$ rpki-client -vvf repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft File: C5CA2999FE7612F56CCCB7441743B05181458ED0.mft (raw, json) Hash identifier: KmZjNJGPYY347LN5NmYkde9LEXPEfxfnYhmDVQZ2rBg= Subject key identifier: 3D:2B:7A:E2:30:F5:3D:C0:4C:74:D4:86:2E:8B:B9:32:64:E9:5D:60 Authority key identifier: C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0 Certificate issuer: /CN=C5CA2999FE7612F56CCCB7441743B05181458ED0 Certificate serial: 28ECD46E2CD04FF02BB513F6D3B1E257A5DD23CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft Manifest number: 04F6 Signing time: Wed 06 Aug 2025 11:50:40 +0000 Manifest this update: Wed 06 Aug 2025 11:45:40 +0000 Manifest next update: Sat 09 Aug 2025 17:13:40 +0000 Files and hashes: 1: 3130332e3134322e3230322e302f32332d3233203d3e20313339333738.roa (hash: aOFDhPstKOFaNipOEFwONnhh/OGsZlp5fuQdDXOoo9E=) 2: 3130332e3134322e3230332e302f32342d3234203d3e20313339333738.roa (hash: TJhHkKwr35GRF8gqIxcj9n16SqAaRRuK8PF46Ie+LXg=) 3: 3130332e3134322e3230322e302f32342d3234203d3e20313339333738.roa (hash: kZ/7LdQ98yA+6ycYvld45u3DxaVBg4NMh+WZ028gPpU=) 4: C5CA2999FE7612F56CCCB7441743B05181458ED0.crl (hash: kd2XKxK4Na+cMiJPFiYveN9WXIDf7TOtFhRi5bYxPKo=) 5: 323030313a6466313a353638303a3a2f34382d3438203d3e20313339333738.roa (hash: q7ox9dPZeS59odB2IJMVaFXBFhKkSZPWVMJt5aLWrRc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 17:13:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:ec:d4:6e:2c:d0:4f:f0:2b:b5:13:f6:d3:b1:e2:57:a5:dd:23:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5CA2999FE7612F56CCCB7441743B05181458ED0 Validity Not Before: Aug 6 11:45:40 2025 GMT Not After : Aug 9 17:13:40 2025 GMT Subject: CN=3D2B7AE230F53DC04C74D4862E8BB93264E95D60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:23:a4:68:5b:19:e6:5e:ec:43:79:36:5c:e8: ee:12:f4:65:27:ff:bc:5f:3f:20:c4:17:5c:88:30: ac:4a:d6:e4:7f:e0:3a:2d:97:7c:96:d6:5f:93:1b: 39:26:b7:f5:7d:4a:36:f5:41:09:da:65:eb:f0:06: 16:74:c2:3d:b0:5b:19:5a:58:ee:1d:bd:e1:55:68: 7c:5f:34:37:a9:c1:e0:29:58:5d:05:5e:3f:40:97: fc:ee:a3:08:80:58:d5:0a:0a:63:38:d8:22:75:fb: ff:c9:16:4b:d6:12:ff:3f:5c:33:4c:df:6c:aa:30: ff:c3:e6:e6:ba:41:89:f9:4d:d0:fb:a6:e2:20:92: 5f:ce:a2:17:54:b2:5e:e6:5a:55:a5:cf:2f:d6:a2: 31:14:84:da:6d:89:a9:85:09:e8:68:ce:3e:b1:e7: 17:8f:d8:76:4e:e3:91:23:f6:04:16:76:1c:e4:86: f2:b7:14:2f:97:3a:1a:49:5c:e4:80:2f:0c:dd:ce: 18:37:68:d0:71:5d:d6:43:b2:b8:04:07:a4:33:2c: 19:aa:18:a0:15:18:c3:70:b5:c2:50:d9:5b:f2:e2: 3d:9e:22:b0:84:d7:a3:a8:f2:b2:b6:bf:16:2e:0a: ef:f8:81:a4:04:f2:28:97:8a:6e:f9:8e:1b:99:69: 40:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2B:7A:E2:30:F5:3D:C0:4C:74:D4:86:2E:8B:B9:32:64:E9:5D:60 X509v3 Authority Key Identifier: keyid:C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:64:a3:25:fb:a8:57:97:06:d1:39:66:da:f5:4c:18:0f:3d: 88:bc:3c:4f:5b:87:95:fa:8c:22:d2:47:d1:29:1d:20:da:2e: 76:87:a2:d3:73:bc:1a:3b:ed:e0:20:6c:bf:ec:ab:b1:b3:48: b0:68:ca:d0:58:23:16:3b:0f:53:cd:e4:8e:27:a4:0e:95:c0: bd:7b:d3:4c:74:7e:d5:dd:d3:be:71:58:5a:53:04:0f:a7:6e: 3c:dd:a2:6b:50:a2:4b:8a:d0:e2:88:dc:bd:a2:e1:c1:73:04: b5:63:ff:dc:9f:ed:8b:15:17:ff:ca:03:bb:6d:31:cc:82:ba: f8:8c:4c:64:41:46:9e:7d:fd:75:d9:f0:39:37:41:8f:3e:a7: d2:b8:e3:2c:6e:83:f2:88:d1:de:bd:12:f0:fe:cd:af:06:96: 6f:99:30:5e:b5:9d:47:ee:fd:12:92:45:0d:da:46:09:7b:38: 76:5c:ea:01:30:65:a4:99:eb:c9:64:90:11:8f:87:16:63:7a: 40:56:90:ea:00:5e:1f:e9:24:8d:1c:3b:38:b4:2c:c3:dc:59: f6:78:75:36:5e:2b:5c:ea:a5:dc:02:ad:0d:e0:c6:bc:f5:60: 71:d1:91:6f:84:fd:27:e1:08:da:92:fd:00:a8:42:e6:1c:ea: e9:6b:f0:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKOzUbizQT/ArtRP207HiV6XdI84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0IwNTE4 MTQ1OEVEMDAeFw0yNTA4MDYxMTQ1NDBaFw0yNTA4MDkxNzEzNDBaMDMxMTAvBgNV BAMTKDNEMkI3QUUyMzBGNTNEQzA0Qzc0RDQ4NjJFOEJCOTMyNjRFOTVENjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfI6RoWxnmXuxDeTZc6O4S9GUn /7xfPyDEF1yIMKxK1uR/4Dotl3yW1l+TGzkmt/V9Sjb1QQnaZevwBhZ0wj2wWxla WO4dveFVaHxfNDepweApWF0FXj9Al/zuowiAWNUKCmM42CJ1+//JFkvWEv8/XDNM 32yqMP/D5ua6QYn5TdD7puIgkl/OohdUsl7mWlWlzy/WojEUhNptiamFCehozj6x 5xeP2HZO45Ej9gQWdhzkhvK3FC+XOhpJXOSALwzdzhg3aNBxXdZDsrgEB6QzLBmq GKAVGMNwtcJQ2Vvy4j2eIrCE16Oo8rK2vxYuCu/4gaQE8iiXim75jhuZaUA9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPSt64jD1PcBMdNSGLou5MmTpXWAwHwYDVR0j BBgwFoAUxcopmf52EvVszLdEF0OwUYFFjtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjdmYjgzNy0xYjJmLTRjNGUtYjk5OS02ZTk5MGRkYzE0OTkvMC9DNUNBMjk5OUZF NzYxMkY1NkNDQ0I3NDQxNzQzQjA1MTgxNDU4RUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0IwNTE4MTQ1 OEVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDY3ZmI4MzctMWIyZi00YzRlLWI5 OTktNmU5OTBkZGMxNDk5LzAvQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0Iw NTE4MTQ1OEVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALZkoyX7qFeXBtE5Ztr1TBgPPYi8PE9bh5X6 jCLSR9EpHSDaLnaHotNzvBo77eAgbL/sq7GzSLBoytBYIxY7D1PN5I4npA6VwL17 00x0ftXd075xWFpTBA+nbjzdomtQokuK0OKI3L2i4cFzBLVj/9yf7YsVF//KA7tt McyCuviMTGRBRp59/XXZ8Dk3QY8+p9K44yxug/KI0d69EvD+za8Glm+ZMF61nUfu /RKSRQ3aRgl7OHZc6gEwZaSZ68lkkBGPhxZjekBWkOoAXh/pJI0cOzi0LMPcWfZ4 dTZeK1zqpdwCrQ3gxrz1YHHRkW+E/SfhCNqS/QCoQuYc6ulr8AM= -----END CERTIFICATE-----Generated at Thu Aug 7 11:10:35 2025 by rpki-client