$ rpki-client -vvf repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.mft File: C5930A139BC72A04603E7234E6AA3938C4FAE3BC.mft (raw, json) Hash identifier: Yg1GYmMo4XW49KrhbuK+/8bC8JCIyYmfHYZtjujGT2c= Subject key identifier: 28:D4:80:C0:07:F6:B6:D6:A7:DD:DB:BE:FF:F6:CA:5E:CB:C6:D2:16 Authority key identifier: C5:93:0A:13:9B:C7:2A:04:60:3E:72:34:E6:AA:39:38:C4:FA:E3:BC Certificate issuer: /CN=C5930A139BC72A04603E7234E6AA3938C4FAE3BC Certificate serial: 2A28245B86152D59EB01C40A84958B077B2392CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.mft Manifest number: 0227 Signing time: Tue 03 Jun 2025 15:02:34 +0000 Manifest this update: Tue 03 Jun 2025 14:57:34 +0000 Manifest next update: Fri 06 Jun 2025 23:43:34 +0000 Files and hashes: 1: 3130332e3136352e3134362e302f32342d3234203d3e20313431393236.roa (hash: c98cRokwZsRGp1Eu3WuwWPd3+caDGAdQevVJAkQDRMA=) 2: C5930A139BC72A04603E7234E6AA3938C4FAE3BC.crl (hash: IyYw/E9M4C/n6bIgh/P8vAA3gGJ498dHu70ii85V+dY=) 3: 3130332e3136352e3134362e302f32332d3233203d3e20313431393236.roa (hash: YxKFCCTucAB901FnWvHp1BTAbf/BtJq5T02itlwfgXY=) 4: 3130332e3136352e3134372e302f32342d3234203d3e20313431393236.roa (hash: AUVW1a/YBIMfPEH65WCqqITKeN3+GOj5IN1vvn/h/KY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.crl rsync://repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:43:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:28:24:5b:86:15:2d:59:eb:01:c4:0a:84:95:8b:07:7b:23:92:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5930A139BC72A04603E7234E6AA3938C4FAE3BC Validity Not Before: Jun 3 14:57:34 2025 GMT Not After : Jun 6 23:43:34 2025 GMT Subject: CN=28D480C007F6B6D6A7DDDBBEFFF6CA5ECBC6D216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3c:8d:e5:80:59:1d:10:cf:80:44:e0:78:af: 11:86:e6:5b:bd:7e:38:9c:5f:be:5b:97:f3:56:06: d1:a6:10:4f:40:d0:40:32:67:c6:e6:86:0d:00:91: af:21:16:36:44:60:60:cb:64:60:c2:80:88:c3:da: 74:36:cd:4d:cb:2e:6a:c9:f6:ec:aa:48:81:1b:5c: 10:a8:42:28:71:b5:5d:ed:ca:16:b9:ce:62:47:0e: 4e:02:d0:91:a0:19:b3:a1:bb:94:02:62:94:e6:01: 5a:9f:16:6d:df:f0:b2:93:88:6a:13:9f:12:86:af: 75:23:bc:d4:e2:fc:52:ae:08:cd:17:d2:46:ff:10: 24:be:75:53:76:79:75:37:30:c8:7f:d8:cc:8e:7a: 40:52:02:68:83:61:4d:e5:ea:1c:b6:88:c0:d5:61: 8f:9f:a0:b2:4e:99:83:57:8c:d8:f0:13:3c:71:99: 08:e2:39:32:28:34:09:72:8a:57:00:ed:42:b6:71: ed:41:24:ea:a6:29:8d:7a:a3:7a:ce:ce:f6:52:19: c6:01:04:0e:ec:f0:51:ab:57:92:15:ff:18:eb:41: 8e:27:95:1f:71:b8:16:8e:f9:78:fa:1d:be:e3:8c: 85:5b:b4:b3:d8:34:8c:38:53:10:d5:67:55:76:e6: cc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D4:80:C0:07:F6:B6:D6:A7:DD:DB:BE:FF:F6:CA:5E:CB:C6:D2:16 X509v3 Authority Key Identifier: keyid:C5:93:0A:13:9B:C7:2A:04:60:3E:72:34:E6:AA:39:38:C4:FA:E3:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:76:35:fb:62:15:4f:ca:f7:f3:e8:a3:0c:32:3b:3c:32:bc: dd:eb:79:95:ef:35:57:f5:69:80:27:b2:b5:9c:56:d5:dc:fd: dc:23:9c:b5:92:43:20:31:97:a9:a4:1a:c2:51:e8:52:66:73: fa:c9:a1:e7:cb:bf:12:ca:bf:29:7e:4d:74:45:5f:30:23:cf: 67:cc:7c:e8:48:b1:7a:55:fc:04:70:88:62:f2:de:48:c8:24: af:36:b0:b9:82:37:50:9f:74:10:dd:0c:65:0b:eb:53:f1:66: 64:89:20:1e:fa:00:e0:97:0b:61:40:89:4a:3c:e7:68:8a:54: c2:91:67:27:69:c9:d5:64:3a:cf:5f:e4:eb:bf:76:99:28:51: f5:6b:d8:a0:38:7c:a1:1f:18:77:a1:8f:ce:d2:f3:e8:10:44: e2:b5:62:b9:fd:4f:80:9c:70:b6:4d:7c:65:29:b6:df:37:5d: 2c:e3:78:d7:bf:57:c9:82:e0:64:63:2d:4f:8e:2f:0d:a0:3b: bc:34:11:5f:53:da:13:45:20:9a:25:8c:7e:71:a9:91:9f:8e: 61:34:9f:72:f9:34:77:da:83:ff:ee:cb:06:49:2e:ff:72:55: 80:54:db:3e:64:5e:cd:06:d5:f9:d4:34:df:c6:c6:03:df:81: c4:8b:1a:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKigkW4YVLVnrAcQKhJWLB3sjksswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzU5MzBBMTM5QkM3MkEwNDYwM0U3MjM0RTZBQTM5MzhD NEZBRTNCQzAeFw0yNTA2MDMxNDU3MzRaFw0yNTA2MDYyMzQzMzRaMDMxMTAvBgNV BAMTKDI4RDQ4MEMwMDdGNkI2RDZBN0REREJCRUZGRjZDQTVFQ0JDNkQyMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5PI3lgFkdEM+AROB4rxGG5lu9 fjicX75bl/NWBtGmEE9A0EAyZ8bmhg0Aka8hFjZEYGDLZGDCgIjD2nQ2zU3LLmrJ 9uyqSIEbXBCoQihxtV3tyha5zmJHDk4C0JGgGbOhu5QCYpTmAVqfFm3f8LKTiGoT nxKGr3UjvNTi/FKuCM0X0kb/ECS+dVN2eXU3MMh/2MyOekBSAmiDYU3l6hy2iMDV YY+foLJOmYNXjNjwEzxxmQjiOTIoNAlyilcA7UK2ce1BJOqmKY16o3rOzvZSGcYB BA7s8FGrV5IV/xjrQY4nlR9xuBaO+Xj6Hb7jjIVbtLPYNIw4UxDVZ1V25swbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKNSAwAf2ttan3du+//bKXsvG0hYwHwYDVR0j BBgwFoAUxZMKE5vHKgRgPnI05qo5OMT647wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDQ0MGM4NS0zNDcxLTQ0NjEtYjU5MC0xNjAxZTE5ZjUzMTgvMC9DNTkzMEExMzlC QzcyQTA0NjAzRTcyMzRFNkFBMzkzOEM0RkFFM0JDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzU5MzBBMTM5QkM3MkEwNDYwM0U3MjM0RTZBQTM5MzhDNEZB RTNCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQ0NDBjODUtMzQ3MS00NDYxLWI1 OTAtMTYwMWUxOWY1MzE4LzAvQzU5MzBBMTM5QkM3MkEwNDYwM0U3MjM0RTZBQTM5 MzhDNEZBRTNCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADB2NftiFU/K9/PoowwyOzwyvN3reZXvNVf1 aYAnsrWcVtXc/dwjnLWSQyAxl6mkGsJR6FJmc/rJoefLvxLKvyl+TXRFXzAjz2fM fOhIsXpV/ARwiGLy3kjIJK82sLmCN1CfdBDdDGUL61PxZmSJIB76AOCXC2FAiUo8 52iKVMKRZydpydVkOs9f5Ou/dpkoUfVr2KA4fKEfGHehj87S8+gQROK1Yrn9T4Cc cLZNfGUptt83XSzjeNe/V8mC4GRjLU+OLw2gO7w0EV9T2hNFIJoljH5xqZGfjmE0 n3L5NHfag//uywZJLv9yVYBU2z5kXs0G1fnUNN/GxgPfgcSLGmI= -----END CERTIFICATE-----Generated at Tue Jun 3 23:44:32 2025 by rpki-client