$ rpki-client -vvf repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft File: 5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft (raw, json) Hash identifier: 0eNgT+61gsEQSodoj03ZeZDPlZSpdV+c3lHJwiMqf3E= Subject key identifier: AA:7B:45:DF:2B:8F:27:E1:ED:A8:2B:A3:D7:7E:A9:91:6C:F0:8D:5D Authority key identifier: 5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B Certificate issuer: /CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B Certificate serial: 07D66F7447816592D6CA30D1B1E5E11EAA585369 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft Manifest number: 0206 Signing time: Tue 03 Jun 2025 17:22:45 +0000 Manifest this update: Tue 03 Jun 2025 17:17:45 +0000 Manifest next update: Fri 06 Jun 2025 18:49:45 +0000 Files and hashes: 1: 3130332e3138342e31382e302f32332d3233203d3e20313439363735.roa (hash: 8hPXkuW34xkK66/r5oL+jYYUmOueTjKMrZh36goENDw=) 2: 3130332e3138342e31382e302f32342d3234203d3e20313439363735.roa (hash: 4BUtx10alv/ZZ9FJolZJ3I8WhlB5v1F5iKW6alQrr7c=) 3: 5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl (hash: O0p5U1elinPKP1+Wa8Uwvh7Jt0a5rDabpaq2K73Omvo=) 4: 3130332e3138342e31392e302f32342d3234203d3e203438343635.roa (hash: oRDI+y7+2vAjOMCym2uKEk4t0/jm1uVrqQN7OiYXy0E=) 5: 3130332e3138342e31382e302f32342d3234203d3e203438343635.roa (hash: kfMJp93aHLtwVeCUrmYfQM5gVAHXLSAuJM9cgnbx5Nc=) 6: 3130332e3138342e31392e302f32342d3234203d3e20313439363735.roa (hash: i4XCxm32VCNZ/zacmmSjbAzxATWwcS43fZzejb3pvRo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:49:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:d6:6f:74:47:81:65:92:d6:ca:30:d1:b1:e5:e1:1e:aa:58:53:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B Validity Not Before: Jun 3 17:17:45 2025 GMT Not After : Jun 6 18:49:45 2025 GMT Subject: CN=AA7B45DF2B8F27E1EDA82BA3D77EA9916CF08D5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b9:fd:20:35:ef:d5:5c:b4:e4:0d:1a:da:9e: 39:e7:6b:ed:c3:38:76:16:ee:9c:26:25:12:07:e6: d8:fa:ec:29:9b:45:b5:2d:92:ae:44:b7:22:2c:cc: 90:eb:15:3e:d6:fa:c5:3a:7e:c7:cc:89:d8:23:34: d1:6c:75:86:f7:5f:80:5d:13:af:e6:2d:91:a2:43: 57:0a:71:cc:b9:bc:7c:a1:99:dd:57:59:ae:01:e9: 04:bd:eb:ab:e1:53:19:7c:2c:1d:67:a4:d0:eb:e4: 1b:a9:cc:4a:8f:45:b4:9a:0c:90:8a:97:da:b6:aa: b7:88:1e:4b:f8:3f:b9:76:3a:71:ff:0e:ee:c3:ae: 53:59:b0:3a:ea:0f:e7:d3:7f:cd:5d:59:64:47:c0: 7f:cd:13:f0:78:c2:c3:8e:56:59:61:de:8c:5b:66: 81:59:38:ec:fb:6a:36:6d:7d:43:57:72:47:8d:20: 28:98:d5:19:c0:58:28:6b:d3:ea:19:93:70:90:09: 2a:20:e8:b7:11:67:88:72:d3:85:41:fd:45:e0:c2: fc:97:9a:1d:08:2c:a8:40:ba:86:64:84:dd:fd:d7: ef:07:93:18:81:de:bb:58:ea:2c:a7:b3:95:67:7d: 40:58:4d:2e:48:11:d3:8b:78:6e:b2:5d:9a:f8:69: ac:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:7B:45:DF:2B:8F:27:E1:ED:A8:2B:A3:D7:7E:A9:91:6C:F0:8D:5D X509v3 Authority Key Identifier: keyid:5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:f2:52:ca:5a:6c:28:af:35:56:f0:35:5f:5f:a1:ef:2b:d9: 00:2c:f5:30:65:9e:f5:3e:94:ab:47:fc:d9:a8:00:65:c6:7d: 64:4f:9c:b0:c6:ef:e4:e4:aa:57:83:f5:16:85:c2:49:3d:9f: fd:df:13:6f:4e:f4:69:9c:b3:41:42:34:e2:77:3e:00:e7:f9: 5a:b3:20:f0:47:87:ab:4f:ed:45:2f:c7:d8:fb:81:43:8a:18: 82:a0:61:e4:0a:73:f4:1e:b7:95:b9:8a:f5:45:9c:f6:16:e1: d8:a4:9c:71:ac:7a:98:f0:9d:93:2f:87:2a:3d:f7:d1:99:f3: 14:8e:aa:6f:89:2d:07:81:2d:72:72:9d:4e:9f:98:0f:09:44: 45:aa:02:16:3b:24:c5:31:7a:c8:47:04:1c:e5:14:d1:1a:5a: 18:fb:fb:c9:69:34:02:df:a5:b9:11:c1:fc:07:7e:68:f1:0c: 05:f2:76:ed:c0:75:0b:56:82:c4:99:99:85:81:b7:88:6a:0a: ec:8f:ef:76:9c:7e:92:04:14:bf:a5:01:46:41:a0:e9:48:b5: 8c:4a:c6:db:57:93:44:7f:12:c0:9f:11:1e:92:e9:0f:d6:3b: 5f:f9:12:11:94:e4:a3:db:4a:9a:15:7e:10:54:bd:a6:bc:9b: de:71:02:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB9ZvdEeBZZLWyjDRseXhHqpYU2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIyMkY5 MDg5NTUyQjAeFw0yNTA2MDMxNzE3NDVaFw0yNTA2MDYxODQ5NDVaMDMxMTAvBgNV BAMTKEFBN0I0NURGMkI4RjI3RTFFREE4MkJBM0Q3N0VBOTkxNkNGMDhENUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEuf0gNe/VXLTkDRranjnna+3D OHYW7pwmJRIH5tj67CmbRbUtkq5EtyIszJDrFT7W+sU6fsfMidgjNNFsdYb3X4Bd E6/mLZGiQ1cKccy5vHyhmd1XWa4B6QS966vhUxl8LB1npNDr5BupzEqPRbSaDJCK l9q2qreIHkv4P7l2OnH/Du7DrlNZsDrqD+fTf81dWWRHwH/NE/B4wsOOVllh3oxb ZoFZOOz7ajZtfUNXckeNICiY1RnAWChr0+oZk3CQCSog6LcRZ4hy04VB/UXgwvyX mh0ILKhAuoZkhN391+8HkxiB3rtY6iyns5VnfUBYTS5IEdOLeG6yXZr4aayXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqntF3yuPJ+HtqCuj136pkWzwjV0wHwYDVR0j BBgwFoAUWkD9GeLdU4DLblAvFtsiL5CJVSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MGQ5MTRlZi0wYjFmLTQ5MGItODA4ZC1hMjdiODNmZjlhM2UvMC81QTQwRkQxOUUy REQ1MzgwQ0I2RTUwMkYxNkRCMjIyRjkwODk1NTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIyMkY5MDg5 NTUyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjBkOTE0ZWYtMGIxZi00OTBiLTgw OGQtYTI3YjgzZmY5YTNlLzAvNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIy MkY5MDg5NTUyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAPyUspabCivNVbwNV9foe8r2QAs9TBlnvU+ lKtH/NmoAGXGfWRPnLDG7+TkqleD9RaFwkk9n/3fE29O9Gmcs0FCNOJ3PgDn+Vqz IPBHh6tP7UUvx9j7gUOKGIKgYeQKc/Qet5W5ivVFnPYW4diknHGsepjwnZMvhyo9 99GZ8xSOqm+JLQeBLXJynU6fmA8JREWqAhY7JMUxeshHBBzlFNEaWhj7+8lpNALf pbkRwfwHfmjxDAXydu3AdQtWgsSZmYWBt4hqCuyP73acfpIEFL+lAUZBoOlItYxK xttXk0R/EsCfER6S6Q/WO1/5EhGU5KPbSpoVfhBUvaa8m95xAu0= -----END CERTIFICATE-----Generated at Thu Jun 5 18:12:18 2025 by rpki-client