$ rpki-client -vvf repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft File: 5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft (raw, json) Hash identifier: gNqWsjBkulzgFRGaBVkrmZi6F5wVseklhuvESFKUjdA= Subject key identifier: AC:B2:BB:9A:38:9D:0D:A6:B0:7C:35:88:70:0A:50:DD:D6:98:6C:FE Authority key identifier: 5B:8C:3A:29:E9:0C:25:CB:F4:61:51:24:B1:17:BE:7F:C0:13:C6:1E Certificate issuer: /CN=5B8C3A29E90C25CBF4615124B117BE7FC013C61E Certificate serial: 3EFF405349F8DCCB21AFB89BC36977D80A41C426 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft Manifest number: 0199 Signing time: Thu 05 Jun 2025 02:51:04 +0000 Manifest this update: Thu 05 Jun 2025 02:46:04 +0000 Manifest next update: Sun 08 Jun 2025 12:20:04 +0000 Files and hashes: 1: 5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl (hash: LiqLQRbge2I6oBitz4W0W7XWUog2q+ipI3zWuNHyrGY=) 2: 3130332e39302e36372e302f32342d3234203d3e20313530323635.roa (hash: rSbPcUFwbUotF4iGb/0NgCE/rDZm6ThuOkAV/ZhbDr4=) 3: 3130332e39302e36362e302f32342d3234203d3e20313530323635.roa (hash: 5zPk4MUiirpmEj5/W53RgTUlrb96XIX+LjZrPDV2UMA=) 4: 3130332e39302e36362e302f32332d3233203d3e20313530323635.roa (hash: 03+kmACXHUPe0IyI3YXAvW+JekGIFfxV2tHYWD2l8nE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 12:20:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:ff:40:53:49:f8:dc:cb:21:af:b8:9b:c3:69:77:d8:0a:41:c4:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B8C3A29E90C25CBF4615124B117BE7FC013C61E Validity Not Before: Jun 5 02:46:04 2025 GMT Not After : Jun 8 12:20:04 2025 GMT Subject: CN=ACB2BB9A389D0DA6B07C3588700A50DDD6986CFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:26:e9:73:56:fa:cd:fb:a7:f9:35:d0:9a:0f: e5:2e:84:cd:8b:db:e7:39:69:49:2c:57:c7:70:ac: bd:75:8c:9d:32:62:0c:55:2c:53:b3:de:f8:cf:b7: aa:5a:b4:0d:3b:16:07:ed:a0:97:12:46:07:28:b3: eb:c0:fa:a7:3c:62:71:db:ee:99:01:87:38:6d:9b: 53:b4:34:e1:96:52:fe:c9:40:dd:ee:5d:cc:95:6b: 44:75:82:b1:b5:53:1d:45:02:67:4a:d5:ad:56:31: e5:4e:18:36:e0:40:57:4e:b2:d8:81:55:ec:5c:ac: 84:b2:df:a2:e0:fa:d3:75:d8:75:b2:8b:7f:a6:3f: 93:d8:fb:c9:9a:74:c4:9a:71:82:41:74:e1:da:ae: 8f:63:f4:66:b4:6e:03:70:7d:e8:91:98:e5:7f:72: b5:82:1c:70:12:9a:f2:64:91:ce:66:85:52:51:8e: 3f:e9:cc:5b:34:78:96:72:3b:ea:42:14:dc:37:eb: 99:90:99:f5:6f:78:bd:5d:2d:79:70:4c:8f:b2:26: c2:37:4a:38:b0:a6:ef:b0:ae:3a:b5:0d:32:33:e0: 05:31:de:0e:b3:7c:b6:16:05:91:90:bd:01:2b:3b: ad:29:27:fd:bb:f9:6e:e0:ec:e2:15:54:5c:c9:5c: ee:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B2:BB:9A:38:9D:0D:A6:B0:7C:35:88:70:0A:50:DD:D6:98:6C:FE X509v3 Authority Key Identifier: keyid:5B:8C:3A:29:E9:0C:25:CB:F4:61:51:24:B1:17:BE:7F:C0:13:C6:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:28:23:d0:65:1f:ae:62:3d:61:8e:a8:f5:15:d9:fb:91:ad: 4d:72:5e:0e:de:ea:44:6f:4a:93:04:a0:55:35:ba:92:f9:cb: 53:8e:e5:aa:0d:13:18:c3:18:d8:c5:d9:3b:d1:2f:ff:2d:94: 95:c1:6e:e2:4a:af:c8:b3:af:67:2d:91:ac:36:fc:08:db:0d: c6:29:5b:3f:7c:53:03:47:cc:bc:9e:32:bd:78:d2:d0:99:d3: 8d:b2:60:42:1c:fb:c2:c4:2d:62:fc:2d:e0:e8:f6:50:fe:28: c6:6d:cc:02:ee:32:c7:17:e5:fd:09:90:c8:0e:73:06:44:d0: 58:f2:73:b4:4c:7a:8e:dc:bd:44:67:6d:7d:3f:d4:19:cb:1b: b4:eb:e5:ce:ae:f2:b1:cb:3b:60:9a:a7:48:55:ac:61:3f:5a: ed:c7:66:84:fd:18:bb:33:b4:a5:c7:6e:8d:42:07:e3:59:94: ee:c8:16:c0:a3:5d:10:21:99:16:34:eb:d5:16:98:c9:5a:33: 89:da:81:04:27:f8:6e:67:f3:ba:37:d0:a0:c2:f2:80:92:a3: cc:c2:a4:2f:65:a5:41:da:20:20:ec:83:82:57:98:80:1d:6b: 60:f7:7e:85:ec:2a:63:f4:47:0b:15:71:88:59:c7:dc:33:87: 41:66:e8:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPv9AU0n43Mshr7ibw2l32ApBxCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JFN0ZD MDEzQzYxRTAeFw0yNTA2MDUwMjQ2MDRaFw0yNTA2MDgxMjIwMDRaMDMxMTAvBgNV BAMTKEFDQjJCQjlBMzg5RDBEQTZCMDdDMzU4ODcwMEE1MERERDY5ODZDRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLJulzVvrN+6f5NdCaD+UuhM2L 2+c5aUksV8dwrL11jJ0yYgxVLFOz3vjPt6patA07FgftoJcSRgcos+vA+qc8YnHb 7pkBhzhtm1O0NOGWUv7JQN3uXcyVa0R1grG1Ux1FAmdK1a1WMeVOGDbgQFdOstiB VexcrISy36Lg+tN12HWyi3+mP5PY+8madMSacYJBdOHaro9j9Ga0bgNwfeiRmOV/ crWCHHASmvJkkc5mhVJRjj/pzFs0eJZyO+pCFNw365mQmfVveL1dLXlwTI+yJsI3 Sjiwpu+wrjq1DTIz4AUx3g6zfLYWBZGQvQErO60pJ/27+W7g7OIVVFzJXO4TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrLK7mjidDaawfDWIcApQ3daYbP4wHwYDVR0j BBgwFoAUW4w6KekMJcv0YVEksRe+f8ATxh4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWYzYzc2OS1jZmIxLTQyMDYtOWY1NC1jMDU4N2U2M2JhNWIvMC81QjhDM0EyOUU5 MEMyNUNCRjQ2MTUxMjRCMTE3QkU3RkMwMTNDNjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JFN0ZDMDEz QzYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzlmM2M3NjktY2ZiMS00MjA2LTlm NTQtYzA1ODdlNjNiYTViLzAvNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JF N0ZDMDEzQzYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKooI9BlH65iPWGOqPUV2fuRrU1yXg7e6kRv SpMEoFU1upL5y1OO5aoNExjDGNjF2TvRL/8tlJXBbuJKr8izr2ctkaw2/AjbDcYp Wz98UwNHzLyeMr140tCZ042yYEIc+8LELWL8LeDo9lD+KMZtzALuMscX5f0JkMgO cwZE0Fjyc7RMeo7cvURnbX0/1BnLG7Tr5c6u8rHLO2Cap0hVrGE/Wu3HZoT9GLsz tKXHbo1CB+NZlO7IFsCjXRAhmRY069UWmMlaM4nagQQn+G5n87o30KDC8oCSo8zC pC9lpUHaICDsg4JXmIAda2D3foXsKmP0RwsVcYhZx9wzh0Fm6FQ= -----END CERTIFICATE-----Generated at Sat Jun 7 04:27:49 2025 by rpki-client