$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft File: 5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft (raw, json) Hash identifier: /Yr4h00t6AlWvHU/qZ0i3iQwgeqaF7+2lQv6RG8n8Kg= Subject key identifier: 66:33:6F:AC:B1:F2:F7:62:F6:DF:B8:29:59:B9:52:73:71:27:10:54 Authority key identifier: 5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D Certificate issuer: /CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D Certificate serial: 0CD65F7C24AFBD93F2B2A82204F933F644472819 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft Manifest number: A4 Signing time: Wed 04 Jun 2025 21:41:08 +0000 Manifest this update: Wed 04 Jun 2025 21:36:08 +0000 Manifest next update: Sun 08 Jun 2025 01:03:08 +0000 Files and hashes: 1: 3136302e32322e362e302f32332d3233203d3e20313532373936.roa (hash: MlPD1Cp5WkgMa2H7CRUKYw5NrewBHnE4PxE2BVKQlL0=) 2: 5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl (hash: eROmaHw/2grU768g6biQXBDVk0rZn7m/91rXf8xoVGE=) 3: 3136302e32322e372e302f32342d3234203d3e20313532373936.roa (hash: Se9if4ahUM8UZ9DwPwRriHNSzgliBVi3qv7HNc4T4+A=) 4: 3136302e32322e362e302f32342d3234203d3e20313532373936.roa (hash: lZoAiDIfwdwZRfkj/NcAK+vDJElzUZIJDOrxy0zEGf4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 01:03:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:d6:5f:7c:24:af:bd:93:f2:b2:a8:22:04:f9:33:f6:44:47:28:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D Validity Not Before: Jun 4 21:36:08 2025 GMT Not After : Jun 8 01:03:08 2025 GMT Subject: CN=66336FACB1F2F762F6DFB82959B9527371271054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:70:be:11:93:8c:1c:0a:48:5a:68:8b:1d:a4: d6:ae:14:33:20:bb:8d:8c:a5:20:35:d5:ff:b5:10: d1:ff:de:74:c3:0c:67:98:8e:46:df:6c:09:ce:6f: 1b:37:42:ca:b8:78:99:1d:ef:bc:bb:fb:2e:00:c7: 49:b5:b2:34:dd:6e:cf:25:0e:bd:e4:bb:1f:31:66: f6:44:50:23:db:a8:ce:0e:3e:06:3a:fd:8d:bc:53: 97:66:81:ac:2a:e5:5f:77:85:47:e6:bd:b6:b1:ba: 94:50:f6:af:ad:a5:95:69:82:b8:f4:88:35:8e:98: af:c2:9b:e2:21:af:83:1f:77:a9:76:42:e1:af:0e: 3f:29:8a:d7:25:5a:49:a8:2d:ae:2c:7d:37:11:c4: d5:35:34:00:c2:b9:de:2a:7b:6c:33:bb:4a:e6:a7: 96:a4:de:fc:8d:a1:30:e4:9f:9c:a5:47:39:04:42: 4a:3c:4d:8f:5a:5a:c0:a3:d6:82:7c:0b:58:65:77: 26:e6:f2:73:f5:58:39:f2:53:11:b4:d9:58:40:e9: a0:5a:e0:61:93:c3:ac:e3:ce:fc:a1:8f:78:83:97: 30:df:08:b3:36:b5:ad:89:ff:a5:e7:68:a3:26:d3: 18:7e:20:6b:24:fc:d1:91:b1:25:2f:c1:60:51:7d: ae:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:33:6F:AC:B1:F2:F7:62:F6:DF:B8:29:59:B9:52:73:71:27:10:54 X509v3 Authority Key Identifier: keyid:5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:68:30:86:8f:58:07:a3:03:d7:84:72:79:b9:11:66:31:e2: 31:16:ad:1c:71:05:52:e9:2e:84:6d:f9:10:7d:b4:98:4d:19: 6d:c7:27:0e:88:c8:c8:80:18:08:ad:4f:da:71:bd:79:96:e1: 36:ba:5a:ac:57:91:09:51:0e:e0:56:1c:04:e1:6c:bc:10:e9: 9c:bb:de:f6:89:81:6e:6b:fd:54:bf:0f:cf:08:e0:47:b3:99: 64:12:a2:67:19:c1:11:ac:98:f0:33:93:ad:0a:7c:8c:a8:81: 4f:b5:ae:99:4c:0e:46:1c:ab:97:7c:74:16:21:44:88:fe:7e: 9a:df:dd:7b:fd:4a:99:0d:5e:68:66:2b:b4:8f:c1:3d:8c:d5: 4f:c2:53:13:73:76:d4:0c:01:fa:b7:cc:33:54:b7:63:cb:cc: c9:55:22:ee:58:af:89:79:67:37:c3:2d:54:a4:23:57:52:96: 51:b1:81:87:0f:25:5b:39:57:e7:1b:a1:94:ac:46:40:e5:a1: e8:dd:54:23:9f:86:4d:b4:a6:aa:40:8e:f4:a4:98:d9:98:65: 71:ec:73:52:d6:41:9d:e6:a9:55:3a:f7:6d:00:8b:0d:ee:5a: 26:4b:ec:7b:31:84:b6:24:82:d9:42:87:82:38:cc:48:2b:9b: 9f:c1:2a:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDNZffCSvvZPysqgiBPkz9kRHKBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2MDQy RjBCNkQ3RDAeFw0yNTA2MDQyMTM2MDhaFw0yNTA2MDgwMTAzMDhaMDMxMTAvBgNV BAMTKDY2MzM2RkFDQjFGMkY3NjJGNkRGQjgyOTU5Qjk1MjczNzEyNzEwNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCncL4Rk4wcCkhaaIsdpNauFDMg u42MpSA11f+1ENH/3nTDDGeYjkbfbAnObxs3Qsq4eJkd77y7+y4Ax0m1sjTdbs8l Dr3kux8xZvZEUCPbqM4OPgY6/Y28U5dmgawq5V93hUfmvbaxupRQ9q+tpZVpgrj0 iDWOmK/Cm+Ihr4Mfd6l2QuGvDj8pitclWkmoLa4sfTcRxNU1NADCud4qe2wzu0rm p5ak3vyNoTDkn5ylRzkEQko8TY9aWsCj1oJ8C1hldybm8nP1WDnyUxG02VhA6aBa 4GGTw6zjzvyhj3iDlzDfCLM2ta2J/6XnaKMm0xh+IGsk/NGRsSUvwWBRfa4rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZjNvrLHy92L237gpWblSc3EnEFQwHwYDVR0j BBgwFoAUXjI/nX2oTYVuukjHbps2BC8LbX0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5ODgxNi01YWY5LTQ3ZWYtYjk4OS00MmYyNzMxODQ4YmUvMC81RTMyM0Y5RDdE QTg0RDg1NkVCQTQ4Qzc2RTlCMzYwNDJGMEI2RDdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2MDQyRjBC NkQ3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzAvNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2 MDQyRjBCNkQ3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA9oMIaPWAejA9eEcnm5EWYx4jEWrRxxBVLp LoRt+RB9tJhNGW3HJw6IyMiAGAitT9pxvXmW4Ta6WqxXkQlRDuBWHAThbLwQ6Zy7 3vaJgW5r/VS/D88I4EezmWQSomcZwRGsmPAzk60KfIyogU+1rplMDkYcq5d8dBYh RIj+fprf3Xv9SpkNXmhmK7SPwT2M1U/CUxNzdtQMAfq3zDNUt2PLzMlVIu5Yr4l5 ZzfDLVSkI1dSllGxgYcPJVs5V+cboZSsRkDloejdVCOfhk20pqpAjvSkmNmYZXHs c1LWQZ3mqVU6920Aiw3uWiZL7HsxhLYkgtlCh4I4zEgrm5/BKo4= -----END CERTIFICATE-----Generated at Fri Jun 6 06:37:25 2025 by rpki-client