$ rpki-client -vvf repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft File: 5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft (raw, json) Hash identifier: QykyjLyw7zTpG4MHdSdvB1Q6ZsH7vTOVfR91Zm0zCnk= Subject key identifier: 22:F6:F2:10:28:E8:13:7D:A9:CF:BD:59:DD:7B:1B:8E:5F:37:25:22 Authority key identifier: 5A:0C:BE:2D:BC:F9:88:35:69:F8:C2:4B:FB:9E:59:54:42:D8:35:D0 Certificate issuer: /CN=5A0CBE2DBCF9883569F8C24BFB9E595442D835D0 Certificate serial: 605447325B65B0020F040EA25B5FCF64F286A32B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft Manifest number: 04E1 Signing time: Wed 04 Jun 2025 11:11:44 +0000 Manifest this update: Wed 04 Jun 2025 11:06:44 +0000 Manifest next update: Sat 07 Jun 2025 17:36:44 +0000 Files and hashes: 1: 323030313a6466323a633238303a3a2f34382d3438203d3e20313339393839.roa (hash: REe8Gnbzv+cpC5r6l+mKFTeY9qAThVwp1bhR4g0ii3Q=) 2: 5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl (hash: CpxSckXIJqnlogSnQb+Rf2ZMzRqIZNEqBkqU5MG3aZg=) 3: 3130332e3134382e37362e302f32332d3233203d3e20313339393839.roa (hash: tHgBQBHZyelL12LDcNEGOIdBk1KUkf5Y80WNybt6NLU=) 4: 3130332e3134382e37372e302f32342d3234203d3e20313339393839.roa (hash: MWm2F1DhYXk8gG9Y58JwnEVzuJMu3hmMEBr/crsMrlo=) 5: 3130332e3134382e37362e302f32342d3234203d3e20313339393839.roa (hash: 4DHvFxVV4LIBkA3x8qQp+DBWnN9OK+EeEYU9y73AnvA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 17:36:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:54:47:32:5b:65:b0:02:0f:04:0e:a2:5b:5f:cf:64:f2:86:a3:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A0CBE2DBCF9883569F8C24BFB9E595442D835D0 Validity Not Before: Jun 4 11:06:44 2025 GMT Not After : Jun 7 17:36:44 2025 GMT Subject: CN=22F6F21028E8137DA9CFBD59DD7B1B8E5F372522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:39:64:d3:b6:3a:28:8e:7d:7b:34:eb:71:5f: bb:48:c6:07:3b:3e:c8:1e:12:04:2f:90:b9:32:ed: 16:56:23:e0:45:da:ee:0d:3b:82:c9:f9:17:12:73: 12:69:5d:9f:35:aa:87:ed:83:bc:39:eb:34:4b:e3: 1a:bd:51:de:78:d3:11:02:6a:a2:ef:0b:97:8f:92: e6:ab:46:c4:3d:c6:56:f1:8f:53:05:49:f3:39:10: e1:82:84:80:9c:e2:5a:a5:aa:53:4b:04:2d:98:95: db:62:22:ca:f1:d6:42:2c:3c:5a:14:86:0a:e1:1a: 8b:05:81:b3:05:6a:28:4f:c7:e3:e1:62:e5:71:70: dd:15:e5:7d:0b:9a:13:75:1f:26:2d:83:f3:1a:14: 55:2a:0c:b5:f2:8a:6c:15:59:c2:41:09:08:21:e7: 8c:65:c3:c2:bb:e4:57:4c:92:99:b1:e7:0e:1e:1a: 07:cf:bc:ae:95:79:4d:8d:9d:17:a0:ea:e9:8e:e0: fa:fc:55:1f:78:f3:fc:9e:0c:16:9c:ca:a3:35:30: fa:b1:3e:c1:7f:29:b9:da:bb:52:c0:08:97:e0:5c: 0b:38:8a:28:27:f0:4d:f2:c5:45:b2:ee:c8:93:19: 38:11:aa:9e:57:9a:10:15:2e:9a:a7:ed:67:04:de: 1a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F6:F2:10:28:E8:13:7D:A9:CF:BD:59:DD:7B:1B:8E:5F:37:25:22 X509v3 Authority Key Identifier: keyid:5A:0C:BE:2D:BC:F9:88:35:69:F8:C2:4B:FB:9E:59:54:42:D8:35:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:cd:fe:cb:8b:88:34:f7:5b:a3:8a:0a:de:bd:b6:96:01:5d: 7b:6e:a8:49:47:86:87:29:43:e6:55:14:1e:a2:f8:96:8e:d6: 19:08:89:b6:3f:af:c0:be:32:97:2e:f9:36:20:ce:82:09:91: f4:a8:de:ac:ea:61:7c:78:cc:4f:ca:8e:4e:42:20:8a:0c:c9: 2e:cb:31:a7:a9:47:ce:41:a2:4a:1c:b1:40:8a:56:45:0a:4c: 3e:30:e8:dc:16:0d:b1:34:57:0e:bc:48:af:b8:a6:bc:3a:87: b1:e2:50:b5:bb:44:c9:c5:17:59:60:20:7d:4b:7b:af:cf:85: 02:b8:77:e0:61:c1:37:ee:2b:20:47:65:9f:be:c6:b7:3b:c3: ea:d7:43:6b:fb:0b:74:3a:3c:f0:43:00:bb:36:22:fe:c3:b7: bf:e5:28:da:2a:44:35:51:48:fa:2d:cf:7d:0e:ef:73:ae:4a: 42:07:38:22:61:01:28:8b:51:5a:08:83:15:6f:7b:5e:3b:80: 0c:4c:04:e1:12:4b:c8:13:14:4c:2d:d3:3f:21:4b:6e:a9:5b: db:d8:76:ad:71:3b:4a:f8:9a:b6:d7:be:90:a3:6f:e1:51:e0: ab:1d:8d:7e:b0:1e:4a:fa:d7:e8:bd:25:1d:0b:f0:a8:89:f0: 2d:e5:06:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYFRHMltlsAIPBA6iW1/PZPKGoyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5NTQ0 MkQ4MzVEMDAeFw0yNTA2MDQxMTA2NDRaFw0yNTA2MDcxNzM2NDRaMDMxMTAvBgNV BAMTKDIyRjZGMjEwMjhFODEzN0RBOUNGQkQ1OUREN0IxQjhFNUYzNzI1MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+OWTTtjoojn17NOtxX7tIxgc7 PsgeEgQvkLky7RZWI+BF2u4NO4LJ+RcScxJpXZ81qoftg7w56zRL4xq9Ud540xEC aqLvC5ePkuarRsQ9xlbxj1MFSfM5EOGChICc4lqlqlNLBC2YldtiIsrx1kIsPFoU hgrhGosFgbMFaihPx+PhYuVxcN0V5X0LmhN1HyYtg/MaFFUqDLXyimwVWcJBCQgh 54xlw8K75FdMkpmx5w4eGgfPvK6VeU2NnReg6umO4Pr8VR948/yeDBacyqM1MPqx PsF/Kbnau1LACJfgXAs4iign8E3yxUWy7siTGTgRqp5XmhAVLpqn7WcE3hpvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIvbyECjoE32pz71Z3Xsbjl83JSIwHwYDVR0j BBgwFoAUWgy+Lbz5iDVp+MJL+55ZVELYNdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDMxNzQ2ZS1iMGY2LTQ4MjctOGM0ZS1iODE5MmRlY2MzOWEvMC81QTBDQkUyREJD Rjk4ODM1NjlGOEMyNEJGQjlFNTk1NDQyRDgzNUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5NTQ0MkQ4 MzVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAzMTc0NmUtYjBmNi00ODI3LThj NGUtYjgxOTJkZWNjMzlhLzAvNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5 NTQ0MkQ4MzVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAELN/suLiDT3W6OKCt69tpYBXXtuqElHhocp Q+ZVFB6i+JaO1hkIibY/r8C+Mpcu+TYgzoIJkfSo3qzqYXx4zE/Kjk5CIIoMyS7L MaepR85BokocsUCKVkUKTD4w6NwWDbE0Vw68SK+4prw6h7HiULW7RMnFF1lgIH1L e6/PhQK4d+BhwTfuKyBHZZ++xrc7w+rXQ2v7C3Q6PPBDALs2Iv7Dt7/lKNoqRDVR SPotz30O73OuSkIHOCJhASiLUVoIgxVve147gAxMBOESS8gTFEwt0z8hS26pW9vY dq1xO0r4mrbXvpCjb+FR4KsdjX6wHkr61+i9JR0L8KiJ8C3lBqk= -----END CERTIFICATE-----Generated at Thu Jun 5 18:21:40 2025 by rpki-client