$ rpki-client -vvf repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft File: 5C413D56294D9D20E64978B7296A9DA893C32CAB.mft (raw, json) Hash identifier: mcpjKWCyzgcMgO74qRdDNgxqTYZBpHjXT3sCshTtKT8= Subject key identifier: 9A:54:70:B5:54:BA:E2:C5:D2:2E:6B:23:C7:F0:E4:5A:A2:C3:82:2F Authority key identifier: 5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB Certificate issuer: /CN=5C413D56294D9D20E64978B7296A9DA893C32CAB Certificate serial: 4822293A168EFFBFA41CE34AC155266555DF56D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft Manifest number: 036D Signing time: Mon 02 Jun 2025 11:32:21 +0000 Manifest this update: Mon 02 Jun 2025 11:27:21 +0000 Manifest next update: Thu 05 Jun 2025 14:02:21 +0000 Files and hashes: 1: 323030313a6466333a356238303a3a2f34382d3438203d3e20313430333839.roa (hash: JKFEKy2zDD0/MbgGmVCYEU7vyiWQJvpcUY2RjG6e1rs=) 2: 3130332e3135302e36302e302f32342d3234203d3e20313430333839.roa (hash: 4ZQwGn11qHNiVrKpaqE6sqxjVoPVYCbt4H6xntr7VWc=) 3: 3130332e3135302e36312e302f32342d3234203d3e20313430333839.roa (hash: PlY/JnUtAv2FxS5Soe3wZCn6MzuK/JWnFyPZQrX/fuQ=) 4: 5C413D56294D9D20E64978B7296A9DA893C32CAB.crl (hash: kfN0vxCvUPTV2ISIAIGVuj5ze5OraZlOOY1u5XzVaqc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.crl rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 14:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:22:29:3a:16:8e:ff:bf:a4:1c:e3:4a:c1:55:26:65:55:df:56:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C413D56294D9D20E64978B7296A9DA893C32CAB Validity Not Before: Jun 2 11:27:21 2025 GMT Not After : Jun 5 14:02:21 2025 GMT Subject: CN=9A5470B554BAE2C5D22E6B23C7F0E45AA2C3822F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ce:25:44:d2:a6:dc:a3:74:17:39:60:dd:73: 7d:b2:6b:f1:4c:e5:73:76:56:37:83:68:c6:9e:63: e6:77:84:ad:08:36:a1:95:85:b1:a6:5a:5d:5b:aa: 40:f2:11:2e:ea:49:32:02:8e:9e:af:ba:78:8c:59: 88:b5:67:f3:4b:77:3c:58:a6:5d:33:c3:5a:6b:06: d5:a7:aa:86:35:6c:fe:7d:16:dc:18:a0:f0:fb:24: 56:9b:d0:63:a4:bb:c1:eb:e4:ad:af:10:67:ba:bc: f1:49:cc:29:32:7d:52:ef:9d:b7:50:78:56:97:28: ba:bb:cc:7f:74:e8:23:b0:f5:d4:de:78:4a:01:eb: 0d:e7:2a:06:ad:e7:61:8a:a7:66:06:29:d7:d6:d8: fb:bb:ff:49:6d:9c:47:16:8f:61:12:6a:60:38:f1: f5:e6:99:db:68:09:02:2c:8c:4c:fc:40:63:97:9a: 88:64:5a:cc:56:d9:e4:3d:27:84:69:e9:8d:e0:d0: 78:80:b2:a9:84:20:bf:b9:e5:cf:6e:83:45:0b:dd: f5:56:cb:12:81:f4:da:8c:88:cf:6b:b2:08:25:f0: 5f:e5:73:fe:64:43:96:5c:b1:c4:d2:d2:a1:16:84: 13:17:a0:8b:fa:6c:09:17:5d:54:de:2e:89:c9:de: 5c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:54:70:B5:54:BA:E2:C5:D2:2E:6B:23:C7:F0:E4:5A:A2:C3:82:2F X509v3 Authority Key Identifier: keyid:5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:6e:1c:d9:07:73:c8:96:c7:6e:b4:8c:7d:c2:a6:d2:d7:7a: 8e:e5:98:7f:a6:e5:84:b5:bb:f5:39:f0:51:ff:a5:46:d7:90: 68:ee:b9:5e:26:76:8a:30:27:b4:d4:0e:b9:fd:59:70:6f:b9: 2a:99:9c:8a:84:cc:b2:55:98:7d:44:38:e5:a2:58:d4:44:bb: 61:ba:dd:28:ed:83:02:cb:1b:b8:e4:d3:aa:16:2c:9e:45:a3: 8b:c4:cc:cf:8c:b0:3d:6d:a1:bf:ea:68:b4:47:ad:eb:e0:88: bb:b3:9c:77:11:7e:f3:14:45:5e:82:68:37:d3:a2:2f:dc:7d: 37:27:f5:72:14:45:11:47:a9:34:ff:c3:c8:88:22:0c:13:cf: 05:ee:81:53:c7:65:7a:79:60:61:24:05:f1:72:40:de:89:c8: 2b:85:ff:60:a2:3b:6e:0a:cc:af:ab:4c:ed:71:17:43:62:73: b6:f1:e2:f5:e2:47:dd:1e:d3:32:7c:ed:c9:42:57:d3:31:f1: 0a:4c:f0:8e:47:05:d9:fd:d4:b4:6d:3f:ad:2b:61:2d:f5:72: 67:51:e2:76:d9:0c:9c:e6:ee:6f:f9:89:cc:11:66:45:2c:2e: 74:1a:a6:1d:8e:15:a0:3f:af:a1:49:6a:d7:6d:5f:3f:51:82: b4:a3:98:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSCIpOhaO/7+kHONKwVUmZVXfVtAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM0MTNENTYyOTREOUQyMEU2NDk3OEI3Mjk2QTlEQTg5 M0MzMkNBQjAeFw0yNTA2MDIxMTI3MjFaFw0yNTA2MDUxNDAyMjFaMDMxMTAvBgNV BAMTKDlBNTQ3MEI1NTRCQUUyQzVEMjJFNkIyM0M3RjBFNDVBQTJDMzgyMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiziVE0qbco3QXOWDdc32ya/FM 5XN2VjeDaMaeY+Z3hK0INqGVhbGmWl1bqkDyES7qSTICjp6vuniMWYi1Z/NLdzxY pl0zw1prBtWnqoY1bP59FtwYoPD7JFab0GOku8Hr5K2vEGe6vPFJzCkyfVLvnbdQ eFaXKLq7zH906COw9dTeeEoB6w3nKgat52GKp2YGKdfW2Pu7/0ltnEcWj2ESamA4 8fXmmdtoCQIsjEz8QGOXmohkWsxW2eQ9J4Rp6Y3g0HiAsqmEIL+55c9ug0UL3fVW yxKB9NqMiM9rsggl8F/lc/5kQ5ZcscTS0qEWhBMXoIv6bAkXXVTeLonJ3lwbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmlRwtVS64sXSLmsjx/DkWqLDgi8wHwYDVR0j BBgwFoAUXEE9VilNnSDmSXi3KWqdqJPDLKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjNlYWJiNC00ZGIzLTQzNzMtYTM0OC1mYjFlZDcwNTU2NTEvMC81QzQxM0Q1NjI5 NEQ5RDIwRTY0OTc4QjcyOTZBOURBODkzQzMyQ0FCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM0MTNENTYyOTREOUQyMEU2NDk3OEI3Mjk2QTlEQTg5M0Mz MkNBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2IzZWFiYjQtNGRiMy00MzczLWEz NDgtZmIxZWQ3MDU1NjUxLzAvNUM0MTNENTYyOTREOUQyMEU2NDk3OEI3Mjk2QTlE QTg5M0MzMkNBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFBuHNkHc8iWx260jH3CptLXeo7lmH+m5YS1 u/U58FH/pUbXkGjuuV4mdoowJ7TUDrn9WXBvuSqZnIqEzLJVmH1EOOWiWNREu2G6 3SjtgwLLG7jk06oWLJ5Fo4vEzM+MsD1tob/qaLRHrevgiLuznHcRfvMURV6CaDfT oi/cfTcn9XIURRFHqTT/w8iIIgwTzwXugVPHZXp5YGEkBfFyQN6JyCuF/2CiO24K zK+rTO1xF0Nic7bx4vXiR90e0zJ87clCV9Mx8QpM8I5HBdn91LRtP60rYS31cmdR 4nbZDJzm7m/5icwRZkUsLnQaph2OFaA/r6FJatdtXz9RgrSjmI8= -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:41 2025 by rpki-client