$ rpki-client -vvf repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft File: 5C7240CA135C93835F95A8E1F3526942D3214EC2.mft (raw, json) Hash identifier: +Os6cUrNr4yI8auyF8ZxXXBuTyiEGfprbQO6k/UhbMc= Subject key identifier: F6:44:F4:A8:16:01:1C:89:A5:C1:67:F0:5B:0E:39:A4:CC:6A:3C:E5 Authority key identifier: 5C:72:40:CA:13:5C:93:83:5F:95:A8:E1:F3:52:69:42:D3:21:4E:C2 Certificate issuer: /CN=5C7240CA135C93835F95A8E1F3526942D3214EC2 Certificate serial: 1486CC533E30121AC9B7C2F06817668BE0F49849 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft Manifest number: 01ED Signing time: Sun 29 Jun 2025 22:51:31 +0000 Manifest this update: Sun 29 Jun 2025 22:46:31 +0000 Manifest next update: Thu 03 Jul 2025 08:00:31 +0000 Files and hashes: 1: 3130332e3139302e34362e302f32342d3234203d3e2039333431.roa (hash: jBjxNJ+007Quwhm8JkgTbciN359d/zYXuYTKIMisTrU=) 2: 3130332e3139302e34362e302f32332d3233203d3e2039333431.roa (hash: WvXqqkpLSakilobbbh3oi/iYc3pt0ZdEradB47daqG8=) 3: 3130332e3139302e34372e302f32342d3234203d3e2039333431.roa (hash: rr9ymmJLTXtCYmg7wZwMhNNVHwxbRfZ339GatX+MBVg=) 4: 5C7240CA135C93835F95A8E1F3526942D3214EC2.crl (hash: fQ86WMxwUJRAPbdJsvj7aDZ0CWUudEylOQCvwYSgoY0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.crl rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 08:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:86:cc:53:3e:30:12:1a:c9:b7:c2:f0:68:17:66:8b:e0:f4:98:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C7240CA135C93835F95A8E1F3526942D3214EC2 Validity Not Before: Jun 29 22:46:31 2025 GMT Not After : Jul 3 08:00:31 2025 GMT Subject: CN=F644F4A816011C89A5C167F05B0E39A4CC6A3CE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3e:b9:72:01:b8:b2:11:2e:9f:69:8d:78:ca: cd:6c:09:ad:c8:85:7f:e3:80:0c:c3:83:17:58:8c: 0d:d5:0d:0d:f9:7d:b2:e6:0d:ae:bb:9e:c4:4b:5d: c2:2a:45:72:01:b4:22:d7:79:03:f8:8d:bd:63:64: e9:cd:7f:2a:2f:29:98:8d:7f:14:90:a0:63:6b:bb: 54:e5:e8:54:aa:0b:ea:1e:4b:20:54:dd:0a:45:43: b0:0c:d6:fd:06:b1:1d:d5:74:1b:8d:c8:ab:79:e2: ae:67:79:7c:a9:ed:44:9b:6a:6f:ef:21:69:8c:d3: 42:58:6f:02:db:f3:c0:8b:85:cd:c6:fd:29:dc:0e: ae:34:93:4a:8e:bc:f4:6d:b5:eb:b3:bc:03:4d:82: 1c:e3:57:6c:51:34:67:a8:c3:56:21:1b:64:00:4b: 4d:04:45:c1:0f:5a:34:cd:ea:84:46:39:25:45:d2: 6d:eb:50:98:3f:84:af:64:01:cf:b0:b8:1f:f6:15: 62:c8:2f:b9:32:4f:de:d6:01:c9:90:0c:85:1d:f0: 75:65:9b:46:91:5b:48:b0:92:34:7c:c3:6d:64:27: c1:db:b2:c5:7b:e7:cc:70:d3:89:51:f8:02:86:fb: 25:e9:a2:d1:ad:d0:a2:50:1d:3b:5a:25:0e:70:1a: d2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:44:F4:A8:16:01:1C:89:A5:C1:67:F0:5B:0E:39:A4:CC:6A:3C:E5 X509v3 Authority Key Identifier: keyid:5C:72:40:CA:13:5C:93:83:5F:95:A8:E1:F3:52:69:42:D3:21:4E:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:1e:9f:37:70:e1:3b:12:1d:66:24:d4:c5:db:0c:5b:60:3b: 29:64:0d:35:d4:3a:d2:d3:1c:9f:bf:e3:10:22:99:dd:a0:0b: 90:69:41:b2:8e:e3:f3:48:e7:9c:47:a8:98:d7:b3:84:8c:a9: f2:fc:bc:cd:cd:9d:d1:51:e0:cd:91:f7:02:3b:76:69:32:c0: e4:02:eb:a8:51:35:ab:6a:f0:18:ab:7d:60:e2:26:4b:4b:7e: 67:0c:ac:33:77:a4:fd:10:1f:86:66:e7:b7:14:b0:b6:a5:c5: c6:12:c6:f8:58:25:d3:a1:90:e7:72:12:95:bd:61:33:4a:82: 03:a8:2b:0c:c7:b5:1c:6b:a5:af:0c:53:e0:d8:d7:69:f3:78: 30:5f:5f:a0:33:00:26:d1:d6:19:a3:df:66:2f:6a:e2:7e:e0: 07:0b:c5:23:00:7e:8d:56:cc:c0:dd:07:3c:22:5a:34:0c:7b: d6:88:a2:a0:4e:76:c2:52:2b:89:0a:57:a7:9b:f6:bc:4c:12: 46:b1:05:b6:5e:62:62:bc:9f:af:88:eb:88:67:b7:53:82:18: 2d:cd:32:45:ab:08:79:8c:60:f4:cf:e7:c2:56:43:7b:b6:ba: ea:59:5d:f9:48:37:02:86:93:b4:f0:5b:6d:e5:ad:36:cd:b0: 9c:be:4f:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFIbMUz4wEhrJt8LwaBdmi+D0mEkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM3MjQwQ0ExMzVDOTM4MzVGOTVBOEUxRjM1MjY5NDJE MzIxNEVDMjAeFw0yNTA2MjkyMjQ2MzFaFw0yNTA3MDMwODAwMzFaMDMxMTAvBgNV BAMTKEY2NDRGNEE4MTYwMTFDODlBNUMxNjdGMDVCMEUzOUE0Q0M2QTNDRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1PrlyAbiyES6faY14ys1sCa3I hX/jgAzDgxdYjA3VDQ35fbLmDa67nsRLXcIqRXIBtCLXeQP4jb1jZOnNfyovKZiN fxSQoGNru1Tl6FSqC+oeSyBU3QpFQ7AM1v0GsR3VdBuNyKt54q5neXyp7USbam/v IWmM00JYbwLb88CLhc3G/SncDq40k0qOvPRtteuzvANNghzjV2xRNGeow1YhG2QA S00ERcEPWjTN6oRGOSVF0m3rUJg/hK9kAc+wuB/2FWLIL7kyT97WAcmQDIUd8HVl m0aRW0iwkjR8w21kJ8HbssV758xw04lR+AKG+yXpotGt0KJQHTtaJQ5wGtIXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9kT0qBYBHImlwWfwWw45pMxqPOUwHwYDVR0j BBgwFoAUXHJAyhNck4Nflajh81JpQtMhTsIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjFmOTk5Yi1hYmNlLTRmYTktOGU3OS05M2I5YzVlNDU0ZTEvMC81QzcyNDBDQTEz NUM5MzgzNUY5NUE4RTFGMzUyNjk0MkQzMjE0RUMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM3MjQwQ0ExMzVDOTM4MzVGOTVBOEUxRjM1MjY5NDJEMzIx NEVDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIxZjk5OWItYWJjZS00ZmE5LThl NzktOTNiOWM1ZTQ1NGUxLzAvNUM3MjQwQ0ExMzVDOTM4MzVGOTVBOEUxRjM1MjY5 NDJEMzIxNEVDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGYenzdw4TsSHWYk1MXbDFtgOylkDTXUOtLT HJ+/4xAimd2gC5BpQbKO4/NI55xHqJjXs4SMqfL8vM3NndFR4M2R9wI7dmkywOQC 66hRNatq8BirfWDiJktLfmcMrDN3pP0QH4Zm57cUsLalxcYSxvhYJdOhkOdyEpW9 YTNKggOoKwzHtRxrpa8MU+DY12nzeDBfX6AzACbR1hmj32YvauJ+4AcLxSMAfo1W zMDdBzwiWjQMe9aIoqBOdsJSK4kKV6eb9rxMEkaxBbZeYmK8n6+I64hnt1OCGC3N MkWrCHmMYPTP58JWQ3u2uupZXflINwKGk7TwW23lrTbNsJy+T7Q= -----END CERTIFICATE-----Generated at Mon Jun 30 19:47:40 2025 by rpki-client