$ rpki-client -vvf repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.mft File: C005531488F38475CA53CB4A7ABCEC0C32F75962.mft (raw, json) Hash identifier: i5GBUG26bBTvnNFgd09CTlimlIhjPvmCSMFxBllJuVw= Subject key identifier: 70:9C:8E:FC:94:F2:FC:9C:9A:66:E9:63:F1:AE:7E:D4:9D:9F:A0:49 Authority key identifier: C0:05:53:14:88:F3:84:75:CA:53:CB:4A:7A:BC:EC:0C:32:F7:59:62 Certificate issuer: /CN=C005531488F38475CA53CB4A7ABCEC0C32F75962 Certificate serial: 16AD5FCFE8371F49E58A0863CEDA2B4C774D8800 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C005531488F38475CA53CB4A7ABCEC0C32F75962.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.mft Manifest number: 04F5 Signing time: Wed 06 Aug 2025 01:40:35 +0000 Manifest this update: Wed 06 Aug 2025 01:35:35 +0000 Manifest next update: Sat 09 Aug 2025 02:59:35 +0000 Files and hashes: 1: 323430353a396434303a3a2f33322d3438203d3e203538343935.roa (hash: 0gzYY7cjTPjY2yjhcF04nMrJdj9Xu6B9UNr2O7vO1co=) 2: C005531488F38475CA53CB4A7ABCEC0C32F75962.crl (hash: 3hyGfMfhJTCGLBiKSHWQTc8k+x9GILzkEMPlj3AwfWM=) 3: 3130332e3134362e3138392e302f32342d3234203d3e203538343935.roa (hash: OsXuery+dqrXtWPBKclCMRfHJTDgT5E1V7vyLlK5GAQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.crl rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C005531488F38475CA53CB4A7ABCEC0C32F75962.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 02:59:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:ad:5f:cf:e8:37:1f:49:e5:8a:08:63:ce:da:2b:4c:77:4d:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C005531488F38475CA53CB4A7ABCEC0C32F75962 Validity Not Before: Aug 6 01:35:35 2025 GMT Not After : Aug 9 02:59:35 2025 GMT Subject: CN=709C8EFC94F2FC9C9A66E963F1AE7ED49D9FA049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6d:ed:2f:f8:51:d4:c0:6b:14:a6:41:60:8d: 58:7d:61:13:11:5c:c1:05:d3:cf:da:c4:9d:8e:bd: 48:1b:3d:39:b2:96:79:40:fd:ce:01:76:11:05:25: 1d:c7:f6:cf:28:1b:02:70:2a:04:54:69:28:41:ba: c1:67:07:9a:7f:9c:27:06:bd:c8:e1:9f:b4:52:5c: 52:49:13:25:22:b1:4f:f1:21:57:77:dd:3d:f2:59: 9e:0f:78:9d:32:db:18:fe:e1:1f:03:bc:e8:34:23: 1e:86:f6:46:1a:0a:96:bb:08:b5:b4:81:6b:c2:9e: 31:ff:c6:a2:ce:d6:74:94:46:50:1a:d5:4e:51:53: ea:cd:21:e4:3f:d9:e8:c8:98:15:47:e2:5e:c2:9d: d1:29:8a:b8:66:6e:da:d8:f4:2a:d9:3c:13:54:8d: 85:2a:da:83:78:f2:83:2c:68:09:b4:21:82:ff:97: 8d:8b:d8:2b:3e:9b:6e:3e:fd:3f:8a:e1:60:83:52: c1:b5:47:40:83:e8:37:14:5a:e8:82:f8:e9:04:34: 92:43:b4:b6:a0:6a:95:f7:7f:db:05:71:17:7e:e7: fd:ad:41:29:20:96:cc:c6:3c:36:6f:6e:85:07:17: 19:41:33:1e:6b:c9:fa:78:dd:b9:8d:e9:e3:84:6c: 59:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:9C:8E:FC:94:F2:FC:9C:9A:66:E9:63:F1:AE:7E:D4:9D:9F:A0:49 X509v3 Authority Key Identifier: keyid:C0:05:53:14:88:F3:84:75:CA:53:CB:4A:7A:BC:EC:0C:32:F7:59:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C005531488F38475CA53CB4A7ABCEC0C32F75962.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:9b:90:7f:1c:01:8d:c3:bf:cc:27:8a:0b:a7:8b:23:9b:7b: 25:49:b8:c0:b6:6d:c0:a8:0b:82:4a:1b:a9:cc:10:37:1a:54: 29:38:05:de:82:5e:19:0b:e4:14:ea:6f:2d:04:5d:4b:27:ad: a4:de:50:cc:3f:bb:d3:a1:c0:b7:fc:0d:59:e1:2c:07:9b:7b: 15:e5:ff:07:52:d2:af:6b:45:32:5e:5d:d1:cc:5a:c3:eb:c5: 6d:b8:e5:fa:f7:98:83:55:e1:f8:c4:cf:48:cb:22:c9:e0:3b: d7:b3:15:20:d0:85:40:0f:e8:d4:f8:12:a3:7a:99:e6:f2:70: 6e:b0:e9:ca:80:8e:95:21:aa:39:7a:53:9b:16:73:55:55:8e: a6:92:de:5a:2f:83:9e:d9:57:08:aa:18:67:c7:4b:e8:a8:84: 2f:4b:10:1c:6b:7e:ab:7e:e6:26:40:df:1f:aa:6b:37:1b:df: 9d:e0:96:35:30:15:95:e4:5c:7e:36:cd:41:87:69:9e:63:5f: fd:7c:f9:b1:41:e2:3c:83:90:63:c8:13:f9:74:b9:2a:e8:05: 1b:d9:80:db:85:32:54:06:3d:cd:14:e6:d8:e1:a9:63:a5:a9: 1a:32:58:a7:9e:7d:e3:53:2a:e6:ef:15:59:0a:ed:d7:26:ae: 6e:bc:dd:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFq1fz+g3H0nlighjztorTHdNiAAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAwNTUzMTQ4OEYzODQ3NUNBNTNDQjRBN0FCQ0VDMEMz MkY3NTk2MjAeFw0yNTA4MDYwMTM1MzVaFw0yNTA4MDkwMjU5MzVaMDMxMTAvBgNV BAMTKDcwOUM4RUZDOTRGMkZDOUM5QTY2RTk2M0YxQUU3RUQ0OUQ5RkEwNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+be0v+FHUwGsUpkFgjVh9YRMR XMEF08/axJ2OvUgbPTmylnlA/c4BdhEFJR3H9s8oGwJwKgRUaShBusFnB5p/nCcG vcjhn7RSXFJJEyUisU/xIVd33T3yWZ4PeJ0y2xj+4R8DvOg0Ix6G9kYaCpa7CLW0 gWvCnjH/xqLO1nSURlAa1U5RU+rNIeQ/2ejImBVH4l7CndEpirhmbtrY9CrZPBNU jYUq2oN48oMsaAm0IYL/l42L2Cs+m24+/T+K4WCDUsG1R0CD6DcUWuiC+OkENJJD tLagapX3f9sFcRd+5/2tQSkglszGPDZvboUHFxlBMx5ryfp43bmN6eOEbFnPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcJyO/JTy/JyaZulj8a5+1J2foEkwHwYDVR0j BBgwFoAUwAVTFIjzhHXKU8tKerzsDDL3WWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDY0Y2JlZS1jNTEzLTQ2YzYtYTFkMC0zZWMwMWQ3YTY2MjYvMC9DMDA1NTMxNDg4 RjM4NDc1Q0E1M0NCNEE3QUJDRUMwQzMyRjc1OTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzAwNTUzMTQ4OEYzODQ3NUNBNTNDQjRBN0FCQ0VDMEMzMkY3 NTk2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ2NGNiZWUtYzUxMy00NmM2LWEx ZDAtM2VjMDFkN2E2NjI2LzAvQzAwNTUzMTQ4OEYzODQ3NUNBNTNDQjRBN0FCQ0VD MEMzMkY3NTk2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAabkH8cAY3Dv8wniguniyObeyVJuMC2bcCo C4JKG6nMEDcaVCk4Bd6CXhkL5BTqby0EXUsnraTeUMw/u9OhwLf8DVnhLAebexXl /wdS0q9rRTJeXdHMWsPrxW245fr3mINV4fjEz0jLIsngO9ezFSDQhUAP6NT4EqN6 mebycG6w6cqAjpUhqjl6U5sWc1VVjqaS3lovg57ZVwiqGGfHS+iohC9LEBxrfqt+ 5iZA3x+qazcb353gljUwFZXkXH42zUGHaZ5jX/18+bFB4jyDkGPIE/l0uSroBRvZ gNuFMlQGPc0U5tjhqWOlqRoyWKeefeNTKubvFVkK7dcmrm683TQ= -----END CERTIFICATE-----Generated at Thu Aug 7 05:01:44 2025 by rpki-client