$ rpki-client -vvf repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.mft File: 5B558AD01277C8212C974318B6352FB28BF683AD.mft (raw, json) Hash identifier: guF9Cie9CLwkRQpZJRlPbYE1LnyHd9J+jWP1ANKQZ50= Subject key identifier: BD:E6:BD:4D:A4:34:B4:8E:6E:A2:F0:75:88:E6:15:EE:36:A9:C2:D4 Authority key identifier: 5B:55:8A:D0:12:77:C8:21:2C:97:43:18:B6:35:2F:B2:8B:F6:83:AD Certificate issuer: /CN=5B558AD01277C8212C974318B6352FB28BF683AD Certificate serial: 632C13383D9E7C1B80F84D8801B8FB58F0AEC023 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B558AD01277C8212C974318B6352FB28BF683AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.mft Manifest number: 01A3 Signing time: Mon 21 Jul 2025 04:10:48 +0000 Manifest this update: Mon 21 Jul 2025 04:05:48 +0000 Manifest next update: Thu 24 Jul 2025 08:18:48 +0000 Files and hashes: 1: 3130332e3139362e34302e302f32342d3234203d3e20313530323030.roa (hash: 2i8HfdlFIHezHTi1m8fyUROS/IcCg2re+ftnVgBoAd4=) 2: 3130332e3139362e34302e302f32332d3233203d3e20313530323030.roa (hash: 0agQaQqzfkfho9nuxHylitEA2rT2w6YSuj3i1Cy3BUc=) 3: 3130332e3139362e34312e302f32342d3234203d3e20313530323030.roa (hash: 0shHIoNgf0pQRXh0UI7r08hqky3s0DThmjqdBQikoVM=) 4: 5B558AD01277C8212C974318B6352FB28BF683AD.crl (hash: 6XCucu7l9IOxWIgQCaEYgoj69DBww/T8QWpH0GENeW0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.crl rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B558AD01277C8212C974318B6352FB28BF683AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 08:18:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:2c:13:38:3d:9e:7c:1b:80:f8:4d:88:01:b8:fb:58:f0:ae:c0:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B558AD01277C8212C974318B6352FB28BF683AD Validity Not Before: Jul 21 04:05:48 2025 GMT Not After : Jul 24 08:18:48 2025 GMT Subject: CN=BDE6BD4DA434B48E6EA2F07588E615EE36A9C2D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e7:20:08:2a:fa:2d:fe:dc:dd:8c:f7:80:74: f5:60:17:8c:1f:3d:1a:c5:99:7f:4e:be:1f:29:e6: 70:17:f5:04:4b:1e:03:1a:7f:f4:73:eb:cb:6a:9b: ab:6d:3e:18:46:5f:ea:36:52:22:bf:18:5f:c1:9e: 9e:70:65:35:9e:18:f3:55:e1:36:97:6f:d0:e3:77: 68:8c:bb:63:37:59:83:6e:97:61:ad:b4:61:21:65: df:c5:b1:12:11:86:74:45:44:51:d1:7e:ac:b3:8c: 5e:55:0d:3d:83:e1:06:19:22:a3:f8:92:bc:dc:7f: 4f:75:3f:30:60:d7:b6:4a:30:e4:b1:ab:da:ec:86: 7e:d7:fa:b4:38:70:a5:3a:af:ac:2c:95:a4:0b:05: e7:2c:4b:6a:13:43:20:ef:1f:e6:48:2b:4c:8d:75: 43:bd:b2:fe:d4:21:9e:7e:84:f6:f3:e5:2f:ab:7d: 94:31:bd:a9:07:29:d8:a0:13:d2:37:8f:e0:37:fb: d9:fa:e0:35:ea:cb:f3:28:21:83:5b:09:d1:44:da: f1:92:6f:cc:2c:56:1b:95:34:7e:b0:9f:b5:12:00: 02:51:85:57:ee:1c:f1:5d:ab:ee:93:4a:db:ed:56: c9:7a:48:be:ee:72:9c:dc:33:45:4b:13:2a:a0:ef: d9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E6:BD:4D:A4:34:B4:8E:6E:A2:F0:75:88:E6:15:EE:36:A9:C2:D4 X509v3 Authority Key Identifier: keyid:5B:55:8A:D0:12:77:C8:21:2C:97:43:18:B6:35:2F:B2:8B:F6:83:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B558AD01277C8212C974318B6352FB28BF683AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:3a:c5:43:a3:40:4e:04:da:b6:99:eb:0e:64:15:3a:24:1d: 01:fa:7a:4b:d6:f9:17:19:63:1d:8f:36:9e:d4:78:9b:dd:36: d5:fd:3f:4c:cf:8a:5d:1e:f9:1b:c6:96:51:2a:50:76:a6:47: 25:1e:65:14:99:a9:c9:15:82:12:fb:04:47:8b:0b:ab:57:00: 2a:b3:3a:a8:b1:f0:8c:f9:af:a9:14:80:1d:33:9f:0a:b4:1c: 84:1f:d1:e6:74:4a:d1:82:dd:8f:46:26:6f:a9:48:e0:e0:82: 68:f8:61:9f:77:1e:09:05:ab:be:91:80:ad:08:29:24:aa:32: 08:41:92:3e:02:15:15:bc:53:fe:f5:d0:51:ce:8a:53:8f:53: 60:8d:22:92:06:c7:9b:ea:a1:ea:91:70:55:92:b6:7a:8f:dd: 3c:36:d6:10:ea:49:f4:80:a4:b3:c0:e2:aa:2e:c5:b9:3a:7e: 57:b4:ea:32:0e:50:d8:99:26:e1:70:a5:a3:e3:f6:41:cd:a6: 3d:3d:09:26:62:f7:af:14:d0:6c:00:81:c2:60:94:39:46:2c: 1e:d9:f1:04:da:a3:6d:9d:b1:03:7a:01:23:bd:37:5e:41:35: fa:1a:6f:34:d6:78:9c:9a:3a:f7:ef:bf:c3:31:ac:b2:a0:a4: a5:3a:44:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYywTOD2efBuA+E2IAbj7WPCuwCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI1NThBRDAxMjc3QzgyMTJDOTc0MzE4QjYzNTJGQjI4 QkY2ODNBRDAeFw0yNTA3MjEwNDA1NDhaFw0yNTA3MjQwODE4NDhaMDMxMTAvBgNV BAMTKEJERTZCRDREQTQzNEI0OEU2RUEyRjA3NTg4RTYxNUVFMzZBOUMyRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/5yAIKvot/tzdjPeAdPVgF4wf PRrFmX9Ovh8p5nAX9QRLHgMaf/Rz68tqm6ttPhhGX+o2UiK/GF/Bnp5wZTWeGPNV 4TaXb9Djd2iMu2M3WYNul2GttGEhZd/FsRIRhnRFRFHRfqyzjF5VDT2D4QYZIqP4 krzcf091PzBg17ZKMOSxq9rshn7X+rQ4cKU6r6wslaQLBecsS2oTQyDvH+ZIK0yN dUO9sv7UIZ5+hPbz5S+rfZQxvakHKdigE9I3j+A3+9n64DXqy/MoIYNbCdFE2vGS b8wsVhuVNH6wn7USAAJRhVfuHPFdq+6TStvtVsl6SL7ucpzcM0VLEyqg79kNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvea9TaQ0tI5uovB1iOYV7japwtQwHwYDVR0j BBgwFoAUW1WK0BJ3yCEsl0MYtjUvsov2g60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YTViNGZhNC0zMjhjLTRjZjItYWRlMy1jODY4MTMxZDRlMGQvMC81QjU1OEFEMDEy NzdDODIxMkM5NzQzMThCNjM1MkZCMjhCRjY4M0FELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUI1NThBRDAxMjc3QzgyMTJDOTc0MzE4QjYzNTJGQjI4QkY2 ODNBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmE1YjRmYTQtMzI4Yy00Y2YyLWFk ZTMtYzg2ODEzMWQ0ZTBkLzAvNUI1NThBRDAxMjc3QzgyMTJDOTc0MzE4QjYzNTJG QjI4QkY2ODNBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF86xUOjQE4E2raZ6w5kFTokHQH6ekvW+RcZ Yx2PNp7UeJvdNtX9P0zPil0e+RvGllEqUHamRyUeZRSZqckVghL7BEeLC6tXACqz Oqix8Iz5r6kUgB0znwq0HIQf0eZ0StGC3Y9GJm+pSODggmj4YZ93HgkFq76RgK0I KSSqMghBkj4CFRW8U/710FHOilOPU2CNIpIGx5vqoeqRcFWStnqP3Tw21hDqSfSA pLPA4qouxbk6fle06jIOUNiZJuFwpaPj9kHNpj09CSZi968U0GwAgcJglDlGLB7Z 8QTao22dsQN6ASO9N15BNfoabzTWeJyaOvfvv8MxrLKgpKU6RBM= -----END CERTIFICATE-----Generated at Mon Jul 21 23:22:43 2025 by rpki-client