$ rpki-client -vvf repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft File: 5EC928AFD73AFC70F10C468E21482031920DF521.mft (raw, json) Hash identifier: p21K4ETS4wixssI9Lk3p1c/nvq2czvdSGaoEXkI+MF0= Subject key identifier: 5B:35:87:76:8D:5D:C3:1A:5B:FC:6B:0B:C6:91:44:4F:31:F6:E3:8E Authority key identifier: 5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21 Certificate issuer: /CN=5EC928AFD73AFC70F10C468E21482031920DF521 Certificate serial: 3FB5277B5731EED8EBF777F845920030AA8028E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft Manifest number: F1 Signing time: Fri 06 Jun 2025 12:40:36 +0000 Manifest this update: Fri 06 Jun 2025 12:35:36 +0000 Manifest next update: Mon 09 Jun 2025 22:00:36 +0000 Files and hashes: 1: 5EC928AFD73AFC70F10C468E21482031920DF521.crl (hash: NFNAXvD2YyJyBXR/WRBrEIDGdFIUhtkGL4tQv+txp4E=) 2: 3135372e31302e39312e302f32342d3234203d3e20313532303836.roa (hash: aoRUG5CQtzRZGdloOpfTrb2fX3fCFwbxN1OMSRI1BYY=) 3: 3135372e31302e39302e302f32342d3234203d3e20313532303836.roa (hash: G+zk6B4j6LBv4VXf/ZrduIBLIatUxzNWyMHjZfotW/M=) 4: 3135372e31302e39302e302f32332d3233203d3e20313532303836.roa (hash: sqhh6fhWizwXoH9l3XVTNUts+MHffcu11O/8GZa+UZk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.crl rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 22:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:b5:27:7b:57:31:ee:d8:eb:f7:77:f8:45:92:00:30:aa:80:28:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EC928AFD73AFC70F10C468E21482031920DF521 Validity Not Before: Jun 6 12:35:36 2025 GMT Not After : Jun 9 22:00:36 2025 GMT Subject: CN=5B3587768D5DC31A5BFC6B0BC691444F31F6E38E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:48:7c:98:17:0b:ea:3c:b8:96:3b:1b:e6:e6: 8e:f2:f0:80:99:c0:7c:ec:81:60:84:f6:fd:3f:89: 9d:30:3f:a4:69:44:61:03:d9:9c:da:ff:0d:34:ae: 96:b6:03:d7:63:11:3d:76:c2:04:6e:b7:2a:50:b4: 73:18:0d:03:31:c6:bf:22:46:47:4a:ed:92:03:ad: 75:52:d8:96:03:bd:3b:5f:05:13:88:59:92:09:3f: d5:7b:06:47:ba:3a:0e:00:14:7a:4a:3c:a7:50:dd: 52:fa:fb:7f:33:30:d5:22:76:3f:47:1b:13:61:a4: 4d:5a:e6:72:9a:60:a3:95:f0:77:08:42:e6:0d:c6: d9:5d:f6:9b:a0:c5:64:b1:2e:4a:df:84:e3:a7:84: 69:ae:1b:d5:d4:26:08:42:3c:27:8a:8b:95:c0:28: ba:a2:d9:b7:c6:ed:ed:48:89:74:15:e3:68:81:0f: cb:45:72:8c:a8:52:1e:5d:98:da:06:65:1a:cd:6c: 22:a6:82:6c:65:f3:b7:c8:68:f1:65:71:f6:df:a4: 25:95:f0:16:ae:76:17:1b:fe:38:c8:99:13:79:b6: 16:c2:54:3d:21:fd:45:d4:c4:a7:9d:30:11:64:90: c4:33:8d:ed:0f:7b:08:b2:9b:cc:9d:0f:dd:13:94: 5f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:35:87:76:8D:5D:C3:1A:5B:FC:6B:0B:C6:91:44:4F:31:F6:E3:8E X509v3 Authority Key Identifier: keyid:5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:31:f5:ec:d2:e0:02:eb:22:9d:27:2b:4c:46:ef:27:ff:3d: 92:c6:8f:7c:8e:f3:ff:5c:fb:5f:b1:af:76:56:1a:a8:10:14: 55:06:99:75:54:68:a1:91:2b:7d:8b:92:24:25:60:7a:63:b7: 6c:86:d0:63:e4:88:53:92:5a:aa:bf:4f:f2:9a:af:90:70:3f: 63:89:28:3f:24:bb:e5:29:29:48:81:08:30:80:fc:ec:ef:13: 39:86:e7:6d:45:8d:65:6a:03:10:7b:b0:da:71:8b:d7:02:71: aa:ad:e9:88:f8:6a:c6:1d:73:ee:68:b8:a6:96:19:5e:20:7e: 44:db:9e:49:23:2c:c8:67:0c:de:94:51:f2:04:94:f7:28:e2: 24:7d:04:56:c7:05:75:6a:55:1f:7e:c1:31:f1:e0:35:d1:ec: fd:97:a0:aa:a7:dd:88:5c:58:43:31:04:66:d0:62:62:74:59: f3:be:8b:a1:8e:a8:ad:51:ff:dd:88:13:e8:55:ff:39:90:94: 9a:63:25:ab:45:67:17:66:07:9e:c0:0e:94:52:2d:f1:e1:c8: d2:c6:e2:82:93:0e:f4:bd:db:db:0f:6f:19:21:0f:39:98:4f: df:7f:82:92:83:1d:03:5a:ed:5f:34:1e:fc:9b:99:c7:d9:2c: 37:e1:2a:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP7Une1cx7tjr93f4RZIAMKqAKOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIwMzE5 MjBERjUyMTAeFw0yNTA2MDYxMjM1MzZaFw0yNTA2MDkyMjAwMzZaMDMxMTAvBgNV BAMTKDVCMzU4Nzc2OEQ1REMzMUE1QkZDNkIwQkM2OTE0NDRGMzFGNkUzOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDISHyYFwvqPLiWOxvm5o7y8ICZ wHzsgWCE9v0/iZ0wP6RpRGED2Zza/w00rpa2A9djET12wgRutypQtHMYDQMxxr8i RkdK7ZIDrXVS2JYDvTtfBROIWZIJP9V7Bke6Og4AFHpKPKdQ3VL6+38zMNUidj9H GxNhpE1a5nKaYKOV8HcIQuYNxtld9pugxWSxLkrfhOOnhGmuG9XUJghCPCeKi5XA KLqi2bfG7e1IiXQV42iBD8tFcoyoUh5dmNoGZRrNbCKmgmxl87fIaPFlcfbfpCWV 8Baudhcb/jjImRN5thbCVD0h/UXUxKedMBFkkMQzje0Pewiym8ydD90TlF+fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWzWHdo1dwxpb/GsLxpFETzH2444wHwYDVR0j BBgwFoAUXskor9c6/HDxDEaOIUggMZIN9SEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2YzZjhjOC0wNDA2LTRiMzgtYTdhOC1kY2IxNWU0MWYyYjcvMC81RUM5MjhBRkQ3 M0FGQzcwRjEwQzQ2OEUyMTQ4MjAzMTkyMERGNTIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIwMzE5MjBE RjUyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNmM2Y4YzgtMDQwNi00YjM4LWE3 YTgtZGNiMTVlNDFmMmI3LzAvNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIw MzE5MjBERjUyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACEx9ezS4ALrIp0nK0xG7yf/PZLGj3yO8/9c +1+xr3ZWGqgQFFUGmXVUaKGRK32LkiQlYHpjt2yG0GPkiFOSWqq/T/Kar5BwP2OJ KD8ku+UpKUiBCDCA/OzvEzmG521FjWVqAxB7sNpxi9cCcaqt6Yj4asYdc+5ouKaW GV4gfkTbnkkjLMhnDN6UUfIElPco4iR9BFbHBXVqVR9+wTHx4DXR7P2XoKqn3Yhc WEMxBGbQYmJ0WfO+i6GOqK1R/92IE+hV/zmQlJpjJatFZxdmB57ADpRSLfHhyNLG 4oKTDvS929sPbxkhDzmYT99/gpKDHQNa7V80HvybmcfZLDfhKoI= -----END CERTIFICATE-----Generated at Sat Jun 7 07:12:05 2025 by rpki-client