$ rpki-client -vvf repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft File: 5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft (raw, json) Hash identifier: aBVWv5iT5/US5iZJh+RJjv1mRJCno2rDivbSqS538v8= Subject key identifier: 3E:24:C3:84:3C:9C:1E:58:30:5D:05:90:92:FD:A7:7F:CE:75:BE:E2 Authority key identifier: 5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F Certificate issuer: /CN=5EC2C02340FBFA79A3352FA18934C1E7B1D9216F Certificate serial: 102888900B07F9489A891768A0AF6105C2B6E2B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft Manifest number: 01F7 Signing time: Fri 08 Aug 2025 13:31:56 +0000 Manifest this update: Fri 08 Aug 2025 13:26:56 +0000 Manifest next update: Mon 11 Aug 2025 15:10:56 +0000 Files and hashes: 1: 3130332e3138392e3230302e302f32342d3234203d3e2039333431.roa (hash: IarCEKLylnrJ7AZkdxFWJNi+xmNEExkQb+M5jNKDEHk=) 2: 5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl (hash: IZGcNspSnHS8rxEyc6mZjMpIN70Ujdbe45bIZZ4Pk7I=) 3: 3130332e3138392e3230312e302f32342d3234203d3e2039333431.roa (hash: Dh9fcAyZ65O9TDEVPO/dqbyH2BI/vOdtlvtC7u5HK34=) 4: 3130332e3138392e3230302e302f32332d3233203d3e2039333431.roa (hash: gvBia+LW2/7IKDQVvnVoZBUClWDY/4rfXyS+EBiBMPI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 15:10:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:28:88:90:0b:07:f9:48:9a:89:17:68:a0:af:61:05:c2:b6:e2:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EC2C02340FBFA79A3352FA18934C1E7B1D9216F Validity Not Before: Aug 8 13:26:56 2025 GMT Not After : Aug 11 15:10:56 2025 GMT Subject: CN=3E24C3843C9C1E58305D059092FDA77FCE75BEE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bf:ce:4e:b8:02:8c:ec:dd:6b:11:e3:eb:dd: 28:44:4b:a9:90:cc:ed:ae:eb:92:a3:3c:7b:5f:86: 16:32:db:d3:6c:b5:f7:9a:15:1a:54:10:ca:06:1a: f6:38:8b:87:b8:07:ea:dc:de:1e:40:36:13:59:bf: ea:15:2f:43:41:07:4e:b7:17:59:0d:fe:54:b7:18: 22:0e:b4:ab:81:93:66:29:5c:90:93:78:33:5e:6b: 2d:74:b1:b7:3d:d2:e4:e2:46:56:9c:53:e4:97:50: 11:51:7f:23:83:2a:69:f6:d2:8d:52:6d:27:84:e9: 97:33:86:bc:8b:3a:57:d0:cb:d1:be:bf:cc:5f:c4: 56:53:42:01:ea:fe:9a:21:b6:a4:22:52:32:3d:0b: 0f:a8:86:c9:18:0d:18:3b:68:20:b8:24:a3:14:2c: 6a:fc:ed:08:92:88:f2:5f:ae:88:ef:d4:6d:3b:cb: cc:57:cd:fc:4a:8e:09:46:7f:f9:7e:dc:d4:97:54: 4a:d8:ca:b0:1b:f5:d8:fa:b4:eb:2f:2e:93:3e:5c: 06:8f:54:49:e2:a3:f4:65:8c:30:5e:f4:7d:c1:61: 7a:43:21:6c:94:77:34:87:61:83:a5:63:26:2b:b2: 7d:c6:72:95:5f:32:56:41:cf:0f:18:d6:59:f8:d5: c5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:24:C3:84:3C:9C:1E:58:30:5D:05:90:92:FD:A7:7F:CE:75:BE:E2 X509v3 Authority Key Identifier: keyid:5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:9b:33:4b:33:fc:0f:a0:c6:79:73:d3:79:11:8d:15:6a:8a: 8d:cb:81:93:a9:56:1c:43:68:d5:9c:17:9b:40:31:c2:3f:f4: 5e:25:21:fa:9a:c1:a7:95:6a:c4:c0:52:d5:68:e7:67:00:7f: c7:37:c8:d8:48:b7:a1:4d:73:b9:d7:e7:b8:1d:ac:58:b1:41: 9c:fe:ac:92:16:eb:e5:1d:1a:d6:89:db:ca:27:db:58:dc:38: 92:e1:38:cb:e4:2b:37:09:e0:f0:4e:7d:1a:89:e8:7a:18:b4: 6d:b5:3d:64:fe:ef:72:f4:cd:5c:5d:88:d9:f1:45:7e:9d:0a: fe:3a:4e:11:18:08:2f:39:d7:9a:36:1b:fe:c2:62:8c:b1:6a: 4b:60:ac:ec:63:da:4a:c0:3a:ba:9a:4a:2a:15:42:a8:52:5a: 2d:a8:0c:99:2c:26:4f:b5:7b:97:8e:55:26:bc:55:19:0b:ae: b4:a9:76:be:4e:e0:4d:f9:83:67:81:48:d0:68:fd:ce:1a:90: 33:5b:04:25:9c:24:60:16:23:46:25:31:9a:23:bf:c2:e2:78: c0:27:3f:8c:61:34:61:47:ef:d7:c4:73:00:39:87:a7:d3:35: 2e:40:eb:d3:c4:8b:9b:cd:f4:9b:b2:2f:bc:7a:72:da:52:df: cc:af:4b:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUECiIkAsH+UiaiRdooK9hBcK24rcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMxRTdC MUQ5MjE2RjAeFw0yNTA4MDgxMzI2NTZaFw0yNTA4MTExNTEwNTZaMDMxMTAvBgNV BAMTKDNFMjRDMzg0M0M5QzFFNTgzMDVEMDU5MDkyRkRBNzdGQ0U3NUJFRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEv85OuAKM7N1rEePr3ShES6mQ zO2u65KjPHtfhhYy29NstfeaFRpUEMoGGvY4i4e4B+rc3h5ANhNZv+oVL0NBB063 F1kN/lS3GCIOtKuBk2YpXJCTeDNeay10sbc90uTiRlacU+SXUBFRfyODKmn20o1S bSeE6ZczhryLOlfQy9G+v8xfxFZTQgHq/pohtqQiUjI9Cw+ohskYDRg7aCC4JKMU LGr87QiSiPJfrojv1G07y8xXzfxKjglGf/l+3NSXVErYyrAb9dj6tOsvLpM+XAaP VEnio/RljDBe9H3BYXpDIWyUdzSHYYOlYyYrsn3GcpVfMlZBzw8Y1ln41cWBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPiTDhDycHlgwXQWQkv2nf851vuIwHwYDVR0j BBgwFoAUXsLAI0D7+nmjNS+hiTTB57HZIW8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTJlNWYwMy1iZjk2LTRiNDAtYmQ0YS02ZTM4ODhjNDAyMDUvMC81RUMyQzAyMzQw RkJGQTc5QTMzNTJGQTE4OTM0QzFFN0IxRDkyMTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMxRTdCMUQ5 MjE2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EyZTVmMDMtYmY5Ni00YjQwLWJk NGEtNmUzODg4YzQwMjA1LzAvNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMx RTdCMUQ5MjE2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEibM0sz/A+gxnlz03kRjRVqio3LgZOpVhxD aNWcF5tAMcI/9F4lIfqawaeVasTAUtVo52cAf8c3yNhIt6FNc7nX57gdrFixQZz+ rJIW6+UdGtaJ28on21jcOJLhOMvkKzcJ4PBOfRqJ6HoYtG21PWT+73L0zVxdiNnx RX6dCv46ThEYCC8515o2G/7CYoyxaktgrOxj2krAOrqaSioVQqhSWi2oDJksJk+1 e5eOVSa8VRkLrrSpdr5O4E35g2eBSNBo/c4akDNbBCWcJGAWI0YlMZojv8LieMAn P4xhNGFH79fEcwA5h6fTNS5A69PEi5vN9JuyL7x6ctpS38yvS+U= -----END CERTIFICATE-----Generated at Fri Aug 8 19:21:49 2025 by rpki-client