$ rpki-client -vvf repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft File: 5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft (raw, json) Hash identifier: Ss2n0SRod15KfRVvvR87/Q/7iSqgULaJDSXCVZZ5jO4= Subject key identifier: 61:AA:1D:7D:69:04:D7:47:59:9C:30:30:EE:5D:01:F3:44:E5:12:88 Authority key identifier: 5E:A6:0C:5C:2A:87:7A:DE:8B:13:E9:94:EA:C2:EC:E8:81:C2:F0:2E Certificate issuer: /CN=5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E Certificate serial: 2F6AE30CF1E2D9F022AA7E89AC97F576E2399CD2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft Manifest number: 010E Signing time: Wed 04 Jun 2025 03:21:39 +0000 Manifest this update: Wed 04 Jun 2025 03:16:39 +0000 Manifest next update: Sat 07 Jun 2025 15:01:39 +0000 Files and hashes: 1: 3130332e32302e3138342e302f32342d3234203d3e203538353533.roa (hash: m+tur8s5hF36P9KEnTMPMVDInU7+4/3lGLQOQpvofQk=) 2: 3130332e32302e3138362e302f32342d3234203d3e203538353533.roa (hash: gpL6qnRxLPgeiV+PlG3hB+cnGTmStZNiAx19SwL8f6w=) 3: 3130332e32302e3138372e302f32342d3234203d3e203538353533.roa (hash: bUy4CZmFBklHDVwaxUEZUZiNt8d1i/3iKLLtmboWyaU=) 4: 5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl (hash: LOSFLbItlSI/0bqXUPznpDjEDLMttnoAOOW+RpQK30I=) 5: 3130332e32302e3138352e302f32342d3234203d3e203538353533.roa (hash: matLkK/0RKOzJ5T6ShVJ+TeIBVCHsHv7ufNKNv6zW+I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:6a:e3:0c:f1:e2:d9:f0:22:aa:7e:89:ac:97:f5:76:e2:39:9c:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E Validity Not Before: Jun 4 03:16:39 2025 GMT Not After : Jun 7 15:01:39 2025 GMT Subject: CN=61AA1D7D6904D747599C3030EE5D01F344E51288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:67:0f:a3:7d:6f:1b:7b:68:10:08:bf:9a:b8: 66:91:3f:1a:ff:f7:cc:f4:59:f5:ac:cc:62:60:4d: 3c:59:0e:7a:58:d7:0a:bf:51:6a:79:15:2d:f7:f4: 36:fd:91:88:ac:0b:2d:b8:2e:d0:c4:d3:98:e5:f4: 8b:3b:2c:04:93:d2:cc:13:d9:b4:13:52:91:88:c7: 4c:59:bf:ce:30:6c:d4:a8:9f:18:a7:af:94:bd:28: 3a:6b:d1:68:81:1d:02:cd:83:da:18:f0:51:6a:8f: 2f:27:33:8d:e6:c8:d8:7c:41:01:db:8f:12:9b:31: e0:79:0a:f2:c7:f0:0f:09:38:40:45:f7:ee:8e:1e: 94:fa:c9:3b:4a:eb:a7:cd:4b:c4:0f:91:e2:28:67: e6:a8:99:d5:34:3f:00:4d:4c:c6:94:31:05:24:10: 17:b8:44:2e:75:78:5a:a0:9b:c9:ee:5f:b7:c4:41: e5:64:e9:d2:50:b7:a9:37:03:20:67:fc:59:b6:4d: be:90:7d:d4:b8:7b:33:dc:e3:f3:9f:98:72:c8:50: fa:53:12:d2:be:e9:5a:08:2b:ed:1f:1f:f8:86:70: c4:6a:2f:9e:76:ac:f4:3e:56:d9:41:38:60:67:76: a7:37:22:1c:84:d9:48:ac:21:a9:fe:9c:50:e3:0b: ee:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:AA:1D:7D:69:04:D7:47:59:9C:30:30:EE:5D:01:F3:44:E5:12:88 X509v3 Authority Key Identifier: keyid:5E:A6:0C:5C:2A:87:7A:DE:8B:13:E9:94:EA:C2:EC:E8:81:C2:F0:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ed:b7:b5:9d:40:89:34:08:03:76:19:79:e5:ca:c0:d5:fa: 17:2c:b8:62:3b:3f:75:55:c5:8b:0c:d9:df:63:b5:23:e2:b2: d9:7f:78:19:58:39:5d:fa:2a:3b:bc:f9:ef:d1:96:52:b5:18: 33:51:a1:e2:92:5c:d2:41:47:15:c8:4c:ec:5b:5b:ad:b7:98: 72:7a:a7:bf:2f:2a:c1:38:02:d5:61:29:f3:ec:ad:03:a3:59: a7:a9:e2:21:56:a8:42:8f:c2:ed:72:2b:ca:e2:b6:bc:f4:92: a9:49:e6:fd:4b:ee:55:db:91:00:1e:5f:ee:27:ce:94:f6:35: 76:07:5e:16:6f:c8:b3:a3:73:b4:f8:57:00:55:e7:ea:63:be: a3:8c:54:9a:39:bc:76:fb:88:b9:bd:bc:ee:79:71:e1:c0:63: 03:65:32:a9:4b:8b:ca:e4:46:08:e9:61:ec:3b:89:cd:78:10: c8:fb:58:6f:79:fe:de:1c:f1:5a:9b:b1:1e:6d:d7:86:d1:c8: a4:7f:18:ca:fe:50:d0:fc:61:e5:19:f4:42:86:72:8b:bb:c2: 79:07:a3:2c:d6:c3:a7:48:b4:42:1f:da:af:25:8b:20:3d:c8: 61:8e:86:86:14:11:33:62:ce:87:a9:0b:88:4b:de:63:cf:2a: d6:ec:80:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL2rjDPHi2fAiqn6JrJf1duI5nNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVDRTg4 MUMyRjAyRTAeFw0yNTA2MDQwMzE2MzlaFw0yNTA2MDcxNTAxMzlaMDMxMTAvBgNV BAMTKDYxQUExRDdENjkwNEQ3NDc1OTlDMzAzMEVFNUQwMUYzNDRFNTEyODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSZw+jfW8be2gQCL+auGaRPxr/ 98z0WfWszGJgTTxZDnpY1wq/UWp5FS339Db9kYisCy24LtDE05jl9Is7LAST0swT 2bQTUpGIx0xZv84wbNSonxinr5S9KDpr0WiBHQLNg9oY8FFqjy8nM43myNh8QQHb jxKbMeB5CvLH8A8JOEBF9+6OHpT6yTtK66fNS8QPkeIoZ+aomdU0PwBNTMaUMQUk EBe4RC51eFqgm8nuX7fEQeVk6dJQt6k3AyBn/Fm2Tb6QfdS4ezPc4/OfmHLIUPpT EtK+6VoIK+0fH/iGcMRqL552rPQ+VtlBOGBndqc3IhyE2UisIan+nFDjC+6PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYaodfWkE10dZnDAw7l0B80TlEogwHwYDVR0j BBgwFoAUXqYMXCqHet6LE+mU6sLs6IHC8C4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDk3M2JlYi02NmJhLTQ4YmMtOTM3NC03MmQ3ZmI4OWM1YTMvMC81RUE2MEM1QzJB ODc3QURFOEIxM0U5OTRFQUMyRUNFODgxQzJGMDJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVDRTg4MUMy RjAyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTA5NzNiZWItNjZiYS00OGJjLTkz NzQtNzJkN2ZiODljNWEzLzAvNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVD RTg4MUMyRjAyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHrtt7WdQIk0CAN2GXnlysDV+hcsuGI7P3VV xYsM2d9jtSPistl/eBlYOV36Kju8+e/RllK1GDNRoeKSXNJBRxXITOxbW623mHJ6 p78vKsE4AtVhKfPsrQOjWaep4iFWqEKPwu1yK8ritrz0kqlJ5v1L7lXbkQAeX+4n zpT2NXYHXhZvyLOjc7T4VwBV5+pjvqOMVJo5vHb7iLm9vO55ceHAYwNlMqlLi8rk RgjpYew7ic14EMj7WG95/t4c8VqbsR5t14bRyKR/GMr+UND8YeUZ9EKGcou7wnkH oyzWw6dItEIf2q8liyA9yGGOhoYUETNizoepC4hL3mPPKtbsgIY= -----END CERTIFICATE-----Generated at Thu Jun 5 18:21:55 2025 by rpki-client