$ rpki-client -vvf repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft File: 5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft (raw, json) Hash identifier: PWWKjV64YbRhI81ExWPxNif++MGH8oN9C1RjF5wSzro= Subject key identifier: FF:FE:FC:D3:80:19:3D:4F:B2:87:03:5E:27:54:16:36:5F:BF:DB:69 Authority key identifier: 5A:D1:91:73:FE:66:EE:2B:9E:99:5A:99:ED:7D:C4:23:01:13:BD:EF Certificate issuer: /CN=5AD19173FE66EE2B9E995A99ED7DC4230113BDEF Certificate serial: 05F73240C55542D8ECB2433583055C9379B2B9D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft Manifest number: 0148 Signing time: Wed 04 Jun 2025 09:41:52 +0000 Manifest this update: Wed 04 Jun 2025 09:36:52 +0000 Manifest next update: Sat 07 Jun 2025 12:13:52 +0000 Files and hashes: 1: 5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl (hash: Ue31R/gYQ2IM5+Y1hpEcINK/TlVQcuk57HhoaVSvVWk=) 2: 3130332e3132332e3137342e302f32332d3233203d3e20313530393638.roa (hash: 5XRHZIZI1oj83KHXG7v/4Bg68uKlgADqYmMHikLr/vU=) 3: 3130332e3132332e3137342e302f32342d3234203d3e20313530393638.roa (hash: HBPJroPXGy8LUopobuBKzRyp/rbJ8xWZnNOPphW6Qlg=) 4: 3130332e3132332e3137352e302f32342d3234203d3e20313530393638.roa (hash: dqxRLNjaP87/BAjwkFlOT+1aQilVY6SUF3ZdlXMJQnY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 12:13:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:f7:32:40:c5:55:42:d8:ec:b2:43:35:83:05:5c:93:79:b2:b9:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AD19173FE66EE2B9E995A99ED7DC4230113BDEF Validity Not Before: Jun 4 09:36:52 2025 GMT Not After : Jun 7 12:13:52 2025 GMT Subject: CN=FFFEFCD380193D4FB287035E275416365FBFDB69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c4:5b:38:89:47:db:6d:54:ac:51:34:b6:4d: 3b:17:48:80:23:d3:f1:67:2d:25:a9:cb:37:af:39: 95:4a:22:95:c2:9a:a7:a6:c9:91:b5:82:47:fb:5d: 98:9d:37:89:d5:6e:b7:fe:00:cf:7e:91:40:a2:e5: 55:0c:53:e1:2b:40:fd:20:fa:fa:77:d4:a1:dc:5c: 12:ea:9d:c1:40:04:19:25:c0:82:94:2b:70:df:55: 4d:cf:88:92:d4:e6:f5:e3:24:23:1b:6e:a5:5e:fa: 56:e5:01:e3:a8:c5:a5:26:50:24:8a:7c:8c:d5:3c: 75:99:92:71:ca:79:86:2c:49:dc:0d:2d:cf:17:aa: 3a:b6:85:dc:e7:95:4e:1d:e4:8b:29:81:37:a7:29: 00:20:b4:e6:6e:f8:c3:83:c9:90:96:a1:b6:ee:88: a6:3b:02:e1:8e:cc:05:26:2a:4c:f4:b6:5e:33:66: 1a:12:2d:02:a8:9c:9b:cc:e1:12:4f:3d:4e:ac:2e: c2:1c:2a:be:62:51:b9:7c:13:62:98:f6:12:93:f8: bd:f7:4f:6e:83:5f:15:88:87:fa:83:9b:2a:f7:da: 8a:95:e4:50:8a:e8:e7:ed:6b:9f:b1:bf:ea:55:c6: 35:14:f1:ac:a2:49:59:60:7a:12:27:a3:84:62:55: 6f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:FE:FC:D3:80:19:3D:4F:B2:87:03:5E:27:54:16:36:5F:BF:DB:69 X509v3 Authority Key Identifier: keyid:5A:D1:91:73:FE:66:EE:2B:9E:99:5A:99:ED:7D:C4:23:01:13:BD:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:eb:13:68:2b:b6:01:66:77:61:4a:24:be:69:b9:e0:6d:57: 19:63:b4:19:40:3e:d1:64:a6:bf:3a:b7:e7:69:4b:ab:f7:70: fb:a4:27:3e:f6:4f:9c:29:23:37:7e:d5:9a:f4:67:24:4b:66: 20:bc:ea:71:76:23:36:00:e2:ad:2e:75:a9:36:77:e9:76:84: 59:4e:c2:49:8f:99:52:11:5e:e4:0a:e7:e9:1a:ce:2c:5a:e1: 3c:3f:1d:07:cd:43:cb:6d:b2:3c:68:ae:f0:45:1e:a3:15:53: 87:e8:ab:58:0a:09:93:c6:cc:c1:af:64:dd:d1:63:e7:8c:05: 0f:eb:f9:47:bc:25:26:ee:ef:3d:36:7e:26:e2:3e:61:d1:4f: bd:a5:c9:fe:97:ea:44:98:66:2e:c1:41:70:eb:48:2a:45:a3: e0:87:90:cc:da:ce:4a:d0:d1:a8:b2:0b:f4:e9:8f:7a:52:a1: f9:db:e8:ec:a8:ba:7c:ff:09:b2:d4:5f:bf:f1:4d:1d:3e:77: 91:3a:3b:78:b1:3c:2c:1e:ee:b5:01:ed:a3:76:84:93:bb:a8: da:14:94:b3:f7:70:d5:3d:a6:39:ad:d7:05:4b:ba:f9:32:46: 5b:81:e1:4f:b2:47:45:60:d0:0f:42:8f:54:e5:2d:b5:25:a2: 7e:1e:bb:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBfcyQMVVQtjsskM1gwVck3myudAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0MjMw MTEzQkRFRjAeFw0yNTA2MDQwOTM2NTJaFw0yNTA2MDcxMjEzNTJaMDMxMTAvBgNV BAMTKEZGRkVGQ0QzODAxOTNENEZCMjg3MDM1RTI3NTQxNjM2NUZCRkRCNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDixFs4iUfbbVSsUTS2TTsXSIAj 0/FnLSWpyzevOZVKIpXCmqemyZG1gkf7XZidN4nVbrf+AM9+kUCi5VUMU+ErQP0g +vp31KHcXBLqncFABBklwIKUK3DfVU3PiJLU5vXjJCMbbqVe+lblAeOoxaUmUCSK fIzVPHWZknHKeYYsSdwNLc8Xqjq2hdznlU4d5IspgTenKQAgtOZu+MODyZCWobbu iKY7AuGOzAUmKkz0tl4zZhoSLQKonJvM4RJPPU6sLsIcKr5iUbl8E2KY9hKT+L33 T26DXxWIh/qDmyr32oqV5FCK6Ofta5+xv+pVxjUU8ayiSVlgehIno4RiVW+LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU//7804AZPU+yhwNeJ1QWNl+/22kwHwYDVR0j BBgwFoAUWtGRc/5m7iuemVqZ7X3EIwETve8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmVkYjI4Zi1mM2Y5LTQxOTktODVhMy1jOWJmOWE3YTdkZjgvMC81QUQxOTE3M0ZF NjZFRTJCOUU5OTVBOTlFRDdEQzQyMzAxMTNCREVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0MjMwMTEz QkRFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWZlZGIyOGYtZjNmOS00MTk5LTg1 YTMtYzliZjlhN2E3ZGY4LzAvNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0 MjMwMTEzQkRFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHnrE2grtgFmd2FKJL5pueBtVxljtBlAPtFk pr86t+dpS6v3cPukJz72T5wpIzd+1Zr0ZyRLZiC86nF2IzYA4q0udak2d+l2hFlO wkmPmVIRXuQK5+kazixa4Tw/HQfNQ8ttsjxorvBFHqMVU4foq1gKCZPGzMGvZN3R Y+eMBQ/r+Ue8JSbu7z02fibiPmHRT72lyf6X6kSYZi7BQXDrSCpFo+CHkMzazkrQ 0aiyC/Tpj3pSofnb6Oyounz/CbLUX7/xTR0+d5E6O3ixPCwe7rUB7aN2hJO7qNoU lLP3cNU9pjmt1wVLuvkyRluB4U+yR0Vg0A9Cj1TlLbUlon4eu7E= -----END CERTIFICATE-----Generated at Thu Jun 5 18:12:30 2025 by rpki-client