$ rpki-client -vvf repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft File: 5AE57F3F97F40888F93913350A218863E705CD34.mft (raw, json) Hash identifier: UXX7iI7OTQsH16ZyRdYawKKMoHBQUo8Gs/1F2sHZccw= Subject key identifier: 44:08:E5:CE:D2:13:F2:6E:19:30:DE:A8:F6:99:EC:D4:15:E4:46:D1 Authority key identifier: 5A:E5:7F:3F:97:F4:08:88:F9:39:13:35:0A:21:88:63:E7:05:CD:34 Certificate issuer: /CN=5AE57F3F97F40888F93913350A218863E705CD34 Certificate serial: 55DC0D17DB4ACCB2153983D0E74BD4DAACF650CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft Manifest number: 0214 Signing time: Tue 03 Jun 2025 07:01:33 +0000 Manifest this update: Tue 03 Jun 2025 06:56:33 +0000 Manifest next update: Fri 06 Jun 2025 14:44:33 +0000 Files and hashes: 1: 5AE57F3F97F40888F93913350A218863E705CD34.crl (hash: c6JpeSCxjVHvIlOVKaT/+UR4Lli01xFxDwPiFFOliS0=) 2: 3130332e3138332e31302e302f32342d3234203d3e20313339393637.roa (hash: lDreBV2a5k+F2nOzqdVDXyLmxgTFmhT5IbglBwCmDnU=) 3: 3130332e3138332e31312e302f32342d3234203d3e20313339393637.roa (hash: NfTWOpBX5TEsx2AN4GNz4kZXIBLNbd1V2CGYNCmRu/U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.crl rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 14:44:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:dc:0d:17:db:4a:cc:b2:15:39:83:d0:e7:4b:d4:da:ac:f6:50:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AE57F3F97F40888F93913350A218863E705CD34 Validity Not Before: Jun 3 06:56:33 2025 GMT Not After : Jun 6 14:44:33 2025 GMT Subject: CN=4408E5CED213F26E1930DEA8F699ECD415E446D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:34:32:33:7a:c7:85:a5:c2:11:03:ba:34:e2: 38:66:70:76:15:18:44:1e:fc:df:6b:83:1b:4a:35: 84:ea:82:21:6d:3b:f0:c5:ce:ac:42:b0:6c:91:0d: eb:86:de:d1:3b:a8:56:db:f8:90:d6:84:8d:fd:41: 47:2f:d1:2d:a5:fa:8e:61:8c:fa:0c:4b:fe:69:9a: 15:f3:86:e4:39:a8:d8:dd:c6:25:f2:64:c5:60:32: 27:19:a6:67:37:d2:67:8a:47:cd:44:8e:aa:19:1d: 32:26:9c:ee:db:9b:55:12:cd:a4:50:c7:5f:e0:e8: 34:8e:a3:cf:69:7d:fd:5d:bf:78:63:cf:57:1e:ca: 8f:58:8e:0e:8b:b5:31:5e:6f:c5:d6:e4:67:08:97: 90:37:c9:42:4e:13:59:98:1a:47:11:7d:f5:9a:4b: fe:50:06:41:4e:52:00:f0:a4:99:66:e6:27:e8:a5: a1:cf:63:66:9e:c3:ed:6b:45:b0:c7:5b:fb:98:7d: 84:2d:c3:8b:ce:f8:99:e7:b7:19:4a:eb:b9:15:2c: 32:3f:53:d6:5f:c0:43:c3:fe:96:20:1b:83:58:da: ef:b8:14:da:9f:5e:63:7d:b9:7f:c2:43:7d:40:f7: 12:80:44:cf:ce:61:8e:ee:30:2f:ce:b3:a5:e6:b6: 8d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:08:E5:CE:D2:13:F2:6E:19:30:DE:A8:F6:99:EC:D4:15:E4:46:D1 X509v3 Authority Key Identifier: keyid:5A:E5:7F:3F:97:F4:08:88:F9:39:13:35:0A:21:88:63:E7:05:CD:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:d1:81:b9:ac:20:01:91:fa:c4:c5:1e:47:db:21:69:91:dc: 3a:eb:22:e0:6a:75:50:ef:51:cb:c5:75:c0:c0:27:ad:7a:5a: 06:b2:ab:ec:c8:5c:4b:91:7d:e0:2e:bf:f7:52:fc:d9:7a:de: 86:5e:76:2d:a6:ec:30:1a:da:c4:10:f6:97:9d:9e:05:1d:fa: 97:26:4d:a1:eb:ec:82:50:2f:51:d6:37:4e:a7:94:8c:f0:b8: fc:62:3f:33:37:6e:83:cc:36:8b:31:73:0e:f6:53:d6:c4:70: 57:7f:fa:3a:c1:da:55:7b:a2:7b:f6:0b:21:30:f6:20:60:13: 56:cb:b0:a5:fe:9e:88:c4:05:95:af:46:d8:df:67:b8:c6:93: 20:71:74:db:ad:e9:f3:63:87:d8:9a:09:bf:5d:2c:53:20:d4: 19:b0:90:0e:da:2b:44:a2:61:5e:fe:ce:20:74:40:8e:22:92: a4:e4:9a:48:10:03:17:3a:d1:fd:5b:32:6d:d3:e4:71:ed:f3: 10:2f:eb:fa:08:38:2f:57:79:b3:53:8c:92:52:48:ca:b8:43: 57:44:3e:d8:18:fa:9f:c3:40:7c:d9:95:d3:a7:16:1a:bf:d5: 82:91:79:98:d9:fc:36:80:fa:a6:f0:58:cd:23:45:55:5c:50: 5b:d9:3a:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVdwNF9tKzLIVOYPQ50vU2qz2UM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4NjNF NzA1Q0QzNDAeFw0yNTA2MDMwNjU2MzNaFw0yNTA2MDYxNDQ0MzNaMDMxMTAvBgNV BAMTKDQ0MDhFNUNFRDIxM0YyNkUxOTMwREVBOEY2OTlFQ0Q0MTVFNDQ2RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0NDIzeseFpcIRA7o04jhmcHYV GEQe/N9rgxtKNYTqgiFtO/DFzqxCsGyRDeuG3tE7qFbb+JDWhI39QUcv0S2l+o5h jPoMS/5pmhXzhuQ5qNjdxiXyZMVgMicZpmc30meKR81EjqoZHTImnO7bm1USzaRQ x1/g6DSOo89pff1dv3hjz1ceyo9Yjg6LtTFeb8XW5GcIl5A3yUJOE1mYGkcRffWa S/5QBkFOUgDwpJlm5ifopaHPY2aew+1rRbDHW/uYfYQtw4vO+JnntxlK67kVLDI/ U9ZfwEPD/pYgG4NY2u+4FNqfXmN9uX/CQ31A9xKARM/OYY7uMC/Os6Xmto23AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURAjlztIT8m4ZMN6o9pns1BXkRtEwHwYDVR0j BBgwFoAUWuV/P5f0CIj5ORM1CiGIY+cFzTQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDhjZGY1YS1iOWE3LTQ0NjktYTY1My1jOWZmMmEwMDM3NzMvMC81QUU1N0YzRjk3 RjQwODg4RjkzOTEzMzUwQTIxODg2M0U3MDVDRDM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4NjNFNzA1 Q0QzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ4Y2RmNWEtYjlhNy00NDY5LWE2 NTMtYzlmZjJhMDAzNzczLzAvNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4 NjNFNzA1Q0QzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKjRgbmsIAGR+sTFHkfbIWmR3DrrIuBqdVDv UcvFdcDAJ616Wgayq+zIXEuRfeAuv/dS/Nl63oZedi2m7DAa2sQQ9pedngUd+pcm TaHr7IJQL1HWN06nlIzwuPxiPzM3boPMNosxcw72U9bEcFd/+jrB2lV7onv2CyEw 9iBgE1bLsKX+nojEBZWvRtjfZ7jGkyBxdNut6fNjh9iaCb9dLFMg1BmwkA7aK0Si YV7+ziB0QI4ikqTkmkgQAxc60f1bMm3T5HHt8xAv6/oIOC9XebNTjJJSSMq4Q1dE PtgY+p/DQHzZldOnFhq/1YKReZjZ/DaA+qbwWM0jRVVcUFvZOj4= -----END CERTIFICATE-----Generated at Tue Jun 3 23:16:01 2025 by rpki-client