$ rpki-client -vvf repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft File: 5CC6B0489E576BC0D642B626195A0AA0560DC792.mft (raw, json) Hash identifier: koq53ZesiwKFwEeh8qsmUC0/yCTfm3yjITRHKFF9Tlo= Subject key identifier: 2F:A2:5B:91:4D:4D:7C:32:03:6D:A8:E4:9D:BF:40:0E:38:9F:ED:BB Authority key identifier: 5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92 Certificate issuer: /CN=5CC6B0489E576BC0D642B626195A0AA0560DC792 Certificate serial: 28C684EA3E008130D0BA876F7EFE3802F976DB6B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft Manifest number: 017F Signing time: Mon 02 Jun 2025 21:51:03 +0000 Manifest this update: Mon 02 Jun 2025 21:46:03 +0000 Manifest next update: Fri 06 Jun 2025 02:05:03 +0000 Files and hashes: 1: 5CC6B0489E576BC0D642B626195A0AA0560DC792.crl (hash: s6iQVtEvaf5N7lGH9dF4kPPLE99hMaUUSBDaaoUWvns=) 2: 3130332e3132312e3133362e302f32332d3234203d3e20313335343738.roa (hash: XTHSvGcaRTEV+p1Y+pj9uwCkeA4dOjhqgF5dBEY4xig=) 3: 3130332e3132312e3133382e302f32332d3234203d3e20313335343738.roa (hash: IYSPzv0ipkmDqn5ZyXeN0f328BkzkZ8Pmn6bIzAKtQc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.crl rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 02:05:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:c6:84:ea:3e:00:81:30:d0:ba:87:6f:7e:fe:38:02:f9:76:db:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CC6B0489E576BC0D642B626195A0AA0560DC792 Validity Not Before: Jun 2 21:46:03 2025 GMT Not After : Jun 6 02:05:03 2025 GMT Subject: CN=2FA25B914D4D7C32036DA8E49DBF400E389FEDBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:62:aa:09:34:70:94:5c:1b:e4:b1:cf:10:34: 1a:92:93:7d:54:4b:89:f8:e1:60:54:66:1f:8a:f6: 08:b9:82:a6:58:cd:a9:7d:c8:5c:33:4a:7d:c8:d3: 6c:11:4f:af:e4:56:87:f3:e3:7c:3d:6b:74:77:6e: dd:b0:3e:ff:97:75:29:3e:c7:bb:c5:47:1c:44:8a: 3e:b5:64:1f:04:b3:91:47:66:fd:c0:b5:2d:7f:ea: 51:b2:18:58:f0:48:93:55:b7:45:6b:cc:61:57:9d: 66:bc:57:9a:2d:d7:dc:17:fa:43:55:a2:fa:2e:3f: 1e:ba:b5:a5:02:7f:8a:ed:d0:8e:2f:1e:b5:71:7f: 33:d8:fa:ce:39:e2:64:4c:60:89:5e:d1:d8:1e:54: cf:ad:52:16:44:76:7c:5c:32:ca:75:4e:66:73:1b: 8e:e6:69:f8:c7:a3:3e:37:c2:2f:58:d7:f0:74:90: 27:2c:e4:8e:a3:39:d6:dc:31:db:53:f5:5b:86:9b: 36:83:24:60:bd:3d:0e:d5:8e:44:3d:51:a3:ae:be: 59:8a:b3:3b:3e:45:26:c8:01:82:c3:69:17:fe:07: 13:45:85:5a:2d:6d:c2:dc:e0:df:70:70:67:75:b1: 5a:b1:66:d2:84:83:dc:dd:1f:51:10:11:bb:88:3a: 9e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A2:5B:91:4D:4D:7C:32:03:6D:A8:E4:9D:BF:40:0E:38:9F:ED:BB X509v3 Authority Key Identifier: keyid:5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:33:8f:29:6c:ba:66:c3:5d:01:be:26:9b:c7:9f:bc:1d:63: 2f:d1:41:83:18:8c:bd:c3:81:2d:8b:96:12:fd:b8:be:35:8e: 9f:84:0d:6f:36:4b:f6:d6:85:3b:fd:e6:a7:31:10:37:db:a0: 6a:31:4a:56:7c:71:cd:29:c9:24:b4:f4:29:d8:6d:d3:c3:75: 98:a8:02:61:b0:c5:6c:a8:77:01:31:73:0e:a9:54:a7:f6:ed: a7:5d:a8:14:49:b4:70:f4:f1:62:50:72:c3:53:8b:d2:9f:73: 88:9a:30:d1:1a:f0:22:c3:3c:7d:7f:57:03:b2:c9:cf:13:8b: e7:3e:22:53:46:2a:f6:cb:59:5c:88:01:15:82:f9:6a:29:37: 8a:0e:49:7b:07:26:24:c8:75:be:ba:83:8f:32:5a:42:a9:2d: a8:8d:63:1a:02:ee:b3:84:48:63:1b:5f:89:35:8e:2b:d4:e8: ac:fe:3b:4f:ca:14:15:3e:c5:de:4c:50:c9:7d:3f:12:ee:4b: d2:60:32:b6:20:5b:16:61:e4:c3:eb:88:c0:47:4f:e5:bf:d0: e0:e0:b4:5e:b4:02:db:ef:46:22:4b:cb:a5:88:00:ac:ec:17: 13:a1:59:20:89:0f:26:c8:f2:60:29:3d:81:9d:9d:5a:00:78: 7e:4f:15:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKMaE6j4AgTDQuodvfv44Avl222swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBBQTA1 NjBEQzc5MjAeFw0yNTA2MDIyMTQ2MDNaFw0yNTA2MDYwMjA1MDNaMDMxMTAvBgNV BAMTKDJGQTI1QjkxNEQ0RDdDMzIwMzZEQThFNDlEQkY0MDBFMzg5RkVEQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCYqoJNHCUXBvksc8QNBqSk31U S4n44WBUZh+K9gi5gqZYzal9yFwzSn3I02wRT6/kVofz43w9a3R3bt2wPv+XdSk+ x7vFRxxEij61ZB8Es5FHZv3AtS1/6lGyGFjwSJNVt0VrzGFXnWa8V5ot19wX+kNV ovouPx66taUCf4rt0I4vHrVxfzPY+s454mRMYIle0dgeVM+tUhZEdnxcMsp1TmZz G47mafjHoz43wi9Y1/B0kCcs5I6jOdbcMdtT9VuGmzaDJGC9PQ7VjkQ9UaOuvlmK szs+RSbIAYLDaRf+BxNFhVotbcLc4N9wcGd1sVqxZtKEg9zdH1EQEbuIOp5JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL6JbkU1NfDIDbajknb9ADjif7bswHwYDVR0j BBgwFoAUXMawSJ5Xa8DWQrYmGVoKoFYNx5IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjRmYTdiOC01MzAyLTQ5MGItOTJlNC0yN2YyOGM2NjU3NWMvMC81Q0M2QjA0ODlF NTc2QkMwRDY0MkI2MjYxOTVBMEFBMDU2MERDNzkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBBQTA1NjBE Qzc5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY0ZmE3YjgtNTMwMi00OTBiLTky ZTQtMjdmMjhjNjY1NzVjLzAvNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBB QTA1NjBEQzc5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4zjylsumbDXQG+JpvHn7wdYy/RQYMYjL3D gS2LlhL9uL41jp+EDW82S/bWhTv95qcxEDfboGoxSlZ8cc0pySS09CnYbdPDdZio AmGwxWyodwExcw6pVKf27addqBRJtHD08WJQcsNTi9Kfc4iaMNEa8CLDPH1/VwOy yc8Ti+c+IlNGKvbLWVyIARWC+WopN4oOSXsHJiTIdb66g48yWkKpLaiNYxoC7rOE SGMbX4k1jivU6Kz+O0/KFBU+xd5MUMl9PxLuS9JgMrYgWxZh5MPriMBHT+W/0ODg tF60AtvvRiJLy6WIAKzsFxOhWSCJDybI8mApPYGdnVoAeH5PFVk= -----END CERTIFICATE-----Generated at Tue Jun 3 23:20:35 2025 by rpki-client