$ rpki-client -vvf repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft File: 5C413D56294D9D20E64978B7296A9DA893C32CAB.mft (raw, json) Hash identifier: YEJwV4NNr0hP9OLV9Vq9mb1ICRn/PMWh6pIFz0x6v/M= Subject key identifier: F6:3E:0B:C6:8C:1C:8A:D5:4C:19:52:68:1B:E0:47:7B:25:5C:DB:4A Authority key identifier: 5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB Certificate issuer: /CN=5C413D56294D9D20E64978B7296A9DA893C32CAB Certificate serial: 12ABFEA5BB9485B6A7010C67E6B9C7E7C66C4E70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft Manifest number: 038A Signing time: Thu 07 Aug 2025 00:22:24 +0000 Manifest this update: Thu 07 Aug 2025 00:17:24 +0000 Manifest next update: Sun 10 Aug 2025 04:07:24 +0000 Files and hashes: 1: 5C413D56294D9D20E64978B7296A9DA893C32CAB.crl (hash: 8l/FaZfs93tPt7mf7/U9TAABZVZrFK/uH4t1GsB4Sr0=) 2: 3130332e3135302e36302e302f32342d3234203d3e20313430333839.roa (hash: 4ZQwGn11qHNiVrKpaqE6sqxjVoPVYCbt4H6xntr7VWc=) 3: 3130332e3135302e36312e302f32342d3234203d3e20313430333839.roa (hash: PlY/JnUtAv2FxS5Soe3wZCn6MzuK/JWnFyPZQrX/fuQ=) 4: 323030313a6466333a356238303a3a2f34382d3438203d3e20313430333839.roa (hash: JKFEKy2zDD0/MbgGmVCYEU7vyiWQJvpcUY2RjG6e1rs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.crl rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 04:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:ab:fe:a5:bb:94:85:b6:a7:01:0c:67:e6:b9:c7:e7:c6:6c:4e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C413D56294D9D20E64978B7296A9DA893C32CAB Validity Not Before: Aug 7 00:17:24 2025 GMT Not After : Aug 10 04:07:24 2025 GMT Subject: CN=F63E0BC68C1C8AD54C1952681BE0477B255CDB4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:90:0a:21:ca:ad:f0:4b:75:39:f8:57:7d:b5: 25:9b:fc:51:42:88:3e:55:db:64:1e:ce:e6:14:d9: 22:85:b2:db:ff:0c:dd:6a:45:58:b2:8a:03:a3:99: 6a:c6:86:4a:3a:cb:f5:2a:3a:29:f9:7a:ee:3d:46: 2f:02:c4:08:f0:22:31:f6:ab:38:5d:e3:97:5d:33: 12:27:ae:a4:4a:e9:13:97:13:cd:1b:90:47:f2:cc: 09:45:d9:bc:da:74:4f:c9:df:d4:fd:ec:3c:47:7a: d8:bc:0a:02:f3:5c:84:d5:61:93:f8:d7:5c:49:20: 05:c9:81:f4:2f:99:97:2c:46:d5:37:20:e8:d7:e0: e1:2a:30:64:83:e2:b4:55:d4:fb:0e:11:55:d7:b3: 1f:80:eb:35:30:9f:42:b8:ae:2a:22:a8:26:86:e1: e1:53:8a:5d:59:bf:16:02:3c:6e:5b:84:9c:3f:0f: b5:aa:2a:7e:1a:df:3f:09:9f:b7:ee:e9:64:55:68: 35:50:af:89:f3:ab:c1:ea:21:84:b1:22:75:bd:cb: c6:31:57:50:8c:f3:4b:bd:b6:36:b0:74:11:b8:72: 46:e9:f2:d8:94:b0:08:eb:0a:4b:f1:1e:9b:eb:8e: 7b:f1:d1:ce:61:08:1b:30:5c:31:75:68:8d:cb:1c: fb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:3E:0B:C6:8C:1C:8A:D5:4C:19:52:68:1B:E0:47:7B:25:5C:DB:4A X509v3 Authority Key Identifier: keyid:5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:f8:8c:c6:d1:4f:62:a6:1a:51:23:b7:dd:a7:2e:45:4a:a6: fb:71:6c:de:87:3b:2d:f8:bf:2b:be:8a:f4:35:c7:70:38:dd: 57:89:87:3b:a0:5c:d6:54:68:e6:4a:76:dc:ae:09:3a:b6:bf: 7e:de:95:97:80:28:99:07:9e:5f:23:e6:f5:49:13:92:4d:77: 6f:0c:20:8e:16:70:67:fb:12:13:20:55:ab:2b:bd:4b:56:dc: 12:ef:12:b1:ec:e3:1d:72:4b:9f:de:65:56:58:b9:22:44:4f: 3b:b3:a7:d7:73:8b:7a:8d:64:00:52:29:e1:77:c4:d3:2f:31: 13:58:9b:fd:c2:d7:59:4a:d4:7f:22:c5:ba:4a:45:84:03:14: c9:ec:c6:42:5e:f3:53:02:fd:7b:c1:e8:f0:26:22:9f:cb:cc: 94:3a:b6:e4:7b:4d:f1:de:07:8a:2b:b3:3a:c1:c1:83:55:b9: d9:e3:bb:90:58:50:91:39:8e:0a:b4:45:0c:61:7e:60:26:cc: e9:5d:a2:d5:87:1c:c6:88:0e:d4:db:43:d3:4a:ab:16:af:19: e5:11:a3:92:db:c5:80:a4:71:f6:69:89:82:fe:e9:5b:5b:92: af:72:de:34:77:93:8d:ba:b8:4f:d6:86:3c:ba:ae:00:26:f3: 7d:87:e2:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEqv+pbuUhbanAQxn5rnH58ZsTnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM0MTNENTYyOTREOUQyMEU2NDk3OEI3Mjk2QTlEQTg5 M0MzMkNBQjAeFw0yNTA4MDcwMDE3MjRaFw0yNTA4MTAwNDA3MjRaMDMxMTAvBgNV BAMTKEY2M0UwQkM2OEMxQzhBRDU0QzE5NTI2ODFCRTA0NzdCMjU1Q0RCNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFkAohyq3wS3U5+Fd9tSWb/FFC iD5V22QezuYU2SKFstv/DN1qRViyigOjmWrGhko6y/UqOin5eu49Ri8CxAjwIjH2 qzhd45ddMxInrqRK6ROXE80bkEfyzAlF2bzadE/J39T97DxHeti8CgLzXITVYZP4 11xJIAXJgfQvmZcsRtU3IOjX4OEqMGSD4rRV1PsOEVXXsx+A6zUwn0K4rioiqCaG 4eFTil1ZvxYCPG5bhJw/D7WqKn4a3z8Jn7fu6WRVaDVQr4nzq8HqIYSxInW9y8Yx V1CM80u9tjawdBG4ckbp8tiUsAjrCkvxHpvrjnvx0c5hCBswXDF1aI3LHPuVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9j4LxowcitVMGVJoG+BHeyVc20owHwYDVR0j BBgwFoAUXEE9VilNnSDmSXi3KWqdqJPDLKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjNlYWJiNC00ZGIzLTQzNzMtYTM0OC1mYjFlZDcwNTU2NTEvMC81QzQxM0Q1NjI5 NEQ5RDIwRTY0OTc4QjcyOTZBOURBODkzQzMyQ0FCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM0MTNENTYyOTREOUQyMEU2NDk3OEI3Mjk2QTlEQTg5M0Mz MkNBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2IzZWFiYjQtNGRiMy00MzczLWEz NDgtZmIxZWQ3MDU1NjUxLzAvNUM0MTNENTYyOTREOUQyMEU2NDk3OEI3Mjk2QTlE QTg5M0MzMkNBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJn4jMbRT2KmGlEjt92nLkVKpvtxbN6HOy34 vyu+ivQ1x3A43VeJhzugXNZUaOZKdtyuCTq2v37elZeAKJkHnl8j5vVJE5JNd28M II4WcGf7EhMgVasrvUtW3BLvErHs4x1yS5/eZVZYuSJETzuzp9dzi3qNZABSKeF3 xNMvMRNYm/3C11lK1H8ixbpKRYQDFMnsxkJe81MC/XvB6PAmIp/LzJQ6tuR7TfHe B4orszrBwYNVudnju5BYUJE5jgq0RQxhfmAmzOldotWHHMaIDtTbQ9NKqxavGeUR o5LbxYCkcfZpiYL+6Vtbkq9y3jR3k426uE/Whjy6rgAm832H4j8= -----END CERTIFICATE-----Generated at Thu Aug 7 04:29:31 2025 by rpki-client