$ rpki-client -vvf repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/5782DE79396EB62186D082F936F3AB7084CB59CB.mft File: 5782DE79396EB62186D082F936F3AB7084CB59CB.mft (raw, json) Hash identifier: furJ8KtDbbMmkClxMG9PnuAPxjpGpN6m71qN6g8kg1s= Subject key identifier: CB:0D:27:6B:64:6A:D7:C7:38:32:B7:30:C5:4A:B9:2D:27:D4:2D:68 Authority key identifier: 57:82:DE:79:39:6E:B6:21:86:D0:82:F9:36:F3:AB:70:84:CB:59:CB Certificate issuer: /CN=5782DE79396EB62186D082F936F3AB7084CB59CB Certificate serial: 36ABE2CDEAF78DB31DE2792A1C8E722DCCCBB66F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5782DE79396EB62186D082F936F3AB7084CB59CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/5782DE79396EB62186D082F936F3AB7084CB59CB.mft Manifest number: 04F8 Signing time: Mon 04 Aug 2025 13:10:05 +0000 Manifest this update: Mon 04 Aug 2025 13:05:05 +0000 Manifest next update: Thu 07 Aug 2025 17:43:05 +0000 Files and hashes: 1: 323030313a6466373a316130303a3a2f34382d3438203d3e203634333135.roa (hash: TlLgfmGQ1DMmuAK+BXUyggQ3UC8als6n9Rt5GMTQoTk=) 2: 3130332e38302e3233362e302f32322d3234203d3e203634333135.roa (hash: uAsTJXI8kvPM+rUqNizg2euNYcTs9wRlPxWjqYq3wog=) 3: 5782DE79396EB62186D082F936F3AB7084CB59CB.crl (hash: ClOlGmaDGKjdPx4vON8JZr3OoGjM25AmajawYGDTbV8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/5782DE79396EB62186D082F936F3AB7084CB59CB.crl rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/5782DE79396EB62186D082F936F3AB7084CB59CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5782DE79396EB62186D082F936F3AB7084CB59CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 17:43:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:ab:e2:cd:ea:f7:8d:b3:1d:e2:79:2a:1c:8e:72:2d:cc:cb:b6:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5782DE79396EB62186D082F936F3AB7084CB59CB Validity Not Before: Aug 4 13:05:05 2025 GMT Not After : Aug 7 17:43:05 2025 GMT Subject: CN=CB0D276B646AD7C73832B730C54AB92D27D42D68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:e5:d0:36:3d:a1:02:51:35:ec:3f:d3:c8:da: 31:cf:3d:47:6d:ed:01:3b:af:93:ed:0c:5f:c5:11: 14:95:d8:48:4a:e0:82:63:9a:76:1c:3b:42:2d:38: 39:0e:e5:71:28:01:cc:cb:02:ee:bb:75:ef:e3:44: c6:b1:5c:5f:37:c6:d7:55:76:65:f1:16:3e:c9:65: 56:38:7e:f7:19:c2:b7:65:0f:38:39:13:4b:7e:0e: 48:e1:32:d5:ad:c0:bc:25:7c:cc:93:fb:52:ed:38: 4f:83:30:2e:dd:12:5f:fb:05:b4:8b:fa:d3:99:06: a1:02:af:6a:a1:a1:5e:0c:46:bf:3c:10:d7:7c:7e: 03:cd:18:a4:9e:6f:b9:54:aa:6e:ae:4e:17:ad:78: 93:64:1a:96:ac:3a:3c:74:5d:17:98:b6:ca:f1:ec: 91:64:81:84:9b:0e:49:c8:6e:1c:ec:f1:cb:2a:01: d6:31:2e:b9:48:ec:7e:70:60:1a:93:10:ba:c3:b7: 67:17:96:5d:47:fd:57:1d:4c:e2:9a:f6:61:77:91: 71:a9:08:ed:a7:63:07:11:95:f6:ac:61:8b:23:29: 0b:0e:a3:9a:83:72:59:a0:b9:27:41:bc:20:b5:62: 21:7f:82:96:94:6c:6e:16:e5:7d:83:c4:fd:ce:56: 8e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:0D:27:6B:64:6A:D7:C7:38:32:B7:30:C5:4A:B9:2D:27:D4:2D:68 X509v3 Authority Key Identifier: keyid:57:82:DE:79:39:6E:B6:21:86:D0:82:F9:36:F3:AB:70:84:CB:59:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/5782DE79396EB62186D082F936F3AB7084CB59CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5782DE79396EB62186D082F936F3AB7084CB59CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/5782DE79396EB62186D082F936F3AB7084CB59CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:31:15:03:67:d7:b8:d2:19:5b:6d:9d:e0:9c:67:f7:f9:88: 52:28:eb:83:57:74:59:ad:9f:68:b0:5d:2f:ac:2c:c7:90:24: 59:2f:81:0a:39:eb:5d:35:5e:31:f1:96:1f:c6:dc:62:3a:5c: 4b:41:70:07:fc:10:0d:e8:5d:d3:7e:2b:69:19:d5:57:46:a7: 00:f8:65:c4:4a:ae:fd:af:ea:4d:0a:e7:2d:21:3a:8c:7d:fb: 81:23:95:81:bf:1d:ad:fc:81:33:d7:70:c0:ff:b5:b1:2a:57: f0:56:ec:e3:39:ca:68:3f:5c:0e:41:04:41:fe:ec:17:c2:d7: 33:64:7a:dd:b2:76:8c:7a:6f:72:2c:25:4d:89:7e:8f:a7:0f: 32:27:ea:dc:21:bd:26:8f:50:f5:7a:e0:92:e7:3e:e3:1e:e9: 90:e7:c4:e8:55:48:b7:98:a1:81:9c:50:8f:04:ea:15:0b:ef: 71:bf:51:d6:aa:71:63:67:9e:e1:c8:5c:62:65:92:0c:d6:2d: 2a:81:be:27:a1:b2:1d:88:97:e8:a7:5f:1f:fc:73:cb:e0:c3: a9:e7:bc:ef:7d:e5:99:0a:a3:04:5d:39:b9:84:c4:84:bc:ab: 90:10:d8:29:76:a3:54:a5:f8:ab:12:48:c1:3f:4f:97:63:f2: 5f:2b:c3:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNqvizer3jbMd4nkqHI5yLczLtm8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc4MkRFNzkzOTZFQjYyMTg2RDA4MkY5MzZGM0FCNzA4 NENCNTlDQjAeFw0yNTA4MDQxMzA1MDVaFw0yNTA4MDcxNzQzMDVaMDMxMTAvBgNV BAMTKENCMEQyNzZCNjQ2QUQ3QzczODMyQjczMEM1NEFCOTJEMjdENDJENjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD45dA2PaECUTXsP9PI2jHPPUdt 7QE7r5PtDF/FERSV2EhK4IJjmnYcO0ItODkO5XEoAczLAu67de/jRMaxXF83xtdV dmXxFj7JZVY4fvcZwrdlDzg5E0t+DkjhMtWtwLwlfMyT+1LtOE+DMC7dEl/7BbSL +tOZBqECr2qhoV4MRr88ENd8fgPNGKSeb7lUqm6uTheteJNkGpasOjx0XReYtsrx 7JFkgYSbDknIbhzs8csqAdYxLrlI7H5wYBqTELrDt2cXll1H/VcdTOKa9mF3kXGp CO2nYwcRlfasYYsjKQsOo5qDclmguSdBvCC1YiF/gpaUbG4W5X2DxP3OVo7vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyw0na2Rq18c4MrcwxUq5LSfULWgwHwYDVR0j BBgwFoAUV4LeeTlutiGG0IL5NvOrcITLWcswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTVmNWYxMS01N2FlLTRhYzMtYTAzOS1lMDQ1NmJjY2Y0NGMvMC81NzgyREU3OTM5 NkVCNjIxODZEMDgyRjkzNkYzQUI3MDg0Q0I1OUNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTc4MkRFNzkzOTZFQjYyMTg2RDA4MkY5MzZGM0FCNzA4NENC NTlDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTk1ZjVmMTEtNTdhZS00YWMzLWEw MzktZTA0NTZiY2NmNDRjLzAvNTc4MkRFNzkzOTZFQjYyMTg2RDA4MkY5MzZGM0FC NzA4NENCNTlDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIcxFQNn17jSGVttneCcZ/f5iFIo64NXdFmt n2iwXS+sLMeQJFkvgQo56101XjHxlh/G3GI6XEtBcAf8EA3oXdN+K2kZ1VdGpwD4 ZcRKrv2v6k0K5y0hOox9+4EjlYG/Ha38gTPXcMD/tbEqV/BW7OM5ymg/XA5BBEH+ 7BfC1zNket2ydox6b3IsJU2Jfo+nDzIn6twhvSaPUPV64JLnPuMe6ZDnxOhVSLeY oYGcUI8E6hUL73G/UdaqcWNnnuHIXGJlkgzWLSqBviehsh2Il+inXx/8c8vgw6nn vO995ZkKowRdObmExIS8q5AQ2Cl2o1Sl+KsSSME/T5dj8l8rw6o= -----END CERTIFICATE-----Generated at Mon Aug 4 18:21:58 2025 by rpki-client