$ rpki-client -vvf repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft File: 5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft (raw, json) Hash identifier: Uehr0z/H2z+HIGJi91PdMADkEifOUJIblvKleSMuhZE= Subject key identifier: 2E:BF:44:F2:B9:E8:3F:D5:DD:5E:81:64:F9:F3:E3:28:3E:B5:FC:4F Authority key identifier: 5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F Certificate issuer: /CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F Certificate serial: 7F3B0AAE681B49EA0D480140981BA6C315A7E156 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft Manifest number: 0315 Signing time: Thu 05 Jun 2025 16:40:38 +0000 Manifest this update: Thu 05 Jun 2025 16:35:38 +0000 Manifest next update: Sun 08 Jun 2025 22:56:38 +0000 Files and hashes: 1: 3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (hash: UdMMuDzVeoO8FHRaQDUzSG3siVMxaIJM4SzGz06W/gA=) 2: 3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (hash: MsMpPPcpIZuSudoMMepNN+ZazUOetlA5JvcEYSzR82g=) 3: 5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl (hash: Z2zWEVVABHwS+qq0TwhCjne30+dLUXuo2dUKkmNHgE8=) 4: 3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (hash: AdQ+JO/REhdDwDAu63+KE7Cs+bTRN78/P47D5a5DoZI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 22:56:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:3b:0a:ae:68:1b:49:ea:0d:48:01:40:98:1b:a6:c3:15:a7:e1:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F Validity Not Before: Jun 5 16:35:38 2025 GMT Not After : Jun 8 22:56:38 2025 GMT Subject: CN=2EBF44F2B9E83FD5DD5E8164F9F3E3283EB5FC4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:dc:0c:d5:cd:b5:a5:97:6d:a7:75:a0:09:cf: c7:98:06:4e:11:f4:d1:91:5a:5c:d5:ed:ca:4b:4c: 07:2f:52:36:4e:be:a0:d0:a0:06:a8:4d:1e:6e:41: b7:c0:6e:7e:2d:e4:60:c5:17:e6:3b:d0:de:e5:e0: 1c:69:f5:39:ac:32:ea:cf:e9:2e:cd:4c:3a:df:ea: 21:c2:90:da:45:6c:89:02:88:2d:72:1e:f7:df:70: c3:cc:1b:77:92:c6:4f:92:b6:3e:d7:03:cb:e9:34: da:58:10:9c:1b:83:db:a9:73:0d:f2:04:5c:1e:47: 16:1a:87:de:81:25:be:ed:6e:74:7e:93:ec:9a:06: 39:df:f3:3b:8b:24:ce:8d:f3:82:f8:44:98:27:8f: 3f:6f:c9:8e:03:bb:de:fc:12:d7:1b:37:74:b7:b6: e4:7d:af:c7:a0:b6:36:95:f0:3c:02:21:62:12:a7: 0e:0f:9e:7c:ad:59:65:49:9d:58:fd:a1:fb:dc:02: f2:33:85:74:e2:da:1e:a0:e3:e7:e3:94:2e:ea:77: f2:57:88:24:dc:fe:18:01:b7:c4:ce:25:6f:df:6e: 2d:44:c6:ba:e7:62:73:5d:fe:63:47:ce:84:4a:4d: 51:48:60:10:c4:ab:ab:e4:a0:2e:54:04:ca:61:c3: 23:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:BF:44:F2:B9:E8:3F:D5:DD:5E:81:64:F9:F3:E3:28:3E:B5:FC:4F X509v3 Authority Key Identifier: keyid:5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:a9:a4:fc:49:7d:34:1b:e3:e8:4a:ee:85:1b:8f:83:bb:e1: 93:c9:26:4b:58:d4:69:5f:79:db:91:4a:d2:b9:90:f2:1d:8c: 52:42:29:57:59:f4:cd:e3:d7:9e:db:bc:a8:e7:55:21:f7:3f: 00:29:24:58:ef:c9:e7:ff:06:1b:23:49:fc:93:a7:fc:27:d8: 92:25:a1:91:4e:ec:9f:27:41:34:1e:86:86:e4:f9:97:ff:5e: ac:bf:23:c5:f1:99:70:c2:8a:2f:92:81:62:96:7f:98:8d:2e: 01:b5:94:f3:24:94:7a:41:4e:89:99:72:d8:70:f8:8b:2c:4d: 8d:53:43:c1:15:f0:70:33:06:09:b6:f4:ec:98:8c:c1:c6:9b: d9:83:96:2a:1d:d7:03:2a:28:5f:2e:8c:39:b3:11:b8:ac:b6: 77:7b:df:7d:db:31:51:39:b9:52:ca:05:da:6f:87:f7:28:86: 72:23:8e:07:91:11:b6:94:1b:86:56:ea:d8:87:3b:3a:20:83: bc:28:8f:9a:a5:2a:8f:b3:12:c9:8a:68:73:9d:25:27:c4:66: 54:80:8a:2c:c0:ac:40:71:c8:1d:83:e7:8e:66:8f:9a:3a:6f: c4:f1:58:44:d5:70:aa:9e:43:f5:e5:79:54:bc:6b:c6:e8:17: 29:ff:86:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfzsKrmgbSeoNSAFAmBumwxWn4VYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJCQ0My RTZCM0Q4RjAeFw0yNTA2MDUxNjM1MzhaFw0yNTA2MDgyMjU2MzhaMDMxMTAvBgNV BAMTKDJFQkY0NEYyQjlFODNGRDVERDVFODE2NEY5RjNFMzI4M0VCNUZDNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW3AzVzbWll22ndaAJz8eYBk4R 9NGRWlzV7cpLTAcvUjZOvqDQoAaoTR5uQbfAbn4t5GDFF+Y70N7l4Bxp9TmsMurP 6S7NTDrf6iHCkNpFbIkCiC1yHvffcMPMG3eSxk+Stj7XA8vpNNpYEJwbg9upcw3y BFweRxYah96BJb7tbnR+k+yaBjnf8zuLJM6N84L4RJgnjz9vyY4Du978EtcbN3S3 tuR9r8egtjaV8DwCIWISpw4PnnytWWVJnVj9ofvcAvIzhXTi2h6g4+fjlC7qd/JX iCTc/hgBt8TOJW/fbi1ExrrnYnNd/mNHzoRKTVFIYBDEq6vkoC5UBMphwyMBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULr9E8rnoP9XdXoFk+fPjKD61/E8wHwYDVR0j BBgwFoAUXB3H6HRXqR81kVrx3j+7zC5rPY8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yzg4NDQyYi1jNDhlLTRiYTAtOGFkNy01OGUxMjYzYzZkYzcvMC81QzFEQzdFODc0 NTdBOTFGMzU5MTVBRjFERTNGQkJDQzJFNkIzRDhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJCQ0MyRTZC M0Q4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M4ODQ0MmItYzQ4ZS00YmEwLThh ZDctNThlMTI2M2M2ZGM3LzAvNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJC Q0MyRTZCM0Q4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJSppPxJfTQb4+hK7oUbj4O74ZPJJktY1Glf eduRStK5kPIdjFJCKVdZ9M3j157bvKjnVSH3PwApJFjvyef/BhsjSfyTp/wn2JIl oZFO7J8nQTQehobk+Zf/Xqy/I8XxmXDCii+SgWKWf5iNLgG1lPMklHpBTomZcthw +IssTY1TQ8EV8HAzBgm29OyYjMHGm9mDliod1wMqKF8ujDmzEbistnd7333bMVE5 uVLKBdpvh/cohnIjjgeREbaUG4ZW6tiHOzogg7woj5qlKo+zEsmKaHOdJSfEZlSA iizArEBxyB2D545mj5o6b8TxWETVcKqeQ/XleVS8a8boFyn/hs8= -----END CERTIFICATE-----Generated at Sun Jun 8 00:23:18 2025 by rpki-client