$ rpki-client -vvf repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.mft File: 5509BA3B36B8E5C809C09949749272FEF605F530.mft (raw, json) Hash identifier: mTVyAdYS0q1zP53K8zzuSKb9XNbBNtwjRJo0QcbWJ8s= Subject key identifier: 1F:EC:68:55:20:36:B0:DC:1A:F4:95:98:5A:3E:46:95:A6:F0:91:5D Authority key identifier: 55:09:BA:3B:36:B8:E5:C8:09:C0:99:49:74:92:72:FE:F6:05:F5:30 Certificate issuer: /CN=5509BA3B36B8E5C809C09949749272FEF605F530 Certificate serial: 3553412B060A2D189619E7F2A746E2B842F1209D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5509BA3B36B8E5C809C09949749272FEF605F530.cer Subject info access: rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.mft Manifest number: 0189 Signing time: Mon 30 Jun 2025 08:41:18 +0000 Manifest this update: Mon 30 Jun 2025 08:36:18 +0000 Manifest next update: Thu 03 Jul 2025 12:38:18 +0000 Files and hashes: 1: 3130332e3133302e3230362e302f32342d3234203d3e20313338303937.roa (hash: S0UelN4KVkqU3QsrPYjGFbixGaR+dwxcUsc+/2UXzCs=) 2: 5509BA3B36B8E5C809C09949749272FEF605F530.crl (hash: vgUPG4o6hf40U4OPUnaxhA5soBctmfUV7nVTTty7K8A=) 3: 323030313a6466363a656630303a3a2f34382d3438203d3e20313338303937.roa (hash: dShjUK+1B9xhLAsugTMDbSpNCwLh0hAVCcSuJIUamwo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.crl rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5509BA3B36B8E5C809C09949749272FEF605F530.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 12:38:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:53:41:2b:06:0a:2d:18:96:19:e7:f2:a7:46:e2:b8:42:f1:20:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5509BA3B36B8E5C809C09949749272FEF605F530 Validity Not Before: Jun 30 08:36:18 2025 GMT Not After : Jul 3 12:38:18 2025 GMT Subject: CN=1FEC68552036B0DC1AF495985A3E4695A6F0915D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:01:ad:54:8a:23:8e:72:e4:75:60:20:57:d2: cc:28:83:93:a8:73:1e:5b:05:89:58:19:86:91:2c: db:0e:70:9f:ba:d9:50:cd:44:4b:bd:2a:dd:35:8d: 65:3e:c5:0e:da:07:de:ef:e6:10:dd:73:29:7b:90: 89:00:54:e9:90:ea:4c:ec:35:c2:29:63:87:cf:e5: 99:b9:3a:86:cb:9a:62:eb:97:b8:a3:67:8f:04:44: be:6f:35:7e:16:59:07:10:7b:70:b6:34:87:f6:ec: 20:9d:10:8b:54:26:b8:e2:d5:60:c8:d2:e4:4a:5b: 93:47:c6:44:8e:b1:2e:db:b5:b2:5a:39:c2:4c:de: ce:ab:27:6b:75:fc:b5:51:ad:66:10:07:65:44:d6: 83:80:59:d3:7e:7a:89:b2:61:c5:68:a6:a8:d5:38: 52:4f:e9:80:97:18:1b:5e:70:78:41:2b:47:db:53: bd:ea:ea:d2:53:bf:35:c7:6e:1d:8c:c6:c2:dc:98: 43:4a:64:4c:30:f4:a4:7c:e4:8c:c1:a5:42:4a:14: 94:dd:88:8f:3d:94:6a:d8:37:1e:cf:cf:c9:f8:82: 93:3c:1b:c6:cf:84:30:b0:9b:b6:17:0d:79:d7:8d: 00:6f:c2:4b:d6:99:2e:c9:c3:fe:c6:73:e8:f8:16: b2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:EC:68:55:20:36:B0:DC:1A:F4:95:98:5A:3E:46:95:A6:F0:91:5D X509v3 Authority Key Identifier: keyid:55:09:BA:3B:36:B8:E5:C8:09:C0:99:49:74:92:72:FE:F6:05:F5:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5509BA3B36B8E5C809C09949749272FEF605F530.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/30a392dc-2e4e-4770-8f68-bc61f80b74a7/0/5509BA3B36B8E5C809C09949749272FEF605F530.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:34:24:da:a1:d3:92:7c:c7:27:27:29:e8:1d:3c:73:81:f9: 5b:17:47:34:23:67:d6:f4:43:71:b2:5c:36:05:e5:91:da:bc: 7d:de:65:aa:cd:65:c5:9a:f1:96:6a:8a:8c:6b:44:46:07:04: a7:d7:c1:34:dd:77:92:1f:64:25:34:b2:88:c8:ec:77:8c:2e: 61:80:62:9e:aa:1c:ca:ae:31:25:db:84:21:f0:65:b8:e0:8b: 8e:b3:cc:3f:99:91:b1:c9:bf:24:b2:2e:03:9c:49:99:2d:23: 46:2b:7a:ee:00:3d:09:95:a8:9e:e0:61:e8:fb:5d:e4:cd:34: 35:6a:90:cf:27:0f:21:e8:d4:3e:78:50:17:26:10:f6:0e:fd: 73:73:86:8c:0a:9f:15:1a:ec:bf:50:45:1a:9a:a6:58:c4:1e: 24:bf:ab:9c:48:9c:7e:0d:6c:3c:1d:54:2b:43:82:2b:74:17: 8c:c9:f7:b5:15:5d:0b:9b:e9:5c:4e:91:7e:65:fd:65:e6:9e: 1f:49:d2:35:d6:df:50:62:95:84:83:09:0d:4b:94:19:82:d2: 34:40:19:c6:2a:a7:a0:bb:42:9d:63:12:b8:69:6e:69:fb:82: 56:8d:2d:6d:35:06:a2:97:e2:41:46:82:07:d4:5d:e4:03:bf: f7:f7:b3:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNVNBKwYKLRiWGefyp0biuELxIJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUwOUJBM0IzNkI4RTVDODA5QzA5OTQ5NzQ5MjcyRkVG NjA1RjUzMDAeFw0yNTA2MzAwODM2MThaFw0yNTA3MDMxMjM4MThaMDMxMTAvBgNV BAMTKDFGRUM2ODU1MjAzNkIwREMxQUY0OTU5ODVBM0U0Njk1QTZGMDkxNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBAa1UiiOOcuR1YCBX0swog5Oo cx5bBYlYGYaRLNsOcJ+62VDNREu9Kt01jWU+xQ7aB97v5hDdcyl7kIkAVOmQ6kzs NcIpY4fP5Zm5OobLmmLrl7ijZ48ERL5vNX4WWQcQe3C2NIf27CCdEItUJrji1WDI 0uRKW5NHxkSOsS7btbJaOcJM3s6rJ2t1/LVRrWYQB2VE1oOAWdN+eomyYcVopqjV OFJP6YCXGBtecHhBK0fbU73q6tJTvzXHbh2MxsLcmENKZEww9KR85IzBpUJKFJTd iI89lGrYNx7Pz8n4gpM8G8bPhDCwm7YXDXnXjQBvwkvWmS7Jw/7Gc+j4FrJdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH+xoVSA2sNwa9JWYWj5GlabwkV0wHwYDVR0j BBgwFoAUVQm6Oza45cgJwJlJdJJy/vYF9TAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MGEzOTJkYy0yZTRlLTQ3NzAtOGY2OC1iYzYxZjgwYjc0YTcvMC81NTA5QkEzQjM2 QjhFNUM4MDlDMDk5NDk3NDkyNzJGRUY2MDVGNTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTUwOUJBM0IzNkI4RTVDODA5QzA5OTQ5NzQ5MjcyRkVGNjA1 RjUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzBhMzkyZGMtMmU0ZS00NzcwLThm NjgtYmM2MWY4MGI3NGE3LzAvNTUwOUJBM0IzNkI4RTVDODA5QzA5OTQ5NzQ5Mjcy RkVGNjA1RjUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKg0JNqh05J8xycnKegdPHOB+VsXRzQjZ9b0 Q3GyXDYF5ZHavH3eZarNZcWa8ZZqioxrREYHBKfXwTTdd5IfZCU0sojI7HeMLmGA Yp6qHMquMSXbhCHwZbjgi46zzD+ZkbHJvySyLgOcSZktI0Yreu4APQmVqJ7gYej7 XeTNNDVqkM8nDyHo1D54UBcmEPYO/XNzhowKnxUa7L9QRRqapljEHiS/q5xInH4N bDwdVCtDgit0F4zJ97UVXQub6VxOkX5l/WXmnh9J0jXW31BilYSDCQ1LlBmC0jRA GcYqp6C7Qp1jErhpbmn7glaNLW01BqKX4kFGggfUXeQDv/f3s0M= -----END CERTIFICATE-----Generated at Tue Jul 1 15:39:17 2025 by rpki-client