$ rpki-client -vvf repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.mft File: 5B558AD01277C8212C974318B6352FB28BF683AD.mft (raw, json) Hash identifier: 2TVsIcJ7+GSh/AOBcijAPBPF2HDgWLTMkLi4SWYYkMc= Subject key identifier: 69:69:2C:0A:18:BD:5F:78:C4:EA:B2:DD:59:B5:85:8A:4A:23:65:EF Authority key identifier: 5B:55:8A:D0:12:77:C8:21:2C:97:43:18:B6:35:2F:B2:8B:F6:83:AD Certificate issuer: /CN=5B558AD01277C8212C974318B6352FB28BF683AD Certificate serial: 4FBA98E6A884409A1030CC7EA538492D3C49A885 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B558AD01277C8212C974318B6352FB28BF683AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.mft Manifest number: 018E Signing time: Tue 03 Jun 2025 16:21:32 +0000 Manifest this update: Tue 03 Jun 2025 16:16:32 +0000 Manifest next update: Fri 06 Jun 2025 20:56:32 +0000 Files and hashes: 1: 5B558AD01277C8212C974318B6352FB28BF683AD.crl (hash: aONhn7DDoSCZp3AfUOQloBQffEv/3yVIEzwu/hA9aMk=) 2: 3130332e3139362e34312e302f32342d3234203d3e20313530323030.roa (hash: 0shHIoNgf0pQRXh0UI7r08hqky3s0DThmjqdBQikoVM=) 3: 3130332e3139362e34302e302f32342d3234203d3e20313530323030.roa (hash: 2i8HfdlFIHezHTi1m8fyUROS/IcCg2re+ftnVgBoAd4=) 4: 3130332e3139362e34302e302f32332d3233203d3e20313530323030.roa (hash: 0agQaQqzfkfho9nuxHylitEA2rT2w6YSuj3i1Cy3BUc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.crl rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B558AD01277C8212C974318B6352FB28BF683AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:56:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:ba:98:e6:a8:84:40:9a:10:30:cc:7e:a5:38:49:2d:3c:49:a8:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B558AD01277C8212C974318B6352FB28BF683AD Validity Not Before: Jun 3 16:16:32 2025 GMT Not After : Jun 6 20:56:32 2025 GMT Subject: CN=69692C0A18BD5F78C4EAB2DD59B5858A4A2365EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f7:11:b3:45:28:72:88:ac:69:2e:89:b5:14: 60:d9:90:39:9c:a1:9c:8b:db:0b:e1:7c:ec:ec:ba: 5d:f5:4e:b3:06:9f:d4:37:4d:58:b5:68:a1:d5:26: b1:36:65:56:72:34:e2:b1:70:00:9e:9c:2a:a7:70: de:d1:c8:29:5c:4e:20:ac:69:50:1e:4d:86:5b:27: a9:75:ad:0b:83:3f:e7:15:0c:df:72:24:12:b0:b0: 1f:b8:19:21:fd:bf:b9:23:b5:0b:b7:a3:77:97:c0: 4a:17:c6:b5:4b:b4:bf:0e:89:98:ba:74:35:2a:76: 72:fb:6b:dc:65:d2:e7:36:5e:31:8e:40:d1:90:89: 7a:5e:49:94:a0:db:d1:e9:08:d0:8d:cb:90:af:35: 63:37:09:1e:64:48:8b:ac:82:66:38:6a:d0:5c:60: 2f:37:f9:7e:f2:3f:52:4c:46:9b:07:03:36:4b:f4: 09:29:cc:53:0a:7e:42:70:62:50:bd:a9:28:90:0c: 50:94:d8:c9:ed:14:e2:f9:67:db:d6:be:84:22:4b: 85:7f:f2:26:ed:8d:c3:c2:ab:9b:d1:29:44:9a:b0: d1:74:f7:8b:23:ea:e7:3c:48:b7:2a:6e:7f:27:70: 04:a9:70:03:72:15:59:61:19:24:12:8b:3e:00:f2: b3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:69:2C:0A:18:BD:5F:78:C4:EA:B2:DD:59:B5:85:8A:4A:23:65:EF X509v3 Authority Key Identifier: keyid:5B:55:8A:D0:12:77:C8:21:2C:97:43:18:B6:35:2F:B2:8B:F6:83:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B558AD01277C8212C974318B6352FB28BF683AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:b7:a0:2b:99:1f:41:ef:6f:2c:c9:7e:0c:58:2c:3c:b9:ac: 83:83:1e:34:3e:fd:f3:e2:0a:bb:d1:5c:f7:53:79:8f:0c:e3: 96:d2:18:5e:e9:78:be:00:75:a3:2e:ac:b7:b4:9e:60:a9:3f: a2:cc:84:82:3d:77:b0:d5:42:d7:ce:8c:18:48:a3:1d:09:17: 51:f7:6c:6a:36:fd:30:14:68:f0:e0:09:7e:ab:91:cc:97:d5: 95:54:4b:c3:9a:79:5b:2e:76:f8:5b:cf:9c:46:b6:ae:12:fb: b1:c4:6b:dd:2f:43:ca:d1:a2:d0:69:52:f1:45:f9:85:a8:5a: 61:b6:c9:98:0a:1e:ef:6d:e9:8e:46:fd:a0:08:6e:ad:ec:21: ee:3d:3d:ae:62:29:a0:72:e0:89:0f:65:7b:84:5f:56:0e:b3: 0d:4e:98:1d:5c:29:39:ed:68:fd:d8:e2:d8:c1:a0:7a:39:c4: cb:93:d2:07:67:6d:a6:e5:7e:84:a6:67:67:ea:6d:19:16:c4: a3:59:b0:a5:0d:8a:b6:90:9d:0c:05:52:56:7a:5e:8b:65:74: 2b:17:92:dd:8c:34:7a:2b:af:f4:5a:0f:22:7f:b7:f1:9b:0e: ab:cd:0c:69:91:07:db:c0:8a:2f:ef:a0:ba:50:fe:6c:7a:21: 60:03:d7:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT7qY5qiEQJoQMMx+pThJLTxJqIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI1NThBRDAxMjc3QzgyMTJDOTc0MzE4QjYzNTJGQjI4 QkY2ODNBRDAeFw0yNTA2MDMxNjE2MzJaFw0yNTA2MDYyMDU2MzJaMDMxMTAvBgNV BAMTKDY5NjkyQzBBMThCRDVGNzhDNEVBQjJERDU5QjU4NThBNEEyMzY1RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC59xGzRShyiKxpLom1FGDZkDmc oZyL2wvhfOzsul31TrMGn9Q3TVi1aKHVJrE2ZVZyNOKxcACenCqncN7RyClcTiCs aVAeTYZbJ6l1rQuDP+cVDN9yJBKwsB+4GSH9v7kjtQu3o3eXwEoXxrVLtL8OiZi6 dDUqdnL7a9xl0uc2XjGOQNGQiXpeSZSg29HpCNCNy5CvNWM3CR5kSIusgmY4atBc YC83+X7yP1JMRpsHAzZL9AkpzFMKfkJwYlC9qSiQDFCU2MntFOL5Z9vWvoQiS4V/ 8ibtjcPCq5vRKUSasNF094sj6uc8SLcqbn8ncASpcANyFVlhGSQSiz4A8rM/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaWksChi9X3jE6rLdWbWFikojZe8wHwYDVR0j BBgwFoAUW1WK0BJ3yCEsl0MYtjUvsov2g60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YTViNGZhNC0zMjhjLTRjZjItYWRlMy1jODY4MTMxZDRlMGQvMC81QjU1OEFEMDEy NzdDODIxMkM5NzQzMThCNjM1MkZCMjhCRjY4M0FELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUI1NThBRDAxMjc3QzgyMTJDOTc0MzE4QjYzNTJGQjI4QkY2 ODNBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmE1YjRmYTQtMzI4Yy00Y2YyLWFk ZTMtYzg2ODEzMWQ0ZTBkLzAvNUI1NThBRDAxMjc3QzgyMTJDOTc0MzE4QjYzNTJG QjI4QkY2ODNBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEa3oCuZH0HvbyzJfgxYLDy5rIODHjQ+/fPi CrvRXPdTeY8M45bSGF7peL4AdaMurLe0nmCpP6LMhII9d7DVQtfOjBhIox0JF1H3 bGo2/TAUaPDgCX6rkcyX1ZVUS8OaeVsudvhbz5xGtq4S+7HEa90vQ8rRotBpUvFF +YWoWmG2yZgKHu9t6Y5G/aAIbq3sIe49Pa5iKaBy4IkPZXuEX1YOsw1OmB1cKTnt aP3Y4tjBoHo5xMuT0gdnbablfoSmZ2fqbRkWxKNZsKUNiraQnQwFUlZ6XotldCsX kt2MNHorr/RaDyJ/t/GbDqvNDGmRB9vAii/voLpQ/mx6IWAD14E= -----END CERTIFICATE-----Generated at Tue Jun 3 23:26:32 2025 by rpki-client