$ rpki-client -vvf repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft File: 5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft (raw, json) Hash identifier: e3i9d0qUBffzzk9bGUxPaFOt1VnZMjRC8+qCyOdyA4c= Subject key identifier: BE:81:76:67:BA:C4:DA:89:FB:9F:6E:57:DC:68:8C:F1:99:E0:8E:A2 Authority key identifier: 5B:D3:41:A6:D4:6A:F5:2C:FF:23:A5:D1:E2:58:94:94:EE:AC:A2:70 Certificate issuer: /CN=5BD341A6D46AF52CFF23A5D1E2589494EEACA270 Certificate serial: 78ADDDC9EE1A9F24A88310D70661A4E04159952F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft Manifest number: 027E Signing time: Thu 07 Aug 2025 12:10:49 +0000 Manifest this update: Thu 07 Aug 2025 12:05:49 +0000 Manifest next update: Sun 10 Aug 2025 23:15:49 +0000 Files and hashes: 1: 5BD341A6D46AF52CFF23A5D1E2589494EEACA270.crl (hash: vDMHmyNBqRGRN6UbAe2sf23w+YRnafQ9SiY6CKuU4ps=) 2: 3130332e3137392e36362e302f32332d3234203d3e20313531303030.roa (hash: 3ytI4WNdkarTA98AKzILbdHeDtsgun+xePSvAI/3j/w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.crl rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 23:15:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:ad:dd:c9:ee:1a:9f:24:a8:83:10:d7:06:61:a4:e0:41:59:95:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BD341A6D46AF52CFF23A5D1E2589494EEACA270 Validity Not Before: Aug 7 12:05:49 2025 GMT Not After : Aug 10 23:15:49 2025 GMT Subject: CN=BE817667BAC4DA89FB9F6E57DC688CF199E08EA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2d:99:3b:79:0a:16:e0:05:4b:d3:70:fd:be: e0:6a:eb:a2:1c:24:88:10:3c:09:5a:59:b7:e3:91: 7c:92:4a:66:6b:3e:74:f1:60:44:cc:02:6f:d8:dd: cb:1c:41:57:2e:89:07:c8:20:4b:74:bd:8d:86:64: 27:dd:87:1f:e9:04:c1:08:70:17:49:66:55:73:c7: c1:c1:70:71:a1:12:5b:2e:82:88:e3:1f:3e:79:1c: 4e:2d:f3:11:b5:14:e7:15:f4:48:57:6e:21:1c:68: e2:9d:2b:37:26:2b:d3:cf:dd:55:7c:56:cd:4e:73: d2:20:28:72:c5:0e:23:9f:54:33:5f:e6:52:61:8b: 12:e6:07:7b:89:79:93:e6:d9:4f:b1:f5:eb:c8:34: 2a:ac:4b:4e:5e:fc:0f:b1:a2:2f:18:d2:73:ab:6a: ba:f8:06:6c:1c:c0:a7:6e:ce:a6:e9:1e:30:81:4a: 9b:ad:55:ad:c8:4b:2c:4d:4e:22:c9:51:e9:2c:b4: a9:8f:50:b5:55:c7:76:0a:a3:93:28:ff:14:7b:f5: 96:cf:55:3b:3c:8d:ca:3e:4f:ad:22:f4:32:8b:9b: 66:bc:6d:8e:b4:2e:5a:7b:9c:26:bd:2b:11:ca:d3: 51:09:8b:91:e5:d4:92:0e:2f:10:fd:46:2b:51:0b: 70:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:81:76:67:BA:C4:DA:89:FB:9F:6E:57:DC:68:8C:F1:99:E0:8E:A2 X509v3 Authority Key Identifier: keyid:5B:D3:41:A6:D4:6A:F5:2C:FF:23:A5:D1:E2:58:94:94:EE:AC:A2:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:97:22:49:f2:be:54:89:58:5d:f9:41:de:f4:0d:a7:cd:a1: 99:d8:7f:97:4a:bc:e4:2a:0e:4f:af:31:b3:6e:da:05:3e:b9: fa:0d:43:8a:e1:74:36:94:39:69:17:a8:16:3d:5b:31:1b:44: a8:da:69:1e:30:c9:6e:3a:e5:10:f5:4d:63:7e:15:7e:c3:6b: d4:1a:c9:73:f3:04:e6:70:ec:6d:0b:0d:95:63:d4:ad:61:bc: 9b:a3:78:59:24:30:77:a0:4a:63:75:b1:db:ae:2c:dd:b1:a2: c9:a2:6d:56:dc:83:8f:75:fa:22:76:a8:68:50:b8:6c:c4:4c: 8d:87:d5:dd:e2:35:c8:06:57:26:44:96:e6:de:5c:73:4a:73: 6c:b4:30:24:fc:4f:d8:21:5a:bd:85:c6:f0:3d:97:07:72:67: a1:3b:21:56:ae:e3:4b:0d:5f:8e:b4:55:45:9f:1f:9b:f1:57: 74:a6:b4:7f:6a:f4:8e:45:bf:2d:9f:1f:a0:45:78:83:fd:f2: 5f:c8:e0:0c:ac:38:cd:f7:34:9a:15:b3:e6:74:f5:63:82:6f: 76:ab:0a:17:30:6a:1c:da:e5:a8:64:99:d2:e6:1e:12:45:ee: be:b1:8b:e9:ae:72:7c:4b:ee:be:a7:a4:5a:e1:d5:5a:da:bc: b7:08:86:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeK3dye4anySogxDXBmGk4EFZlS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJEMzQxQTZENDZBRjUyQ0ZGMjNBNUQxRTI1ODk0OTRF RUFDQTI3MDAeFw0yNTA4MDcxMjA1NDlaFw0yNTA4MTAyMzE1NDlaMDMxMTAvBgNV BAMTKEJFODE3NjY3QkFDNERBODlGQjlGNkU1N0RDNjg4Q0YxOTlFMDhFQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGLZk7eQoW4AVL03D9vuBq66Ic JIgQPAlaWbfjkXySSmZrPnTxYETMAm/Y3cscQVcuiQfIIEt0vY2GZCfdhx/pBMEI cBdJZlVzx8HBcHGhElsugojjHz55HE4t8xG1FOcV9EhXbiEcaOKdKzcmK9PP3VV8 Vs1Oc9IgKHLFDiOfVDNf5lJhixLmB3uJeZPm2U+x9evINCqsS05e/A+xoi8Y0nOr arr4BmwcwKduzqbpHjCBSputVa3ISyxNTiLJUekstKmPULVVx3YKo5Mo/xR79ZbP VTs8jco+T60i9DKLm2a8bY60Llp7nCa9KxHK01EJi5Hl1JIOLxD9RitRC3BxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvoF2Z7rE2on7n25X3GiM8ZngjqIwHwYDVR0j BBgwFoAUW9NBptRq9Sz/I6XR4liUlO6sonAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTEyNzQzZC1kNTZkLTRhNzctOTBlMi1jNTJlNmRmZTA2YzIvMC81QkQzNDFBNkQ0 NkFGNTJDRkYyM0E1RDFFMjU4OTQ5NEVFQUNBMjcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUJEMzQxQTZENDZBRjUyQ0ZGMjNBNUQxRTI1ODk0OTRFRUFD QTI3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2UxMjc0M2QtZDU2ZC00YTc3LTkw ZTItYzUyZTZkZmUwNmMyLzAvNUJEMzQxQTZENDZBRjUyQ0ZGMjNBNUQxRTI1ODk0 OTRFRUFDQTI3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE6XIknyvlSJWF35Qd70DafNoZnYf5dKvOQq Dk+vMbNu2gU+ufoNQ4rhdDaUOWkXqBY9WzEbRKjaaR4wyW465RD1TWN+FX7Da9Qa yXPzBOZw7G0LDZVj1K1hvJujeFkkMHegSmN1sduuLN2xosmibVbcg491+iJ2qGhQ uGzETI2H1d3iNcgGVyZElubeXHNKc2y0MCT8T9ghWr2FxvA9lwdyZ6E7IVau40sN X460VUWfH5vxV3SmtH9q9I5Fvy2fH6BFeIP98l/I4AysOM33NJoVs+Z09WOCb3ar Chcwahza5ahkmdLmHhJF7r6xi+mucnxL7r6npFrh1VravLcIhqI= -----END CERTIFICATE-----Generated at Sat Aug 9 05:52:55 2025 by rpki-client