$ rpki-client -vvf repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.mft File: A5BB79678DB1239CD393222080CAAF085BEE737F.mft (raw, json) Hash identifier: glIwH5ZK21xMXyJ42R0n5/JqY3LHXLY4ZuByL35HQyQ= Subject key identifier: BE:3F:A6:FB:90:50:E2:5C:89:FD:7E:57:99:56:C2:A7:A7:4A:8F:0A Authority key identifier: A5:BB:79:67:8D:B1:23:9C:D3:93:22:20:80:CA:AF:08:5B:EE:73:7F Certificate issuer: /CN=A5BB79678DB1239CD393222080CAAF085BEE737F Certificate serial: 5ACFD960E5517A40B19DF885F10DA63C691117FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BB79678DB1239CD393222080CAAF085BEE737F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.mft Manifest number: 0138 Signing time: Wed 04 Jun 2025 02:42:16 +0000 Manifest this update: Wed 04 Jun 2025 02:37:16 +0000 Manifest next update: Sat 07 Jun 2025 05:58:16 +0000 Files and hashes: 1: 3130332e39372e3232342e302f32342d3234203d3e20313530393233.roa (hash: huPH2F1DP0fchHSvvNbciHmA7KaDKFRvJu4CVI1hLtw=) 2: A5BB79678DB1239CD393222080CAAF085BEE737F.crl (hash: ezaHmVHR8nz+eTUnZYloetrsBeysLvLrMsmsbxfyMlM=) 3: 3130332e39372e3232352e302f32342d3234203d3e20313530393233.roa (hash: AfZT+DYt+W7l5q6Eb5R0GGURTcYit/OtninY3XWSM0s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.crl rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BB79678DB1239CD393222080CAAF085BEE737F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:58:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:cf:d9:60:e5:51:7a:40:b1:9d:f8:85:f1:0d:a6:3c:69:11:17:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5BB79678DB1239CD393222080CAAF085BEE737F Validity Not Before: Jun 4 02:37:16 2025 GMT Not After : Jun 7 05:58:16 2025 GMT Subject: CN=BE3FA6FB9050E25C89FD7E579956C2A7A74A8F0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:88:a4:33:8b:43:3c:80:9a:38:dd:fd:94:c8: ad:43:cb:5b:28:69:60:a0:56:b9:66:af:41:60:8e: b5:95:c5:af:57:a0:85:b7:c5:43:b0:83:0b:0f:6b: 16:ae:2f:84:9c:93:38:78:1d:c1:ed:a4:45:29:60: a0:b1:6e:e7:26:38:1b:21:92:9e:ce:0d:0f:60:94: f7:5c:68:20:8f:02:2e:d7:9d:24:84:56:07:6a:92: 68:9a:dd:40:dd:16:74:6e:f0:2a:e9:ba:bf:10:77: 2e:fa:96:0c:23:e6:87:7c:55:74:f8:35:ac:70:3f: 30:eb:f1:b7:34:81:7a:e0:56:23:08:6b:64:4b:02: 4a:f2:d8:ec:24:49:66:94:20:14:28:38:6c:b6:95: 78:ce:2e:f0:a7:a9:22:10:33:48:16:af:c3:90:98: 84:ca:52:f1:93:38:3d:f2:d5:97:52:f8:1a:ea:23: 28:7f:e1:e6:c4:10:33:14:73:bf:cb:0b:c5:2e:00: a1:6c:75:f6:65:81:5c:00:80:db:a8:7f:73:11:c5: e6:be:6c:48:4d:53:39:dd:6e:db:bf:3a:42:21:dd: 21:4d:0b:9c:c6:94:17:49:0b:18:e4:f7:67:2d:4b: 74:6d:a4:5f:f5:62:9c:87:91:56:bc:0e:1c:3d:7e: d3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:3F:A6:FB:90:50:E2:5C:89:FD:7E:57:99:56:C2:A7:A7:4A:8F:0A X509v3 Authority Key Identifier: keyid:A5:BB:79:67:8D:B1:23:9C:D3:93:22:20:80:CA:AF:08:5B:EE:73:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BB79678DB1239CD393222080CAAF085BEE737F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:ab:8a:95:f3:f5:e5:08:a8:04:56:7b:6c:6b:c7:45:25:b9: 52:47:1f:a8:de:c0:bb:80:38:31:47:e2:2b:2a:45:aa:89:0e: a7:4c:0a:f8:8c:5f:ce:73:c8:3c:0d:a8:a2:3b:3f:8b:3e:c7: 19:8e:f6:55:fe:81:41:ad:2c:34:37:10:98:f7:3c:67:a5:81: 5b:e6:7b:29:e8:a0:ce:c4:b3:41:fc:55:52:83:a2:fb:3d:31: 49:9f:db:90:0e:7b:8e:ee:6e:40:5c:42:32:4d:f3:7e:ab:12: 47:97:02:89:31:29:6c:1a:59:50:9d:77:e5:60:ac:fa:46:b7: 82:38:d3:2f:84:16:5e:12:d6:03:88:21:ae:24:6b:17:ca:a6: 42:63:50:18:66:2a:ee:60:ec:9a:33:6a:17:fc:27:fd:0f:89: 4e:4a:db:b6:26:fe:b6:8b:62:8d:b9:a0:85:a2:54:62:ca:29: 5b:2f:73:ce:02:6a:2b:c8:5a:c8:04:ae:d4:8b:c1:5e:95:6b: f9:4a:d5:ac:fc:b8:97:92:bf:cb:a6:b1:e3:05:10:ba:d6:af: 1d:4e:6e:41:d5:70:bf:41:60:4b:95:c2:e2:28:d4:f1:bf:97: ce:8d:dd:8e:a8:51:1a:b5:e3:da:ad:c0:38:5b:39:61:90:97: c7:94:ee:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWs/ZYOVRekCxnfiF8Q2mPGkRF/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVCQjc5Njc4REIxMjM5Q0QzOTMyMjIwODBDQUFGMDg1 QkVFNzM3RjAeFw0yNTA2MDQwMjM3MTZaFw0yNTA2MDcwNTU4MTZaMDMxMTAvBgNV BAMTKEJFM0ZBNkZCOTA1MEUyNUM4OUZEN0U1Nzk5NTZDMkE3QTc0QThGMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEiKQzi0M8gJo43f2UyK1Dy1so aWCgVrlmr0FgjrWVxa9XoIW3xUOwgwsPaxauL4Sckzh4HcHtpEUpYKCxbucmOBsh kp7ODQ9glPdcaCCPAi7XnSSEVgdqkmia3UDdFnRu8Crpur8Qdy76lgwj5od8VXT4 NaxwPzDr8bc0gXrgViMIa2RLAkry2OwkSWaUIBQoOGy2lXjOLvCnqSIQM0gWr8OQ mITKUvGTOD3y1ZdS+BrqIyh/4ebEEDMUc7/LC8UuAKFsdfZlgVwAgNuof3MRxea+ bEhNUzndbtu/OkIh3SFNC5zGlBdJCxjk92ctS3RtpF/1YpyHkVa8Dhw9ftO7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvj+m+5BQ4lyJ/X5XmVbCp6dKjwowHwYDVR0j BBgwFoAUpbt5Z42xI5zTkyIggMqvCFvuc38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NGFhYTJmMS02M2E5LTQyODEtODk0Mi1mYjVkODI0MTE5YTQvMC9BNUJCNzk2NzhE QjEyMzlDRDM5MzIyMjA4MENBQUYwODVCRUU3MzdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTVCQjc5Njc4REIxMjM5Q0QzOTMyMjIwODBDQUFGMDg1QkVF NzM3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzRhYWEyZjEtNjNhOS00MjgxLTg5 NDItZmI1ZDgyNDExOWE0LzAvQTVCQjc5Njc4REIxMjM5Q0QzOTMyMjIwODBDQUFG MDg1QkVFNzM3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACGripXz9eUIqARWe2xrx0UluVJHH6jewLuA ODFH4isqRaqJDqdMCviMX85zyDwNqKI7P4s+xxmO9lX+gUGtLDQ3EJj3PGelgVvm eynooM7Es0H8VVKDovs9MUmf25AOe47ubkBcQjJN836rEkeXAokxKWwaWVCdd+Vg rPpGt4I40y+EFl4S1gOIIa4kaxfKpkJjUBhmKu5g7Jozahf8J/0PiU5K27Ym/raL Yo25oIWiVGLKKVsvc84CaivIWsgErtSLwV6Va/lK1az8uJeSv8umseMFELrWrx1O bkHVcL9BYEuVwuIo1PG/l86N3Y6oURq149qtwDhbOWGQl8eU7j4= -----END CERTIFICATE-----Generated at Thu Jun 5 19:52:03 2025 by rpki-client