$ rpki-client -vvf repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft File: 5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft (raw, json) Hash identifier: IQ7funXU8fbswfO1DWc58ydBeD3BnUpiW6TDrqhtcTs= Subject key identifier: B2:2C:F5:40:5E:2C:5A:D8:62:AD:93:59:26:15:A3:21:5A:01:58:4F Authority key identifier: 5F:E2:D2:A6:AB:51:68:6B:C9:12:62:CC:80:15:2C:19:50:63:7A:EA Certificate issuer: /CN=5FE2D2A6AB51686BC91262CC80152C1950637AEA Certificate serial: 68B74DFDA5DBA5C0BB0520F970B607809B2CF3FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft Manifest number: 8E Signing time: Fri 06 Jun 2025 21:01:54 +0000 Manifest this update: Fri 06 Jun 2025 20:56:54 +0000 Manifest next update: Tue 10 Jun 2025 02:48:54 +0000 Files and hashes: 1: 5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl (hash: jrathqclAohmiIAbUDbFKEFtLJUnjE5vF4N/IAC0rig=) 2: 3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa (hash: IYlIkK9ZMSP7xUAGZ1Am2ZgHJrv4HQzXJImTEhZj1s8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 00:59:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:b7:4d:fd:a5:db:a5:c0:bb:05:20:f9:70:b6:07:80:9b:2c:f3:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FE2D2A6AB51686BC91262CC80152C1950637AEA Validity Not Before: Jun 6 20:56:54 2025 GMT Not After : Jun 10 02:48:54 2025 GMT Subject: CN=B22CF5405E2C5AD862AD93592615A3215A01584F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7e:9e:92:1c:0d:5f:af:51:72:86:12:ad:a1: 0b:0e:54:c1:43:6b:28:8c:bf:9a:4a:8f:0c:1f:40: 3f:eb:7b:af:d4:82:21:df:0d:6c:31:3c:ec:53:82: 32:96:36:15:e8:c9:bd:85:54:9f:0b:f7:cf:49:05: 56:93:1a:59:b2:ba:67:24:ee:6e:84:09:0b:04:21: 5e:ef:25:3d:69:d6:22:93:4f:b3:8d:04:7c:5e:0f: e7:86:20:6c:cb:37:f0:93:38:ee:95:df:5c:41:91: 73:51:c8:e2:07:05:40:2d:d8:7f:f0:e8:6f:8f:00: 4b:a8:f5:88:bc:c1:66:38:8c:cf:20:77:09:c6:a9: ac:e4:b7:ac:6e:c3:95:ee:f2:99:ca:89:49:7f:b9: 5f:f9:c1:7a:4e:51:95:97:e7:4c:c9:b5:95:49:53: 87:13:eb:be:6f:99:25:66:2c:ee:d8:20:05:58:c7: 04:5a:ff:08:9e:b4:85:23:56:bf:04:38:2f:00:6d: 5a:38:2f:25:5a:9a:03:21:aa:49:ab:93:25:a3:58: fc:ed:1d:01:35:7e:28:41:90:68:c5:ef:12:99:f1: 9b:a2:76:c4:75:0a:11:ab:25:97:57:76:11:48:ed: c1:58:4f:f8:6e:ad:5d:b2:99:a2:b2:19:19:2a:d2: 62:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:2C:F5:40:5E:2C:5A:D8:62:AD:93:59:26:15:A3:21:5A:01:58:4F X509v3 Authority Key Identifier: keyid:5F:E2:D2:A6:AB:51:68:6B:C9:12:62:CC:80:15:2C:19:50:63:7A:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:03:be:51:1c:c9:8c:2e:6d:03:cc:d9:27:cd:90:ee:14:91: 41:3e:ee:7a:13:e7:12:b1:a3:f1:67:53:1b:40:a4:af:c9:d2: 8b:29:f8:fb:87:12:b7:da:9c:1b:d7:2e:17:46:ba:84:f7:00: 0f:f8:0e:c5:94:98:98:20:af:7c:11:d1:c8:5c:d1:e2:5c:15: f6:2f:cd:75:50:fe:f2:5f:03:66:a1:15:59:98:81:2a:0c:45: 50:60:af:87:dd:6a:a1:f8:1d:d4:7f:c8:aa:c2:b2:83:dd:89: ee:82:80:b1:a1:a3:29:c1:43:54:cb:26:cb:61:db:d0:ec:93: 50:4c:0f:d7:21:b3:be:a3:e1:44:77:d9:a9:af:1b:d0:e5:90: 96:21:b5:ad:1a:b9:14:79:21:2c:fd:90:93:24:1f:5f:fa:08: 77:44:f9:9d:80:eb:c1:9e:5a:b2:82:72:b3:15:94:e5:12:b3: e0:b6:3f:d7:e4:23:e1:b2:f7:f3:cc:74:fa:b5:52:87:a6:25: 95:1c:23:65:ca:17:14:1d:14:ed:73:33:7a:53:c3:ed:a3:1e: 56:fa:fc:8b:27:fb:d7:a0:57:d6:d0:e9:26:f8:a1:04:f3:a2: 90:88:60:43:b0:14:4a:b1:a3:ec:1f:75:7b:f1:76:7c:a2:43: f6:9d:02:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaLdN/aXbpcC7BSD5cLYHgJss8/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJDMTk1 MDYzN0FFQTAeFw0yNTA2MDYyMDU2NTRaFw0yNTA2MTAwMjQ4NTRaMDMxMTAvBgNV BAMTKEIyMkNGNTQwNUUyQzVBRDg2MkFEOTM1OTI2MTVBMzIxNUEwMTU4NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHfp6SHA1fr1FyhhKtoQsOVMFD ayiMv5pKjwwfQD/re6/UgiHfDWwxPOxTgjKWNhXoyb2FVJ8L989JBVaTGlmyumck 7m6ECQsEIV7vJT1p1iKTT7ONBHxeD+eGIGzLN/CTOO6V31xBkXNRyOIHBUAt2H/w 6G+PAEuo9Yi8wWY4jM8gdwnGqazkt6xuw5Xu8pnKiUl/uV/5wXpOUZWX50zJtZVJ U4cT675vmSVmLO7YIAVYxwRa/wietIUjVr8EOC8AbVo4LyVamgMhqkmrkyWjWPzt HQE1fihBkGjF7xKZ8ZuidsR1ChGrJZdXdhFI7cFYT/hurV2ymaKyGRkq0mIhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsiz1QF4sWthirZNZJhWjIVoBWE8wHwYDVR0j BBgwFoAUX+LSpqtRaGvJEmLMgBUsGVBjeuowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjEwZWMwZi0wNDIwLTQwMmYtOTVmZS03YjMzZTUxMTJiYzMvMC81RkUyRDJBNkFC NTE2ODZCQzkxMjYyQ0M4MDE1MkMxOTUwNjM3QUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJDMTk1MDYz N0FFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDIxMGVjMGYtMDQyMC00MDJmLTk1 ZmUtN2IzM2U1MTEyYmMzLzAvNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJD MTk1MDYzN0FFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM4DvlEcyYwubQPM2SfNkO4UkUE+7noT5xKx o/FnUxtApK/J0osp+PuHErfanBvXLhdGuoT3AA/4DsWUmJggr3wR0chc0eJcFfYv zXVQ/vJfA2ahFVmYgSoMRVBgr4fdaqH4HdR/yKrCsoPdie6CgLGhoynBQ1TLJsth 29Dsk1BMD9chs76j4UR32amvG9DlkJYhta0auRR5ISz9kJMkH1/6CHdE+Z2A68Ge WrKCcrMVlOUSs+C2P9fkI+Gy9/PMdPq1UoemJZUcI2XKFxQdFO1zM3pTw+2jHlb6 /Isn+9egV9bQ6Sb4oQTzopCIYEOwFEqxo+wfdXvxdnyiQ/adAiM= -----END CERTIFICATE-----Generated at Sat Jun 7 04:22:50 2025 by rpki-client