$ rpki-client -vvf repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft File: 5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft (raw, json) Hash identifier: bhS8GlhUwD3ucyQ/0xBFyBvMNU1WBQd/YyH5t+jrRT0= Subject key identifier: 45:12:3F:B8:AA:DA:FD:9F:AB:A8:3F:F0:48:19:84:0E:86:27:8C:ED Authority key identifier: 5C:72:06:DC:B1:B8:03:4A:48:5C:92:16:1B:2E:2C:76:62:78:0B:7F Certificate issuer: /CN=5C7206DCB1B8034A485C92161B2E2C7662780B7F Certificate serial: 48919E1E4B549956B3703BC8E77F70F4AC73D6A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft Manifest number: AD Signing time: Mon 04 Aug 2025 06:31:31 +0000 Manifest this update: Mon 04 Aug 2025 06:26:31 +0000 Manifest next update: Thu 07 Aug 2025 10:33:31 +0000 Files and hashes: 1: 5C7206DCB1B8034A485C92161B2E2C7662780B7F.crl (hash: pNTJOE1pRwwI12BEipmLLnW3AfcNb92Wor0uAD1rpPI=) 2: 3135372e36362e36322e302f32342d3234203d3e20313431363039.roa (hash: kxx1JK0LdXNsTF8QfIwwHGfN62dNPCh0hebrTNAvnqQ=) 3: 3135372e36362e36332e302f32342d3234203d3e20313431363039.roa (hash: FstWtQkW9FvLUrMcKy9YxX9ooaDEiRc2J9g9PtXgNVs=) 4: 3135372e36362e36322e302f32332d3233203d3e20313431363039.roa (hash: xg9KiTNoeyCjJ74fW/vHqv0QTukciiVKjOEW4/d1ihQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.crl rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 10:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:91:9e:1e:4b:54:99:56:b3:70:3b:c8:e7:7f:70:f4:ac:73:d6:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C7206DCB1B8034A485C92161B2E2C7662780B7F Validity Not Before: Aug 4 06:26:31 2025 GMT Not After : Aug 7 10:33:31 2025 GMT Subject: CN=45123FB8AADAFD9FABA83FF04819840E86278CED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d8:24:4f:02:6d:c8:ba:3f:1b:4d:fc:d6:6c: 96:21:2d:da:8e:80:c3:58:12:24:26:dd:12:1c:b5: 4d:24:f7:04:a1:76:d2:03:88:16:07:9b:89:9e:80: 33:c9:a1:4d:51:6c:1f:26:89:a0:7f:77:f7:82:cd: 9c:99:3f:76:b2:67:3c:c6:ef:65:fb:ec:f2:fa:7d: 79:f6:2b:49:ea:77:cd:b8:24:1e:d6:1f:c3:59:b2: ed:0e:8e:66:61:ac:c9:a6:4a:a5:d1:85:a0:0f:bc: 74:f4:9a:a0:96:cb:8c:9b:59:20:21:57:1c:ec:52: da:21:15:c5:f0:3a:e5:3a:df:85:0e:d5:62:b0:0d: 32:e9:a6:6c:03:53:93:7d:1f:ac:b4:75:8c:e7:16: 2e:62:ce:85:0c:29:32:e4:9b:b7:b5:f5:de:1d:1e: 05:7e:1f:ae:42:b8:a9:4b:0f:15:e2:54:6e:31:e9: a3:6a:72:90:d7:0e:96:4b:9a:8f:da:e4:dc:3f:f4: fb:12:db:98:ff:b3:42:b4:a9:3f:c7:4a:4e:7f:14: 73:2a:ed:38:a2:7a:a0:7d:fe:93:65:7c:1e:5f:bf: 5f:50:5a:6f:ed:8f:df:b9:79:f8:76:16:f4:59:ef: 4b:1f:72:d4:7a:ae:cd:d6:76:cb:67:b4:b1:3a:33: e0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:12:3F:B8:AA:DA:FD:9F:AB:A8:3F:F0:48:19:84:0E:86:27:8C:ED X509v3 Authority Key Identifier: keyid:5C:72:06:DC:B1:B8:03:4A:48:5C:92:16:1B:2E:2C:76:62:78:0B:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a4:6c:f9:08:e1:21:08:11:b8:02:ae:b6:e1:90:a4:8d:52: 2c:04:a8:44:34:9a:0e:0f:72:e6:a3:8f:ac:53:6f:4b:64:8d: 7b:78:e1:bc:6f:b2:83:34:b6:af:44:bd:c8:25:78:6b:3a:19: 5d:be:4d:e8:51:75:3d:7e:14:0c:5e:aa:5d:10:4a:c9:a4:51: 8b:91:7a:33:3d:f4:1d:cb:26:a8:96:7e:05:75:90:29:6e:a9: 00:bc:c6:1a:51:2d:02:44:5b:e4:44:eb:1b:5f:79:df:4c:9b: bb:8a:78:57:8f:35:e9:92:8c:c7:7e:6d:54:b7:d0:dc:2f:97: 13:26:4c:ba:0a:0f:1d:fa:51:0e:29:b7:02:f9:c5:96:00:e7: 41:c8:a1:43:72:96:d8:c1:e7:0f:9b:1f:58:0a:13:df:ab:3d: 1e:da:47:56:0f:76:19:d1:26:5f:a3:51:28:36:00:84:27:9b: 0a:6e:66:17:c9:dc:26:b4:57:67:b4:a3:cb:39:10:5c:3b:d7: 2e:98:ee:e0:64:ff:c5:1d:37:b8:17:d1:13:e1:af:3b:d8:a3: 89:5f:83:07:f7:ff:40:7e:73:98:50:76:37:ae:d2:ae:58:d3: c1:86:16:02:61:27:4d:b3:86:ce:f3:4d:b2:20:bb:37:ff:b2: 8e:93:52:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSJGeHktUmVazcDvI539w9Kxz1qgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM3MjA2RENCMUI4MDM0QTQ4NUM5MjE2MUIyRTJDNzY2 Mjc4MEI3RjAeFw0yNTA4MDQwNjI2MzFaFw0yNTA4MDcxMDMzMzFaMDMxMTAvBgNV BAMTKDQ1MTIzRkI4QUFEQUZEOUZBQkE4M0ZGMDQ4MTk4NDBFODYyNzhDRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC12CRPAm3Iuj8bTfzWbJYhLdqO gMNYEiQm3RIctU0k9wShdtIDiBYHm4megDPJoU1RbB8miaB/d/eCzZyZP3ayZzzG 72X77PL6fXn2K0nqd824JB7WH8NZsu0OjmZhrMmmSqXRhaAPvHT0mqCWy4ybWSAh VxzsUtohFcXwOuU634UO1WKwDTLppmwDU5N9H6y0dYznFi5izoUMKTLkm7e19d4d HgV+H65CuKlLDxXiVG4x6aNqcpDXDpZLmo/a5Nw/9PsS25j/s0K0qT/HSk5/FHMq 7TiieqB9/pNlfB5fv19QWm/tj9+5efh2FvRZ70sfctR6rs3WdstntLE6M+BxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURRI/uKra/Z+rqD/wSBmEDoYnjO0wHwYDVR0j BBgwFoAUXHIG3LG4A0pIXJIWGy4sdmJ4C38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZGRiYjc5Yy05ZWEyLTQ3ZjAtYjQ1Zi0xODE2NjUwYmEyM2YvMC81QzcyMDZEQ0Ix QjgwMzRBNDg1QzkyMTYxQjJFMkM3NjYyNzgwQjdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUM3MjA2RENCMUI4MDM0QTQ4NUM5MjE2MUIyRTJDNzY2Mjc4 MEI3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2RkYmI3OWMtOWVhMi00N2YwLWI0 NWYtMTgxNjY1MGJhMjNmLzAvNUM3MjA2RENCMUI4MDM0QTQ4NUM5MjE2MUIyRTJD NzY2Mjc4MEI3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFykbPkI4SEIEbgCrrbhkKSNUiwEqEQ0mg4P cuajj6xTb0tkjXt44bxvsoM0tq9EvcgleGs6GV2+TehRdT1+FAxeql0QSsmkUYuR ejM99B3LJqiWfgV1kCluqQC8xhpRLQJEW+RE6xtfed9Mm7uKeFePNemSjMd+bVS3 0NwvlxMmTLoKDx36UQ4ptwL5xZYA50HIoUNyltjB5w+bH1gKE9+rPR7aR1YPdhnR Jl+jUSg2AIQnmwpuZhfJ3Ca0V2e0o8s5EFw71y6Y7uBk/8UdN7gX0RPhrzvYo4lf gwf3/0B+c5hQdjeu0q5Y08GGFgJhJ02zhs7zTbIguzf/so6TUjw= -----END CERTIFICATE-----Generated at Wed Aug 6 09:23:56 2025 by rpki-client