$ rpki-client -vvf repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft File: CA5B0322788B7A041373A944677E83F0D48FF4E7.mft (raw, json) Hash identifier: OXDCHsLprCZtnfqBdnBkMDzrzwAZciG0U9XOtAJLEtM= Subject key identifier: 00:4D:F1:89:B1:45:5F:58:22:24:C7:DE:0C:C7:25:0C:16:69:F3:31 Authority key identifier: CA:5B:03:22:78:8B:7A:04:13:73:A9:44:67:7E:83:F0:D4:8F:F4:E7 Certificate issuer: /CN=CA5B0322788B7A041373A944677E83F0D48FF4E7 Certificate serial: 2A8F907656A3C4CDF11DBEDFB29F5B393FE8CE21 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA5B0322788B7A041373A944677E83F0D48FF4E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft Manifest number: B5 Signing time: Thu 07 Aug 2025 15:51:08 +0000 Manifest this update: Thu 07 Aug 2025 15:46:08 +0000 Manifest next update: Sun 10 Aug 2025 22:53:08 +0000 Files and hashes: 1: 3130332e37312e3136302e302f32322d3234203d3e20313339393831.roa (hash: lDykVwxJoW4GFsi2L2TOWuZVobAaZLaNG/GuK7uwVOw=) 2: CA5B0322788B7A041373A944677E83F0D48FF4E7.crl (hash: /CG6tKzlhvO5zq7sSNe8SSsDCDf7wWBKUgCfWH0ZiQk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.crl rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA5B0322788B7A041373A944677E83F0D48FF4E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 22:53:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:8f:90:76:56:a3:c4:cd:f1:1d:be:df:b2:9f:5b:39:3f:e8:ce:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA5B0322788B7A041373A944677E83F0D48FF4E7 Validity Not Before: Aug 7 15:46:08 2025 GMT Not After : Aug 10 22:53:08 2025 GMT Subject: CN=004DF189B1455F582224C7DE0CC7250C1669F331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:68:0a:61:b4:55:c0:b0:2c:c7:5b:a2:f9:fc: 18:20:7d:70:53:48:ac:da:65:66:ea:42:89:7c:e3: 4e:6c:0a:89:35:36:93:d9:3b:0d:1a:54:19:f9:e9: 5e:64:46:93:52:a3:46:ae:71:51:b8:2e:f3:f3:3b: 87:80:2f:ad:84:b0:57:c2:40:86:5d:57:8a:20:1b: 7d:d2:af:8f:13:a6:f1:48:d0:9f:44:70:ca:c6:a7: d0:82:68:ca:fc:73:48:c7:2a:1e:0a:bd:8f:e5:15: c3:7f:af:f6:c0:17:ad:69:2b:8d:fc:79:f3:7e:8a: 53:8a:4e:d9:53:b6:98:95:3e:d5:97:7a:39:6e:fe: 9f:a5:59:62:99:02:61:5c:6a:d9:63:fa:16:0d:98: dc:f1:c2:95:27:65:d4:40:99:fc:68:60:eb:70:84: ed:c9:1c:f0:51:9a:4b:50:53:2f:bb:25:a0:d8:0a: 9f:50:4e:9d:cc:66:bd:fa:15:cb:a1:b9:9c:cc:fd: 01:c6:8d:24:02:4a:c9:09:c0:f8:41:74:dc:c3:e4: 76:74:fe:ba:9f:a9:c3:d5:2f:10:d7:ba:8d:46:d5: d8:d7:dd:58:f5:bf:95:64:9c:e6:c5:46:bb:28:3b: 03:f1:3d:44:ba:a4:01:01:b1:2a:5b:c6:6e:55:82: 4c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:4D:F1:89:B1:45:5F:58:22:24:C7:DE:0C:C7:25:0C:16:69:F3:31 X509v3 Authority Key Identifier: keyid:CA:5B:03:22:78:8B:7A:04:13:73:A9:44:67:7E:83:F0:D4:8F:F4:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA5B0322788B7A041373A944677E83F0D48FF4E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:8e:9e:cd:70:aa:75:1a:8f:df:68:c0:3e:6c:37:9c:ff:13: fa:36:40:6c:ff:ec:66:bc:57:39:ff:11:41:40:75:da:56:4d: 87:c9:51:22:ff:b9:d1:65:83:91:ef:f3:be:15:10:6a:02:df: 13:02:d2:e9:24:72:43:a0:01:11:9e:22:2d:99:fd:aa:0a:55: 60:ee:31:9c:ed:ed:43:8b:4b:e4:e4:bb:57:25:cf:4e:09:3d: 59:53:5e:3c:44:ea:37:d6:74:f2:6b:95:1d:18:04:cd:5e:e9: 8c:87:6c:3c:9f:3d:56:08:3c:44:3e:68:13:28:26:c2:55:1d: a2:5e:82:db:0d:9c:05:19:12:74:d1:19:88:9d:37:84:f5:77: 55:43:c7:47:6c:19:b7:04:84:25:1d:43:ac:bd:65:4d:81:69: 28:43:0a:53:5d:95:82:37:56:3f:0c:7a:20:ca:ea:4c:d3:e5: 2c:08:c9:61:c5:05:f8:e7:99:32:ef:cc:29:4e:da:b4:56:e0: d8:7a:74:42:ca:41:86:91:58:f5:ec:31:44:18:55:d5:d8:47: ef:0d:b1:d8:8f:67:02:8f:b3:ac:c9:62:3d:a6:01:60:47:7b: 61:50:48:77:58:a2:e4:c1:a2:e7:b3:21:69:65:8a:b1:e4:8f: 24:74:55:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKo+QdlajxM3xHb7fsp9bOT/oziEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E1QjAzMjI3ODhCN0EwNDEzNzNBOTQ0Njc3RTgzRjBE NDhGRjRFNzAeFw0yNTA4MDcxNTQ2MDhaFw0yNTA4MTAyMjUzMDhaMDMxMTAvBgNV BAMTKDAwNERGMTg5QjE0NTVGNTgyMjI0QzdERTBDQzcyNTBDMTY2OUYzMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoaAphtFXAsCzHW6L5/BggfXBT SKzaZWbqQol8405sCok1NpPZOw0aVBn56V5kRpNSo0aucVG4LvPzO4eAL62EsFfC QIZdV4ogG33Sr48TpvFI0J9EcMrGp9CCaMr8c0jHKh4KvY/lFcN/r/bAF61pK438 efN+ilOKTtlTtpiVPtWXejlu/p+lWWKZAmFcatlj+hYNmNzxwpUnZdRAmfxoYOtw hO3JHPBRmktQUy+7JaDYCp9QTp3MZr36FcuhuZzM/QHGjSQCSskJwPhBdNzD5HZ0 /rqfqcPVLxDXuo1G1djX3Vj1v5VknObFRrsoOwPxPUS6pAEBsSpbxm5VgkzNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAE3xibFFX1giJMfeDMclDBZp8zEwHwYDVR0j BBgwFoAUylsDIniLegQTc6lEZ36D8NSP9OcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZWJhODY3YS04Zjg0LTQ2NjMtYjMyMC1mNDM1MjgyYjlmZmUvMC9DQTVCMDMyMjc4 OEI3QTA0MTM3M0E5NDQ2NzdFODNGMEQ0OEZGNEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E1QjAzMjI3ODhCN0EwNDEzNzNBOTQ0Njc3RTgzRjBENDhG RjRFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGViYTg2N2EtOGY4NC00NjYzLWIz MjAtZjQzNTI4MmI5ZmZlLzAvQ0E1QjAzMjI3ODhCN0EwNDEzNzNBOTQ0Njc3RTgz RjBENDhGRjRFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGyOns1wqnUaj99owD5sN5z/E/o2QGz/7Ga8 Vzn/EUFAddpWTYfJUSL/udFlg5Hv874VEGoC3xMC0ukkckOgARGeIi2Z/aoKVWDu MZzt7UOLS+Tku1clz04JPVlTXjxE6jfWdPJrlR0YBM1e6YyHbDyfPVYIPEQ+aBMo JsJVHaJegtsNnAUZEnTRGYidN4T1d1VDx0dsGbcEhCUdQ6y9ZU2BaShDClNdlYI3 Vj8MeiDK6kzT5SwIyWHFBfjnmTLvzClO2rRW4Nh6dELKQYaRWPXsMUQYVdXYR+8N sdiPZwKPs6zJYj2mAWBHe2FQSHdYouTBouezIWllirHkjyR0Vec= -----END CERTIFICATE-----Generated at Fri Aug 8 10:14:48 2025 by rpki-client