$ rpki-client -vvf repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft File: 5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft (raw, json) Hash identifier: +m0CQLIuM/EXymJOOOdWuSXVByUWCEZTf/CbEFuHaY4= Subject key identifier: E4:F5:9F:68:AE:2F:1A:F0:ED:D1:2D:24:08:7F:A1:EB:8E:CD:29:20 Authority key identifier: 5A:D1:91:73:FE:66:EE:2B:9E:99:5A:99:ED:7D:C4:23:01:13:BD:EF Certificate issuer: /CN=5AD19173FE66EE2B9E995A99ED7DC4230113BDEF Certificate serial: 19BD781DF6516AD92C54664CAC91077EDF61CCC7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft Manifest number: 0153 Signing time: Sun 29 Jun 2025 06:11:50 +0000 Manifest this update: Sun 29 Jun 2025 06:06:50 +0000 Manifest next update: Wed 02 Jul 2025 14:44:50 +0000 Files and hashes: 1: 3130332e3132332e3137352e302f32342d3234203d3e20313530393638.roa (hash: dqxRLNjaP87/BAjwkFlOT+1aQilVY6SUF3ZdlXMJQnY=) 2: 5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl (hash: 62Isj4FWsoVrDKzhlWv42rfuLMk/bun4WRtqUAlZr30=) 3: 3130332e3132332e3137342e302f32342d3234203d3e20313530393638.roa (hash: HBPJroPXGy8LUopobuBKzRyp/rbJ8xWZnNOPphW6Qlg=) 4: 3130332e3132332e3137342e302f32332d3233203d3e20313530393638.roa (hash: 5XRHZIZI1oj83KHXG7v/4Bg68uKlgADqYmMHikLr/vU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:bd:78:1d:f6:51:6a:d9:2c:54:66:4c:ac:91:07:7e:df:61:cc:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AD19173FE66EE2B9E995A99ED7DC4230113BDEF Validity Not Before: Jun 29 06:06:50 2025 GMT Not After : Jul 2 14:44:50 2025 GMT Subject: CN=E4F59F68AE2F1AF0EDD12D24087FA1EB8ECD2920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8c:c3:7b:45:fa:b4:6a:69:89:2b:70:79:26: 3d:8d:27:4f:be:f4:c9:2d:26:5e:ca:33:68:2d:3a: 79:b0:45:08:25:96:cb:1b:c0:46:e3:30:a0:27:8c: ae:a8:2f:ee:b0:a1:1e:60:00:c5:5d:d4:3e:3e:6f: b5:be:a7:6a:55:9f:44:29:23:61:66:0d:5c:85:12: ef:ad:3f:41:4f:5f:d8:df:d0:16:fb:e0:2f:15:8a: 1e:88:35:8c:65:1e:f9:93:cb:dc:eb:99:d1:8b:6d: e9:ab:df:97:cc:6f:0d:12:73:98:7b:42:54:4d:51: df:ef:1b:30:6a:6f:01:b7:d0:70:04:eb:0b:68:3d: b0:94:87:90:1c:71:6c:eb:fa:b9:9d:72:a0:ed:64: 78:03:8b:26:7f:45:ac:4e:65:38:2b:6a:36:d8:9d: cd:e6:16:61:3e:6b:ad:e5:84:53:4e:e1:0d:72:e3: 06:c3:01:d7:28:75:aa:ae:75:bd:b4:a2:45:96:c4: 8d:5d:1e:e3:79:6f:63:09:de:62:94:d1:5e:55:6b: af:4c:72:d3:bc:02:be:07:53:5a:06:d5:68:2a:c2: 1e:cd:44:dd:8d:fa:78:f5:95:dd:e1:c4:35:8f:8b: 90:2f:db:15:7d:df:a2:6e:31:92:60:8f:a8:55:08: 61:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F5:9F:68:AE:2F:1A:F0:ED:D1:2D:24:08:7F:A1:EB:8E:CD:29:20 X509v3 Authority Key Identifier: keyid:5A:D1:91:73:FE:66:EE:2B:9E:99:5A:99:ED:7D:C4:23:01:13:BD:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:9e:35:87:c8:05:09:98:9e:0e:83:be:f6:13:9b:b5:b4:4f: de:62:90:18:17:91:71:02:6c:5f:bc:fe:81:41:b0:ce:d6:fc: 19:8b:d7:ed:af:1e:59:6a:6d:61:16:fa:d6:16:24:b4:b2:f0: 5a:cb:d6:88:77:b2:39:3c:ef:91:fc:83:6a:c6:31:f9:ea:18: 1e:5f:ee:fa:6e:19:39:93:5c:15:21:83:7a:d8:c7:c1:57:ce: 3a:9e:e8:40:7f:80:13:49:c9:ad:59:7b:e0:02:9d:71:eb:8c: d9:34:77:d6:e9:32:27:6c:f1:fe:05:b1:48:73:82:26:90:e4: f4:fb:0a:4b:62:59:a7:6d:e5:6e:4f:da:fb:2c:f4:8d:cd:07: c8:e8:39:83:95:18:66:6c:1b:e2:5c:95:7b:e4:41:3c:79:fb: dd:64:33:2b:82:11:b6:f9:44:85:53:1c:97:91:68:ad:c3:16: bc:31:d6:1e:0d:28:e1:f4:2f:ec:3a:1c:bf:b5:1f:9b:bb:55: 0b:3d:ec:80:6b:cb:94:00:c1:c8:98:c6:03:88:a8:ca:91:3c: 18:bb:39:f2:64:05:c7:28:a8:b6:97:af:ce:86:11:48:fa:c1: 97:5f:8c:ea:32:46:b8:6a:5d:7d:ba:e9:f4:b1:44:a7:67:4b: b4:b1:85:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGb14HfZRatksVGZMrJEHft9hzMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0MjMw MTEzQkRFRjAeFw0yNTA2MjkwNjA2NTBaFw0yNTA3MDIxNDQ0NTBaMDMxMTAvBgNV BAMTKEU0RjU5RjY4QUUyRjFBRjBFREQxMkQyNDA4N0ZBMUVCOEVDRDI5MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGjMN7Rfq0ammJK3B5Jj2NJ0++ 9MktJl7KM2gtOnmwRQgllssbwEbjMKAnjK6oL+6woR5gAMVd1D4+b7W+p2pVn0Qp I2FmDVyFEu+tP0FPX9jf0Bb74C8Vih6INYxlHvmTy9zrmdGLbemr35fMbw0Sc5h7 QlRNUd/vGzBqbwG30HAE6wtoPbCUh5AccWzr+rmdcqDtZHgDiyZ/RaxOZTgrajbY nc3mFmE+a63lhFNO4Q1y4wbDAdcodaqudb20okWWxI1dHuN5b2MJ3mKU0V5Va69M ctO8Ar4HU1oG1Wgqwh7NRN2N+nj1ld3hxDWPi5Av2xV936JuMZJgj6hVCGGZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5PWfaK4vGvDt0S0kCH+h647NKSAwHwYDVR0j BBgwFoAUWtGRc/5m7iuemVqZ7X3EIwETve8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmVkYjI4Zi1mM2Y5LTQxOTktODVhMy1jOWJmOWE3YTdkZjgvMC81QUQxOTE3M0ZF NjZFRTJCOUU5OTVBOTlFRDdEQzQyMzAxMTNCREVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0MjMwMTEz QkRFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWZlZGIyOGYtZjNmOS00MTk5LTg1 YTMtYzliZjlhN2E3ZGY4LzAvNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0 MjMwMTEzQkRFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALieNYfIBQmYng6DvvYTm7W0T95ikBgXkXEC bF+8/oFBsM7W/BmL1+2vHllqbWEW+tYWJLSy8FrL1oh3sjk875H8g2rGMfnqGB5f 7vpuGTmTXBUhg3rYx8FXzjqe6EB/gBNJya1Ze+ACnXHrjNk0d9bpMids8f4FsUhz giaQ5PT7CktiWadt5W5P2vss9I3NB8joOYOVGGZsG+JclXvkQTx5+91kMyuCEbb5 RIVTHJeRaK3DFrwx1h4NKOH0L+w6HL+1H5u7VQs97IBry5QAwciYxgOIqMqRPBi7 OfJkBccoqLaXr86GEUj6wZdfjOoyRrhqXX266fSxRKdnS7SxhRQ= -----END CERTIFICATE-----Generated at Sun Jun 29 18:14:28 2025 by rpki-client