$ rpki-client -vvf repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft File: 5DF7F909917C4DA09D7486E2B70323E7972B7675.mft (raw, json) Hash identifier: IED62KcE+XQQWj3xvi5y9+cG8E0ZlV5ySbG4c7IC1Dw= Subject key identifier: 37:21:B8:30:47:D0:96:4F:5E:10:8E:36:7B:49:C8:49:67:7C:43:4E Authority key identifier: 5D:F7:F9:09:91:7C:4D:A0:9D:74:86:E2:B7:03:23:E7:97:2B:76:75 Certificate issuer: /CN=5DF7F909917C4DA09D7486E2B70323E7972B7675 Certificate serial: 5F0C015DE30A908E2D036FF6021FB1C8A72166F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DF7F909917C4DA09D7486E2B70323E7972B7675.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft Manifest number: 020D Signing time: Wed 06 Aug 2025 11:31:46 +0000 Manifest this update: Wed 06 Aug 2025 11:26:46 +0000 Manifest next update: Sat 09 Aug 2025 20:52:46 +0000 Files and hashes: 1: 5DF7F909917C4DA09D7486E2B70323E7972B7675.crl (hash: OaD0gFsIbYafeIsJftUCNx55wSvLcrXdPgbp8XVuNLg=) 2: 3130332e3138362e3136372e302f32342d3234203d3e20313439373033.roa (hash: uTV9a8fdyT6ZmJ8NRNVsn4KQvmLK6xkJNJmzdYWe1pQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.crl rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DF7F909917C4DA09D7486E2B70323E7972B7675.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 20:52:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:0c:01:5d:e3:0a:90:8e:2d:03:6f:f6:02:1f:b1:c8:a7:21:66:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DF7F909917C4DA09D7486E2B70323E7972B7675 Validity Not Before: Aug 6 11:26:46 2025 GMT Not After : Aug 9 20:52:46 2025 GMT Subject: CN=3721B83047D0964F5E108E367B49C849677C434E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:df:d3:ad:9f:92:5a:33:d3:24:3b:c3:21:9d: 65:b8:13:d0:11:0d:6e:d7:19:18:8d:aa:ee:3f:b4: 4e:8b:36:3c:d1:cf:f7:8a:16:dc:10:ce:f7:3d:89: 4e:76:ba:f4:3e:59:e9:38:b1:55:d0:05:3f:dd:c3: f3:d6:ad:d4:fa:b6:cb:78:42:de:30:43:66:6d:c9: 0e:ba:27:fd:f4:5a:23:a7:65:bd:27:6e:fb:90:5e: 8d:cc:8c:02:70:1c:6a:0e:c2:c3:2d:d1:55:38:92: 84:b4:b0:7d:89:24:47:1c:df:51:69:aa:71:ab:0c: 3b:5d:dc:f3:6e:69:d4:3d:92:c4:91:05:d3:ae:d7: e2:0b:05:27:43:c7:57:ba:6b:49:b4:0f:24:6d:ad: 2a:a4:07:4d:e0:43:5d:14:68:d6:b4:35:42:31:d8: eb:b8:01:5e:94:66:85:49:d2:2e:be:17:a1:bb:5a: 9b:02:50:77:6f:8c:04:82:78:4e:f6:94:bb:ee:ab: 9d:fd:29:e0:93:c2:cc:63:5a:96:4d:3e:0d:86:18: c3:45:7c:9e:2d:01:3a:e8:50:44:2e:b3:d1:cf:e8: 0d:08:e0:a7:d1:fc:f0:d6:2c:fb:5b:2a:53:c4:a7: 07:62:60:9c:16:d4:82:61:4e:9f:07:df:bb:c8:32: 74:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:21:B8:30:47:D0:96:4F:5E:10:8E:36:7B:49:C8:49:67:7C:43:4E X509v3 Authority Key Identifier: keyid:5D:F7:F9:09:91:7C:4D:A0:9D:74:86:E2:B7:03:23:E7:97:2B:76:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DF7F909917C4DA09D7486E2B70323E7972B7675.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:50:5b:f2:54:f3:f1:45:98:9f:cb:3d:dc:40:33:cc:74:68: a8:05:d5:4d:72:fe:d5:3b:63:13:f3:c3:09:21:f3:ef:d1:dd: ab:13:d6:a3:26:10:d7:9a:14:2a:8c:32:e5:9c:1f:35:38:f0: b5:9b:39:46:7f:41:bd:dd:fe:ff:69:1e:9e:c6:0f:aa:4f:a0: 8e:bb:8b:79:63:6e:ea:1f:12:53:aa:b6:84:a5:bd:bc:b8:a5: 64:4c:14:ba:c4:68:7e:94:8a:2f:4a:46:6a:d3:d6:f1:f6:a9: f4:fe:ec:53:1f:53:d2:47:a9:69:e7:02:f4:2b:b2:30:6b:82: b9:22:97:e8:8b:a8:65:49:d2:4f:24:12:58:ac:18:4f:8c:b4: 92:53:29:f1:3c:13:35:94:bf:ff:33:66:1f:f7:5f:2b:9e:d7: 2e:dc:94:ee:c2:4c:10:11:59:10:ec:9e:95:70:4c:1f:86:f1: e3:00:d7:3a:48:67:0a:12:05:ac:25:74:d7:2c:6d:04:a1:fc: 6d:1b:79:b2:e7:53:2a:84:0d:43:05:8a:8c:fe:23:78:60:9a: 53:82:fb:cf:51:08:15:89:2e:e5:ed:fb:f1:d8:23:a6:c7:b9: e7:8f:ef:12:0a:c8:9c:ab:98:78:5d:db:cc:f6:36:19:d2:95: 41:67:c1:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXwwBXeMKkI4tA2/2Ah+xyKchZvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGN0Y5MDk5MTdDNERBMDlENzQ4NkUyQjcwMzIzRTc5 NzJCNzY3NTAeFw0yNTA4MDYxMTI2NDZaFw0yNTA4MDkyMDUyNDZaMDMxMTAvBgNV BAMTKDM3MjFCODMwNDdEMDk2NEY1RTEwOEUzNjdCNDlDODQ5Njc3QzQzNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC339Otn5JaM9MkO8MhnWW4E9AR DW7XGRiNqu4/tE6LNjzRz/eKFtwQzvc9iU52uvQ+Wek4sVXQBT/dw/PWrdT6tst4 Qt4wQ2ZtyQ66J/30WiOnZb0nbvuQXo3MjAJwHGoOwsMt0VU4koS0sH2JJEcc31Fp qnGrDDtd3PNuadQ9ksSRBdOu1+ILBSdDx1e6a0m0DyRtrSqkB03gQ10UaNa0NUIx 2Ou4AV6UZoVJ0i6+F6G7WpsCUHdvjASCeE72lLvuq539KeCTwsxjWpZNPg2GGMNF fJ4tATroUEQus9HP6A0I4KfR/PDWLPtbKlPEpwdiYJwW1IJhTp8H37vIMnSVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNyG4MEfQlk9eEI42e0nISWd8Q04wHwYDVR0j BBgwFoAUXff5CZF8TaCddIbitwMj55crdnUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2I2NGMzZS1iMTNkLTQyN2EtYjk4Mi00Mzk0MDczZTVjZjUvMC81REY3RjkwOTkx N0M0REEwOUQ3NDg2RTJCNzAzMjNFNzk3MkI3Njc1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNURGN0Y5MDk5MTdDNERBMDlENzQ4NkUyQjcwMzIzRTc5NzJC NzY3NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdiNjRjM2UtYjEzZC00MjdhLWI5 ODItNDM5NDA3M2U1Y2Y1LzAvNURGN0Y5MDk5MTdDNERBMDlENzQ4NkUyQjcwMzIz RTc5NzJCNzY3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHpQW/JU8/FFmJ/LPdxAM8x0aKgF1U1y/tU7 YxPzwwkh8+/R3asT1qMmENeaFCqMMuWcHzU48LWbOUZ/Qb3d/v9pHp7GD6pPoI67 i3ljbuofElOqtoSlvby4pWRMFLrEaH6Uii9KRmrT1vH2qfT+7FMfU9JHqWnnAvQr sjBrgrkil+iLqGVJ0k8kElisGE+MtJJTKfE8EzWUv/8zZh/3Xyue1y7clO7CTBAR WRDsnpVwTB+G8eMA1zpIZwoSBawldNcsbQSh/G0bebLnUyqEDUMFioz+I3hgmlOC +89RCBWJLuXt+/HYI6bHueeP7xIKyJyrmHhd28z2NhnSlUFnwa0= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:01 2025 by rpki-client