$ rpki-client -vvf repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft File: 5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft (raw, json) Hash identifier: hV89AuVXw7PzMfb7w0xEuO0bLE3LCixOu1pDc5Sly5o= Subject key identifier: CE:39:4B:8B:94:F1:5C:1C:88:EA:BD:F5:7E:49:5E:62:1F:35:82:DF Authority key identifier: 53:35:07:6B:95:F2:97:8B:E3:AC:DB:39:36:0A:E5:A2:2D:0D:4B:55 Certificate issuer: /CN=5335076B95F2978BE3ACDB39360AE5A22D0D4B55 Certificate serial: 10253A2CF4D520E068D61B9DE6DD66B68B2FABF3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft Manifest number: 01B3 Signing time: Thu 05 Jun 2025 16:11:36 +0000 Manifest this update: Thu 05 Jun 2025 16:06:36 +0000 Manifest next update: Sun 08 Jun 2025 18:24:36 +0000 Files and hashes: 1: 5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl (hash: zSgTTbAA3ODQEPlJmlD47KchGudY6oz1buxKJWJY4lU=) 2: 323430353a636534303a3a2f33322d3438203d3e20313339393838.roa (hash: lyCNDP9EqWqz+HEfKh+8ATTipD904Rt+hS0G+abC8oQ=) 3: 3130332e3134382e3130302e302f32332d3234203d3e20313339393838.roa (hash: lGN1rdaCl5aXrposBbXJyZDSRAHwOJHZSSN67w6M/PQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 18:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:25:3a:2c:f4:d5:20:e0:68:d6:1b:9d:e6:dd:66:b6:8b:2f:ab:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5335076B95F2978BE3ACDB39360AE5A22D0D4B55 Validity Not Before: Jun 5 16:06:36 2025 GMT Not After : Jun 8 18:24:36 2025 GMT Subject: CN=CE394B8B94F15C1C88EABDF57E495E621F3582DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:36:19:9b:24:fa:35:44:b2:64:c9:71:d3:ce: d2:92:7b:ae:2f:7a:b6:b4:3f:36:e7:d5:53:ff:3d: 62:82:ed:fd:46:3e:6c:9b:a2:7d:14:35:48:63:9a: 14:07:ed:ee:c3:65:b0:90:5f:ad:f7:4a:41:94:83: 1a:8a:25:29:f6:38:2f:17:32:14:53:42:98:03:72: 9f:a7:07:33:0f:8c:63:52:9c:57:4d:c3:59:94:3f: 60:5b:49:b4:7b:bb:bc:65:88:d5:4b:ff:51:40:51: 73:fe:6f:6a:dd:95:68:c5:e4:c6:0c:bd:24:c9:8a: 2b:2c:d8:8d:6f:d3:d9:dd:3b:3a:30:f7:3f:b1:47: f3:66:02:b2:11:da:90:f2:bb:11:d9:a7:3a:7a:b9: c2:a7:bd:8e:18:7f:91:5c:05:fd:b7:e9:c5:b9:65: 51:d2:ac:6e:35:b9:f9:3c:fe:07:ef:f6:a0:7b:09: 0e:aa:5a:7a:a0:b4:7e:01:54:c5:7c:8d:ec:41:3b: e7:48:b9:52:58:26:ed:48:e5:cb:ce:b1:bf:fe:20: 5d:22:21:c0:fd:72:6a:09:2d:3d:fa:42:ee:2e:7d: 91:89:30:5b:fa:b5:7b:f5:aa:13:4a:a7:7c:a9:fc: d7:91:f0:fb:52:1a:6d:8f:db:40:76:71:2b:f6:e0: 83:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:39:4B:8B:94:F1:5C:1C:88:EA:BD:F5:7E:49:5E:62:1F:35:82:DF X509v3 Authority Key Identifier: keyid:53:35:07:6B:95:F2:97:8B:E3:AC:DB:39:36:0A:E5:A2:2D:0D:4B:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:46:b2:12:00:a1:2c:fe:59:4c:3f:64:8b:30:3f:c9:9c:4c: 19:45:33:a2:97:49:90:37:eb:2e:e7:11:31:26:9e:96:17:ec: 70:fb:98:de:43:18:1d:df:d6:9d:d7:99:e5:36:65:e7:e3:6a: e5:29:dd:29:8e:a0:7d:6f:9e:07:d6:90:f7:e4:db:17:42:08: ae:f7:a2:49:08:0d:70:e3:ae:78:8f:1d:ff:18:dd:85:c9:fc: 8c:2c:f0:5c:bd:93:38:36:5d:32:2b:a3:bc:58:fe:bb:cf:4e: 58:8e:b7:57:cf:df:60:c3:96:58:e2:2a:ec:b7:d1:14:45:ac: 5c:4d:c2:79:b8:75:e5:02:a0:d3:1c:ec:47:3e:94:d2:c8:05: a5:17:10:ea:24:02:c6:78:8b:05:1e:70:07:7b:f2:cd:cc:d4: ef:3d:c3:17:ed:b3:93:b1:b7:41:5d:08:65:8e:f2:ce:e9:1f: b7:3c:77:3b:64:f2:4f:57:cb:a6:5e:77:85:a9:4c:89:8f:94: a5:78:8e:8f:07:f1:52:12:7c:92:56:64:9b:61:62:fe:13:22: d0:85:e8:31:75:91:19:f0:0e:40:72:f8:c9:b9:c7:42:d9:d3: 23:77:29:8e:26:61:1a:42:a3:64:d3:61:39:02:19:29:d8:ba: 2a:22:c7:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUECU6LPTVIOBo1hud5t1mtosvq/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMzNTA3NkI5NUYyOTc4QkUzQUNEQjM5MzYwQUU1QTIy RDBENEI1NTAeFw0yNTA2MDUxNjA2MzZaFw0yNTA2MDgxODI0MzZaMDMxMTAvBgNV BAMTKENFMzk0QjhCOTRGMTVDMUM4OEVBQkRGNTdFNDk1RTYyMUYzNTgyREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpNhmbJPo1RLJkyXHTztKSe64v era0Pzbn1VP/PWKC7f1GPmybon0UNUhjmhQH7e7DZbCQX633SkGUgxqKJSn2OC8X MhRTQpgDcp+nBzMPjGNSnFdNw1mUP2BbSbR7u7xliNVL/1FAUXP+b2rdlWjF5MYM vSTJiiss2I1v09ndOzow9z+xR/NmArIR2pDyuxHZpzp6ucKnvY4Yf5FcBf236cW5 ZVHSrG41ufk8/gfv9qB7CQ6qWnqgtH4BVMV8jexBO+dIuVJYJu1I5cvOsb/+IF0i IcD9cmoJLT36Qu4ufZGJMFv6tXv1qhNKp3yp/NeR8PtSGm2P20B2cSv24IPRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzjlLi5TxXByI6r31fkleYh81gt8wHwYDVR0j BBgwFoAUUzUHa5Xyl4vjrNs5Ngrloi0NS1UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmQ2NmQxMC1iODU3LTRiZWYtOTM5NS00NWQ1YWIyYzQ0ZjkvMC81MzM1MDc2Qjk1 RjI5NzhCRTNBQ0RCMzkzNjBBRTVBMjJEMEQ0QjU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTMzNTA3NkI5NUYyOTc4QkUzQUNEQjM5MzYwQUU1QTIyRDBE NEI1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJkNjZkMTAtYjg1Ny00YmVmLTkz OTUtNDVkNWFiMmM0NGY5LzAvNTMzNTA3NkI5NUYyOTc4QkUzQUNEQjM5MzYwQUU1 QTIyRDBENEI1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADdGshIAoSz+WUw/ZIswP8mcTBlFM6KXSZA3 6y7nETEmnpYX7HD7mN5DGB3f1p3XmeU2ZefjauUp3SmOoH1vngfWkPfk2xdCCK73 okkIDXDjrniPHf8Y3YXJ/Iws8Fy9kzg2XTIro7xY/rvPTliOt1fP32DDlljiKuy3 0RRFrFxNwnm4deUCoNMc7Ec+lNLIBaUXEOokAsZ4iwUecAd78s3M1O89wxfts5Ox t0FdCGWO8s7pH7c8dztk8k9Xy6Zed4WpTImPlKV4jo8H8VISfJJWZJthYv4TItCF 6DF1kRnwDkBy+Mm5x0LZ0yN3KY4mYRpCo2TTYTkCGSnYuioixyg= -----END CERTIFICATE-----Generated at Thu Jun 5 18:18:51 2025 by rpki-client