$ rpki-client -vvf repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft File: 5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft (raw, json) Hash identifier: 0M8kQOnJVE1etxCQiYw11keCNmDtvDnIeRFSEW2/a4M= Subject key identifier: 5D:AF:60:17:93:9F:F9:B3:B1:0C:05:4D:0A:40:3A:E0:3C:ED:40:16 Authority key identifier: 5E:02:7C:2A:BE:4A:1F:46:34:0E:D8:3A:3A:D8:F0:6D:BC:CD:CD:21 Certificate issuer: /CN=5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21 Certificate serial: 0CF6AECE8CD4A6D8275EE488BFA090FB7316AB20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft Manifest number: 0252 Signing time: Tue 03 Jun 2025 08:12:23 +0000 Manifest this update: Tue 03 Jun 2025 08:07:23 +0000 Manifest next update: Fri 06 Jun 2025 16:19:23 +0000 Files and hashes: 1: 5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.crl (hash: Btqoq9OWq/h459BhPP+fEHBvM+DttFlKnANFQUNVmog=) 2: 3130332e3137392e3133362e302f32332d3234203d3e20313339393737.roa (hash: IQxk+RVCCE4pKnBFAa/I+n4PlSjcG9LFvLyIRAqgipY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.crl rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:19:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:f6:ae:ce:8c:d4:a6:d8:27:5e:e4:88:bf:a0:90:fb:73:16:ab:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21 Validity Not Before: Jun 3 08:07:23 2025 GMT Not After : Jun 6 16:19:23 2025 GMT Subject: CN=5DAF6017939FF9B3B10C054D0A403AE03CED4016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4d:45:21:57:48:56:47:34:41:19:93:18:7c: fb:e4:c7:3b:50:4c:1a:e8:58:0a:a9:43:eb:9a:98: df:f1:3b:0d:11:db:5e:30:9d:2f:cb:84:61:da:fd: 3a:c5:4c:c8:23:46:b3:88:9f:ee:cf:5d:43:03:77: 98:b1:73:8b:bd:ee:c3:d7:3b:0d:43:88:df:05:a5: ff:38:cd:bd:52:e8:70:4d:d6:d8:42:ce:76:1d:77: f8:95:9a:07:cd:af:a5:e8:d2:70:27:78:28:12:02: 91:7f:50:0e:26:d6:2c:e8:c0:5b:f6:3f:ad:56:a5: c9:1a:29:bd:27:37:e6:1c:83:4d:70:de:fa:60:75: e1:2c:04:48:25:fd:f7:6e:4f:15:8d:e9:04:fe:22: e3:39:d9:85:6b:ac:05:b5:48:8f:06:9b:5e:25:64: 7e:55:0a:67:11:00:d7:28:86:77:d6:9a:cd:45:f6: 28:eb:a5:ce:72:ff:e0:91:42:fa:aa:04:a3:98:ce: 17:12:83:c9:f4:c6:82:84:8f:8f:9c:b4:79:6f:85: 59:eb:7a:38:84:b5:b0:ce:f8:54:cd:bd:cd:a0:36: 6c:86:d8:77:5d:3a:a4:3e:36:6d:d1:73:34:67:d1: 88:65:3a:13:74:eb:e8:e5:01:11:48:fb:0b:52:a0: c4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:AF:60:17:93:9F:F9:B3:B1:0C:05:4D:0A:40:3A:E0:3C:ED:40:16 X509v3 Authority Key Identifier: keyid:5E:02:7C:2A:BE:4A:1F:46:34:0E:D8:3A:3A:D8:F0:6D:BC:CD:CD:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ce:a2:09:22:a7:e9:69:b9:ee:4b:de:fa:83:58:eb:f7:70: 7e:24:95:9c:ed:eb:86:4c:a4:6c:dd:fe:51:90:fd:49:4c:f4: 83:72:f5:48:b8:30:e9:a8:85:ab:5a:f2:1d:cf:97:b8:35:fc: 73:52:8e:1d:64:14:c3:23:70:71:ea:4a:03:20:91:00:09:1b: e0:4f:97:26:d2:b1:84:c7:b6:1d:a1:aa:e8:b5:14:c9:2e:12: aa:27:30:0a:e7:48:86:e3:d6:bf:20:0d:13:4d:93:26:18:9e: e4:17:e6:2e:8a:33:d0:2a:71:54:a5:66:c4:c3:0c:a3:8b:63: 29:ce:8b:c2:66:38:43:87:b7:71:07:74:ca:1b:f5:9a:8c:0d: 4d:65:de:3b:4b:39:8f:85:88:ad:68:b8:8d:05:73:a9:94:28: c0:21:43:7f:f4:54:9c:2e:3a:a2:fc:33:9e:e0:2a:d3:d1:1c: 7c:7d:6a:d2:6a:f1:30:3f:97:94:14:0d:73:ae:90:27:58:ae: 9b:2d:19:55:14:27:3f:ee:fa:e0:80:a8:46:24:3a:5f:43:dc: 84:22:7c:90:6e:cc:34:e1:4d:6a:57:34:88:06:14:34:52:61: d7:c2:89:99:e1:a2:4e:6e:5a:e1:70:99:5f:3b:c4:89:62:1b: 30:09:2c:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDPauzozUptgnXuSIv6CQ+3MWqyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUwMjdDMkFCRTRBMUY0NjM0MEVEODNBM0FEOEYwNkRC Q0NEQ0QyMTAeFw0yNTA2MDMwODA3MjNaFw0yNTA2MDYxNjE5MjNaMDMxMTAvBgNV BAMTKDVEQUY2MDE3OTM5RkY5QjNCMTBDMDU0RDBBNDAzQUUwM0NFRDQwMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9TUUhV0hWRzRBGZMYfPvkxztQ TBroWAqpQ+uamN/xOw0R214wnS/LhGHa/TrFTMgjRrOIn+7PXUMDd5ixc4u97sPX Ow1DiN8Fpf84zb1S6HBN1thCznYdd/iVmgfNr6Xo0nAneCgSApF/UA4m1izowFv2 P61WpckaKb0nN+Ycg01w3vpgdeEsBEgl/fduTxWN6QT+IuM52YVrrAW1SI8Gm14l ZH5VCmcRANcohnfWms1F9ijrpc5y/+CRQvqqBKOYzhcSg8n0xoKEj4+ctHlvhVnr ejiEtbDO+FTNvc2gNmyG2HddOqQ+Nm3RczRn0YhlOhN06+jlARFI+wtSoMS7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXa9gF5Of+bOxDAVNCkA64DztQBYwHwYDVR0j BBgwFoAUXgJ8Kr5KH0Y0Dtg6OtjwbbzNzSEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDgwYjMyMS1hYTMxLTQzMTctOWQzMS1jMmJkMTkwYzEzODQvMC81RTAyN0MyQUJF NEExRjQ2MzQwRUQ4M0EzQUQ4RjA2REJDQ0RDRDIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUUwMjdDMkFCRTRBMUY0NjM0MEVEODNBM0FEOEYwNkRCQ0NE Q0QyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ4MGIzMjEtYWEzMS00MzE3LTlk MzEtYzJiZDE5MGMxMzg0LzAvNUUwMjdDMkFCRTRBMUY0NjM0MEVEODNBM0FEOEYw NkRCQ0NEQ0QyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFvOogkip+lpue5L3vqDWOv3cH4klZzt64ZM pGzd/lGQ/UlM9INy9Ui4MOmohata8h3Pl7g1/HNSjh1kFMMjcHHqSgMgkQAJG+BP lybSsYTHth2hqui1FMkuEqonMArnSIbj1r8gDRNNkyYYnuQX5i6KM9AqcVSlZsTD DKOLYynOi8JmOEOHt3EHdMob9ZqMDU1l3jtLOY+FiK1ouI0Fc6mUKMAhQ3/0VJwu OqL8M57gKtPRHHx9atJq8TA/l5QUDXOukCdYrpstGVUUJz/u+uCAqEYkOl9D3IQi fJBuzDThTWpXNIgGFDRSYdfCiZnhok5uWuFwmV87xIliGzAJLEo= -----END CERTIFICATE-----Generated at Thu Jun 5 18:13:37 2025 by rpki-client