$ rpki-client -vvf repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft File: C5CA2999FE7612F56CCCB7441743B05181458ED0.mft (raw, json) Hash identifier: kFIsHxxr7Zi2vzxESDbrEeDqKF73mu9g1uSf6UsU4tI= Subject key identifier: 89:0C:F7:C3:C0:62:39:3B:3D:B0:70:FC:35:21:2D:08:25:31:95:08 Authority key identifier: C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0 Certificate issuer: /CN=C5CA2999FE7612F56CCCB7441743B05181458ED0 Certificate serial: 2A0579554461959F8207DEF2DD409842C7D75DD2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft Manifest number: 04D9 Signing time: Mon 02 Jun 2025 02:03:46 +0000 Manifest this update: Mon 02 Jun 2025 01:58:46 +0000 Manifest next update: Thu 05 Jun 2025 09:21:46 +0000 Files and hashes: 1: 3130332e3134322e3230332e302f32342d3234203d3e20313339333738.roa (hash: TJhHkKwr35GRF8gqIxcj9n16SqAaRRuK8PF46Ie+LXg=) 2: C5CA2999FE7612F56CCCB7441743B05181458ED0.crl (hash: QU9P6asjYeqwlqcd2S0399hRg+v+nfoGf+cOzKg3lpA=) 3: 3130332e3134322e3230322e302f32342d3234203d3e20313339333738.roa (hash: kZ/7LdQ98yA+6ycYvld45u3DxaVBg4NMh+WZ028gPpU=) 4: 323030313a6466313a353638303a3a2f34382d3438203d3e20313339333738.roa (hash: q7ox9dPZeS59odB2IJMVaFXBFhKkSZPWVMJt5aLWrRc=) 5: 3130332e3134322e3230322e302f32332d3233203d3e20313339333738.roa (hash: aOFDhPstKOFaNipOEFwONnhh/OGsZlp5fuQdDXOoo9E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 09:21:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:05:79:55:44:61:95:9f:82:07:de:f2:dd:40:98:42:c7:d7:5d:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5CA2999FE7612F56CCCB7441743B05181458ED0 Validity Not Before: Jun 2 01:58:46 2025 GMT Not After : Jun 5 09:21:46 2025 GMT Subject: CN=890CF7C3C062393B3DB070FC35212D0825319508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:43:cc:5f:97:87:f1:85:ee:75:84:c2:31:96: 9d:8b:92:89:19:cf:54:f9:c2:4d:71:c2:0b:ba:99: 76:55:96:13:51:20:7c:dd:da:aa:c8:08:88:86:36: 93:9e:21:27:d0:de:79:ff:bb:fa:5d:57:73:76:f3: 73:20:ac:6c:3f:6e:71:ff:81:6d:a5:2f:a3:15:e7: 43:f4:ab:d1:b5:66:b3:81:52:fe:73:29:55:06:e2: 5d:a0:c5:c4:45:5a:fc:91:1c:4c:be:27:da:4f:06: bb:cf:48:e8:f3:4b:1c:bc:97:35:22:b5:22:09:a3: 10:84:45:91:ab:53:ce:65:00:eb:59:b8:a5:ba:e5: aa:8f:c7:15:05:11:ee:a6:05:20:f5:db:a2:28:c1: 88:c0:c8:18:e8:ea:87:4e:26:63:9c:11:c3:d9:f8: 37:47:de:f8:08:0d:c2:03:c5:fe:d4:d2:ca:c5:b0: 6e:1b:d1:6e:98:9d:f8:10:7f:5a:a6:6e:e3:58:ba: fa:ab:31:46:22:4b:68:f3:56:ff:ba:0c:c5:e2:1b: c2:d9:6b:80:ff:66:f0:00:e1:61:23:ce:97:35:80: e9:63:22:15:9f:82:15:b9:f4:27:69:17:3e:b2:86: d9:33:6e:b7:7f:00:6a:bc:5b:4d:bd:b8:51:92:8d: d2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:0C:F7:C3:C0:62:39:3B:3D:B0:70:FC:35:21:2D:08:25:31:95:08 X509v3 Authority Key Identifier: keyid:C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:ba:45:8a:1c:a5:87:bb:19:80:68:10:2c:bf:71:4a:b7:75: e0:69:a0:ac:ca:63:71:b9:af:ec:4d:9c:5c:7f:2b:0c:9c:df: 46:8e:4f:1e:70:e7:0a:c6:d1:c2:61:94:23:d1:87:2e:b4:f3: 2c:31:ff:4d:40:63:ae:78:fb:d1:07:97:01:ac:dc:7e:f8:c7: 31:32:80:8c:6e:bf:b3:f1:7c:1c:77:bb:83:04:de:40:98:6b: df:07:2b:8d:b2:51:6f:35:f5:a0:5a:96:38:5e:b2:1d:e5:32: 32:e2:46:2b:1f:c5:ed:ca:f3:e8:88:7e:fb:e6:81:dc:e4:17: d3:dd:ef:5f:80:7c:79:3b:f2:73:5c:72:1c:92:35:5f:68:9f: d0:75:ca:bb:44:25:59:f0:36:a7:f7:ba:19:75:0e:72:66:a1: a8:df:90:61:7c:f6:a6:12:25:da:0b:96:1d:b1:e3:a4:f0:72: 02:5d:cd:7e:72:cb:3e:b7:36:59:7a:a0:e4:9c:53:63:e6:6c: 03:80:04:fc:fb:0d:7d:a3:eb:e1:07:e8:ba:bf:d9:7f:f9:b0: aa:a3:da:8f:99:27:09:76:46:a2:db:55:1b:8c:8d:f3:ba:91: 92:f3:ca:b7:c5:54:9f:5c:52:e3:68:9f:ff:dd:cc:9c:04:0c: 2a:d6:1c:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKgV5VURhlZ+CB97y3UCYQsfXXdIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0IwNTE4 MTQ1OEVEMDAeFw0yNTA2MDIwMTU4NDZaFw0yNTA2MDUwOTIxNDZaMDMxMTAvBgNV BAMTKDg5MENGN0MzQzA2MjM5M0IzREIwNzBGQzM1MjEyRDA4MjUzMTk1MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqQ8xfl4fxhe51hMIxlp2LkokZ z1T5wk1xwgu6mXZVlhNRIHzd2qrICIiGNpOeISfQ3nn/u/pdV3N283MgrGw/bnH/ gW2lL6MV50P0q9G1ZrOBUv5zKVUG4l2gxcRFWvyRHEy+J9pPBrvPSOjzSxy8lzUi tSIJoxCERZGrU85lAOtZuKW65aqPxxUFEe6mBSD126IowYjAyBjo6odOJmOcEcPZ +DdH3vgIDcIDxf7U0srFsG4b0W6YnfgQf1qmbuNYuvqrMUYiS2jzVv+6DMXiG8LZ a4D/ZvAA4WEjzpc1gOljIhWfghW59CdpFz6yhtkzbrd/AGq8W029uFGSjdLFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiQz3w8BiOTs9sHD8NSEtCCUxlQgwHwYDVR0j BBgwFoAUxcopmf52EvVszLdEF0OwUYFFjtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjdmYjgzNy0xYjJmLTRjNGUtYjk5OS02ZTk5MGRkYzE0OTkvMC9DNUNBMjk5OUZF NzYxMkY1NkNDQ0I3NDQxNzQzQjA1MTgxNDU4RUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0IwNTE4MTQ1 OEVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDY3ZmI4MzctMWIyZi00YzRlLWI5 OTktNmU5OTBkZGMxNDk5LzAvQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0Iw NTE4MTQ1OEVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANe6RYocpYe7GYBoECy/cUq3deBpoKzKY3G5 r+xNnFx/Kwyc30aOTx5w5wrG0cJhlCPRhy608ywx/01AY654+9EHlwGs3H74xzEy gIxuv7PxfBx3u4ME3kCYa98HK42yUW819aBaljhesh3lMjLiRisfxe3K8+iIfvvm gdzkF9Pd71+AfHk78nNcchySNV9on9B1yrtEJVnwNqf3uhl1DnJmoajfkGF89qYS JdoLlh2x46TwcgJdzX5yyz63Nll6oOScU2PmbAOABPz7DX2j6+EH6Lq/2X/5sKqj 2o+ZJwl2RqLbVRuMjfO6kZLzyrfFVJ9cUuNon//dzJwEDCrWHCo= -----END CERTIFICATE-----Generated at Tue Jun 3 23:19:13 2025 by rpki-client