$ rpki-client -vvf repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft File: 5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft (raw, json) Hash identifier: rihUeUgmzi/zcI8ewVPDFlhY7ofN1W3njG+rBhUvtQw= Subject key identifier: EA:0E:42:46:5C:25:EC:71:32:A9:04:7C:AB:23:D6:51:EB:A8:84:9A Authority key identifier: 5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4 Certificate issuer: /CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4 Certificate serial: 082E67DA0485E02A5F20FABE18FD48C613C34CA7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft Manifest number: 04DE Signing time: Wed 04 Jun 2025 03:42:21 +0000 Manifest this update: Wed 04 Jun 2025 03:37:21 +0000 Manifest next update: Sat 07 Jun 2025 15:06:21 +0000 Files and hashes: 1: 3130332e3134382e3131302e302f32332d3233203d3e203436303332.roa (hash: RZtqlNtv9j/zdsR3rna/ubvTnfhlTuFaDhbJ7496Ge0=) 2: 3130332e3134382e3131312e302f32342d3234203d3e203436303332.roa (hash: DWq7gOHQtotSffmOIQvGK+9UykyBLdACrcroiwaJAwY=) 3: 3130332e3134382e3131302e302f32342d3234203d3e203436303332.roa (hash: BJgtZE4CiLbqvj8IAg5L3Vwr4txyhS0zWerD1TQbUtY=) 4: 3130332e3134382e3131302e302f32332d3234203d3e2039333236.roa (hash: Ckdihridi5YgkHAHnE1gWSgdRJtPymHKAE3vS9CEVM0=) 5: 5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl (hash: woxoMwtfhgrp+FPTbakfAXLS4qYlULDJGL7q1vRRocI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:06:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:2e:67:da:04:85:e0:2a:5f:20:fa:be:18:fd:48:c6:13:c3:4c:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4 Validity Not Before: Jun 4 03:37:21 2025 GMT Not After : Jun 7 15:06:21 2025 GMT Subject: CN=EA0E42465C25EC7132A9047CAB23D651EBA8849A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7a:6f:04:96:19:60:81:be:92:ba:62:02:19: 0d:22:15:24:c5:05:92:e6:ae:85:48:70:cc:aa:87: d6:aa:a1:20:ff:e9:36:a0:68:04:dc:5c:09:f1:92: 78:97:e7:22:5c:7c:3e:72:55:77:15:83:76:3e:4c: ee:64:0b:c3:34:93:61:5d:60:29:5b:14:3d:ca:8a: a0:6b:35:f9:06:02:c4:4d:6a:18:bd:1a:c3:97:2d: e0:fe:80:39:53:f0:13:1f:73:be:90:69:56:c8:f7: 7b:a0:43:53:08:8f:10:ac:b7:b5:27:94:38:bd:86: a4:7d:51:cc:dc:b6:83:d0:1e:33:0c:b1:68:a5:bc: a0:43:81:e2:25:b3:09:af:1e:34:e8:55:cb:aa:37: 8b:11:d9:a8:6f:11:78:aa:a0:9b:27:56:57:ca:18: 21:02:a0:0e:4f:d6:f6:88:0d:e6:74:b8:29:f7:7a: 2b:a5:b4:93:af:2b:34:c8:49:74:28:0e:d4:20:4d: e0:4b:24:ae:bd:dc:8c:71:62:0b:26:e7:bf:cd:d6: 87:b9:26:f1:2d:0e:12:fe:3d:93:41:6d:7d:2e:d0: 53:91:59:50:24:9c:f9:ad:e5:e1:d8:22:70:1e:9a: a5:5e:07:90:43:9c:c5:86:b3:ff:6a:e1:d6:6d:dd: bf:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:0E:42:46:5C:25:EC:71:32:A9:04:7C:AB:23:D6:51:EB:A8:84:9A X509v3 Authority Key Identifier: keyid:5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:eb:0f:db:82:7d:c8:41:f5:6a:fc:78:52:d1:61:be:15:6a: d9:71:35:42:cd:8e:bc:df:9c:53:ed:7a:05:b1:7f:ea:16:46: 3f:cf:a3:d1:52:1d:10:61:17:18:5e:a5:92:07:68:e8:e5:0b: 1a:bc:00:f8:67:4f:56:a6:bb:37:6b:7b:0f:1a:00:b0:82:11: 76:0b:7e:05:fa:1c:03:f7:dc:2d:ed:3b:c8:29:0d:e9:64:d4: 21:b4:b6:9c:29:04:b9:ff:c0:61:88:4f:98:98:65:3b:83:af: e7:cd:95:71:51:45:99:4b:c2:e8:3e:dd:85:a8:88:b9:8c:1e: 2b:1e:19:11:c4:bd:55:54:65:08:dc:dc:d4:bb:0b:05:1b:e9: 5a:30:20:d8:ad:8e:49:38:d9:1b:81:90:97:10:48:8a:fe:ab: fa:6f:7c:a0:ca:b6:c2:be:f4:09:51:d7:85:0a:cc:ec:5c:e0: 38:54:cf:7d:9e:5d:4b:12:38:47:0f:f9:0e:9d:8b:f2:54:80: 44:b9:9a:79:13:48:3b:a2:32:1b:aa:53:4c:9b:36:89:2a:14: aa:7a:12:ab:7b:6a:9e:ee:10:9b:b8:2e:c7:68:d4:7d:62:96: 7b:de:9e:8d:83:2b:b3:e7:16:3b:ec:b7:0c:ad:4d:38:a1:b5: 54:da:32:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCC5n2gSF4CpfIPq+GP1IxhPDTKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0OTUw MUQ5N0RDNDAeFw0yNTA2MDQwMzM3MjFaFw0yNTA2MDcxNTA2MjFaMDMxMTAvBgNV BAMTKEVBMEU0MjQ2NUMyNUVDNzEzMkE5MDQ3Q0FCMjNENjUxRUJBODg0OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtem8Elhlggb6SumICGQ0iFSTF BZLmroVIcMyqh9aqoSD/6TagaATcXAnxkniX5yJcfD5yVXcVg3Y+TO5kC8M0k2Fd YClbFD3KiqBrNfkGAsRNahi9GsOXLeD+gDlT8BMfc76QaVbI93ugQ1MIjxCst7Un lDi9hqR9UczctoPQHjMMsWilvKBDgeIlswmvHjToVcuqN4sR2ahvEXiqoJsnVlfK GCECoA5P1vaIDeZ0uCn3eiultJOvKzTISXQoDtQgTeBLJK693IxxYgsm57/N1oe5 JvEtDhL+PZNBbX0u0FORWVAknPmt5eHYInAemqVeB5BDnMWGs/9q4dZt3b8vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6g5CRlwl7HEyqQR8qyPWUeuohJowHwYDVR0j BBgwFoAUX836qrhJBYaNT72+cYuUlQHZfcQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGY5MjQ0Ny1hY2QzLTQyN2MtYjVlNy1kYjM5MTdmMTg1YzgvMC81RkNERkFBQUI4 NDkwNTg2OEQ0RkJEQkU3MThCOTQ5NTAxRDk3REM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0OTUwMUQ5 N0RDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOThmOTI0NDctYWNkMy00MjdjLWI1 ZTctZGIzOTE3ZjE4NWM4LzAvNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0 OTUwMUQ5N0RDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7rD9uCfchB9Wr8eFLRYb4VatlxNULNjrzf nFPtegWxf+oWRj/Po9FSHRBhFxhepZIHaOjlCxq8APhnT1amuzdrew8aALCCEXYL fgX6HAP33C3tO8gpDelk1CG0tpwpBLn/wGGIT5iYZTuDr+fNlXFRRZlLwug+3YWo iLmMHiseGRHEvVVUZQjc3NS7CwUb6VowINitjkk42RuBkJcQSIr+q/pvfKDKtsK+ 9AlR14UKzOxc4DhUz32eXUsSOEcP+Q6di/JUgES5mnkTSDuiMhuqU0ybNokqFKp6 Eqt7ap7uEJu4Lsdo1H1ilnveno2DK7PnFjvstwytTTihtVTaMnA= -----END CERTIFICATE-----Generated at Fri Jun 6 16:25:13 2025 by rpki-client