$ rpki-client -vvf repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft File: 5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft (raw, json) Hash identifier: RvW/l0XPPRdgm19Y552M+wSvVw6KS6JVWg+8p0R22NU= Subject key identifier: F8:DA:3F:F3:6F:3A:72:16:9D:A5:0A:96:BA:17:54:98:0F:F8:CE:05 Authority key identifier: 5C:9F:B8:0D:F9:C5:DB:E8:91:6F:73:49:A5:DD:8E:06:99:EA:3B:7A Certificate issuer: /CN=5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A Certificate serial: 398E9599C6ED8B27D990C9A3824498CC9E010909 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft Manifest number: 0227 Signing time: Sat 07 Jun 2025 02:31:46 +0000 Manifest this update: Sat 07 Jun 2025 02:26:46 +0000 Manifest next update: Tue 10 Jun 2025 11:38:46 +0000 Files and hashes: 1: 3130332e3138312e3138322e302f32342d3234203d3e20313439333931.roa (hash: /YMKURBm9TwSTxyzf2Kmx28ZIOeUEZGW5o7BX+kYPo0=) 2: 5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl (hash: zPl0nLLrBfRiDR0KiA8bkgncnN/XXHffb9Rt4gOG4d8=) 3: 3130332e3138312e3138332e302f32342d3234203d3e20313439333931.roa (hash: I97S8ZLukPT3OvIAQZGbDvFdPCncrJKV5+kzzspVF2Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 10:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:8e:95:99:c6:ed:8b:27:d9:90:c9:a3:82:44:98:cc:9e:01:09:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A Validity Not Before: Jun 7 02:26:46 2025 GMT Not After : Jun 10 11:38:46 2025 GMT Subject: CN=F8DA3FF36F3A72169DA50A96BA1754980FF8CE05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d2:f8:84:48:50:06:38:56:f7:e0:b3:65:84: 49:56:50:a2:71:29:bb:5e:f5:07:4d:a5:10:f9:70: fb:4a:ba:c0:76:1d:09:2b:8b:07:03:15:90:16:79: 77:c5:6a:be:9e:a8:cf:23:3c:b3:c8:54:9e:a8:ab: 87:b4:17:df:ca:05:92:b1:27:03:39:f2:e8:cc:bd: 9b:fc:f4:23:47:62:60:a6:03:cd:69:59:0c:5d:c9: 51:38:69:9d:9c:14:3e:ea:3c:a1:ce:7c:f3:7c:d8: d2:90:31:1c:44:d3:57:05:99:6c:00:6e:12:a5:e1: f5:3d:88:9a:30:ab:a5:c9:76:74:bc:7c:5f:1e:a5: f5:4e:33:37:ad:5b:08:cb:d9:41:90:62:72:6a:67: 98:34:44:07:2f:98:85:2d:49:75:9f:59:ff:80:1f: e8:9f:3d:14:ab:98:11:5e:ab:53:e4:2e:a6:fe:21: 2f:d9:28:dd:e1:a1:e2:bf:8a:b3:af:e8:28:b5:6b: 94:09:47:ab:27:b4:e2:ee:ed:66:28:61:77:80:45: 1c:aa:c6:c5:31:d0:90:a0:d3:53:86:e5:cf:d3:95: 0b:49:b4:52:18:b2:ac:48:1f:50:31:49:4c:ff:96: 35:61:8c:0a:36:68:59:4f:0a:9b:b9:77:6d:5f:a4: 6c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:DA:3F:F3:6F:3A:72:16:9D:A5:0A:96:BA:17:54:98:0F:F8:CE:05 X509v3 Authority Key Identifier: keyid:5C:9F:B8:0D:F9:C5:DB:E8:91:6F:73:49:A5:DD:8E:06:99:EA:3B:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:ec:6f:b7:45:03:de:02:c1:cc:0c:bb:bc:cf:c1:9f:2e:97: bf:e5:d7:20:94:ce:00:44:97:b4:37:67:dd:79:9c:d3:74:58: c1:e0:f5:24:d7:bc:d4:de:58:e5:bd:bb:d6:30:d1:5e:09:6d: e2:9f:bf:43:7a:8e:4a:28:59:1e:c1:34:4e:4d:69:76:17:34: 02:80:b0:8b:10:0d:26:0d:80:5f:b3:0e:8e:49:61:b6:b7:1f: 40:36:40:8f:ab:96:80:bc:19:a0:71:ab:33:9f:f0:7f:ee:79: a0:38:89:d8:6f:8d:02:2b:88:39:ed:83:41:06:7e:8e:a4:f2: 48:06:9e:b7:da:e7:f7:92:7a:f6:0a:9b:1c:9e:c9:8a:af:e1: 5a:7b:f8:da:e6:85:c9:94:dc:3c:b7:cc:95:b4:5e:86:70:ba: e3:dd:8c:61:18:41:21:9b:c5:9f:f2:38:87:e8:bd:3b:f0:e6: c0:9d:32:5d:56:df:7b:bc:2a:38:a8:db:16:af:2b:04:6c:69: 33:dd:d9:37:6f:bf:a3:6a:4d:fd:3f:8a:d4:bc:9b:8e:08:06: ac:78:9b:1b:76:49:6d:22:fa:9b:b5:45:be:b6:df:2c:d3:39: 74:8f:b1:34:7d:a1:90:24:67:ac:8b:bb:0c:c5:23:d8:49:55: 09:81:c7:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOY6VmcbtiyfZkMmjgkSYzJ4BCQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM5RkI4MERGOUM1REJFODkxNkY3MzQ5QTVERDhFMDY5 OUVBM0I3QTAeFw0yNTA2MDcwMjI2NDZaFw0yNTA2MTAxMTM4NDZaMDMxMTAvBgNV BAMTKEY4REEzRkYzNkYzQTcyMTY5REE1MEE5NkJBMTc1NDk4MEZGOENFMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY0viESFAGOFb34LNlhElWUKJx Kbte9QdNpRD5cPtKusB2HQkriwcDFZAWeXfFar6eqM8jPLPIVJ6oq4e0F9/KBZKx JwM58ujMvZv89CNHYmCmA81pWQxdyVE4aZ2cFD7qPKHOfPN82NKQMRxE01cFmWwA bhKl4fU9iJowq6XJdnS8fF8epfVOMzetWwjL2UGQYnJqZ5g0RAcvmIUtSXWfWf+A H+ifPRSrmBFeq1PkLqb+IS/ZKN3hoeK/irOv6Ci1a5QJR6sntOLu7WYoYXeARRyq xsUx0JCg01OG5c/TlQtJtFIYsqxIH1AxSUz/ljVhjAo2aFlPCpu5d21fpGwvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+No/8286chadpQqWuhdUmA/4zgUwHwYDVR0j BBgwFoAUXJ+4DfnF2+iRb3NJpd2OBpnqO3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmMyZjQ4ZC01MTg1LTQxZjktYjZkMi0yMjhmYmNhYzRlMjkvMC81QzlGQjgwREY5 QzVEQkU4OTE2RjczNDlBNUREOEUwNjk5RUEzQjdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM5RkI4MERGOUM1REJFODkxNkY3MzQ5QTVERDhFMDY5OUVB M0I3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJjMmY0OGQtNTE4NS00MWY5LWI2 ZDItMjI4ZmJjYWM0ZTI5LzAvNUM5RkI4MERGOUM1REJFODkxNkY3MzQ5QTVERDhF MDY5OUVBM0I3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABPsb7dFA94CwcwMu7zPwZ8ul7/l1yCUzgBE l7Q3Z915nNN0WMHg9STXvNTeWOW9u9Yw0V4JbeKfv0N6jkooWR7BNE5NaXYXNAKA sIsQDSYNgF+zDo5JYba3H0A2QI+rloC8GaBxqzOf8H/ueaA4idhvjQIriDntg0EG fo6k8kgGnrfa5/eSevYKmxyeyYqv4Vp7+NrmhcmU3Dy3zJW0XoZwuuPdjGEYQSGb xZ/yOIfovTvw5sCdMl1W33u8Kjio2xavKwRsaTPd2Tdvv6NqTf0/itS8m44IBqx4 mxt2SW0i+pu1Rb623yzTOXSPsTR9oZAkZ6yLuwzFI9hJVQmBx5c= -----END CERTIFICATE-----Generated at Sat Jun 7 17:06:01 2025 by rpki-client