$ rpki-client -vvf repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft File: 5E8D1116F8C66182B65521C899B56E89DDB84C57.mft (raw, json) Hash identifier: q4qTciRA0rmjzWNIZ01mpojL/+FVP9g9/78iREYOcp4= Subject key identifier: D8:42:BC:E0:02:31:10:94:82:DA:5F:C4:BD:E2:E9:AA:3E:16:0A:09 Authority key identifier: 5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 Certificate issuer: /CN=5E8D1116F8C66182B65521C899B56E89DDB84C57 Certificate serial: 52458CFBD6147E06FB456EAD388AD153EA4571FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft Manifest number: 04B3 Signing time: Wed 06 Aug 2025 04:20:45 +0000 Manifest this update: Wed 06 Aug 2025 04:15:45 +0000 Manifest next update: Sat 09 Aug 2025 11:24:45 +0000 Files and hashes: 1: 323430313a316230303a3a2f33322d3438203d3e203138313033.roa (hash: w+rn3hr3SMqGHiqqz9FiRvR/Sg9nolhzcrhUpRbqWiI=) 2: 3130332e31302e39362e302f32322d3234203d3e203138313033.roa (hash: Nh5W/QyNw1TBkrXlduer6Su77QtA37Kqc35mOSl9RrM=) 3: 5E8D1116F8C66182B65521C899B56E89DDB84C57.crl (hash: JRARV65NeiHqX/bQbEC7zOTqF8cKtqvT3PP3SkTrEz8=) 4: 3230332e3132382e36342e302f31392d3234203d3e203138313033.roa (hash: s7VSPqD5oiLwDB/oYr/1xD8uJ4/fL3Fk5/v33teavRk=) 5: 34332e3234382e32342e302f32322d3234203d3e203138313033.roa (hash: RgeUIHscM2Mr9tXUcr4QUTfcftnTlsp6MIokq2QekbI=) 6: 3230332e3230312e35302e302f32332d3234203d3e203138313033.roa (hash: 0P4/KgKZcqup91feF2ZQ2rwCC9K7mFefhTwIQ1GZnuc=) 7: 3130332e32332e3234302e302f32322d3234203d3e203138313033.roa (hash: p8gVCnY66Os0DqkzQCJfTN/fhC+u5g4F7liSBfJAUxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.crl rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 11:24:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:45:8c:fb:d6:14:7e:06:fb:45:6e:ad:38:8a:d1:53:ea:45:71:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E8D1116F8C66182B65521C899B56E89DDB84C57 Validity Not Before: Aug 6 04:15:45 2025 GMT Not After : Aug 9 11:24:45 2025 GMT Subject: CN=D842BCE00231109482DA5FC4BDE2E9AA3E160A09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:91:76:93:15:cc:b4:f6:3e:e6:a8:16:00:64: 74:d3:81:b9:7e:9f:55:9b:82:f7:18:7a:7d:70:a9: 2f:2e:87:b7:03:8d:32:1d:a6:66:5a:58:13:cd:a8: b9:39:e3:df:9e:f4:59:b7:a9:7a:ef:65:6a:f3:30: e9:80:70:9f:52:75:a0:1d:23:6e:66:45:5f:e6:3c: cd:3c:10:bb:58:38:84:91:19:66:ad:8e:74:42:ec: 4c:6c:e3:62:5b:9d:85:f0:44:1c:6a:d2:ab:cd:19: 17:4a:8e:fd:b2:1a:07:28:4f:8a:99:c1:c2:ed:2e: bd:64:44:59:9f:43:76:68:6d:2e:74:ae:30:50:d8: 9d:16:e5:f3:62:c7:4e:7c:21:48:a3:cf:38:c5:ba: 5c:ed:39:6f:cc:a9:38:6a:f5:f4:dc:f0:ff:3b:19: dc:cb:90:c9:8f:4d:83:39:c8:b9:63:4c:01:f4:a8: a0:e1:70:74:7b:73:b3:3e:cc:74:0b:cb:18:04:c7: fc:4d:26:87:5f:bb:5f:bb:7b:33:60:3d:70:2a:b7: 86:f3:ef:f8:2a:29:b1:2e:5f:94:ce:1e:5e:4c:d9: bc:9b:2d:c9:8e:b6:4c:43:e3:7b:0e:0f:3a:0d:4d: c5:94:ef:99:11:75:e8:1d:7c:a0:ee:da:c9:b8:76: 82:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:42:BC:E0:02:31:10:94:82:DA:5F:C4:BD:E2:E9:AA:3E:16:0A:09 X509v3 Authority Key Identifier: keyid:5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:20:25:de:45:1a:58:79:1e:13:a5:35:3e:a0:21:48:d3:22: 80:9c:c8:34:1b:62:92:34:44:5b:ce:38:db:cd:53:03:24:ed: e8:7c:09:dd:55:15:16:f2:28:1d:3a:58:e1:4a:24:35:fb:3f: ce:77:b0:0b:23:7e:76:4c:d2:72:42:7d:a4:be:6b:71:4f:72: c8:30:0c:79:53:94:60:62:eb:94:a6:e9:fb:b4:c0:80:97:2d: b0:d2:64:b7:6e:c4:83:66:32:51:37:62:a4:d2:af:88:cd:89: fb:89:f9:eb:5e:b3:19:0c:f3:20:98:6e:8b:c7:01:db:5a:40: 46:36:25:15:bb:50:a4:24:e7:c4:97:b0:ff:2f:c8:03:c3:15: 52:27:6f:bd:9a:c3:09:d8:81:e3:c2:e7:a5:4b:93:62:7f:8f: ff:ad:d7:1a:8e:41:a6:5a:b9:7a:5f:44:fa:7c:3c:c5:1d:37: 7c:5f:56:d8:3a:36:9b:35:af:92:8f:8c:51:8c:d6:49:61:0d: b5:09:22:03:41:ab:36:50:05:ca:42:5b:fc:ed:82:b4:55:81: 69:f4:e2:4f:98:7c:43:e6:1e:d4:dc:ea:89:c2:8e:72:68:73: 89:b6:cc:4d:b4:18:80:0a:a8:dd:85:22:bc:b7:87:3d:8a:23: 14:fb:fe:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUkWM+9YUfgb7RW6tOIrRU+pFcf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZFODlE REI4NEM1NzAeFw0yNTA4MDYwNDE1NDVaFw0yNTA4MDkxMTI0NDVaMDMxMTAvBgNV BAMTKEQ4NDJCQ0UwMDIzMTEwOTQ4MkRBNUZDNEJERTJFOUFBM0UxNjBBMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5kXaTFcy09j7mqBYAZHTTgbl+ n1WbgvcYen1wqS8uh7cDjTIdpmZaWBPNqLk549+e9Fm3qXrvZWrzMOmAcJ9SdaAd I25mRV/mPM08ELtYOISRGWatjnRC7Exs42JbnYXwRBxq0qvNGRdKjv2yGgcoT4qZ wcLtLr1kRFmfQ3ZobS50rjBQ2J0W5fNix058IUijzzjFulztOW/MqThq9fTc8P87 GdzLkMmPTYM5yLljTAH0qKDhcHR7c7M+zHQLyxgEx/xNJodfu1+7ezNgPXAqt4bz 7/gqKbEuX5TOHl5M2bybLcmOtkxD43sODzoNTcWU75kRdegdfKDu2sm4doLXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2EK84AIxEJSC2l/EveLpqj4WCgkwHwYDVR0j BBgwFoAUXo0RFvjGYYK2VSHImbVuid24TFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTk5YzFhZi1kOWM3LTRmZmQtYmEwMy1hM2UxY2RkOGFlZTAvMC81RThEMTExNkY4 QzY2MTgyQjY1NTIxQzg5OUI1NkU4OUREQjg0QzU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZFODlEREI4 NEM1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjE5OWMxYWYtZDljNy00ZmZkLWJh MDMtYTNlMWNkZDhhZWUwLzAvNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZF ODlEREI4NEM1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIIgJd5FGlh5HhOlNT6gIUjTIoCcyDQbYpI0 RFvOONvNUwMk7eh8Cd1VFRbyKB06WOFKJDX7P853sAsjfnZM0nJCfaS+a3FPcsgw DHlTlGBi65Sm6fu0wICXLbDSZLduxINmMlE3YqTSr4jNifuJ+etesxkM8yCYbovH AdtaQEY2JRW7UKQk58SXsP8vyAPDFVInb72awwnYgePC56VLk2J/j/+t1xqOQaZa uXpfRPp8PMUdN3xfVtg6Nps1r5KPjFGM1klhDbUJIgNBqzZQBcpCW/ztgrRVgWn0 4k+YfEPmHtTc6onCjnJoc4m2zE20GIAKqN2FIry3hz2KIxT7/kA= -----END CERTIFICATE-----Generated at Thu Aug 7 01:04:50 2025 by rpki-client