$ rpki-client -vvf repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft File: 5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft (raw, json) Hash identifier: hXyjgLoSMAyxYH4+QFLFjUnQtmTtZ8KUDFpuazrsqTk= Subject key identifier: E7:75:66:6C:34:4D:D6:0F:16:F9:16:09:25:92:84:5D:FA:63:38:24 Authority key identifier: 5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B Certificate issuer: /CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B Certificate serial: 58723A6EB51769EDCA92D3F32E636FCB306F63FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft Manifest number: 0222 Signing time: Tue 05 Aug 2025 04:32:25 +0000 Manifest this update: Tue 05 Aug 2025 04:27:25 +0000 Manifest next update: Fri 08 Aug 2025 14:43:25 +0000 Files and hashes: 1: 3130332e3138342e31382e302f32332d3233203d3e20313439363735.roa (hash: 8hPXkuW34xkK66/r5oL+jYYUmOueTjKMrZh36goENDw=) 2: 5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl (hash: HEyEURUpZixm0j0+RSSSQqXyy+BH6et1i4dNcLYmn7M=) 3: 3130332e3138342e31392e302f32342d3234203d3e203438343635.roa (hash: QzihEc5MkFa7NqybYwRpohd7XvTO9rPruJzvUalzVM8=) 4: 3130332e3138342e31382e302f32342d3234203d3e203438343635.roa (hash: 0IGopCvXSRXbCg3kz6wjCn1/1Kczl4zkhji2/R4GIz4=) 5: 3130332e3138342e31392e302f32342d3234203d3e20313439363735.roa (hash: i4XCxm32VCNZ/zacmmSjbAzxATWwcS43fZzejb3pvRo=) 6: 3130332e3138342e31382e302f32342d3234203d3e20313439363735.roa (hash: 4BUtx10alv/ZZ9FJolZJ3I8WhlB5v1F5iKW6alQrr7c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 14:43:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:72:3a:6e:b5:17:69:ed:ca:92:d3:f3:2e:63:6f:cb:30:6f:63:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B Validity Not Before: Aug 5 04:27:25 2025 GMT Not After : Aug 8 14:43:25 2025 GMT Subject: CN=E775666C344DD60F16F916092592845DFA633824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7b:d8:f4:d9:e8:98:a0:53:96:75:95:09:31: 84:82:37:ca:47:0d:10:82:4f:39:8a:d5:ea:53:79: 9a:2a:76:f8:93:88:b2:56:e5:49:12:79:c0:ee:9f: 57:f9:62:1d:65:09:cc:0f:13:b3:f2:f0:1b:68:59: e5:74:c6:f9:8f:1a:d6:61:27:d8:72:a3:0d:8b:62: 18:c1:cf:61:88:db:e5:19:cd:c4:f8:6d:7d:88:59: 54:e9:46:5b:21:97:b6:af:8e:6c:85:7e:6e:e6:b7: 0b:54:f0:d4:c8:95:75:da:23:22:57:bb:9a:5f:0b: 79:00:d2:f3:60:20:5f:ef:01:55:c0:72:a3:56:bb: b8:65:b7:eb:50:1c:fc:85:1d:c4:57:74:55:76:4d: ba:eb:2c:6e:e5:ab:d5:cf:68:4c:3b:57:6c:8f:2a: af:5f:49:1f:64:e4:81:82:b5:41:18:13:c7:3f:34: 87:f4:0a:36:45:7f:c7:92:e5:d2:c6:1b:89:eb:99: 63:78:ab:e3:90:92:99:0d:f6:67:19:f8:89:79:00: ff:3e:71:11:57:a7:97:5b:62:7c:f7:03:34:fd:ff: da:a1:a6:ef:bd:86:42:83:e4:9d:18:8e:b3:fa:7d: 08:1a:88:d2:62:05:fb:1e:c3:b7:2c:a2:0c:47:7e: 8f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:75:66:6C:34:4D:D6:0F:16:F9:16:09:25:92:84:5D:FA:63:38:24 X509v3 Authority Key Identifier: keyid:5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:24:b2:75:38:b7:bc:68:f5:84:8d:d0:84:ad:66:92:c6:da: ab:6c:0a:3e:3c:bd:6d:8f:dd:5f:3a:6a:57:6f:0d:0e:f7:57: 77:1e:2e:92:54:26:be:e3:3c:62:b4:ff:62:7f:79:6e:ce:2a: 6e:c2:93:aa:da:f7:f1:8d:53:09:75:67:af:50:56:9f:3d:19: cf:1d:58:d6:eb:8b:e0:9d:19:5d:88:42:fb:3b:82:d6:47:c8: 76:7d:7a:de:35:dd:2d:18:63:11:9d:0f:55:d2:b2:3d:fd:15: 0b:6c:32:52:b5:86:f3:92:a7:99:a6:7a:0a:12:f7:1f:52:a0: 9b:5a:7a:ee:d7:c4:07:a0:e8:34:42:e3:c0:4c:89:e7:d8:84: 3c:c5:93:34:9a:4a:c3:78:60:a2:bf:a9:c9:cd:af:5e:c3:4f: 6d:40:5e:8c:2c:7a:c6:7a:06:82:21:11:74:c7:18:08:af:fe: 65:76:9f:92:69:bc:37:71:8b:14:83:05:73:03:aa:ef:ad:95: 6b:64:9c:4f:62:30:95:1e:d2:a1:23:87:e1:2b:e8:20:e0:ff: 19:92:b8:5c:30:48:40:a0:81:05:27:32:c7:f0:f3:6b:f0:eb: b2:cb:17:bf:e1:30:3d:b2:40:02:b6:74:a4:b7:ae:d5:d6:4c: 99:dc:ee:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWHI6brUXae3KktPzLmNvyzBvY/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIyMkY5 MDg5NTUyQjAeFw0yNTA4MDUwNDI3MjVaFw0yNTA4MDgxNDQzMjVaMDMxMTAvBgNV BAMTKEU3NzU2NjZDMzQ0REQ2MEYxNkY5MTYwOTI1OTI4NDVERkE2MzM4MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/e9j02eiYoFOWdZUJMYSCN8pH DRCCTzmK1epTeZoqdviTiLJW5UkSecDun1f5Yh1lCcwPE7Py8BtoWeV0xvmPGtZh J9hyow2LYhjBz2GI2+UZzcT4bX2IWVTpRlshl7avjmyFfm7mtwtU8NTIlXXaIyJX u5pfC3kA0vNgIF/vAVXAcqNWu7hlt+tQHPyFHcRXdFV2TbrrLG7lq9XPaEw7V2yP Kq9fSR9k5IGCtUEYE8c/NIf0CjZFf8eS5dLGG4nrmWN4q+OQkpkN9mcZ+Il5AP8+ cRFXp5dbYnz3AzT9/9qhpu+9hkKD5J0YjrP6fQgaiNJiBfsew7csogxHfo+dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU53VmbDRN1g8W+RYJJZKEXfpjOCQwHwYDVR0j BBgwFoAUWkD9GeLdU4DLblAvFtsiL5CJVSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MGQ5MTRlZi0wYjFmLTQ5MGItODA4ZC1hMjdiODNmZjlhM2UvMC81QTQwRkQxOUUy REQ1MzgwQ0I2RTUwMkYxNkRCMjIyRjkwODk1NTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIyMkY5MDg5 NTUyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjBkOTE0ZWYtMGIxZi00OTBiLTgw OGQtYTI3YjgzZmY5YTNlLzAvNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIy MkY5MDg5NTUyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMQksnU4t7xo9YSN0IStZpLG2qtsCj48vW2P 3V86aldvDQ73V3ceLpJUJr7jPGK0/2J/eW7OKm7Ck6ra9/GNUwl1Z69QVp89Gc8d WNbri+CdGV2IQvs7gtZHyHZ9et413S0YYxGdD1XSsj39FQtsMlK1hvOSp5mmegoS 9x9SoJtaeu7XxAeg6DRC48BMiefYhDzFkzSaSsN4YKK/qcnNr17DT21AXowsesZ6 BoIhEXTHGAiv/mV2n5JpvDdxixSDBXMDqu+tlWtknE9iMJUe0qEjh+Er6CDg/xmS uFwwSECggQUnMsfw82vw67LLF7/hMD2yQAK2dKS3rtXWTJnc7lw= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:47 2025 by rpki-client