$ rpki-client -vvf repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft File: 5AE57F3F97F40888F93913350A218863E705CD34.mft (raw, json) Hash identifier: 5kxxzRAiw29CiUdFPzkAGwojor9ikSxBbQiVwiJSo38= Subject key identifier: 14:31:51:3B:93:5F:8C:5B:19:A4:0E:5B:DE:EA:7E:77:66:E0:91:35 Authority key identifier: 5A:E5:7F:3F:97:F4:08:88:F9:39:13:35:0A:21:88:63:E7:05:CD:34 Certificate issuer: /CN=5AE57F3F97F40888F93913350A218863E705CD34 Certificate serial: 79A75D8912D2D5F03A37DB716403B1B74D1F1D94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft Manifest number: 0230 Signing time: Mon 04 Aug 2025 21:01:26 +0000 Manifest this update: Mon 04 Aug 2025 20:56:26 +0000 Manifest next update: Fri 08 Aug 2025 03:28:26 +0000 Files and hashes: 1: 5AE57F3F97F40888F93913350A218863E705CD34.crl (hash: pvvVl7I5hiCcuqWi+LQEf6Fqf3MUih9R6bJ0Q4GtTGg=) 2: 3130332e3138332e31302e302f32342d3234203d3e20313339393637.roa (hash: lDreBV2a5k+F2nOzqdVDXyLmxgTFmhT5IbglBwCmDnU=) 3: 3130332e3138332e31312e302f32342d3234203d3e20313339393637.roa (hash: NfTWOpBX5TEsx2AN4GNz4kZXIBLNbd1V2CGYNCmRu/U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.crl rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 03:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:a7:5d:89:12:d2:d5:f0:3a:37:db:71:64:03:b1:b7:4d:1f:1d:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AE57F3F97F40888F93913350A218863E705CD34 Validity Not Before: Aug 4 20:56:26 2025 GMT Not After : Aug 8 03:28:26 2025 GMT Subject: CN=1431513B935F8C5B19A40E5BDEEA7E7766E09135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:00:dd:e5:3c:85:dd:8c:93:4e:d2:e4:62:39: ab:66:92:30:8c:25:26:58:f1:8a:d4:c9:e7:49:b5: 96:1f:14:de:5e:8e:5a:46:21:fd:f0:0b:ec:7d:57: 73:11:ce:b6:4e:81:f0:01:fc:ce:06:be:96:c0:57: ef:48:19:27:54:c0:33:0a:21:4f:0b:ee:04:7d:9d: ed:7f:b7:54:6a:5e:ba:57:60:46:a4:55:33:70:5a: 06:83:5e:7c:6a:1f:99:97:56:42:46:19:e6:4d:4d: ff:76:f8:c1:7b:11:1f:f3:5e:bb:3f:d7:8c:98:a9: 0b:63:26:2a:26:5a:82:97:42:84:20:b0:26:3b:17: 47:e7:36:19:3b:43:66:82:5a:64:80:4d:73:ad:7a: 28:e1:c0:66:6c:71:2d:31:af:ee:99:49:ed:c0:59: df:77:c5:b1:0c:ed:5b:10:0c:cc:d4:41:0a:fe:9c: 9e:e3:44:55:ba:3e:40:94:9e:d0:0c:5c:6e:14:92: e1:27:37:a1:6e:3a:52:38:d2:94:b1:88:98:f8:a1: 6b:46:b6:cc:9d:0d:42:f8:2b:4e:ad:26:48:02:8e: 09:e7:72:96:b2:35:b5:e2:f8:b8:f0:21:f3:fd:cf: a0:97:19:d1:1e:16:45:1f:5d:ec:04:23:83:2b:32: 14:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:31:51:3B:93:5F:8C:5B:19:A4:0E:5B:DE:EA:7E:77:66:E0:91:35 X509v3 Authority Key Identifier: keyid:5A:E5:7F:3F:97:F4:08:88:F9:39:13:35:0A:21:88:63:E7:05:CD:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:60:21:a1:92:c9:dc:3e:c6:e0:77:f6:09:c5:e8:ac:1a:f3: bd:34:ce:cd:55:fd:c2:ed:6a:4e:71:a8:b8:f2:cf:f6:b7:f1: 04:b0:d4:08:ac:b4:d7:f0:e9:7c:a9:c2:0a:73:bb:d6:4e:aa: 72:78:b2:0a:34:73:2a:bf:d1:d0:68:c6:81:f2:71:9f:ab:dc: 58:2d:86:c8:3c:f1:e8:70:38:80:e6:4b:32:0a:22:3a:64:c6: 0d:c3:d8:d9:80:68:c9:a5:fa:7f:91:60:21:0e:39:65:b6:d1: c4:41:57:e2:34:74:95:3a:07:0a:35:dd:5d:a7:6d:3e:6b:2f: b7:97:76:5e:cc:3f:46:04:9b:68:f3:d5:be:80:de:bf:99:dc: a1:81:c4:eb:cc:6e:36:8d:bf:a4:ed:27:07:fe:73:53:3e:62: 3e:de:47:c5:5e:b2:3e:1c:58:1d:19:3e:ff:d3:12:fa:74:62: be:f5:89:60:c6:b9:78:ee:61:f3:3d:d7:cf:fa:64:b1:08:c1: 45:37:df:eb:43:1d:95:a4:ca:5b:ba:76:86:be:4d:ec:06:2b: 7c:e4:63:9c:af:80:c7:37:bb:65:56:58:bf:f2:44:17:44:b9: 73:31:12:3a:e9:b0:e5:72:c3:dd:e3:0a:ab:86:0d:32:fb:b6: 02:e5:97:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeaddiRLS1fA6N9txZAOxt00fHZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4NjNF NzA1Q0QzNDAeFw0yNTA4MDQyMDU2MjZaFw0yNTA4MDgwMzI4MjZaMDMxMTAvBgNV BAMTKDE0MzE1MTNCOTM1RjhDNUIxOUE0MEU1QkRFRUE3RTc3NjZFMDkxMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzAN3lPIXdjJNO0uRiOatmkjCM JSZY8YrUyedJtZYfFN5ejlpGIf3wC+x9V3MRzrZOgfAB/M4GvpbAV+9IGSdUwDMK IU8L7gR9ne1/t1RqXrpXYEakVTNwWgaDXnxqH5mXVkJGGeZNTf92+MF7ER/zXrs/ 14yYqQtjJiomWoKXQoQgsCY7F0fnNhk7Q2aCWmSATXOteijhwGZscS0xr+6ZSe3A Wd93xbEM7VsQDMzUQQr+nJ7jRFW6PkCUntAMXG4UkuEnN6FuOlI40pSxiJj4oWtG tsydDUL4K06tJkgCjgnncpayNbXi+LjwIfP9z6CXGdEeFkUfXewEI4MrMhTVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFDFRO5NfjFsZpA5b3up+d2bgkTUwHwYDVR0j BBgwFoAUWuV/P5f0CIj5ORM1CiGIY+cFzTQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDhjZGY1YS1iOWE3LTQ0NjktYTY1My1jOWZmMmEwMDM3NzMvMC81QUU1N0YzRjk3 RjQwODg4RjkzOTEzMzUwQTIxODg2M0U3MDVDRDM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4NjNFNzA1 Q0QzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ4Y2RmNWEtYjlhNy00NDY5LWE2 NTMtYzlmZjJhMDAzNzczLzAvNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4 NjNFNzA1Q0QzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKdgIaGSydw+xuB39gnF6Kwa8700zs1V/cLt ak5xqLjyz/a38QSw1AistNfw6Xypwgpzu9ZOqnJ4sgo0cyq/0dBoxoHycZ+r3Fgt hsg88ehwOIDmSzIKIjpkxg3D2NmAaMml+n+RYCEOOWW20cRBV+I0dJU6Bwo13V2n bT5rL7eXdl7MP0YEm2jz1b6A3r+Z3KGBxOvMbjaNv6TtJwf+c1M+Yj7eR8Vesj4c WB0ZPv/TEvp0Yr71iWDGuXjuYfM918/6ZLEIwUU33+tDHZWkylu6doa+TewGK3zk Y5yvgMc3u2VWWL/yRBdEuXMxEjrpsOVyw93jCquGDTL7tgLllzQ= -----END CERTIFICATE-----Generated at Thu Aug 7 04:25:14 2025 by rpki-client