$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft File: 5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft (raw, json) Hash identifier: 4jF3fxFpdbtazLow4pOSSg2G9NDia0JSqS17flrqLwc= Subject key identifier: 9C:49:8D:48:31:55:76:F6:94:2C:B5:8F:2E:FA:36:4B:C8:5C:24:7A Authority key identifier: 5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D Certificate issuer: /CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D Certificate serial: 893FEEE0A6178EB398B125CCA6BC6874BC6E95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft Manifest number: C0 Signing time: Wed 06 Aug 2025 04:11:08 +0000 Manifest this update: Wed 06 Aug 2025 04:06:08 +0000 Manifest next update: Sat 09 Aug 2025 06:35:08 +0000 Files and hashes: 1: 3136302e32322e362e302f32332d3233203d3e20313532373936.roa (hash: MlPD1Cp5WkgMa2H7CRUKYw5NrewBHnE4PxE2BVKQlL0=) 2: 3136302e32322e362e302f32342d3234203d3e20313532373936.roa (hash: lZoAiDIfwdwZRfkj/NcAK+vDJElzUZIJDOrxy0zEGf4=) 3: 5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl (hash: uo9WFVsLLWA5tjTSQV0y1utX377CwMY4VdhPeRVYTnk=) 4: 3136302e32322e372e302f32342d3234203d3e20313532373936.roa (hash: Se9if4ahUM8UZ9DwPwRriHNSzgliBVi3qv7HNc4T4+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 06:35:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89:3f:ee:e0:a6:17:8e:b3:98:b1:25:cc:a6:bc:68:74:bc:6e:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D Validity Not Before: Aug 6 04:06:08 2025 GMT Not After : Aug 9 06:35:08 2025 GMT Subject: CN=9C498D48315576F6942CB58F2EFA364BC85C247A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ea:bb:aa:0f:77:14:fa:4a:a9:98:06:3f:cf: f3:93:37:18:9d:cd:75:06:c4:61:1a:f1:5f:20:6f: 01:84:00:7c:93:53:1c:6f:42:30:6d:03:43:58:37: 67:5f:98:a7:1e:66:c4:93:27:a2:2a:b6:af:a9:c6: 2c:90:93:52:60:a3:b4:f9:4c:30:db:d7:f9:6d:a5: 38:ac:f3:24:dd:5c:e8:e3:bf:6c:c8:b4:f3:b6:5e: b4:10:5e:e1:00:40:2a:92:2c:b0:b4:79:99:24:2b: 92:da:2e:e8:4a:68:92:11:c9:e3:98:25:1b:14:88: 1c:7e:6f:14:a6:a2:12:df:9c:3a:fc:d1:2e:d0:7a: 69:cd:ac:bd:84:67:14:3b:61:2b:a7:ef:cb:7f:32: 8a:29:a4:5c:75:68:d3:33:49:2d:8c:08:ed:53:83: 1f:db:1b:df:3e:37:32:b7:22:62:a8:19:21:8d:21: d5:0c:e7:02:d2:95:70:1a:6b:26:8b:b3:a9:2a:02: 0d:5c:91:e9:2c:ed:c6:b0:30:69:93:e0:35:5c:fa: 87:7e:a4:26:aa:ed:18:2f:a5:29:9c:ce:6f:7b:40: b4:5e:38:dd:cc:76:83:dc:cd:fc:3d:74:95:dc:03: ce:33:fb:01:bc:5f:37:0e:a4:13:b4:b1:de:de:4d: 39:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:49:8D:48:31:55:76:F6:94:2C:B5:8F:2E:FA:36:4B:C8:5C:24:7A X509v3 Authority Key Identifier: keyid:5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:c1:27:87:57:61:39:3f:8b:50:bf:b0:3b:6d:6a:4c:23:cb: 8f:60:5e:da:fe:6b:78:b2:a0:9b:1d:58:59:e2:51:47:6a:8c: 4d:59:b4:e4:c9:7d:1c:bc:db:4a:a4:1b:fa:25:a0:ee:34:d2: e7:ae:03:a0:12:b7:6a:d1:2a:fe:de:ce:71:95:40:4c:1c:38: a9:d6:29:6d:ac:f9:c2:f1:9c:00:ae:0c:df:6c:1e:ee:6d:6a: f5:ab:46:12:82:ad:59:5e:b7:ac:20:f4:6d:7c:d5:00:bc:e3: b8:9a:5c:9b:08:f0:c4:d0:a1:c3:bc:b8:84:4c:34:26:53:53: c3:b6:a3:3a:b5:b9:fa:96:81:a3:c5:a2:91:6a:53:2b:f6:fe: ab:c5:cb:d3:5b:df:5e:26:06:ba:5e:74:6e:5e:d1:b1:b8:ab: 70:8d:06:43:6e:fa:17:f1:44:bf:00:d2:3e:09:cd:dc:6f:41: e9:2c:e4:f0:f5:f1:cd:6f:ab:43:a2:eb:79:ef:f8:85:92:ec: 92:29:05:35:15:4a:a4:4d:d4:3b:b3:a9:4a:85:75:94:93:1a: 80:0d:0b:2b:c8:cb:ba:dc:f6:e4:d3:9e:2b:52:4b:55:1e:b9: 3e:87:91:e6:72:5e:26:7a:7c:4f:aa:ac:32:dd:5c:fd:8f:e6: 1d:3d:a9:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAIk/7uCmF46zmLElzKa8aHS8bpUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2MDQy RjBCNkQ3RDAeFw0yNTA4MDYwNDA2MDhaFw0yNTA4MDkwNjM1MDhaMDMxMTAvBgNV BAMTKDlDNDk4RDQ4MzE1NTc2RjY5NDJDQjU4RjJFRkEzNjRCQzg1QzI0N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo6ruqD3cU+kqpmAY/z/OTNxid zXUGxGEa8V8gbwGEAHyTUxxvQjBtA0NYN2dfmKceZsSTJ6Iqtq+pxiyQk1Jgo7T5 TDDb1/ltpTis8yTdXOjjv2zItPO2XrQQXuEAQCqSLLC0eZkkK5LaLuhKaJIRyeOY JRsUiBx+bxSmohLfnDr80S7QemnNrL2EZxQ7YSun78t/MooppFx1aNMzSS2MCO1T gx/bG98+NzK3ImKoGSGNIdUM5wLSlXAaayaLs6kqAg1ckeks7cawMGmT4DVc+od+ pCaq7RgvpSmczm97QLReON3MdoPczfw9dJXcA84z+wG8XzcOpBO0sd7eTTkNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnEmNSDFVdvaULLWPLvo2S8hcJHowHwYDVR0j BBgwFoAUXjI/nX2oTYVuukjHbps2BC8LbX0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5ODgxNi01YWY5LTQ3ZWYtYjk4OS00MmYyNzMxODQ4YmUvMC81RTMyM0Y5RDdE QTg0RDg1NkVCQTQ4Qzc2RTlCMzYwNDJGMEI2RDdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2MDQyRjBC NkQ3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzAvNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2 MDQyRjBCNkQ3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHBJ4dXYTk/i1C/sDttakwjy49gXtr+a3iy oJsdWFniUUdqjE1ZtOTJfRy820qkG/oloO400ueuA6ASt2rRKv7eznGVQEwcOKnW KW2s+cLxnACuDN9sHu5tavWrRhKCrVlet6wg9G181QC847iaXJsI8MTQocO8uIRM NCZTU8O2ozq1ufqWgaPFopFqUyv2/qvFy9Nb314mBrpedG5e0bG4q3CNBkNu+hfx RL8A0j4JzdxvQeks5PD18c1vq0Oi63nv+IWS7JIpBTUVSqRN1DuzqUqFdZSTGoAN CyvIy7rc9uTTnitSS1UeuT6HkeZyXiZ6fE+qrDLdXP2P5h09qYo= -----END CERTIFICATE-----Generated at Thu Aug 7 23:58:36 2025 by rpki-client