:5a:47:1b:81:84:21:c9:aa:c1:b4:6b: e3:29:72:f1:5d:81:d2:40:bd:4c:94:bc:dc:32:56:ac:08:99: 3a:95:ed:f4:4d:9d:4d:37:65:14:01:f3:e1:23:8a:33:27:1b: 62:3f:a5:c1:7e:c4:ab:4a:24:9b:d9:ea:32:fd:e4:89:5c:47: 26:9d:9e:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG+eP1HZTsIavhS9sOoPFy9bEbsMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc4MkRFNzkzOTZFQjYyMTg2RDA4MkY5MzZGM0FCNzA4 NENCNTlDQjAeFw0yNTA4MjIyMTA1MDVaFw0yNTA4MjYwODQxMDVaMDMxMTAvBgNV BAMTKDA4RDY5NkRFMjQ0RjI5NUU3N0ZDREUyQjczRjRCNjlDNjQ0MEEzQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtB/HL0j4SOL/xOuS1px6rLD9s 2p53Q2vobzyS0Qsyb8mt/TNu3wzQvxxCDMdVIYzzTEjp/p1IBQr77kRW9mFzk4eJ kC+C1tMtMSkkqxmptdMVKgJVUL8Z/voIm/GdnjldF+wO0IlDAyeb514PO8/kK7df SaYJHc7nLuZZIWevuEiFdsbQ+BZmRQQLBBR7dl/hHRnsl0xHpzTrYOLc7rXrTH9x 71fg2BEsHn+wt99rgDb5sETQDU14leTvtdhAaVhpz77Og7u3QYs9Ms9ZC6PpLaoB FHeGDMWbOMQ8OdnQWr0L0nWdHFeO05LV+eBJmVzncm7+iNU6tzTSc2PzJTWbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCNaW3iRPKV53/N4rc/S2nGRAo8owHwYDVR0j BBgwFoAUV4LeeTlutiGG0IL5NvOrcITLWcswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTVmNWYxMS01N2FlLTRhYzMtYTAzOS1lMDQ1NmJjY2Y0NGMvMC81NzgyREU3OTM5 NkVCNjIxODZEMDgyRjkzNkYzQUI3MDg0Q0I1OUNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTc4MkRFNzkzOTZFQjYyMTg2RDA4MkY5MzZGM0FCNzA4NENC NTlDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTk1ZjVmMTEtNTdhZS00YWMzLWEw MzktZTA0NTZiY2NmNDRjLzAvNTc4MkRFNzkzOTZFQjYyMTg2RDA4MkY5MzZGM0FC NzA4NENCNTlDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABj3Tmq0VqQaDlkgfGWZEd+JyIZUHwrZ4r1H gModlQtTVzOA4S15r8Dz5yrI5agKK0DsivmICzJ7Ua/dtKTg8MTHT0sssZii1Pt0 RGWSThSAEFysTfpMHJL30CyKj0Za4JS9WqgdiHroTxqPJppQt1dLVmM9WpaC6oJW oqkTi49MSqY6sXyLOqgIQS/S4LmMrG+pGxuvUyGQZECwXJuDn0ady9sWAUrY1aR/ wJVCpsDlRgXDXBxcGYA0+ABaRxuBhCHJqsG0a+MpcvFdgdJAvUyUvNwyVqwImTqV 7fRNnU03ZRQB8+EjijMnG2I/pcF+xKtKJJvZ6jL95IlcRyadnrU= -----END CERTIFICATE-----Generated at Sat Aug 23 12:04:12 2025 by rpki-client