$ rpki-client -vvf repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft File: 5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft (raw, json) Hash identifier: VThobZJvgatwi+P3aZi+kxxzMJNudy6MyKDinpg286s= Subject key identifier: FA:94:18:5E:1A:4F:5E:58:26:94:06:90:95:C8:4C:34:8B:1D:56:E0 Authority key identifier: 5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C Certificate issuer: /CN=5F1EC0378C7B3A8912CA32E382D2C083E173E71C Certificate serial: 1C91D5691CE7994B0ACA20FBAA01D48992A1CD0C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft Manifest number: 04DD Signing time: Fri 06 Jun 2025 12:41:10 +0000 Manifest this update: Fri 06 Jun 2025 12:36:10 +0000 Manifest next update: Mon 09 Jun 2025 15:35:10 +0000 Files and hashes: 1: 5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl (hash: XfZPAI4LldKToGw1B7RlwontEShk2O9KB4RHAk7HYS8=) 2: 34392e3132382e3138382e302f32322d3234203d3e20313337323836.roa (hash: Ydl3Ket/Eeuscy0B0YmxQqgt1TudedFNYlPQMUGcles=) 3: 3130332e39302e3234382e302f32332d3234203d3e20313337323836.roa (hash: jxHxbJF/eRRjfrisoO0mVeSb4ItOk+aEiVd997Gm3wQ=) 4: 3130332e31302e3134382e302f32322d3234203d3e20313336313032.roa (hash: IG7iZEXbFHO4xLgOmo6o/7KH2TIUqm7sDNEwcVuQSOg=) 5: 3130332e39302e3235302e302f32332d3234203d3e20313336313032.roa (hash: ekJ6EWJjK3BnK95R5dRKHaTG8w4+znJQJhayH3/qkyg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 15:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:91:d5:69:1c:e7:99:4b:0a:ca:20:fb:aa:01:d4:89:92:a1:cd:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F1EC0378C7B3A8912CA32E382D2C083E173E71C Validity Not Before: Jun 6 12:36:10 2025 GMT Not After : Jun 9 15:35:10 2025 GMT Subject: CN=FA94185E1A4F5E582694069095C84C348B1D56E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5b:9c:16:fb:29:b7:be:79:6b:d4:9d:61:fa: ac:71:93:55:ad:a3:9d:f0:d2:ab:dd:94:43:e1:da: 24:48:8a:4d:d9:c3:68:5d:60:82:b8:d0:29:1f:71: 7b:d9:1e:f2:e0:10:01:b7:ff:6c:87:ca:9c:7e:07: 8c:60:9c:8e:ec:7c:43:b8:12:a6:09:ba:2d:b7:1f: 38:4d:a9:ba:b7:e6:d5:c0:e2:af:8b:17:ec:05:e7: bb:a4:cd:dc:f3:b6:cb:f8:dd:c7:99:38:98:19:47: e2:1f:6d:b9:4b:e1:48:67:71:87:d7:4f:f5:65:90: 5b:57:d3:87:8e:3d:1d:c0:2e:93:ff:c5:b1:61:91: 06:74:bb:d8:a4:80:79:fd:c9:76:1e:61:c2:17:21: a5:dc:12:94:12:68:6f:92:63:ae:2c:cf:b2:82:11: db:9d:43:0a:6d:40:3a:1a:88:96:af:1a:ce:56:79: 90:e6:b1:21:b4:e8:07:d1:70:ab:92:ec:e4:60:c3: 78:56:4b:e0:d6:04:03:1b:62:d6:d5:c6:df:aa:91: 5d:ec:21:fa:fc:0f:e3:f6:2c:ae:fa:9f:7e:5b:fe: c0:a8:42:3e:34:85:0b:5a:0b:b0:5a:fb:08:5d:1a: df:1b:24:29:67:3f:b9:32:a6:aa:4f:86:36:c9:5f: 3a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:94:18:5E:1A:4F:5E:58:26:94:06:90:95:C8:4C:34:8B:1D:56:E0 X509v3 Authority Key Identifier: keyid:5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:f3:f9:04:be:0b:b8:29:85:96:70:ff:10:d4:e2:f2:fb:f2: 2e:3b:8a:21:8e:2c:0c:5c:9b:05:48:31:02:83:40:15:3b:38: d1:3f:96:5d:d5:d0:29:37:58:0d:a4:39:d0:20:99:f2:79:94: e2:a4:e4:1d:30:32:b3:33:bc:62:ef:fa:39:a5:04:6f:1e:eb: ff:77:eb:33:92:a8:73:c5:76:0d:15:3b:f5:f1:36:32:0a:3a: ea:75:e6:2b:bd:d8:c2:5c:15:64:e2:f2:c5:b2:5e:63:28:30: ad:41:13:a6:0f:a4:37:77:84:cb:d6:35:57:7a:ee:81:fb:bf: e0:8e:0c:d0:9f:45:f3:c4:59:5a:52:48:72:8c:a9:06:b9:31: 62:c8:89:a9:73:97:a6:7f:3c:09:5b:6c:be:91:65:c1:a2:94: f1:06:ba:9c:b6:da:e6:63:84:88:16:fc:9e:6f:c6:ec:a3:53: f3:08:8b:7f:66:b4:3e:d1:ca:11:27:03:f8:8c:74:8c:a9:5a: 09:00:d2:f7:38:8b:87:7e:95:7d:5c:a2:a9:89:52:47:bd:60: 36:17:c7:b3:6c:b9:ae:a7:e7:be:c3:97:34:b9:1d:03:d2:fa: b9:e8:5a:c7:69:4e:8d:0d:1b:2e:66:9b:90:6f:69:9c:11:b2: 63:51:a0:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHJHVaRznmUsKyiD7qgHUiZKhzQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMwODNF MTczRTcxQzAeFw0yNTA2MDYxMjM2MTBaFw0yNTA2MDkxNTM1MTBaMDMxMTAvBgNV BAMTKEZBOTQxODVFMUE0RjVFNTgyNjk0MDY5MDk1Qzg0QzM0OEIxRDU2RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5W5wW+ym3vnlr1J1h+qxxk1Wt o53w0qvdlEPh2iRIik3Zw2hdYIK40CkfcXvZHvLgEAG3/2yHypx+B4xgnI7sfEO4 EqYJui23HzhNqbq35tXA4q+LF+wF57ukzdzztsv43ceZOJgZR+IfbblL4UhncYfX T/VlkFtX04eOPR3ALpP/xbFhkQZ0u9ikgHn9yXYeYcIXIaXcEpQSaG+SY64sz7KC EdudQwptQDoaiJavGs5WeZDmsSG06AfRcKuS7ORgw3hWS+DWBAMbYtbVxt+qkV3s Ifr8D+P2LK76n35b/sCoQj40hQtaC7Ba+whdGt8bJClnP7kypqpPhjbJXzqrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+pQYXhpPXlgmlAaQlchMNIsdVuAwHwYDVR0j BBgwFoAUXx7AN4x7OokSyjLjgtLAg+Fz5xwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDAyZGFhNS1mYjBjLTRhMjQtOTg4OS0zM2JkNTBkYjRmZTAvMC81RjFFQzAzNzhD N0IzQTg5MTJDQTMyRTM4MkQyQzA4M0UxNzNFNzFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMwODNFMTcz RTcxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQwMmRhYTUtZmIwYy00YTI0LTk4 ODktMzNiZDUwZGI0ZmUwLzAvNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMw ODNFMTczRTcxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABnz+QS+C7gphZZw/xDU4vL78i47iiGOLAxc mwVIMQKDQBU7ONE/ll3V0Ck3WA2kOdAgmfJ5lOKk5B0wMrMzvGLv+jmlBG8e6/93 6zOSqHPFdg0VO/XxNjIKOup15iu92MJcFWTi8sWyXmMoMK1BE6YPpDd3hMvWNVd6 7oH7v+CODNCfRfPEWVpSSHKMqQa5MWLIialzl6Z/PAlbbL6RZcGilPEGupy22uZj hIgW/J5vxuyjU/MIi39mtD7RyhEnA/iMdIypWgkA0vc4i4d+lX1coqmJUke9YDYX x7Nsua6n577DlzS5HQPS+rnoWsdpTo0NGy5mm5BvaZwRsmNRoNM= -----END CERTIFICATE-----Generated at Sat Jun 7 12:27:31 2025 by rpki-client