$ rpki-client -vvf repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft File: DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft (raw, json) Hash identifier: lN+n0nqARp2pdsMAQu9pWFafyBVWVaEy2rSOP72OLAQ= Subject key identifier: 70:B0:46:D6:1D:6C:38:16:8D:AA:33:37:7B:23:04:B0:2C:7F:DD:27 Authority key identifier: DC:D5:20:7A:C3:3E:10:9E:31:05:2B:BB:7F:81:1D:BF:6D:A1:80:BB Certificate issuer: /CN=DCD5207AC33E109E31052BBB7F811DBF6DA180BB Certificate serial: 5C408DF0FDD0F06F398A6AC537571C59886EC339 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft Manifest number: 5E Signing time: Wed 06 Aug 2025 18:52:00 +0000 Manifest this update: Wed 06 Aug 2025 18:47:00 +0000 Manifest next update: Sun 10 Aug 2025 06:04:00 +0000 Files and hashes: 1: 3136302e32322e3130312e302f32342d3234203d3e20313532383039.roa (hash: mizXQiZMhSS2dg4DmWjoCSbZiybtKsfGNPxNOZ0yF9I=) 2: DCD5207AC33E109E31052BBB7F811DBF6DA180BB.crl (hash: dfBD/TDgyuo8B+JwUOJegmFVdNU9AXwyko4x+3krT30=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.crl rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 06:04:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:40:8d:f0:fd:d0:f0:6f:39:8a:6a:c5:37:57:1c:59:88:6e:c3:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCD5207AC33E109E31052BBB7F811DBF6DA180BB Validity Not Before: Aug 6 18:47:00 2025 GMT Not After : Aug 10 06:04:00 2025 GMT Subject: CN=70B046D61D6C38168DAA33377B2304B02C7FDD27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9e:97:8f:43:94:d9:8c:5c:58:1e:52:26:51: b7:4b:1c:bc:5d:36:59:be:31:14:d2:75:dd:ac:83: 91:da:38:23:d8:6b:e1:89:03:76:81:a2:fc:14:ae: 15:dd:4b:a1:b0:d1:62:32:8b:41:a8:a0:51:57:60: 2d:d6:f2:b0:e4:ef:fe:7f:d9:66:6c:b4:d6:c2:3a: 87:7d:f2:c0:1a:af:a9:8f:c4:a6:6d:16:e9:6d:71: 7b:e0:31:04:f0:1c:19:ed:ba:1c:6f:4f:d9:79:db: 1e:5e:1a:25:fb:f3:07:4a:49:ff:79:70:0c:95:79: 69:a2:f6:26:58:ef:c4:22:00:2a:96:78:16:89:d9: da:bc:b7:4d:95:ee:4a:5b:85:ff:ef:f6:f0:3b:fe: 6d:71:8a:1b:ce:83:66:5f:ab:1f:ef:c3:b1:78:cd: 51:56:eb:13:ac:a6:d5:23:5c:f2:07:aa:9b:0e:d2: 79:ff:e1:3d:d4:d4:db:93:48:a4:69:2c:c2:97:3a: 71:1e:bc:db:a2:e3:8d:04:2b:c3:4d:71:d7:1f:22: 6f:e1:24:88:0d:b4:49:30:67:03:f1:2f:2a:e2:60: 26:83:d6:c4:64:45:fc:87:e9:ab:c0:ad:f4:b8:a6: 79:6f:ce:3c:d3:8b:81:70:aa:c6:64:94:01:62:13: 1c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B0:46:D6:1D:6C:38:16:8D:AA:33:37:7B:23:04:B0:2C:7F:DD:27 X509v3 Authority Key Identifier: keyid:DC:D5:20:7A:C3:3E:10:9E:31:05:2B:BB:7F:81:1D:BF:6D:A1:80:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ed:07:fa:cb:70:4e:e5:b2:82:59:61:a1:30:0e:f5:44:da:13: df:af:4d:5f:ed:64:09:ec:3f:a9:13:f9:44:25:d9:53:9b:19: b6:44:6a:08:a2:81:70:f2:29:2a:f6:1a:f8:5f:17:7c:51:94: ee:05:8b:08:31:cd:8e:23:23:19:7b:58:cb:f9:4f:14:69:87: 2c:c2:a3:45:c1:d9:d1:ab:42:5f:d2:68:ce:1e:70:e4:18:b5: 0d:82:ad:b7:74:c1:8f:d6:be:93:6a:8e:e6:76:e9:e0:71:b9: 90:2b:12:13:ff:f2:46:74:6f:4d:b4:98:51:77:31:dc:9a:18: 8f:58:b5:fd:24:5f:e0:90:69:86:e8:65:10:98:00:6f:3d:79: 6e:b8:ee:a4:9c:ee:50:79:f6:f3:bc:cf:e3:27:f2:84:01:1b: 8e:29:3f:16:af:8e:5c:b6:d0:fc:15:cc:7b:8a:0f:2f:fb:eb: d2:06:cd:bf:75:76:7f:a0:db:ca:4c:aa:a8:1b:bb:7b:35:4f: 44:4a:13:a6:09:2c:dd:e1:34:84:a7:d6:10:62:f1:9b:06:84: c4:30:98:61:ec:0c:5d:4b:2d:2b:01:b6:60:55:b6:4d:b9:63: e9:ba:7d:6c:bc:1d:12:40:03:18:2a:63:15:64:d9:1b:99:97: 5c:b7:52:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXECN8P3Q8G85imrFN1ccWYhuwzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENENTIwN0FDMzNFMTA5RTMxMDUyQkJCN0Y4MTFEQkY2 REExODBCQjAeFw0yNTA4MDYxODQ3MDBaFw0yNTA4MTAwNjA0MDBaMDMxMTAvBgNV BAMTKDcwQjA0NkQ2MUQ2QzM4MTY4REFBMzMzNzdCMjMwNEIwMkM3RkREMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDenpePQ5TZjFxYHlImUbdLHLxd Nlm+MRTSdd2sg5HaOCPYa+GJA3aBovwUrhXdS6Gw0WIyi0GooFFXYC3W8rDk7/5/ 2WZstNbCOod98sAar6mPxKZtFultcXvgMQTwHBntuhxvT9l52x5eGiX78wdKSf95 cAyVeWmi9iZY78QiACqWeBaJ2dq8t02V7kpbhf/v9vA7/m1xihvOg2Zfqx/vw7F4 zVFW6xOsptUjXPIHqpsO0nn/4T3U1NuTSKRpLMKXOnEevNui440EK8NNcdcfIm/h JIgNtEkwZwPxLyriYCaD1sRkRfyH6avArfS4pnlvzjzTi4FwqsZklAFiExw7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcLBG1h1sOBaNqjM3eyMEsCx/3ScwHwYDVR0j BBgwFoAU3NUgesM+EJ4xBSu7f4Edv22hgLswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDhlZjExOS03ZGRmLTQ1ZTUtODYzNC0zOGI3NzI1OGNiY2MvMC9EQ0Q1MjA3QUMz M0UxMDlFMzEwNTJCQkI3RjgxMURCRjZEQTE4MEJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRENENTIwN0FDMzNFMTA5RTMxMDUyQkJCN0Y4MTFEQkY2REEx ODBCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4ZWYxMTktN2RkZi00NWU1LTg2 MzQtMzhiNzcyNThjYmNjLzAvRENENTIwN0FDMzNFMTA5RTMxMDUyQkJCN0Y4MTFE QkY2REExODBCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAO0H+stwTuWygllhoTAO9UTaE9+vTV/tZAns P6kT+UQl2VObGbZEagiigXDyKSr2GvhfF3xRlO4FiwgxzY4jIxl7WMv5TxRphyzC o0XB2dGrQl/SaM4ecOQYtQ2Crbd0wY/WvpNqjuZ26eBxuZArEhP/8kZ0b020mFF3 MdyaGI9Ytf0kX+CQaYboZRCYAG89eW647qSc7lB59vO8z+Mn8oQBG44pPxavjly2 0PwVzHuKDy/769IGzb91dn+g28pMqqgbu3s1T0RKE6YJLN3hNISn1hBi8ZsGhMQw mGHsDF1LLSsBtmBVtk25Y+m6fWy8HRJAAxgqYxVk2RuZl1y3Ujk= -----END CERTIFICATE-----Generated at Fri Aug 8 00:04:42 2025 by rpki-client