$ rpki-client -vvf repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft File: 5C559181306986EE89AADF0A1CFC78EA8A093530.mft (raw, json) Hash identifier: hRNshVr/6kvf/QW3FfcSuOOBs++HXZtv8WDvVbowYGA= Subject key identifier: AD:97:F5:A5:CD:D2:A7:4C:C8:67:70:A9:A7:61:84:40:E7:1B:76:5F Authority key identifier: 5C:55:91:81:30:69:86:EE:89:AA:DF:0A:1C:FC:78:EA:8A:09:35:30 Certificate issuer: /CN=5C559181306986EE89AADF0A1CFC78EA8A093530 Certificate serial: 424535E4A6C1CCE86C94C56536FC079CDEC99928 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C559181306986EE89AADF0A1CFC78EA8A093530.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft Manifest number: 0124 Signing time: Fri 08 Aug 2025 10:31:18 +0000 Manifest this update: Fri 08 Aug 2025 10:26:18 +0000 Manifest next update: Mon 11 Aug 2025 16:49:18 +0000 Files and hashes: 1: 5C559181306986EE89AADF0A1CFC78EA8A093530.crl (hash: UaBdLyjhc1l3XPgkJJQ+exAJkaa4CDAbkrNK9bVwxFM=) 2: 3130332e3235302e3132392e302f32342d3234203d3e20313531353536.roa (hash: sxaPQ+ZqxnBrZjtGVRwER4T4gwZhUZTm3DzgPwkczhE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.crl rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C559181306986EE89AADF0A1CFC78EA8A093530.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 16:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:45:35:e4:a6:c1:cc:e8:6c:94:c5:65:36:fc:07:9c:de:c9:99:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C559181306986EE89AADF0A1CFC78EA8A093530 Validity Not Before: Aug 8 10:26:18 2025 GMT Not After : Aug 11 16:49:18 2025 GMT Subject: CN=AD97F5A5CDD2A74CC86770A9A7618440E71B765F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e8:a3:00:53:4d:8c:84:3c:18:80:fc:a1:7a: 37:31:8a:3d:ff:42:ed:ab:eb:92:be:03:44:1f:78: 21:81:af:86:46:21:bc:95:be:7a:32:45:96:14:94: 37:1e:12:09:95:dd:19:98:40:6a:9f:bc:16:1b:47: 75:34:27:17:31:fb:89:97:a7:25:1b:06:11:5d:d7: c9:26:dd:fa:51:a7:2c:58:e4:f5:63:8e:35:3e:7a: 5b:f0:f7:3c:4f:c3:14:dd:1e:1b:6a:d6:e4:a8:d7: a1:53:a9:ba:9f:4b:30:f2:e2:18:6b:4c:df:22:27: cd:93:b9:31:9c:f6:76:c6:f0:b9:71:40:60:4c:79: 02:06:52:4a:63:2f:cf:d3:62:c7:5f:60:55:4b:ec: ff:e2:5b:18:0c:3b:f3:bb:0b:7a:0d:c2:a1:0b:55: 89:eb:9c:d7:74:61:f6:be:05:2a:1d:b3:93:05:6c: e9:4d:d2:af:72:06:2d:56:f0:80:78:1b:11:7c:06: 18:17:39:ba:0e:43:6d:da:f0:31:1c:c7:e4:ff:49: 45:a4:f3:f1:85:d2:e1:9c:8b:0e:b1:50:6b:48:05: 6c:f1:51:36:58:b8:90:21:f7:ce:df:ac:b0:ce:d6: f0:75:62:ab:8c:ed:ab:24:f7:eb:a7:52:ba:5d:94: 83:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:97:F5:A5:CD:D2:A7:4C:C8:67:70:A9:A7:61:84:40:E7:1B:76:5F X509v3 Authority Key Identifier: keyid:5C:55:91:81:30:69:86:EE:89:AA:DF:0A:1C:FC:78:EA:8A:09:35:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C559181306986EE89AADF0A1CFC78EA8A093530.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fa81e6e-4b16-4b62-8f18-52892e54b90d/0/5C559181306986EE89AADF0A1CFC78EA8A093530.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:72:ee:33:d6:06:9c:51:e3:aa:91:a5:07:77:03:00:0e:75: ec:0a:bd:61:50:47:ca:22:18:c9:d5:11:22:47:ce:da:a1:1c: e3:79:c5:9c:04:ce:33:1c:b0:0f:22:d6:db:9f:9d:68:96:8c: 5a:25:10:43:f4:ca:d8:68:b0:18:fc:e1:75:23:46:e4:0a:74: 9f:2e:aa:97:f9:08:4a:96:f0:8f:f0:85:a7:df:e3:4b:f3:b2: f1:c3:01:dd:b4:c0:f0:4b:bc:f9:c8:9e:3f:67:00:1d:89:be: ad:f6:0b:a1:10:92:e4:91:59:9c:8e:53:20:b2:31:f6:a5:1b: a1:e2:43:85:a6:45:b0:21:bc:24:54:f2:09:15:8c:01:84:aa: 57:21:83:fb:e7:85:58:0a:d3:de:5a:63:50:07:e3:5b:df:c5: 5b:d5:d6:7f:bf:74:72:da:79:1f:30:ad:f3:53:0c:2a:9c:08: ea:79:ba:f5:1c:0c:c9:ff:6e:15:19:02:58:8b:bb:0e:5a:5c: 7f:c1:68:a0:c5:98:f3:ba:86:d2:bc:56:50:84:53:dc:a8:cb: 00:67:34:de:cf:7d:31:6d:92:ee:76:91:af:d4:a7:23:87:53: f3:33:22:c6:16:a9:64:bf:71:57:15:18:d9:82:ba:67:96:da: 18:0d:79:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQkU15KbBzOhslMVlNvwHnN7JmSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM1NTkxODEzMDY5ODZFRTg5QUFERjBBMUNGQzc4RUE4 QTA5MzUzMDAeFw0yNTA4MDgxMDI2MThaFw0yNTA4MTExNjQ5MThaMDMxMTAvBgNV BAMTKEFEOTdGNUE1Q0REMkE3NENDODY3NzBBOUE3NjE4NDQwRTcxQjc2NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV6KMAU02MhDwYgPyhejcxij3/ Qu2r65K+A0QfeCGBr4ZGIbyVvnoyRZYUlDceEgmV3RmYQGqfvBYbR3U0Jxcx+4mX pyUbBhFd18km3fpRpyxY5PVjjjU+elvw9zxPwxTdHhtq1uSo16FTqbqfSzDy4hhr TN8iJ82TuTGc9nbG8LlxQGBMeQIGUkpjL8/TYsdfYFVL7P/iWxgMO/O7C3oNwqEL VYnrnNd0Yfa+BSods5MFbOlN0q9yBi1W8IB4GxF8BhgXOboOQ23a8DEcx+T/SUWk 8/GF0uGciw6xUGtIBWzxUTZYuJAh987frLDO1vB1YquM7ask9+unUrpdlIM9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrZf1pc3Sp0zIZ3Cpp2GEQOcbdl8wHwYDVR0j BBgwFoAUXFWRgTBphu6Jqt8KHPx46ooJNTAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZmE4MWU2ZS00YjE2LTRiNjItOGYxOC01Mjg5MmU1NGI5MGQvMC81QzU1OTE4MTMw Njk4NkVFODlBQURGMEExQ0ZDNzhFQThBMDkzNTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM1NTkxODEzMDY5ODZFRTg5QUFERjBBMUNGQzc4RUE4QTA5 MzUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGZhODFlNmUtNGIxNi00YjYyLThm MTgtNTI4OTJlNTRiOTBkLzAvNUM1NTkxODEzMDY5ODZFRTg5QUFERjBBMUNGQzc4 RUE4QTA5MzUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBy7jPWBpxR46qRpQd3AwAOdewKvWFQR8oi GMnVESJHztqhHON5xZwEzjMcsA8i1tufnWiWjFolEEP0ythosBj84XUjRuQKdJ8u qpf5CEqW8I/whaff40vzsvHDAd20wPBLvPnInj9nAB2Jvq32C6EQkuSRWZyOUyCy MfalG6HiQ4WmRbAhvCRU8gkVjAGEqlchg/vnhVgK095aY1AH41vfxVvV1n+/dHLa eR8wrfNTDCqcCOp5uvUcDMn/bhUZAliLuw5aXH/BaKDFmPO6htK8VlCEU9yoywBn NN7PfTFtku52ka/UpyOHU/MzIsYWqWS/cVcVGNmCumeW2hgNeeI= -----END CERTIFICATE-----Generated at Sat Aug 9 22:38:37 2025 by rpki-client