$ rpki-client -vvf repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft File: 05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft (raw, json) Hash identifier: kjsGwR6uJ15eG4ima3RP/LbSwte27qk58IeDVoK0FX4= Subject key identifier: 42:8D:F1:33:23:BB:60:9C:BA:3D:46:91:C7:45:02:D6:67:03:09:96 Authority key identifier: 05:67:1A:0A:CA:B2:6B:34:26:48:AF:FA:C0:C6:6E:CB:5A:49:3D:AB Certificate issuer: /CN=05671A0ACAB26B342648AFFAC0C66ECB5A493DAB Certificate serial: 35E9A27C21AA6F661C2C22BACFDD6A0B3D5DD7C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft Manifest number: D4 Signing time: Wed 06 Aug 2025 00:11:45 +0000 Manifest this update: Wed 06 Aug 2025 00:06:45 +0000 Manifest next update: Sat 09 Aug 2025 02:54:45 +0000 Files and hashes: 1: 05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl (hash: cMhybeNWp+DWxBg/cG3PQzTHnx9kD5v3GA/pPcl69dI=) 2: 323030313a6466333a393034303a3a2f34382d3438203d3e20313532343139.roa (hash: RA3iDpSCkWtT/yyfxgJEQ4woQglWjmr40o6UbmeiCAk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 02:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:e9:a2:7c:21:aa:6f:66:1c:2c:22:ba:cf:dd:6a:0b:3d:5d:d7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05671A0ACAB26B342648AFFAC0C66ECB5A493DAB Validity Not Before: Aug 6 00:06:45 2025 GMT Not After : Aug 9 02:54:45 2025 GMT Subject: CN=428DF13323BB609CBA3D4691C74502D667030996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cb:c3:08:d1:51:b0:1f:8e:de:ce:bc:b6:03: 0c:43:f5:10:36:9e:b4:bc:8d:f7:f1:68:86:9d:44: 4c:5c:0e:81:17:f9:5f:03:da:c5:f5:1f:36:4c:7b: 6d:05:e0:92:69:c3:62:fe:d2:b9:de:f1:8b:d9:fc: 32:ee:1d:b7:ef:b5:61:80:47:74:3e:42:a7:30:61: 21:f2:98:99:f4:e4:32:6d:30:41:df:5d:f5:93:f8: 11:38:5c:42:1e:83:56:94:f9:44:fb:d5:e8:02:26: 3f:13:3d:fc:2b:9c:6e:be:30:81:dc:60:93:9e:ae: 5b:6e:7b:db:3e:cb:b9:47:1e:1c:57:b6:5a:ff:cb: 6b:9d:c0:ad:e6:f6:33:aa:68:34:dd:ad:39:e1:80: 1f:a1:fd:6f:8a:c3:77:20:90:6f:56:98:17:fe:c4: 0b:d5:1d:ea:c4:ce:d9:4d:a2:62:c9:df:b2:ab:ac: 1a:32:d6:73:98:35:e5:b2:98:78:fe:cf:89:9e:8f: c1:ba:6c:73:e5:61:8f:f9:c4:1c:c9:7a:bc:4d:68: 4f:d9:9d:4c:6e:52:ab:42:7b:32:8a:23:d5:36:08: b1:f0:15:2a:51:8b:79:6f:07:98:d3:32:f9:57:5d: 55:eb:ca:6c:6d:bd:90:6d:ec:5e:f6:17:fb:6d:24: 8f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8D:F1:33:23:BB:60:9C:BA:3D:46:91:C7:45:02:D6:67:03:09:96 X509v3 Authority Key Identifier: keyid:05:67:1A:0A:CA:B2:6B:34:26:48:AF:FA:C0:C6:6E:CB:5A:49:3D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:09:17:c5:29:b8:1c:04:5d:78:44:17:63:06:e4:9e:55:f1: 3e:2d:24:08:8b:a5:6c:74:22:20:4b:2a:ff:a1:0a:23:18:50: 98:b9:2d:87:7d:64:a9:cc:cb:9b:64:c7:11:8b:95:c2:e4:f1: 26:c7:e5:8d:d2:7f:aa:b3:da:ad:85:b6:24:c7:90:1a:82:be: a0:5e:4e:41:72:b5:a0:61:a7:77:73:c0:20:12:67:cd:ba:38: b5:5a:81:2a:7b:5c:39:e6:a9:22:e0:9b:4a:2a:37:e3:65:56: d2:02:3e:07:39:5b:8a:e0:91:69:c2:2a:28:b0:ce:4f:ce:07: 31:12:69:8f:06:93:7f:1c:54:ac:1d:b9:23:4e:e3:e7:ad:83: d3:ba:7b:6e:fa:1e:91:c2:79:c0:9e:f0:b7:0d:b5:93:43:da: 17:7c:74:c6:fb:6d:3c:25:cf:ce:8b:20:70:ec:cf:58:3d:d8: d0:e9:ea:fe:62:2e:bc:07:9f:a1:9c:3e:c3:78:e6:7a:22:88: c1:b3:96:e3:18:14:2f:91:7e:83:02:e5:fc:11:50:1e:ae:b9: 03:4b:3e:b8:4f:05:ff:8c:a6:eb:81:b3:5d:27:a0:7d:e8:cd: 0a:cf:ca:93:45:0f:2b:7b:68:06:88:53:f7:fe:09:ff:95:c5: 5d:30:45:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNemifCGqb2YcLCK6z91qCz1d18AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZFQ0I1 QTQ5M0RBQjAeFw0yNTA4MDYwMDA2NDVaFw0yNTA4MDkwMjU0NDVaMDMxMTAvBgNV BAMTKDQyOERGMTMzMjNCQjYwOUNCQTNENDY5MUM3NDUwMkQ2NjcwMzA5OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDy8MI0VGwH47ezry2AwxD9RA2 nrS8jffxaIadRExcDoEX+V8D2sX1HzZMe20F4JJpw2L+0rne8YvZ/DLuHbfvtWGA R3Q+QqcwYSHymJn05DJtMEHfXfWT+BE4XEIeg1aU+UT71egCJj8TPfwrnG6+MIHc YJOerltue9s+y7lHHhxXtlr/y2udwK3m9jOqaDTdrTnhgB+h/W+Kw3cgkG9WmBf+ xAvVHerEztlNomLJ37KrrBoy1nOYNeWymHj+z4mej8G6bHPlYY/5xBzJerxNaE/Z nUxuUqtCezKKI9U2CLHwFSpRi3lvB5jTMvlXXVXrymxtvZBt7F72F/ttJI/BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQo3xMyO7YJy6PUaRx0UC1mcDCZYwHwYDVR0j BBgwFoAUBWcaCsqyazQmSK/6wMZuy1pJPaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDgyM2JiMy01YTAxLTQ2NTgtYTc4My1mOGU4OWZhZGNmNDUvMS8wNTY3MUEwQUNB QjI2QjM0MjY0OEFGRkFDMEM2NkVDQjVBNDkzREFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZFQ0I1QTQ5 M0RBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4MjNiYjMtNWEwMS00NjU4LWE3 ODMtZjhlODlmYWRjZjQ1LzEvMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZF Q0I1QTQ5M0RBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIcJF8UpuBwEXXhEF2MG5J5V8T4tJAiLpWx0 IiBLKv+hCiMYUJi5LYd9ZKnMy5tkxxGLlcLk8SbH5Y3Sf6qz2q2FtiTHkBqCvqBe TkFytaBhp3dzwCASZ826OLVagSp7XDnmqSLgm0oqN+NlVtICPgc5W4rgkWnCKiiw zk/OBzESaY8Gk38cVKwduSNO4+etg9O6e276HpHCecCe8LcNtZND2hd8dMb7bTwl z86LIHDsz1g92NDp6v5iLrwHn6GcPsN45noiiMGzluMYFC+RfoMC5fwRUB6uuQNL PrhPBf+MpuuBs10noH3ozQrPypNFDyt7aAaIU/f+Cf+VxV0wRS0= -----END CERTIFICATE-----Generated at Thu Aug 7 11:13:12 2025 by rpki-client