$ rpki-client -vvf repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft File: 5EC928AFD73AFC70F10C468E21482031920DF521.mft (raw, json) Hash identifier: EJ/goduT0PFCvPmD2znKH71T8uVa2oHdZRbIUAAYRy8= Subject key identifier: D5:23:1F:3E:92:83:5E:88:51:5E:51:A9:9C:F7:E9:A1:C0:1F:ED:73 Authority key identifier: 5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21 Certificate issuer: /CN=5EC928AFD73AFC70F10C468E21482031920DF521 Certificate serial: 60870C650D030D2E24917C813C0E60862FBEB903 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft Manifest number: 010B Signing time: Tue 05 Aug 2025 02:10:39 +0000 Manifest this update: Tue 05 Aug 2025 02:05:39 +0000 Manifest next update: Fri 08 Aug 2025 04:08:39 +0000 Files and hashes: 1: 3135372e31302e39302e302f32342d3234203d3e20313532303836.roa (hash: G+zk6B4j6LBv4VXf/ZrduIBLIatUxzNWyMHjZfotW/M=) 2: 3135372e31302e39312e302f32342d3234203d3e20313532303836.roa (hash: aoRUG5CQtzRZGdloOpfTrb2fX3fCFwbxN1OMSRI1BYY=) 3: 3135372e31302e39302e302f32332d3233203d3e20313532303836.roa (hash: sqhh6fhWizwXoH9l3XVTNUts+MHffcu11O/8GZa+UZk=) 4: 5EC928AFD73AFC70F10C468E21482031920DF521.crl (hash: XZMJ8bW3CMlIRdiBbw2AdcoxtyaRNbD3Cq8eDA4YVHE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.crl rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 04:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:87:0c:65:0d:03:0d:2e:24:91:7c:81:3c:0e:60:86:2f:be:b9:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EC928AFD73AFC70F10C468E21482031920DF521 Validity Not Before: Aug 5 02:05:39 2025 GMT Not After : Aug 8 04:08:39 2025 GMT Subject: CN=D5231F3E92835E88515E51A99CF7E9A1C01FED73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a3:02:ad:e9:12:be:5a:41:86:87:93:72:da: cf:4d:13:80:a2:57:9c:5e:04:45:97:f2:88:d1:27: 62:f0:6a:21:bb:c5:98:ce:a1:db:96:48:2c:f1:d7: 3c:9d:68:41:28:15:36:ac:f1:30:04:65:56:c1:9b: a1:40:07:57:86:d3:7a:77:90:fe:b6:2d:da:b8:7c: 3e:2c:09:70:ae:72:77:e1:34:dd:f2:df:4e:59:98: f6:e3:2b:c9:0e:d1:21:48:ef:2c:c9:0b:39:30:ce: 55:a5:18:85:e7:10:43:b2:78:44:ef:f4:bf:4e:c9: 10:06:f2:a3:0b:96:a6:5d:aa:a0:5d:85:7f:9b:a2: 68:a6:bc:f9:0c:24:94:e1:af:86:63:60:af:57:18: c8:32:50:07:04:f2:6d:42:20:ec:02:1d:2c:ee:87: 9e:a0:9f:27:51:75:e6:d2:86:7c:19:07:6a:6f:66: 78:09:83:76:c6:bc:52:d5:40:01:31:82:c4:53:b7: 2a:f2:3d:fc:1b:d4:36:f3:19:e5:d5:e5:44:ff:04: f6:01:96:71:7d:b9:5a:6b:64:e3:60:61:32:8f:1b: 52:67:c5:e9:0e:ee:5f:c8:5b:16:2c:f3:fb:01:04: 46:36:80:64:58:75:fa:ec:d0:04:9f:e3:88:90:2d: 10:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:23:1F:3E:92:83:5E:88:51:5E:51:A9:9C:F7:E9:A1:C0:1F:ED:73 X509v3 Authority Key Identifier: keyid:5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:00:d0:bf:dd:2f:61:a9:09:4b:85:7e:d5:a9:66:98:0a:e2: 2b:9e:55:60:fe:c3:3c:61:79:4a:01:22:e8:0c:cb:73:28:8c: 1e:12:b2:28:2f:4d:3c:82:dc:73:9f:0b:9e:5b:b3:c0:b4:66: 98:69:43:2c:94:1d:73:0c:8a:2c:47:48:09:90:95:d4:b3:ce: 84:d4:b3:d2:22:50:b7:81:b0:0d:f6:43:57:24:8d:e2:11:1c: 86:41:60:44:0d:ab:f8:a7:0f:23:cf:76:8d:a3:e1:21:17:98: 01:79:29:60:fb:10:c7:9b:f9:bd:ad:b7:67:7b:4c:87:4d:4d: c2:24:9b:5f:31:b6:2b:bc:58:ff:32:6c:b3:5a:6f:33:8c:3d: 43:f2:de:19:62:03:ac:ca:c9:dd:5b:40:12:e2:83:3f:a1:4c: ed:bc:c1:3c:d4:eb:db:c2:6b:a5:30:2f:17:7e:f3:fa:60:f8: 03:2e:ac:ff:cb:69:98:a1:aa:39:86:59:2f:be:54:bf:18:e7: f9:b9:76:df:e1:1f:6d:8f:33:9d:05:ec:75:62:14:32:91:ca: d2:e7:28:d5:e9:f6:e9:1a:00:dd:ae:2c:da:e7:4e:53:fb:cd: be:dc:b8:c8:ca:75:f2:24:36:8d:26:3d:2a:d9:71:09:fe:e6: b5:ce:1c:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYIcMZQ0DDS4kkXyBPA5ghi++uQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIwMzE5 MjBERjUyMTAeFw0yNTA4MDUwMjA1MzlaFw0yNTA4MDgwNDA4MzlaMDMxMTAvBgNV BAMTKEQ1MjMxRjNFOTI4MzVFODg1MTVFNTFBOTlDRjdFOUExQzAxRkVENzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlowKt6RK+WkGGh5Ny2s9NE4Ci V5xeBEWX8ojRJ2LwaiG7xZjOoduWSCzx1zydaEEoFTas8TAEZVbBm6FAB1eG03p3 kP62Ldq4fD4sCXCucnfhNN3y305ZmPbjK8kO0SFI7yzJCzkwzlWlGIXnEEOyeETv 9L9OyRAG8qMLlqZdqqBdhX+bomimvPkMJJThr4ZjYK9XGMgyUAcE8m1CIOwCHSzu h56gnydRdebShnwZB2pvZngJg3bGvFLVQAExgsRTtyryPfwb1DbzGeXV5UT/BPYB lnF9uVprZONgYTKPG1JnxekO7l/IWxYs8/sBBEY2gGRYdfrs0ASf44iQLRCDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1SMfPpKDXohRXlGpnPfpocAf7XMwHwYDVR0j BBgwFoAUXskor9c6/HDxDEaOIUggMZIN9SEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2YzZjhjOC0wNDA2LTRiMzgtYTdhOC1kY2IxNWU0MWYyYjcvMC81RUM5MjhBRkQ3 M0FGQzcwRjEwQzQ2OEUyMTQ4MjAzMTkyMERGNTIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIwMzE5MjBE RjUyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNmM2Y4YzgtMDQwNi00YjM4LWE3 YTgtZGNiMTVlNDFmMmI3LzAvNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIw MzE5MjBERjUyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJcA0L/dL2GpCUuFftWpZpgK4iueVWD+wzxh eUoBIugMy3MojB4SsigvTTyC3HOfC55bs8C0ZphpQyyUHXMMiixHSAmQldSzzoTU s9IiULeBsA32Q1ckjeIRHIZBYEQNq/inDyPPdo2j4SEXmAF5KWD7EMeb+b2tt2d7 TIdNTcIkm18xtiu8WP8ybLNabzOMPUPy3hliA6zKyd1bQBLigz+hTO28wTzU69vC a6UwLxd+8/pg+AMurP/LaZihqjmGWS++VL8Y5/m5dt/hH22PM50F7HViFDKRytLn KNXp9ukaAN2uLNrnTlP7zb7cuMjKdfIkNo0mPSrZcQn+5rXOHIA= -----END CERTIFICATE-----Generated at Tue Aug 5 22:56:01 2025 by rpki-client