$ rpki-client -vvf repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft File: 5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft (raw, json) Hash identifier: YUZOvYk9Wrnb0EwEdhwXDVJw8diS+QNN7MLBldI/sT0= Subject key identifier: 87:68:29:47:D4:81:98:EB:84:18:8E:F9:D7:51:76:D3:BF:83:5B:4E Authority key identifier: 5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F Certificate issuer: /CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F Certificate serial: 011F710737397741462CD6120EC01E18B7B5F728 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft Manifest number: 0330 Signing time: Wed 06 Aug 2025 09:00:38 +0000 Manifest this update: Wed 06 Aug 2025 08:55:38 +0000 Manifest next update: Sat 09 Aug 2025 10:58:38 +0000 Files and hashes: 1: 3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (hash: AdQ+JO/REhdDwDAu63+KE7Cs+bTRN78/P47D5a5DoZI=) 2: 3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (hash: MsMpPPcpIZuSudoMMepNN+ZazUOetlA5JvcEYSzR82g=) 3: 3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (hash: UdMMuDzVeoO8FHRaQDUzSG3siVMxaIJM4SzGz06W/gA=) 4: 5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl (hash: LJWXmgbBCFzZhoBU1CPY9iTKOT9kgjq6QJeUa9Mi+8Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 10:58:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:1f:71:07:37:39:77:41:46:2c:d6:12:0e:c0:1e:18:b7:b5:f7:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F Validity Not Before: Aug 6 08:55:38 2025 GMT Not After : Aug 9 10:58:38 2025 GMT Subject: CN=87682947D48198EB84188EF9D75176D3BF835B4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d0:74:4d:b5:fc:02:ad:04:d3:0b:fd:2e:be: 10:96:d4:d0:cc:d3:4a:a0:6f:27:44:f5:eb:c9:19: db:f9:90:49:5a:6d:32:d0:3e:1a:68:74:9b:a2:83: 08:df:7f:fd:3a:8c:57:1a:ea:4e:79:39:fc:b0:0a: cc:a3:94:f5:3f:b5:c6:b5:c3:6c:a7:5f:cd:26:14: d5:da:c1:0d:35:7a:be:19:6b:87:3f:38:3b:d2:ec: 90:77:4e:05:14:05:38:89:71:a9:25:da:39:80:d8: ee:a2:59:24:68:14:28:f8:22:38:f8:21:06:71:66: 7a:64:6e:66:53:34:2b:0b:1d:d9:2b:6c:47:be:05: 6d:e5:fb:1e:65:94:d2:ac:98:b4:3d:88:ff:4b:c1: cf:f6:e0:4d:b5:12:f1:13:29:c6:dd:64:c5:7c:7e: 73:11:6e:26:51:8d:36:3e:18:0d:61:0a:d5:fe:8f: ae:d6:2a:04:0f:b2:d9:38:51:d9:d2:e0:bd:03:2d: c6:d3:22:5c:7b:c0:c7:39:84:af:00:f4:f4:05:f4: 4e:e0:b9:6b:10:51:ea:6b:ec:ff:4f:11:50:7e:5e: 04:50:24:7a:05:04:ac:f0:b4:e4:cd:97:9c:1b:f2: 8b:3e:c9:a4:02:d7:6e:82:fc:52:79:06:2d:63:d5: 78:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:68:29:47:D4:81:98:EB:84:18:8E:F9:D7:51:76:D3:BF:83:5B:4E X509v3 Authority Key Identifier: keyid:5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:df:8f:59:02:dc:52:c3:e7:f4:1f:c3:37:9f:0b:2e:c2:36: 08:9d:35:6a:a9:bc:e8:83:8c:45:94:48:c2:30:5d:15:50:26: d4:c5:c1:a5:30:d0:42:14:31:20:0c:f6:98:16:2f:7d:28:11: 36:7b:d2:78:53:00:05:67:ef:73:1e:6f:e1:74:0c:22:c2:43: c6:ce:de:b1:ac:cf:e0:c4:b4:c6:61:05:3b:18:3f:56:e6:66: 38:e4:fb:f6:04:3a:7e:a0:a9:45:fb:53:20:5e:31:4a:e8:a4: f5:89:cb:16:e0:cf:59:22:00:8f:04:5e:88:ff:d3:d5:d2:13: 10:bb:f3:9b:57:d1:5a:19:8b:43:c6:f2:85:d1:a5:86:87:63: 7f:8e:ea:95:fc:ee:a7:e4:30:72:f3:e5:29:e9:b0:d1:71:7e: f2:a7:ef:08:21:85:f4:4e:ad:59:94:dc:f3:92:28:46:d1:8e: e3:77:83:07:5f:fa:bf:8b:88:b4:59:6a:7c:a4:fe:de:f4:20: 1f:98:48:b8:63:32:40:a8:41:f3:98:2d:c0:2c:a1:a3:2d:bf: 25:83:5f:b5:f9:52:a5:07:b0:3e:a9:c4:57:50:75:20:a9:7b: 67:ca:89:8b:f4:a6:86:74:db:34:26:49:9e:bc:9c:4a:ca:93: 71:71:f0:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAR9xBzc5d0FGLNYSDsAeGLe19ygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJCQ0My RTZCM0Q4RjAeFw0yNTA4MDYwODU1MzhaFw0yNTA4MDkxMDU4MzhaMDMxMTAvBgNV BAMTKDg3NjgyOTQ3RDQ4MTk4RUI4NDE4OEVGOUQ3NTE3NkQzQkY4MzVCNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq0HRNtfwCrQTTC/0uvhCW1NDM 00qgbydE9evJGdv5kElabTLQPhpodJuigwjff/06jFca6k55OfywCsyjlPU/tca1 w2ynX80mFNXawQ01er4Za4c/ODvS7JB3TgUUBTiJcakl2jmA2O6iWSRoFCj4Ijj4 IQZxZnpkbmZTNCsLHdkrbEe+BW3l+x5llNKsmLQ9iP9Lwc/24E21EvETKcbdZMV8 fnMRbiZRjTY+GA1hCtX+j67WKgQPstk4UdnS4L0DLcbTIlx7wMc5hK8A9PQF9E7g uWsQUepr7P9PEVB+XgRQJHoFBKzwtOTNl5wb8os+yaQC126C/FJ5Bi1j1XihAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh2gpR9SBmOuEGI7511F207+DW04wHwYDVR0j BBgwFoAUXB3H6HRXqR81kVrx3j+7zC5rPY8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yzg4NDQyYi1jNDhlLTRiYTAtOGFkNy01OGUxMjYzYzZkYzcvMC81QzFEQzdFODc0 NTdBOTFGMzU5MTVBRjFERTNGQkJDQzJFNkIzRDhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJCQ0MyRTZC M0Q4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M4ODQ0MmItYzQ4ZS00YmEwLThh ZDctNThlMTI2M2M2ZGM3LzAvNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJC Q0MyRTZCM0Q4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDfj1kC3FLD5/QfwzefCy7CNgidNWqpvOiD jEWUSMIwXRVQJtTFwaUw0EIUMSAM9pgWL30oETZ70nhTAAVn73Meb+F0DCLCQ8bO 3rGsz+DEtMZhBTsYP1bmZjjk+/YEOn6gqUX7UyBeMUropPWJyxbgz1kiAI8EXoj/ 09XSExC785tX0VoZi0PG8oXRpYaHY3+O6pX87qfkMHLz5SnpsNFxfvKn7wghhfRO rVmU3POSKEbRjuN3gwdf+r+LiLRZanyk/t70IB+YSLhjMkCoQfOYLcAsoaMtvyWD X7X5UqUHsD6pxFdQdSCpe2fKiYv0poZ02zQmSZ68nErKk3Fx8H0= -----END CERTIFICATE-----Generated at Thu Aug 7 11:10:59 2025 by rpki-client