$ rpki-client -vvf repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft File: 5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft (raw, json) Hash identifier: WmN7aeSJaf8O8z3eDzPjxlw9o3EEFZ7DMlFjUAab8OM= Subject key identifier: 08:83:3C:E8:F8:65:4A:D5:70:B1:64:FA:52:24:F2:86:17:6B:D6:5D Authority key identifier: 5A:CB:0F:96:C2:B1:25:5E:AB:AA:EB:C1:42:6E:CD:9E:6D:F6:C4:AD Certificate issuer: /CN=5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD Certificate serial: 067F4FAB04236094C8B9EF425C74D701811A9561 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft Manifest number: 0169 Signing time: Mon 04 Aug 2025 22:50:59 +0000 Manifest this update: Mon 04 Aug 2025 22:45:59 +0000 Manifest next update: Fri 08 Aug 2025 07:36:59 +0000 Files and hashes: 1: 5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.crl (hash: qhsa7UIL50qYtN6EXFikX08gkXVtB19lV0iOiHQV9yY=) 2: 3130332e3235322e34382e302f32342d3234203d3e20313530393931.roa (hash: 3eXzK+GorV6w9BT+6P2VQObNrkmn7G3kB6eMdcv66zE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.crl rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 07:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:7f:4f:ab:04:23:60:94:c8:b9:ef:42:5c:74:d7:01:81:1a:95:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD Validity Not Before: Aug 4 22:45:59 2025 GMT Not After : Aug 8 07:36:59 2025 GMT Subject: CN=08833CE8F8654AD570B164FA5224F286176BD65D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e2:7f:5a:f0:21:25:45:f7:f3:b7:dc:69:34: 2c:c2:d9:74:ef:d4:dc:ad:84:15:e4:68:04:41:22: 94:83:8a:50:5c:bd:d8:32:b1:88:3e:7e:ae:63:8c: c2:9c:15:9d:75:7e:ee:4e:d1:47:ac:ec:fb:2c:a6: 94:95:99:c7:b3:63:c9:bd:a4:1a:b9:64:bd:7a:51: de:fe:3e:48:c0:16:11:8d:a8:73:ba:39:9b:97:eb: fb:06:22:f4:57:bc:5f:78:5b:02:72:7d:b0:a4:c4: f1:fe:76:71:e4:e7:b8:2e:53:f0:c6:0e:26:b5:15: 07:25:7b:34:93:67:a5:1c:9a:18:62:8d:43:22:92: d0:ef:3c:04:a7:bf:fb:cb:66:0e:df:07:54:74:6b: ea:fc:6f:e6:8b:ee:bc:08:1a:14:23:c1:85:63:1a: 53:54:49:fc:a6:8c:85:a4:20:64:9c:31:32:0e:04: 63:42:c9:0b:97:9f:61:b6:bf:da:d1:02:53:7f:0d: 60:86:af:b7:b9:95:5e:d5:fa:92:75:64:06:e7:ce: 98:c2:ce:96:19:ee:3c:a2:ef:9b:1f:f9:d3:85:72: 48:5e:ff:6b:3e:7b:7b:56:10:fe:56:85:af:c6:44: 8b:e9:df:70:b5:72:f1:f0:2b:a5:15:f2:20:52:2b: b6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:83:3C:E8:F8:65:4A:D5:70:B1:64:FA:52:24:F2:86:17:6B:D6:5D X509v3 Authority Key Identifier: keyid:5A:CB:0F:96:C2:B1:25:5E:AB:AA:EB:C1:42:6E:CD:9E:6D:F6:C4:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:3f:42:c6:7d:2e:a1:a6:74:82:9e:c5:18:e9:3c:5a:a1:51: d4:04:33:d6:07:69:bb:db:95:de:2f:aa:32:f9:2f:25:4a:44: 0c:0b:f8:52:53:18:0e:88:a2:a9:eb:7e:f3:11:e6:5c:78:28: 1c:0b:80:66:79:4d:ae:c9:05:05:19:c7:98:92:01:69:bd:08: f7:3f:26:79:c2:91:ca:ba:78:bf:f8:50:5f:35:3f:00:04:b6: 9f:d0:32:35:07:6b:a0:94:78:50:95:ec:66:2e:8b:45:fb:c7: a0:f3:fd:f3:71:cb:ea:a3:da:9e:49:f9:d7:e1:98:be:ff:42: 5d:58:be:a3:a4:ec:80:74:52:de:26:8a:a8:3f:9f:43:70:4e: 00:5f:d1:b5:63:c5:0a:26:db:12:b2:36:2f:4a:06:99:f6:61: cc:46:7c:9c:28:a2:f7:70:eb:a3:63:51:c0:3d:5c:96:b5:a2: ec:37:2d:ad:15:48:ca:49:65:1b:ba:7a:99:58:82:dc:a1:c7: a6:0f:27:4c:bb:12:7c:ff:f1:a3:95:e3:5f:a3:fe:d1:d5:0e: 2d:24:83:1a:5b:8d:ef:29:3b:e9:3b:1b:c0:b3:c5:67:f6:dc: ec:da:c0:d6:66:2b:39:63:4a:2c:71:19:41:58:6b:61:84:e4: c4:76:c9:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBn9PqwQjYJTIue9CXHTXAYEalWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFDQjBGOTZDMkIxMjU1RUFCQUFFQkMxNDI2RUNEOUU2 REY2QzRBRDAeFw0yNTA4MDQyMjQ1NTlaFw0yNTA4MDgwNzM2NTlaMDMxMTAvBgNV BAMTKDA4ODMzQ0U4Rjg2NTRBRDU3MEIxNjRGQTUyMjRGMjg2MTc2QkQ2NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg4n9a8CElRffzt9xpNCzC2XTv 1NythBXkaARBIpSDilBcvdgysYg+fq5jjMKcFZ11fu5O0Ues7PssppSVmcezY8m9 pBq5ZL16Ud7+PkjAFhGNqHO6OZuX6/sGIvRXvF94WwJyfbCkxPH+dnHk57guU/DG Dia1FQclezSTZ6UcmhhijUMiktDvPASnv/vLZg7fB1R0a+r8b+aL7rwIGhQjwYVj GlNUSfymjIWkIGScMTIOBGNCyQuXn2G2v9rRAlN/DWCGr7e5lV7V+pJ1ZAbnzpjC zpYZ7jyi75sf+dOFckhe/2s+e3tWEP5Wha/GRIvp33C1cvHwK6UV8iBSK7bzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCIM86PhlStVwsWT6UiTyhhdr1l0wHwYDVR0j BBgwFoAUWssPlsKxJV6rquvBQm7Nnm32xK0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MTNlZWQyYi05NTVlLTQwOTMtODhhNC1mNGRlM2NjOWI5Y2QvMC81QUNCMEY5NkMy QjEyNTVFQUJBQUVCQzE0MjZFQ0Q5RTZERjZDNEFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFDQjBGOTZDMkIxMjU1RUFCQUFFQkMxNDI2RUNEOUU2REY2 QzRBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTEzZWVkMmItOTU1ZS00MDkzLTg4 YTQtZjRkZTNjYzliOWNkLzAvNUFDQjBGOTZDMkIxMjU1RUFCQUFFQkMxNDI2RUNE OUU2REY2QzRBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI0/QsZ9LqGmdIKexRjpPFqhUdQEM9YHabvb ld4vqjL5LyVKRAwL+FJTGA6IoqnrfvMR5lx4KBwLgGZ5Ta7JBQUZx5iSAWm9CPc/ JnnCkcq6eL/4UF81PwAEtp/QMjUHa6CUeFCV7GYui0X7x6Dz/fNxy+qj2p5J+dfh mL7/Ql1YvqOk7IB0Ut4miqg/n0NwTgBf0bVjxQom2xKyNi9KBpn2YcxGfJwoovdw 66NjUcA9XJa1ouw3La0VSMpJZRu6eplYgtyhx6YPJ0y7Enz/8aOV41+j/tHVDi0k gxpbje8pO+k7G8CzxWf23OzawNZmKzljSixxGUFYa2GE5MR2yRQ= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:19 2025 by rpki-client