$ rpki-client -vvf repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft File: 5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft (raw, json) Hash identifier: drcCA1IkIiA1cSd8NgH10exHtPrRuDrTj1XdBjq9wWk= Subject key identifier: D7:ED:C6:1F:0E:45:31:E5:96:4F:CA:15:D9:6D:BE:3F:1E:FF:9D:32 Authority key identifier: 5D:DD:CC:DF:3A:FC:49:2F:6C:C4:87:1D:60:72:A5:AF:A9:73:A0:60 Certificate issuer: /CN=5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060 Certificate serial: 2D960A1AC975CAFB71FB56C294E4F815E704F191 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft Manifest number: 01B8 Signing time: Mon 04 Aug 2025 23:21:25 +0000 Manifest this update: Mon 04 Aug 2025 23:16:25 +0000 Manifest next update: Fri 08 Aug 2025 09:53:25 +0000 Files and hashes: 1: 5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.crl (hash: xEysEifQqa5onSANCWyOpoObIAbTByvCrlq4CpwtzxE=) 2: 34392e3135362e35362e302f32332d3233203d3e203535363637.roa (hash: NbIqv7AUSQMS1xCn0a3rRo2bmONh2GyMw23FeabY33s=) 3: 34392e3135362e35372e302f32342d3234203d3e203535363637.roa (hash: SjmKWLBiEMFhWXiRMo2sqEynUyemXFh8rKM/uEFt5LQ=) 4: 34392e3135362e36302e302f32342d3234203d3e203535363637.roa (hash: 5nBpHkwL82Gi9NUGyKestOksjx7zZUbyEsgUlUqCAVE=) 5: 34392e3135362e35362e302f32342d3234203d3e203535363637.roa (hash: nwE4egVuBWgMCKw3YCKh6VmNh2jKygK5nst6ZKFNdIE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.crl rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 09:53:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:96:0a:1a:c9:75:ca:fb:71:fb:56:c2:94:e4:f8:15:e7:04:f1:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060 Validity Not Before: Aug 4 23:16:25 2025 GMT Not After : Aug 8 09:53:25 2025 GMT Subject: CN=D7EDC61F0E4531E5964FCA15D96DBE3F1EFF9D32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:41:1b:e2:76:ac:a0:87:ad:cb:87:02:60:57: ae:3b:86:48:f8:20:28:db:f8:1f:33:d7:41:b5:07: 34:b3:d8:4a:55:b4:23:20:db:0b:65:4b:64:b7:c4: 3d:1b:99:33:7d:86:ad:dd:b6:75:2d:76:97:9e:b6: 33:62:97:db:bd:c4:18:75:3a:e3:e4:3d:62:e0:19: 7d:53:29:95:82:4d:d0:55:0b:f7:8c:b3:69:5f:87: 44:cc:52:c6:35:f6:04:4e:cd:3a:5a:15:62:f0:55: 05:57:36:6c:66:17:06:92:35:60:3c:05:ec:57:2f: f1:30:5e:dc:9e:9a:82:4f:ac:f9:7a:97:cc:cb:33: eb:96:cf:54:fc:12:9d:08:ee:c2:8c:4c:ca:5a:38: 16:fa:86:6d:35:df:12:ec:2f:34:b1:ac:87:1f:37: 5e:c9:cf:f2:2a:2c:12:97:13:47:8c:f1:fe:e3:aa: 5a:2f:68:af:b1:0a:ec:9a:35:d7:b4:98:d5:d3:7f: 2d:b4:cb:54:e3:2d:8e:78:33:75:49:58:24:2f:a0: be:87:0f:6b:a3:ee:fe:9c:cb:d4:58:fb:31:af:76: 89:b6:0d:4b:21:97:cf:5c:cf:a3:5b:69:5e:cc:d2: 74:96:2f:05:4c:95:e3:5e:ae:91:fa:55:b6:a0:93: ec:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:ED:C6:1F:0E:45:31:E5:96:4F:CA:15:D9:6D:BE:3F:1E:FF:9D:32 X509v3 Authority Key Identifier: keyid:5D:DD:CC:DF:3A:FC:49:2F:6C:C4:87:1D:60:72:A5:AF:A9:73:A0:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:81:bc:65:61:de:77:56:73:7a:63:58:13:8d:a2:e2:60:ea: 5d:13:1a:f8:29:bb:cc:b7:18:af:e8:b9:85:0a:e8:50:a0:ca: c0:c8:10:d1:ae:fd:59:04:08:f7:a6:7d:43:2e:af:13:c1:72: c1:d1:86:c1:d5:17:e9:71:2b:cf:24:30:58:5f:5d:d2:8a:5c: af:f5:d5:4e:ae:b2:78:e7:b3:7f:4b:17:cd:e9:8c:32:70:69: 11:9e:da:a5:24:75:6f:0e:4f:4f:a6:0f:a3:b6:25:f1:34:a6: fb:07:1d:c6:30:68:28:6b:f1:59:e3:8d:10:88:a2:89:d5:03: 88:82:e1:4f:7b:11:5a:51:de:8d:74:29:28:ca:a4:68:1f:45: d1:ef:07:50:1c:b4:27:1e:c0:74:25:99:d9:a5:a3:85:9f:9d: 00:81:d5:50:df:0f:53:a3:e1:64:7f:82:b6:93:2c:96:e0:f2: bf:2f:5b:7a:86:67:31:65:db:0b:f4:19:e9:64:d0:54:3d:14: ea:66:b2:92:9e:f8:9a:f0:f9:20:2c:ef:0d:4a:cd:44:4e:d1: 8a:82:38:72:d3:e3:0b:4e:7a:6c:54:4c:f1:67:65:57:d5:86: 72:0a:74:e8:28:0a:4f:d7:18:8d:99:f1:8b:6c:12:73:65:44: e0:66:f0:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULZYKGsl1yvtx+1bClOT4FecE8ZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURERENDREYzQUZDNDkyRjZDQzQ4NzFENjA3MkE1QUZB OTczQTA2MDAeFw0yNTA4MDQyMzE2MjVaFw0yNTA4MDgwOTUzMjVaMDMxMTAvBgNV BAMTKEQ3RURDNjFGMEU0NTMxRTU5NjRGQ0ExNUQ5NkRCRTNGMUVGRjlEMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2QRvidqygh63LhwJgV647hkj4 ICjb+B8z10G1BzSz2EpVtCMg2wtlS2S3xD0bmTN9hq3dtnUtdpeetjNil9u9xBh1 OuPkPWLgGX1TKZWCTdBVC/eMs2lfh0TMUsY19gROzTpaFWLwVQVXNmxmFwaSNWA8 BexXL/EwXtyemoJPrPl6l8zLM+uWz1T8Ep0I7sKMTMpaOBb6hm013xLsLzSxrIcf N17Jz/IqLBKXE0eM8f7jqlovaK+xCuyaNde0mNXTfy20y1TjLY54M3VJWCQvoL6H D2uj7v6cy9RY+zGvdom2DUshl89cz6NbaV7M0nSWLwVMleNerpH6Vbagk+z3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1+3GHw5FMeWWT8oV2W2+Px7/nTIwHwYDVR0j BBgwFoAUXd3M3zr8SS9sxIcdYHKlr6lzoGAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjA2Y2Y1MC1hM2QxLTRjYzktOTI2MC05ODdiMmNhMGM5MjcvMC81REREQ0NERjNB RkM0OTJGNkNDNDg3MUQ2MDcyQTVBRkE5NzNBMDYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNURERENDREYzQUZDNDkyRjZDQzQ4NzFENjA3MkE1QUZBOTcz QTA2MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjIwNmNmNTAtYTNkMS00Y2M5LTky NjAtOTg3YjJjYTBjOTI3LzAvNURERENDREYzQUZDNDkyRjZDQzQ4NzFENjA3MkE1 QUZBOTczQTA2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAmBvGVh3ndWc3pjWBONouJg6l0TGvgpu8y3 GK/ouYUK6FCgysDIENGu/VkECPemfUMurxPBcsHRhsHVF+lxK88kMFhfXdKKXK/1 1U6usnjns39LF83pjDJwaRGe2qUkdW8OT0+mD6O2JfE0pvsHHcYwaChr8VnjjRCI oonVA4iC4U97EVpR3o10KSjKpGgfRdHvB1ActCcewHQlmdmlo4WfnQCB1VDfD1Oj 4WR/graTLJbg8r8vW3qGZzFl2wv0Gelk0FQ9FOpmspKe+Jrw+SAs7w1KzURO0YqC OHLT4wtOemxUTPFnZVfVhnIKdOgoCk/XGI2Z8YtsEnNlROBm8K0= -----END CERTIFICATE-----Generated at Thu Aug 7 03:15:38 2025 by rpki-client