$ rpki-client -vvf repo-rpki.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/5EF007981390128F8F14B087123454D686E41CB8.mft File: 5EF007981390128F8F14B087123454D686E41CB8.mft (raw, json) Hash identifier: hHVZFAppQ/ILaTQBL7lZqCHHcIK0f6dQUJvDx80OVyU= Subject key identifier: 6E:C9:22:F2:C3:AF:D5:99:3E:28:19:3F:18:C7:43:F7:30:A4:5D:34 Authority key identifier: 5E:F0:07:98:13:90:12:8F:8F:14:B0:87:12:34:54:D6:86:E4:1C:B8 Certificate issuer: /CN=5EF007981390128F8F14B087123454D686E41CB8 Certificate serial: 5607A76FA1124D77BF03F3BD394D353CDBA38853 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EF007981390128F8F14B087123454D686E41CB8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/5EF007981390128F8F14B087123454D686E41CB8.mft Manifest number: 01D4 Signing time: Sun 10 Aug 2025 13:11:54 +0000 Manifest this update: Sun 10 Aug 2025 13:06:54 +0000 Manifest next update: Wed 13 Aug 2025 22:59:54 +0000 Files and hashes: 1: 5EF007981390128F8F14B087123454D686E41CB8.crl (hash: /qEYXSUjrKK/Mb99FF6OpEFPBn1tAzuFZuHF6aOXzYs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/5EF007981390128F8F14B087123454D686E41CB8.crl rsync://repo-rpki.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/5EF007981390128F8F14B087123454D686E41CB8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EF007981390128F8F14B087123454D686E41CB8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 22:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:07:a7:6f:a1:12:4d:77:bf:03:f3:bd:39:4d:35:3c:db:a3:88:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EF007981390128F8F14B087123454D686E41CB8 Validity Not Before: Aug 10 13:06:54 2025 GMT Not After : Aug 13 22:59:54 2025 GMT Subject: CN=6EC922F2C3AFD5993E28193F18C743F730A45D34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:fd:80:bb:e8:8b:83:16:15:65:76:8f:9e:73: 8e:33:43:2c:96:41:97:b3:63:11:95:cf:b0:97:b4: 78:73:eb:12:8b:6d:23:88:f9:a7:4d:17:58:c6:ea: 24:c9:72:0b:1e:b5:fe:b6:81:59:b7:a8:7c:93:e9: 1e:97:cd:84:58:34:30:ed:d9:89:5c:76:1d:91:e2: 89:cf:d8:14:0d:72:2d:76:79:48:df:3c:79:a3:75: cd:46:07:09:03:86:d6:a3:91:63:6b:1c:92:6b:d0: 18:bc:eb:ab:dc:ca:dd:3d:c5:d8:47:03:f9:fe:09: cc:f6:a4:31:40:72:50:80:f8:c9:b3:2f:00:3d:a3: d6:89:fb:4e:82:42:0b:2b:39:58:1f:b0:01:af:49: 04:cc:45:03:41:2f:89:f8:17:41:51:5f:7e:e2:30: ad:3c:48:99:21:75:0a:b7:3a:15:d2:c4:7d:d3:8f: 60:9b:e2:0e:a8:ff:a5:cc:c7:28:46:49:74:6d:01: 4c:db:32:99:d9:05:1d:5c:dc:e8:63:fb:0c:d0:c5: 2a:72:d3:8e:40:23:2f:9e:5f:19:c2:3a:ca:01:3a: 03:6b:53:b3:80:f5:43:18:ad:f6:91:c1:d0:a9:79: 61:24:db:48:0a:75:3e:79:b1:9c:5d:21:73:f0:cb: 18:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C9:22:F2:C3:AF:D5:99:3E:28:19:3F:18:C7:43:F7:30:A4:5D:34 X509v3 Authority Key Identifier: keyid:5E:F0:07:98:13:90:12:8F:8F:14:B0:87:12:34:54:D6:86:E4:1C:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/5EF007981390128F8F14B087123454D686E41CB8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EF007981390128F8F14B087123454D686E41CB8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76599474-f6b6-4087-a97e-788b5949d57b/0/5EF007981390128F8F14B087123454D686E41CB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:52:15:8e:ff:50:85:25:9a:93:1a:0f:09:8e:a2:ab:c6:02: a6:8a:b1:41:8c:22:58:a2:84:97:2a:03:27:56:74:04:c2:2a: 69:4a:a1:d8:10:ce:cb:3f:fd:a3:cf:6f:ca:7c:f3:ed:fc:40: 8e:57:1a:00:11:15:6d:9e:dc:90:6e:0b:81:88:a1:5d:19:5d: 91:24:d2:36:ae:ae:f4:46:be:a0:01:a3:51:bf:dd:d4:dd:65: fe:57:94:7b:ca:34:de:85:90:97:91:9a:20:ea:81:64:86:05: 8d:c4:f8:8e:11:79:1f:ff:c2:41:d8:19:b4:ec:42:2b:3d:39: 23:65:ca:cd:9e:f8:f0:b4:33:23:8f:35:b7:dd:82:05:3a:3e: 48:b1:b5:4e:4c:91:93:49:8a:4c:39:79:e4:ae:56:dd:cd:46: 88:a4:1d:d4:b9:0d:11:ac:1c:f7:e3:bb:72:83:70:0c:ae:f2: 40:98:3c:8a:6b:86:0b:37:47:7c:77:5d:e0:9d:a5:8b:3d:f6: 10:34:37:f9:97:03:bb:e3:48:ac:9d:f8:d1:c5:81:cf:5b:6e: f7:6a:8a:15:f4:01:f4:f8:7a:42:4f:c3:61:4b:25:7e:24:01: 0a:42:d4:9a:13:0e:91:e7:d2:cb:c2:e9:3c:6b:55:30:14:aa: 32:ad:ab:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVgenb6ESTXe/A/O9OU01PNujiFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVGMDA3OTgxMzkwMTI4RjhGMTRCMDg3MTIzNDU0RDY4 NkU0MUNCODAeFw0yNTA4MTAxMzA2NTRaFw0yNTA4MTMyMjU5NTRaMDMxMTAvBgNV BAMTKDZFQzkyMkYyQzNBRkQ1OTkzRTI4MTkzRjE4Qzc0M0Y3MzBBNDVEMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW/YC76IuDFhVldo+ec44zQyyW QZezYxGVz7CXtHhz6xKLbSOI+adNF1jG6iTJcgsetf62gVm3qHyT6R6XzYRYNDDt 2Ylcdh2R4onP2BQNci12eUjfPHmjdc1GBwkDhtajkWNrHJJr0Bi866vcyt09xdhH A/n+Ccz2pDFAclCA+MmzLwA9o9aJ+06CQgsrOVgfsAGvSQTMRQNBL4n4F0FRX37i MK08SJkhdQq3OhXSxH3Tj2Cb4g6o/6XMxyhGSXRtAUzbMpnZBR1c3Ohj+wzQxSpy 045AIy+eXxnCOsoBOgNrU7OA9UMYrfaRwdCpeWEk20gKdT55sZxdIXPwyxjrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbski8sOv1Zk+KBk/GMdD9zCkXTQwHwYDVR0j BBgwFoAUXvAHmBOQEo+PFLCHEjRU1obkHLgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjU5OTQ3NC1mNmI2LTQwODctYTk3ZS03ODhiNTk0OWQ1N2IvMC81RUYwMDc5ODEz OTAxMjhGOEYxNEIwODcxMjM0NTRENjg2RTQxQ0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUVGMDA3OTgxMzkwMTI4RjhGMTRCMDg3MTIzNDU0RDY4NkU0 MUNCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY1OTk0NzQtZjZiNi00MDg3LWE5 N2UtNzg4YjU5NDlkNTdiLzAvNUVGMDA3OTgxMzkwMTI4RjhGMTRCMDg3MTIzNDU0 RDY4NkU0MUNCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALZSFY7/UIUlmpMaDwmOoqvGAqaKsUGMIlii hJcqAydWdATCKmlKodgQzss//aPPb8p88+38QI5XGgARFW2e3JBuC4GIoV0ZXZEk 0jaurvRGvqABo1G/3dTdZf5XlHvKNN6FkJeRmiDqgWSGBY3E+I4ReR//wkHYGbTs Qis9OSNlys2e+PC0MyOPNbfdggU6PkixtU5MkZNJikw5eeSuVt3NRoikHdS5DRGs HPfju3KDcAyu8kCYPIprhgs3R3x3XeCdpYs99hA0N/mXA7vjSKyd+NHFgc9bbvdq ihX0AfT4ekJPw2FLJX4kAQpC1JoTDpHn0svC6TxrVTAUqjKtq0M= -----END CERTIFICATE-----Generated at Sun Aug 10 20:58:35 2025 by rpki-client