$ rpki-client -vvf repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft File: 5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft (raw, json) Hash identifier: pdgZPczqM6dvuY3k00ZHmfuacxDQXO6A/d5Baqq2L4E= Subject key identifier: 17:53:C4:5D:A1:6E:01:62:64:0B:DB:0D:CF:25:70:F4:F4:D1:37:25 Authority key identifier: 5E:A6:0C:5C:2A:87:7A:DE:8B:13:E9:94:EA:C2:EC:E8:81:C2:F0:2E Certificate issuer: /CN=5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E Certificate serial: 3B293FF62B8DB4C73BE1C70F2ED75100C85178FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft Manifest number: 012A Signing time: Wed 06 Aug 2025 09:31:41 +0000 Manifest this update: Wed 06 Aug 2025 09:26:41 +0000 Manifest next update: Sat 09 Aug 2025 14:28:41 +0000 Files and hashes: 1: 5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl (hash: y9+hlh5O1ApYKUh2m/TXTvW1f+oDEXekQntOrSsI+B8=) 2: 3130332e32302e3138362e302f32342d3234203d3e203538353533.roa (hash: gpL6qnRxLPgeiV+PlG3hB+cnGTmStZNiAx19SwL8f6w=) 3: 3130332e32302e3138372e302f32342d3234203d3e203538353533.roa (hash: bUy4CZmFBklHDVwaxUEZUZiNt8d1i/3iKLLtmboWyaU=) 4: 3130332e32302e3138352e302f32342d3234203d3e203538353533.roa (hash: matLkK/0RKOzJ5T6ShVJ+TeIBVCHsHv7ufNKNv6zW+I=) 5: 3130332e32302e3138342e302f32342d3234203d3e203538353533.roa (hash: m+tur8s5hF36P9KEnTMPMVDInU7+4/3lGLQOQpvofQk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 14:28:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:29:3f:f6:2b:8d:b4:c7:3b:e1:c7:0f:2e:d7:51:00:c8:51:78:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E Validity Not Before: Aug 6 09:26:41 2025 GMT Not After : Aug 9 14:28:41 2025 GMT Subject: CN=1753C45DA16E0162640BDB0DCF2570F4F4D13725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:dc:05:d8:dd:01:43:4a:7b:16:08:da:6d:8a: 8e:d7:b4:4f:b1:d0:10:bf:95:1e:2f:42:1b:99:74: d4:60:ea:e3:8a:97:ac:be:1e:48:73:8d:1c:22:72: aa:c3:c7:1e:d0:7f:72:f8:a1:d3:92:88:60:f3:e7: b9:39:3f:03:67:2a:bc:f2:87:4a:5e:d6:96:1a:82: a9:09:65:12:0d:ea:19:ca:d5:07:5d:44:52:12:0e: 2d:f9:e4:d5:f2:ad:9b:e2:4b:71:fc:af:1c:57:1a: 92:52:4b:b4:cc:20:97:e2:e7:03:ee:32:bb:e7:44: e0:d8:8b:5f:c1:10:d5:30:f7:b0:a8:5b:68:da:e3: 1f:33:dd:1e:70:00:6a:de:88:54:76:6a:d4:84:6c: e6:a1:19:ff:a2:38:b9:53:4c:cd:09:a5:b1:f6:96: 13:91:9a:e8:00:04:93:72:6e:7b:77:88:a9:b2:9e: 2e:27:d0:bc:47:79:fb:9a:88:d9:8c:38:c3:4c:f5: ca:40:2b:1d:10:79:03:2b:73:44:ea:02:64:02:73: 0f:be:d8:23:75:0d:be:0b:f1:67:f8:00:21:d6:31: 99:f1:e7:03:49:ae:17:75:05:40:9d:3a:e6:7a:19: 25:fe:99:9c:f4:55:34:9e:27:04:60:c8:e1:2e:49: 29:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:53:C4:5D:A1:6E:01:62:64:0B:DB:0D:CF:25:70:F4:F4:D1:37:25 X509v3 Authority Key Identifier: keyid:5E:A6:0C:5C:2A:87:7A:DE:8B:13:E9:94:EA:C2:EC:E8:81:C2:F0:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:0c:21:6b:31:2a:f8:c4:3f:35:54:0b:29:68:74:47:10:82: ea:2c:63:ab:91:62:c0:5f:e5:76:94:72:15:0e:49:f2:fc:87: bf:ab:55:2e:68:f9:f4:0e:08:52:14:50:29:a3:a3:b7:0c:47: c1:10:e3:55:ea:d7:b6:4d:53:08:b6:0f:4f:db:18:b7:58:a3: e7:0e:a5:01:72:e4:ad:27:13:07:84:0f:ca:88:b9:b3:24:41: a0:39:01:ef:44:47:b1:44:9b:05:a9:82:c3:be:f5:57:a1:ad: ef:a1:10:f8:af:b6:dd:80:54:ce:47:4a:e5:05:df:e9:cc:d0: 5f:ff:5a:09:a1:bc:f8:95:21:01:dd:82:08:a6:61:ab:39:fe: dc:a2:af:f8:67:c9:14:9d:fe:f6:b2:05:a6:0d:36:e7:5e:61: c3:71:95:e9:70:11:cd:bc:0d:c7:80:72:e2:c6:23:ce:c3:89: a4:89:f5:f0:9a:7a:6f:a1:74:cd:e5:d4:6b:2f:53:1b:3a:9e: 75:e8:fb:ee:5c:4e:59:cd:a2:0a:6d:df:2e:51:84:86:09:eb: 8a:37:0b:a2:bf:14:75:ef:eb:0c:8c:79:1f:69:76:28:62:05: e7:26:d9:87:d4:b7:2c:04:4d:97:40:f6:d4:23:3c:6e:03:80: 63:03:4d:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOyk/9iuNtMc74ccPLtdRAMhRePswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVDRTg4 MUMyRjAyRTAeFw0yNTA4MDYwOTI2NDFaFw0yNTA4MDkxNDI4NDFaMDMxMTAvBgNV BAMTKDE3NTNDNDVEQTE2RTAxNjI2NDBCREIwRENGMjU3MEY0RjREMTM3MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC93AXY3QFDSnsWCNptio7XtE+x 0BC/lR4vQhuZdNRg6uOKl6y+HkhzjRwicqrDxx7Qf3L4odOSiGDz57k5PwNnKrzy h0pe1pYagqkJZRIN6hnK1QddRFISDi355NXyrZviS3H8rxxXGpJSS7TMIJfi5wPu MrvnRODYi1/BENUw97CoW2ja4x8z3R5wAGreiFR2atSEbOahGf+iOLlTTM0JpbH2 lhORmugABJNybnt3iKmyni4n0LxHefuaiNmMOMNM9cpAKx0QeQMrc0TqAmQCcw++ 2CN1Db4L8Wf4ACHWMZnx5wNJrhd1BUCdOuZ6GSX+mZz0VTSeJwRgyOEuSSmzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF1PEXaFuAWJkC9sNzyVw9PTRNyUwHwYDVR0j BBgwFoAUXqYMXCqHet6LE+mU6sLs6IHC8C4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDk3M2JlYi02NmJhLTQ4YmMtOTM3NC03MmQ3ZmI4OWM1YTMvMC81RUE2MEM1QzJB ODc3QURFOEIxM0U5OTRFQUMyRUNFODgxQzJGMDJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVDRTg4MUMy RjAyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTA5NzNiZWItNjZiYS00OGJjLTkz NzQtNzJkN2ZiODljNWEzLzAvNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVD RTg4MUMyRjAyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH4MIWsxKvjEPzVUCylodEcQguosY6uRYsBf 5XaUchUOSfL8h7+rVS5o+fQOCFIUUCmjo7cMR8EQ41Xq17ZNUwi2D0/bGLdYo+cO pQFy5K0nEweED8qIubMkQaA5Ae9ER7FEmwWpgsO+9Vehre+hEPivtt2AVM5HSuUF 3+nM0F//WgmhvPiVIQHdggimYas5/tyir/hnyRSd/vayBaYNNudeYcNxlelwEc28 DceAcuLGI87DiaSJ9fCaem+hdM3l1GsvUxs6nnXo++5cTlnNogpt3y5RhIYJ64o3 C6K/FHXv6wyMeR9pdihiBecm2YfUtywETZdA9tQjPG4DgGMDTQ4= -----END CERTIFICATE-----Generated at Thu Aug 7 05:01:59 2025 by rpki-client