$ rpki-client -vvf repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.mft File: 05BC764F85F9F88CE41FD879C6125E65117E8E79.mft (raw, json) Hash identifier: 8zxwU9paJZMTJzWYltP9PMPdmg+SH6GxGTv0ct5VHDI= Subject key identifier: 32:66:1D:C1:46:BB:B8:2D:EC:A3:E7:BA:65:BD:86:9A:8C:F0:B7:5C Authority key identifier: 05:BC:76:4F:85:F9:F8:8C:E4:1F:D8:79:C6:12:5E:65:11:7E:8E:79 Certificate issuer: /CN=05BC764F85F9F88CE41FD879C6125E65117E8E79 Certificate serial: 5A1B27361B7B9C9943EFD0ACB9A08617F2235D3D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05BC764F85F9F88CE41FD879C6125E65117E8E79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.mft Manifest number: 04D8 Signing time: Wed 04 Jun 2025 12:11:26 +0000 Manifest this update: Wed 04 Jun 2025 12:06:26 +0000 Manifest next update: Sat 07 Jun 2025 19:24:26 +0000 Files and hashes: 1: 3130332e36352e3233382e302f32342d3234203d3e20313335343531.roa (hash: D88QpUodDy8ztOI3PsXX3NvtYOASEcix4uqfFJmts0U=) 2: 3130332e39362e3131362e302f32342d3234203d3e20313335343531.roa (hash: oN07EEzMfkHBn9JnnG4sRK6teKNd4kpEdvJthcOFQvg=) 3: 05BC764F85F9F88CE41FD879C6125E65117E8E79.crl (hash: BAEIOUKOtvUn6NAQxx9youNawQhJRiKR6tBwpTDqCag=) 4: 3130332e39362e3131382e302f32332d3234203d3e20313335343531.roa (hash: f0BWuTzxCArn4KfGhPORVbfEFH0pcc52v4wRTW6XvmA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.crl rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05BC764F85F9F88CE41FD879C6125E65117E8E79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 19:24:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:1b:27:36:1b:7b:9c:99:43:ef:d0:ac:b9:a0:86:17:f2:23:5d:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05BC764F85F9F88CE41FD879C6125E65117E8E79 Validity Not Before: Jun 4 12:06:26 2025 GMT Not After : Jun 7 19:24:26 2025 GMT Subject: CN=32661DC146BBB82DECA3E7BA65BD869A8CF0B75C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ad:b0:d5:d0:e2:f3:90:df:d2:0b:8b:ee:39: 0d:ff:85:7f:6b:a1:8a:d7:41:0a:be:70:83:25:dd: 15:89:ad:8e:0e:81:b3:23:17:49:86:89:a3:76:71: 2f:ad:9a:05:96:2f:a8:6f:e7:09:85:e4:07:3a:37: ed:f3:83:98:ab:33:fa:9f:dd:47:4e:1c:bd:60:b9: 83:2e:ed:0f:03:ae:65:c8:48:58:31:40:bb:3e:c6: d4:58:a0:cc:5c:9a:95:37:f6:ed:ff:2f:1d:15:f4: d0:39:9f:ca:07:d8:01:de:5f:6c:17:bc:37:e2:0d: b7:19:7b:4f:fa:03:ed:2e:2d:b1:4b:26:5d:d9:bb: a4:b4:3f:d7:6e:7e:2b:9d:1d:30:1e:e4:5e:6f:09: f9:34:b1:09:19:ba:dc:3e:20:1f:6f:b7:cc:b8:9b: 8a:8e:9d:bd:6a:94:0c:a9:e6:07:76:f1:d3:62:88: e5:ae:6b:37:33:cc:72:74:fc:a0:71:e5:d9:bc:9f: 4e:e6:bf:5d:38:fd:b6:5c:92:81:43:40:45:b3:61: 80:a9:ef:9e:4f:9e:1b:f7:37:38:d5:28:2a:3e:fd: 48:47:ad:26:26:50:fd:c3:c8:4e:08:4b:07:83:d2: e6:ff:0d:31:68:cc:65:25:ee:70:ed:17:2c:53:47: ca:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:66:1D:C1:46:BB:B8:2D:EC:A3:E7:BA:65:BD:86:9A:8C:F0:B7:5C X509v3 Authority Key Identifier: keyid:05:BC:76:4F:85:F9:F8:8C:E4:1F:D8:79:C6:12:5E:65:11:7E:8E:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05BC764F85F9F88CE41FD879C6125E65117E8E79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:02:7f:38:9c:13:c7:d7:91:90:e0:69:c7:0e:dd:5a:2c:f8: 50:60:bd:0b:17:26:b0:f6:4b:ff:61:22:9e:0c:00:7f:81:e1: 80:98:32:2b:fb:08:43:f0:d3:11:33:6f:99:b2:72:48:45:04: ac:71:af:86:84:b7:23:54:59:27:e6:fe:62:22:f2:3c:4d:05: 69:f5:97:d5:6a:db:3c:b8:0a:3d:f2:38:eb:b0:35:ba:ab:03: 8e:a9:15:74:8a:9a:2b:ea:db:8b:1c:4a:f2:32:78:ee:09:a7: 49:bd:f5:ad:4c:e1:6f:ac:27:fd:53:82:27:03:74:cd:74:d3: f1:aa:39:83:a8:d8:d3:45:28:0b:5c:ea:a0:ed:ee:f6:20:8a: 0b:da:e2:c4:a3:cd:7e:28:ff:09:30:96:c6:f2:18:27:d4:a0: c6:b6:9f:42:42:1e:ea:50:66:a4:f0:f7:e0:0f:0c:29:1b:fe: 0d:bc:ea:80:48:a3:4c:06:ed:6e:63:8c:f7:69:c1:cb:1c:a4: 51:72:c2:29:63:2b:c7:61:b1:89:4a:84:3d:63:5a:c3:63:a7: 85:36:5b:6e:98:0f:d4:16:45:1e:bc:1c:9a:2c:b7:e7:ed:32: 66:6f:4f:b7:94:d9:91:7d:05:5c:99:ce:0a:5d:1a:e4:d2:95: 98:f5:d5:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWhsnNht7nJlD79CsuaCGF/IjXT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDVCQzc2NEY4NUY5Rjg4Q0U0MUZEODc5QzYxMjVFNjUx MTdFOEU3OTAeFw0yNTA2MDQxMjA2MjZaFw0yNTA2MDcxOTI0MjZaMDMxMTAvBgNV BAMTKDMyNjYxREMxNDZCQkI4MkRFQ0EzRTdCQTY1QkQ4NjlBOENGMEI3NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKrbDV0OLzkN/SC4vuOQ3/hX9r oYrXQQq+cIMl3RWJrY4OgbMjF0mGiaN2cS+tmgWWL6hv5wmF5Ac6N+3zg5irM/qf 3UdOHL1guYMu7Q8DrmXISFgxQLs+xtRYoMxcmpU39u3/Lx0V9NA5n8oH2AHeX2wX vDfiDbcZe0/6A+0uLbFLJl3Zu6S0P9dufiudHTAe5F5vCfk0sQkZutw+IB9vt8y4 m4qOnb1qlAyp5gd28dNiiOWuazczzHJ0/KBx5dm8n07mv104/bZckoFDQEWzYYCp 755Pnhv3NzjVKCo+/UhHrSYmUP3DyE4ISweD0ub/DTFozGUl7nDtFyxTR8obAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMmYdwUa7uC3so+e6Zb2Gmozwt1wwHwYDVR0j BBgwFoAUBbx2T4X5+IzkH9h5xhJeZRF+jnkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MWMxZDU2ZS0xNWM2LTRiNjUtYTlhOC1mOTBhZDZmYmEwOTAvMC8wNUJDNzY0Rjg1 RjlGODhDRTQxRkQ4NzlDNjEyNUU2NTExN0U4RTc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDVCQzc2NEY4NUY5Rjg4Q0U0MUZEODc5QzYxMjVFNjUxMTdF OEU3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTFjMWQ1NmUtMTVjNi00YjY1LWE5 YTgtZjkwYWQ2ZmJhMDkwLzAvMDVCQzc2NEY4NUY5Rjg4Q0U0MUZEODc5QzYxMjVF NjUxMTdFOEU3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJYCfzicE8fXkZDgaccO3Vos+FBgvQsXJrD2 S/9hIp4MAH+B4YCYMiv7CEPw0xEzb5myckhFBKxxr4aEtyNUWSfm/mIi8jxNBWn1 l9Vq2zy4Cj3yOOuwNbqrA46pFXSKmivq24scSvIyeO4Jp0m99a1M4W+sJ/1TgicD dM100/GqOYOo2NNFKAtc6qDt7vYgigva4sSjzX4o/wkwlsbyGCfUoMa2n0JCHupQ ZqTw9+APDCkb/g286oBIo0wG7W5jjPdpwcscpFFywiljK8dhsYlKhD1jWsNjp4U2 W26YD9QWRR68HJost+ftMmZvT7eU2ZF9BVyZzgpdGuTSlZj11Qw= -----END CERTIFICATE-----Generated at Thu Jun 5 18:10:58 2025 by rpki-client