$ rpki-client -vvf repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft File: 5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft (raw, json) Hash identifier: 5HVyk9g3T3vXWlzc411iDFW6wbL090LGBQ1lZjH+000= Subject key identifier: 3C:98:77:0A:9C:B8:E0:9D:B7:A8:B7:F5:B7:12:17:90:DE:97:0E:F8 Authority key identifier: 5A:D1:91:73:FE:66:EE:2B:9E:99:5A:99:ED:7D:C4:23:01:13:BD:EF Certificate issuer: /CN=5AD19173FE66EE2B9E995A99ED7DC4230113BDEF Certificate serial: 0EF5839F98EEF66DEC5BA62ACED88647B6457FDC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft Manifest number: 0164 Signing time: Wed 06 Aug 2025 09:31:55 +0000 Manifest this update: Wed 06 Aug 2025 09:26:55 +0000 Manifest next update: Sat 09 Aug 2025 09:34:55 +0000 Files and hashes: 1: 3130332e3132332e3137342e302f32342d3234203d3e20313530393638.roa (hash: HBPJroPXGy8LUopobuBKzRyp/rbJ8xWZnNOPphW6Qlg=) 2: 3130332e3132332e3137352e302f32342d3234203d3e20313530393638.roa (hash: dqxRLNjaP87/BAjwkFlOT+1aQilVY6SUF3ZdlXMJQnY=) 3: 5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl (hash: xPo/M3gMUFAMyx6o4fEJRzmY99vwg5YHg059FGQUVdE=) 4: 3130332e3132332e3137342e302f32332d3233203d3e20313530393638.roa (hash: 5XRHZIZI1oj83KHXG7v/4Bg68uKlgADqYmMHikLr/vU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 09:34:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:f5:83:9f:98:ee:f6:6d:ec:5b:a6:2a:ce:d8:86:47:b6:45:7f:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AD19173FE66EE2B9E995A99ED7DC4230113BDEF Validity Not Before: Aug 6 09:26:55 2025 GMT Not After : Aug 9 09:34:55 2025 GMT Subject: CN=3C98770A9CB8E09DB7A8B7F5B7121790DE970EF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bb:01:92:02:d7:2f:ff:ab:a7:51:3a:8b:c7: ea:1b:43:13:d2:cf:39:9b:c3:c3:65:07:f4:bd:03: ab:45:fa:f7:bd:4a:58:07:2a:d5:69:b0:26:56:ba: b3:d7:44:ad:f3:9d:fc:48:56:20:b2:6a:51:0d:66: 50:07:4b:4d:60:c8:6f:ec:9e:94:bd:9d:48:de:11: 82:65:ee:ea:8e:cd:81:15:0c:87:17:cf:86:f9:43: 7f:68:8b:ec:dc:6f:cb:1e:4a:ac:0c:3a:2e:98:38: 14:e6:01:a9:d7:22:db:1c:c5:7d:41:eb:d2:bb:87: 4c:42:5f:c4:6a:12:c0:b6:9b:ea:03:2d:6b:e9:5e: c0:22:71:66:d3:39:72:47:b6:94:fa:f6:68:82:1d: ae:93:29:9c:0a:77:89:53:5b:1c:3f:2a:db:18:7b: ed:aa:6e:fa:45:f1:a0:28:55:2f:eb:82:5c:f0:30: ff:b8:c1:96:02:f6:fb:cb:8c:df:74:6f:89:6f:e4: 1d:5d:39:53:8f:11:47:05:9a:3a:92:74:7f:92:ea: f6:bc:52:b3:ed:c8:60:92:5a:29:6a:91:90:c1:ae: 23:64:1a:70:49:24:a9:ae:37:d5:41:fd:84:81:1a: a3:b5:7f:ca:2b:cf:a4:10:a3:8f:9d:40:b8:aa:7c: 8a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:98:77:0A:9C:B8:E0:9D:B7:A8:B7:F5:B7:12:17:90:DE:97:0E:F8 X509v3 Authority Key Identifier: keyid:5A:D1:91:73:FE:66:EE:2B:9E:99:5A:99:ED:7D:C4:23:01:13:BD:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ec:78:97:ca:2a:f2:0e:4c:67:d4:14:48:10:ca:37:de:b9: 16:1b:f2:31:8a:6d:a9:b8:54:a1:3d:2d:4a:2a:10:ec:19:ce: f0:0d:af:3f:31:95:46:22:af:d1:3e:10:98:93:53:5c:6f:d4: 75:fe:1f:2f:62:a4:de:de:75:a9:73:2d:a1:c9:85:a8:04:df: 2b:83:4f:27:ef:06:61:ec:54:6e:b2:70:52:33:99:3a:eb:bd: b1:9a:2e:0e:c2:82:b8:e4:8e:a1:75:6d:9e:30:7b:38:1e:7d: 7c:5a:cf:2f:8c:31:92:28:26:37:d2:5d:c2:3a:73:66:ce:d0: a5:20:2e:9e:60:7a:6a:24:a1:cd:5c:37:46:22:49:cf:e4:74: 69:3d:de:bf:b0:67:03:c2:dc:30:56:10:13:b5:5e:be:8e:d1: 31:75:b0:75:37:50:85:de:3f:6d:34:77:fa:df:e1:04:a7:10: 6b:fb:b1:b8:fa:a2:ba:11:e1:07:2f:59:24:f1:03:0c:96:77: 9e:3e:61:7d:d8:d4:11:e6:f7:31:e1:00:5e:d4:a3:d8:38:21: c5:c1:dc:c0:87:f9:f9:44:0d:31:d4:70:2b:dd:91:59:21:25: 6e:00:79:37:3d:06:b0:a6:97:ab:27:ec:9b:fa:c0:3c:ec:59: 48:70:64:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDvWDn5ju9m3sW6YqztiGR7ZFf9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0MjMw MTEzQkRFRjAeFw0yNTA4MDYwOTI2NTVaFw0yNTA4MDkwOTM0NTVaMDMxMTAvBgNV BAMTKDNDOTg3NzBBOUNCOEUwOURCN0E4QjdGNUI3MTIxNzkwREU5NzBFRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJuwGSAtcv/6unUTqLx+obQxPS zzmbw8NlB/S9A6tF+ve9SlgHKtVpsCZWurPXRK3znfxIViCyalENZlAHS01gyG/s npS9nUjeEYJl7uqOzYEVDIcXz4b5Q39oi+zcb8seSqwMOi6YOBTmAanXItscxX1B 69K7h0xCX8RqEsC2m+oDLWvpXsAicWbTOXJHtpT69miCHa6TKZwKd4lTWxw/KtsY e+2qbvpF8aAoVS/rglzwMP+4wZYC9vvLjN90b4lv5B1dOVOPEUcFmjqSdH+S6va8 UrPtyGCSWilqkZDBriNkGnBJJKmuN9VB/YSBGqO1f8orz6QQo4+dQLiqfIrTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPJh3Cpy44J23qLf1txIXkN6XDvgwHwYDVR0j BBgwFoAUWtGRc/5m7iuemVqZ7X3EIwETve8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmVkYjI4Zi1mM2Y5LTQxOTktODVhMy1jOWJmOWE3YTdkZjgvMC81QUQxOTE3M0ZF NjZFRTJCOUU5OTVBOTlFRDdEQzQyMzAxMTNCREVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0MjMwMTEz QkRFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWZlZGIyOGYtZjNmOS00MTk5LTg1 YTMtYzliZjlhN2E3ZGY4LzAvNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0 MjMwMTEzQkRFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABrseJfKKvIOTGfUFEgQyjfeuRYb8jGKbam4 VKE9LUoqEOwZzvANrz8xlUYir9E+EJiTU1xv1HX+Hy9ipN7edalzLaHJhagE3yuD TyfvBmHsVG6ycFIzmTrrvbGaLg7CgrjkjqF1bZ4wezgefXxazy+MMZIoJjfSXcI6 c2bO0KUgLp5gemokoc1cN0YiSc/kdGk93r+wZwPC3DBWEBO1Xr6O0TF1sHU3UIXe P200d/rf4QSnEGv7sbj6oroR4QcvWSTxAwyWd54+YX3Y1BHm9zHhAF7Uo9g4IcXB 3MCH+flEDTHUcCvdkVkhJW4AeTc9BrCml6sn7Jv6wDzsWUhwZDA= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:54 2025 by rpki-client