$ rpki-client -vvf repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft File: 5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft (raw, json) Hash identifier: VqT+RxhSlolS3rbOSvUOLDxvIE0aK8wGuHPGJqR7l/o= Subject key identifier: 29:21:84:50:0F:EA:15:16:6C:B7:14:1C:48:9F:86:99:63:EC:EF:F0 Authority key identifier: 53:35:07:6B:95:F2:97:8B:E3:AC:DB:39:36:0A:E5:A2:2D:0D:4B:55 Certificate issuer: /CN=5335076B95F2978BE3ACDB39360AE5A22D0D4B55 Certificate serial: 0EE8A3BEBF88833EA4831A754C717DB9048C50F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft Manifest number: 01D6 Signing time: Fri 22 Aug 2025 05:31:09 +0000 Manifest this update: Fri 22 Aug 2025 05:26:09 +0000 Manifest next update: Mon 25 Aug 2025 10:40:09 +0000 Files and hashes: 1: 3130332e3134382e3130302e302f32332d3234203d3e20313339393838.roa (hash: hRVeSPhdphVESxw/HVaRN7Uso4dNGcBae9fMOmvqYMU=) 2: 323430353a636534303a3a2f33322d3438203d3e20313339393838.roa (hash: lyCNDP9EqWqz+HEfKh+8ATTipD904Rt+hS0G+abC8oQ=) 3: 5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl (hash: ZDWWkh5tQqc/HW8GKtl1FHo5AdwjefQVqFQNwmS6wCw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 10:40:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:e8:a3:be:bf:88:83:3e:a4:83:1a:75:4c:71:7d:b9:04:8c:50:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5335076B95F2978BE3ACDB39360AE5A22D0D4B55 Validity Not Before: Aug 22 05:26:09 2025 GMT Not After : Aug 25 10:40:09 2025 GMT Subject: CN=292184500FEA15166CB7141C489F869963ECEFF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:01:e9:0d:8c:cf:0c:4f:24:51:9a:d1:ed:39: 51:e8:af:cb:e6:a9:32:4f:f7:6a:b2:a4:ab:b0:6b: a1:94:ec:42:c1:9a:92:08:ee:23:69:bd:fe:01:54: 02:5d:2f:c2:79:b6:07:7f:fc:b3:73:89:f9:6b:17: 7d:bd:ca:5e:17:78:b5:dd:dc:02:75:05:c4:94:f6: 70:1b:0e:40:73:17:03:a7:96:af:77:25:03:17:13: 7d:c3:dd:a4:b8:b0:be:a9:32:14:0f:49:05:3e:2d: 36:99:4a:1b:62:9b:86:1e:2f:87:85:9c:8e:38:9f: 20:44:f3:f4:04:25:bc:a5:ab:5f:d2:49:79:ff:79: a7:28:a0:e3:99:54:0a:c6:cd:d7:bb:5e:05:15:85: 64:5c:7c:a6:e8:70:e7:f0:91:b7:e0:6c:7f:5c:b1: 94:cb:7a:94:ec:fe:f2:10:db:aa:fc:b5:02:7e:5c: dc:c5:5d:f9:c1:ab:25:3d:d1:53:f6:4e:87:1f:c3: 5e:42:53:1f:57:02:92:bc:c4:d9:0b:e7:93:54:f1: b9:56:da:eb:35:2d:34:a3:90:d6:91:4a:31:f6:3a: 2e:6f:03:93:1a:7b:ab:7d:9b:89:3d:b4:27:f9:41: d7:df:a3:df:8a:99:82:94:ea:bd:6e:03:c1:be:23: d1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:21:84:50:0F:EA:15:16:6C:B7:14:1C:48:9F:86:99:63:EC:EF:F0 X509v3 Authority Key Identifier: keyid:53:35:07:6B:95:F2:97:8B:E3:AC:DB:39:36:0A:E5:A2:2D:0D:4B:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:0b:11:fa:10:6c:6f:f8:e2:01:f8:ae:08:dc:ca:ff:06:03: 27:fc:69:6e:fd:ad:55:d7:38:85:95:57:80:ad:10:16:b8:45: 94:70:02:1d:96:6c:65:a4:7b:8c:c3:61:93:ee:79:42:58:ba: 5c:a7:bf:0b:5f:a1:3d:81:c8:ad:37:cf:58:68:93:e9:39:4b: 7d:46:c6:b5:e1:2d:2f:ad:e2:f7:df:c6:31:d0:44:ca:64:77: 11:7b:c3:f3:ea:35:30:37:26:28:62:a2:ab:11:cc:c5:6b:67: 74:e4:8b:c9:a4:cb:3d:96:98:e5:ff:70:b6:22:ef:8d:6c:4c: 14:49:83:d9:30:9b:93:5a:e0:70:2c:f4:c3:0c:3b:27:0b:81: a4:08:b5:60:e3:d0:db:fc:78:1a:56:82:16:b1:a2:b3:29:fc: 85:60:dc:b3:bf:44:7d:67:e6:89:15:dd:92:ef:85:00:64:8f: 90:3f:37:2c:9b:d8:0b:bd:6e:54:b7:f8:cb:fc:89:40:ff:19: 9b:f5:e1:09:e4:81:05:5b:81:b4:72:dd:ec:3e:2e:b5:bb:82: a6:2c:53:e2:00:ee:fc:c9:5c:81:60:6b:61:34:d0:d6:28:38: 9b:cd:d6:7f:9b:7a:4b:83:b7:ca:0b:80:12:cc:d8:43:01:f0: ff:1a:e8:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDuijvr+Igz6kgxp1THF9uQSMUPYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMzNTA3NkI5NUYyOTc4QkUzQUNEQjM5MzYwQUU1QTIy RDBENEI1NTAeFw0yNTA4MjIwNTI2MDlaFw0yNTA4MjUxMDQwMDlaMDMxMTAvBgNV BAMTKDI5MjE4NDUwMEZFQTE1MTY2Q0I3MTQxQzQ4OUY4Njk5NjNFQ0VGRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8AekNjM8MTyRRmtHtOVHor8vm qTJP92qypKuwa6GU7ELBmpII7iNpvf4BVAJdL8J5tgd//LNziflrF329yl4XeLXd 3AJ1BcSU9nAbDkBzFwOnlq93JQMXE33D3aS4sL6pMhQPSQU+LTaZShtim4YeL4eF nI44nyBE8/QEJbylq1/SSXn/eacooOOZVArGzde7XgUVhWRcfKbocOfwkbfgbH9c sZTLepTs/vIQ26r8tQJ+XNzFXfnBqyU90VP2Tocfw15CUx9XApK8xNkL55NU8blW 2us1LTSjkNaRSjH2Oi5vA5Mae6t9m4k9tCf5Qdffo9+KmYKU6r1uA8G+I9HLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKSGEUA/qFRZstxQcSJ+GmWPs7/AwHwYDVR0j BBgwFoAUUzUHa5Xyl4vjrNs5Ngrloi0NS1UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmQ2NmQxMC1iODU3LTRiZWYtOTM5NS00NWQ1YWIyYzQ0ZjkvMC81MzM1MDc2Qjk1 RjI5NzhCRTNBQ0RCMzkzNjBBRTVBMjJEMEQ0QjU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTMzNTA3NkI5NUYyOTc4QkUzQUNEQjM5MzYwQUU1QTIyRDBE NEI1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJkNjZkMTAtYjg1Ny00YmVmLTkz OTUtNDVkNWFiMmM0NGY5LzAvNTMzNTA3NkI5NUYyOTc4QkUzQUNEQjM5MzYwQUU1 QTIyRDBENEI1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0LEfoQbG/44gH4rgjcyv8GAyf8aW79rVXX OIWVV4CtEBa4RZRwAh2WbGWke4zDYZPueUJYulynvwtfoT2ByK03z1hok+k5S31G xrXhLS+t4vffxjHQRMpkdxF7w/PqNTA3JihioqsRzMVrZ3Tki8mkyz2WmOX/cLYi 741sTBRJg9kwm5Na4HAs9MMMOycLgaQItWDj0Nv8eBpWghaxorMp/IVg3LO/RH1n 5okV3ZLvhQBkj5A/Nyyb2Au9blS3+Mv8iUD/GZv14QnkgQVbgbRy3ew+LrW7gqYs U+IA7vzJXIFga2E00NYoOJvN1n+bekuDt8oLgBLM2EMB8P8a6Oo= -----END CERTIFICATE-----Generated at Sat Aug 23 12:09:30 2025 by rpki-client