$ rpki-client -vvf repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft File: 5AE19AE3FA86591042AE694640539C9669DEC801.mft (raw, json) Hash identifier: 7dAcxSg7PAhmfo9/e80/RvDmWZFRjmUaOKqpFnt6rzI= Subject key identifier: 00:38:FC:70:15:81:9C:41:50:F9:DD:73:C4:D0:CA:68:9E:CE:02:F7 Authority key identifier: 5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01 Certificate issuer: /CN=5AE19AE3FA86591042AE694640539C9669DEC801 Certificate serial: 06C79C6967E3653567EB221B6E393FAB70F1802A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft Manifest number: 01B7 Signing time: Thu 05 Jun 2025 10:52:10 +0000 Manifest this update: Thu 05 Jun 2025 10:47:10 +0000 Manifest next update: Sun 08 Jun 2025 19:20:10 +0000 Files and hashes: 1: 3130332e3232302e34352e302f32342d3234203d3e20313530313939.roa (hash: VspFw++2jUPUNxpc1/y0Mp4Lv1a+LwrFNdh9KUkbu+E=) 2: 5AE19AE3FA86591042AE694640539C9669DEC801.crl (hash: QLu7rOyGCoDgBrKJxmfiUqXEJOxl3DsiWcXg4I3c+7A=) 3: 3130332e3232302e34342e302f32342d3234203d3e20313530313939.roa (hash: pd2NDQQQPyHZaBaBe61CyREtdlKxDZecHqykFbQ5pJ8=) 4: 3130332e3232302e34352e302f32342d3234203d3e203438343635.roa (hash: fOeClpPAM1TK8IOTss4/WbnoMHtsAOsqOEHzrDJIniQ=) 5: 3130332e3232302e34342e302f32342d3234203d3e203438343635.roa (hash: 2eBKUXWmF5ts/Iekm7oAEARBCDw1Enrm52lUVeCh2ig=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 19:20:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:c7:9c:69:67:e3:65:35:67:eb:22:1b:6e:39:3f:ab:70:f1:80:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AE19AE3FA86591042AE694640539C9669DEC801 Validity Not Before: Jun 5 10:47:10 2025 GMT Not After : Jun 8 19:20:10 2025 GMT Subject: CN=0038FC7015819C4150F9DD73C4D0CA689ECE02F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:98:d3:93:2d:16:e7:68:6b:96:66:b0:c3:a3: f9:4c:d9:42:9b:ba:26:1b:6c:24:a5:7c:97:08:26: 81:61:83:35:ca:bb:7f:f6:5e:8c:14:d1:cf:9a:f6: 36:a0:3b:2c:bf:a2:e1:a8:e9:95:0e:0b:58:99:04: 9f:e4:73:51:a1:78:5b:86:15:c9:83:d7:d9:ed:0e: 61:a1:b7:24:09:2c:8a:1c:70:f0:ea:d4:cc:6c:16: 45:7f:da:be:3f:77:29:4f:16:49:15:d7:25:ea:f6: 36:8a:45:dc:7a:2f:77:03:07:58:c3:3c:e9:76:54: 76:0c:ec:db:d6:7b:4c:8f:37:fa:e1:ba:3d:9d:69: 8b:78:97:68:44:34:1d:8f:eb:ad:25:77:1a:d2:5e: 09:78:f6:61:86:a6:46:31:cb:fc:8c:a7:e9:84:ff: 5c:64:1f:df:a5:28:c9:6b:c1:e3:8e:91:6f:44:8b: e2:84:d5:70:4c:4e:59:f9:f3:70:c1:25:ef:11:73: 0c:c1:e0:55:e3:1e:2c:01:d0:3a:54:80:8d:17:51: 14:75:20:4a:10:a1:4f:f8:39:ed:08:2c:6a:80:81: 5d:9c:d6:5b:b0:8c:c5:3f:44:8a:89:f4:1c:c1:fd: e9:23:0c:ae:f6:22:35:ad:5f:c6:99:f6:3d:61:3a: 39:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:38:FC:70:15:81:9C:41:50:F9:DD:73:C4:D0:CA:68:9E:CE:02:F7 X509v3 Authority Key Identifier: keyid:5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:f0:69:27:a2:f7:f4:4c:af:28:97:44:54:cb:1e:45:0d:16: 3a:d7:65:d7:92:61:f5:60:a6:c7:fb:a4:ca:90:96:cb:46:2a: 7a:47:34:1a:24:69:6c:03:2c:02:9e:95:50:8b:e9:0d:38:17: a7:2b:47:23:14:03:64:08:28:8a:f8:31:91:d5:22:c8:72:f1: e2:39:db:11:29:ea:a3:5e:0d:89:a6:8b:a2:08:27:7d:d4:3e: a2:6a:b8:5e:19:18:99:0d:fa:5b:28:ce:0d:77:69:6d:1c:e3: bb:7c:44:15:87:ce:62:4d:73:fd:1a:1e:58:08:b4:85:6d:f3: 52:8d:9f:a8:ef:79:05:db:3c:b3:6e:41:5b:35:18:ee:e3:72: 4e:73:ad:d6:94:09:0b:88:2f:3f:9c:f3:d3:2c:65:5f:cb:2e: e8:8f:19:c5:13:3d:d9:b0:1b:d9:44:ec:c9:31:aa:dd:95:bb: ec:e8:20:a4:76:3b:7d:c9:be:35:f8:cf:e0:ce:d8:95:c3:b9: ca:f8:6a:8c:03:d5:37:07:26:4b:65:52:c2:00:4b:1d:30:f2: ee:de:dc:4b:60:23:f1:5c:48:9a:25:da:8d:a3:c7:50:a0:6d: a1:a5:1e:b2:06:fe:27:d7:57:d4:1a:97:3f:34:ae:e7:2d:ea: a6:05:44:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBsecaWfjZTVn6yIbbjk/q3DxgCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFFMTlBRTNGQTg2NTkxMDQyQUU2OTQ2NDA1MzlDOTY2 OURFQzgwMTAeFw0yNTA2MDUxMDQ3MTBaFw0yNTA2MDgxOTIwMTBaMDMxMTAvBgNV BAMTKDAwMzhGQzcwMTU4MTlDNDE1MEY5REQ3M0M0RDBDQTY4OUVDRTAyRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQmNOTLRbnaGuWZrDDo/lM2UKb uiYbbCSlfJcIJoFhgzXKu3/2XowU0c+a9jagOyy/ouGo6ZUOC1iZBJ/kc1GheFuG FcmD19ntDmGhtyQJLIoccPDq1MxsFkV/2r4/dylPFkkV1yXq9jaKRdx6L3cDB1jD POl2VHYM7NvWe0yPN/rhuj2daYt4l2hENB2P660ldxrSXgl49mGGpkYxy/yMp+mE /1xkH9+lKMlrweOOkW9Ei+KE1XBMTln583DBJe8RcwzB4FXjHiwB0DpUgI0XURR1 IEoQoU/4Oe0ILGqAgV2c1luwjMU/RIqJ9BzB/ekjDK72IjWtX8aZ9j1hOjkPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUADj8cBWBnEFQ+d1zxNDKaJ7OAvcwHwYDVR0j BBgwFoAUWuGa4/qGWRBCrmlGQFOclmneyAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTcyOTI5MS1hMWE3LTRiMTktOTNmNi0xZDg0NTc0YTY3YWUvMC81QUUxOUFFM0ZB ODY1OTEwNDJBRTY5NDY0MDUzOUM5NjY5REVDODAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFFMTlBRTNGQTg2NTkxMDQyQUU2OTQ2NDA1MzlDOTY2OURF QzgwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU3MjkyOTEtYTFhNy00YjE5LTkz ZjYtMWQ4NDU3NGE2N2FlLzAvNUFFMTlBRTNGQTg2NTkxMDQyQUU2OTQ2NDA1MzlD OTY2OURFQzgwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHDwaSei9/RMryiXRFTLHkUNFjrXZdeSYfVg psf7pMqQlstGKnpHNBokaWwDLAKelVCL6Q04F6crRyMUA2QIKIr4MZHVIshy8eI5 2xEp6qNeDYmmi6IIJ33UPqJquF4ZGJkN+lsozg13aW0c47t8RBWHzmJNc/0aHlgI tIVt81KNn6jveQXbPLNuQVs1GO7jck5zrdaUCQuILz+c89MsZV/LLuiPGcUTPdmw G9lE7Mkxqt2Vu+zoIKR2O33JvjX4z+DO2JXDucr4aowD1TcHJktlUsIASx0w8u7e 3EtgI/FcSJol2o2jx1CgbaGlHrIG/ifXV9Qalz80ruct6qYFRFM= -----END CERTIFICATE-----Generated at Fri Jun 6 16:48:41 2025 by rpki-client