$ rpki-client -vvf repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft File: 5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft (raw, json) Hash identifier: X7rApHZyaQcJmsi4HFg3wX9ahawdzuTaULi+ZDsBhmA= Subject key identifier: 4E:63:64:44:F1:A1:2F:A3:DA:19:FD:FE:E3:D1:A7:7C:D0:51:36:79 Authority key identifier: 5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C Certificate issuer: /CN=5F1EC0378C7B3A8912CA32E382D2C083E173E71C Certificate serial: 0967E0B871390D58F7CBCE18D232FBB75D0E155B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft Manifest number: 04E9 Signing time: Tue 01 Jul 2025 22:41:10 +0000 Manifest this update: Tue 01 Jul 2025 22:36:10 +0000 Manifest next update: Sat 05 Jul 2025 03:42:10 +0000 Files and hashes: 1: 34392e3132382e3138382e302f32322d3234203d3e20313337323836.roa (hash: N5sKhHjRyw1prqGuj3p6kCsMHoe6+KpOpvfRWzLWflo=) 2: 3130332e31302e3134382e302f32322d3234203d3e20313336313032.roa (hash: YsAypY99u2UNps3UuTssVcjcS3FU5EYzwPP14rlgcWs=) 3: 3130332e39302e3235302e302f32332d3234203d3e20313336313032.roa (hash: ekJ6EWJjK3BnK95R5dRKHaTG8w4+znJQJhayH3/qkyg=) 4: 5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl (hash: XZX86Wy4n/MwZOQRn2GGjAug/atKbGCRR1K974/yVDk=) 5: 3130332e39302e3234382e302f32332d3234203d3e20313337323836.roa (hash: jxHxbJF/eRRjfrisoO0mVeSb4ItOk+aEiVd997Gm3wQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 03:42:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:67:e0:b8:71:39:0d:58:f7:cb:ce:18:d2:32:fb:b7:5d:0e:15:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F1EC0378C7B3A8912CA32E382D2C083E173E71C Validity Not Before: Jul 1 22:36:10 2025 GMT Not After : Jul 5 03:42:10 2025 GMT Subject: CN=4E636444F1A12FA3DA19FDFEE3D1A77CD0513679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:aa:74:7f:da:73:f7:29:f7:a9:bb:cc:8d:bb: 87:4c:78:d0:99:c3:23:92:d1:7f:32:bb:dc:8d:7c: 47:66:61:76:9d:31:35:62:31:d9:0f:f1:eb:a7:cc: 3d:bf:bc:fb:16:44:28:0c:37:66:ab:3a:d6:8f:9e: 2d:ce:96:6c:a0:d0:85:91:47:48:0b:98:c5:69:33: 78:7d:df:2c:51:7a:fb:26:18:b5:ca:0f:78:b0:4e: 3d:19:66:2f:e7:76:33:d2:be:23:4a:b3:cf:0e:7a: 8c:65:48:ba:6a:f9:b9:d9:74:78:6d:2c:81:56:4f: 07:10:b6:5f:d7:56:d5:10:20:08:f8:0c:eb:94:9b: 19:57:c0:c5:28:28:95:49:78:06:86:32:d7:5d:df: d2:e3:1a:52:9e:15:47:71:9f:8a:50:7e:66:60:56: 32:b1:dc:a6:05:28:90:90:77:45:c5:7b:ef:49:18: 75:23:4c:45:ba:fd:37:73:02:0b:57:1e:5d:b6:d3: 1b:72:75:e3:85:0a:b9:51:f2:75:9f:f2:e2:19:18: 5f:50:d5:a0:3a:a6:0c:7c:3a:69:e9:d8:26:6b:26: b0:73:54:67:ae:34:dd:da:94:5c:44:a5:95:3c:5e: bf:95:3d:23:9e:85:b3:54:65:2f:ea:b3:06:c7:18: 23:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:63:64:44:F1:A1:2F:A3:DA:19:FD:FE:E3:D1:A7:7C:D0:51:36:79 X509v3 Authority Key Identifier: keyid:5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:5f:e6:63:6b:7c:e4:ae:e5:ce:2e:94:7a:8b:f2:bf:72:15: a2:2d:4a:92:a7:f9:d0:77:03:38:e2:2d:91:58:20:48:9b:20: 46:25:b9:75:72:12:7f:10:03:2b:87:13:6b:d4:44:0e:01:bf: bb:da:3d:f1:b8:95:41:df:07:76:15:54:97:44:85:27:12:1c: 3b:ba:cf:5d:10:0b:60:8c:f6:e9:2c:13:f0:d1:ec:89:e8:7e: 0f:b4:a8:d4:23:63:e5:b3:95:84:4a:80:9f:6f:fd:c0:ad:8f: c3:59:34:91:5f:12:9a:ce:dd:54:17:4f:f3:5e:77:4d:94:f0: d2:9c:92:b9:e4:bf:47:38:f7:17:c9:2c:e7:6d:97:37:c5:0e: e2:10:a1:bc:09:52:88:36:09:64:dd:f7:c2:d0:31:1d:c6:74: 6e:63:86:46:d5:b1:74:3b:88:84:96:96:15:ec:5d:6f:0a:1a: b0:fb:12:cd:1e:99:6b:af:b2:46:7b:bd:d9:00:97:b1:84:72: 19:48:4a:04:55:f0:50:ed:94:0a:29:ea:ac:be:41:f8:2f:2a: 90:39:b4:f1:41:2f:9d:8d:59:f2:68:4b:88:df:0a:ad:ea:2e: 7c:de:7c:c0:56:16:ac:f3:90:12:f7:d1:12:a6:63:bd:85:bd: 8b:1e:ea:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCWfguHE5DVj3y84Y0jL7t10OFVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMwODNF MTczRTcxQzAeFw0yNTA3MDEyMjM2MTBaFw0yNTA3MDUwMzQyMTBaMDMxMTAvBgNV BAMTKDRFNjM2NDQ0RjFBMTJGQTNEQTE5RkRGRUUzRDFBNzdDRDA1MTM2NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuqnR/2nP3Kfepu8yNu4dMeNCZ wyOS0X8yu9yNfEdmYXadMTViMdkP8eunzD2/vPsWRCgMN2arOtaPni3Olmyg0IWR R0gLmMVpM3h93yxRevsmGLXKD3iwTj0ZZi/ndjPSviNKs88OeoxlSLpq+bnZdHht LIFWTwcQtl/XVtUQIAj4DOuUmxlXwMUoKJVJeAaGMtdd39LjGlKeFUdxn4pQfmZg VjKx3KYFKJCQd0XFe+9JGHUjTEW6/TdzAgtXHl220xtydeOFCrlR8nWf8uIZGF9Q 1aA6pgx8Omnp2CZrJrBzVGeuNN3alFxEpZU8Xr+VPSOehbNUZS/qswbHGCODAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTmNkRPGhL6PaGf3+49GnfNBRNnkwHwYDVR0j BBgwFoAUXx7AN4x7OokSyjLjgtLAg+Fz5xwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDAyZGFhNS1mYjBjLTRhMjQtOTg4OS0zM2JkNTBkYjRmZTAvMC81RjFFQzAzNzhD N0IzQTg5MTJDQTMyRTM4MkQyQzA4M0UxNzNFNzFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMwODNFMTcz RTcxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQwMmRhYTUtZmIwYy00YTI0LTk4 ODktMzNiZDUwZGI0ZmUwLzAvNUYxRUMwMzc4QzdCM0E4OTEyQ0EzMkUzODJEMkMw ODNFMTczRTcxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMhf5mNrfOSu5c4ulHqL8r9yFaItSpKn+dB3 AzjiLZFYIEibIEYluXVyEn8QAyuHE2vURA4Bv7vaPfG4lUHfB3YVVJdEhScSHDu6 z10QC2CM9uksE/DR7Inofg+0qNQjY+WzlYRKgJ9v/cCtj8NZNJFfEprO3VQXT/Ne d02U8NKckrnkv0c49xfJLOdtlzfFDuIQobwJUog2CWTd98LQMR3GdG5jhkbVsXQ7 iISWlhXsXW8KGrD7Es0emWuvskZ7vdkAl7GEchlISgRV8FDtlAop6qy+QfgvKpA5 tPFBL52NWfJoS4jfCq3qLnzefMBWFqzzkBL30RKmY72FvYse6vs= -----END CERTIFICATE-----Generated at Thu Jul 3 03:44:21 2025 by rpki-client