$ rpki-client -vvf repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft File: 5CC6B0489E576BC0D642B626195A0AA0560DC792.mft (raw, json) Hash identifier: Cdlt4Yhz106yqjKfKlGnOcw3IeAOC7wG9K/ccLCyUOQ= Subject key identifier: 5E:A5:36:88:DC:A9:87:34:8C:F1:E8:47:EB:C3:E6:BA:53:D3:90:9E Authority key identifier: 5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92 Certificate issuer: /CN=5CC6B0489E576BC0D642B626195A0AA0560DC792 Certificate serial: 6D302A910F7C9C356822497B76FA280A209423E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft Manifest number: 018A Signing time: Sat 28 Jun 2025 15:40:35 +0000 Manifest this update: Sat 28 Jun 2025 15:35:35 +0000 Manifest next update: Tue 01 Jul 2025 23:08:35 +0000 Files and hashes: 1: 3130332e3132312e3133362e302f32332d3234203d3e20313335343738.roa (hash: XTHSvGcaRTEV+p1Y+pj9uwCkeA4dOjhqgF5dBEY4xig=) 2: 3130332e3132312e3133382e302f32332d3234203d3e20313335343738.roa (hash: IYSPzv0ipkmDqn5ZyXeN0f328BkzkZ8Pmn6bIzAKtQc=) 3: 5CC6B0489E576BC0D642B626195A0AA0560DC792.crl (hash: DHfux4rcC/YWGsLKrTyNC2xzPx39gOgxGPI55p69zpY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.crl rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 23:08:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:30:2a:91:0f:7c:9c:35:68:22:49:7b:76:fa:28:0a:20:94:23:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CC6B0489E576BC0D642B626195A0AA0560DC792 Validity Not Before: Jun 28 15:35:35 2025 GMT Not After : Jul 1 23:08:35 2025 GMT Subject: CN=5EA53688DCA987348CF1E847EBC3E6BA53D3909E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3b:da:27:e5:49:ea:0e:24:a7:cb:7d:ea:97: e1:39:3b:bb:97:d8:31:15:11:0b:ef:75:19:40:ce: c9:ef:98:c0:d0:1f:69:82:5d:83:90:ab:87:04:6b: 9f:b5:17:75:27:83:2f:2d:67:d1:1f:48:2f:95:61: 39:5f:b2:fc:0e:82:24:ae:fe:6e:01:fa:b8:5d:9f: 81:db:06:43:6f:19:ce:fd:8c:05:4e:d2:30:66:b2: 3b:4e:fb:a8:52:ea:93:61:aa:ed:7b:10:94:77:7b: fa:7c:88:4c:aa:65:10:53:a4:cd:9a:f0:be:cf:49: 6e:29:32:dd:6c:65:cb:19:00:cc:1b:f7:f3:79:11: 94:26:34:c8:eb:5d:2a:90:8e:7c:2d:bd:8c:65:39: e1:68:41:f7:e9:56:e0:82:2b:6c:50:d7:0e:e0:b5: 8c:5e:2a:31:4a:54:e9:9a:1f:23:cd:0c:ff:06:37: 35:29:29:0b:18:9c:d0:73:56:f2:c0:65:72:00:89: 85:1f:45:2d:67:33:53:ac:a7:53:b9:24:20:87:82: 1c:85:68:ba:6b:7b:19:35:04:e5:29:dc:4b:da:72: 83:7f:0c:34:ac:7a:83:2a:d4:be:95:11:62:5c:ac: ea:3d:27:3b:b4:d1:ad:14:3d:b1:d0:7c:ef:14:19: ef:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A5:36:88:DC:A9:87:34:8C:F1:E8:47:EB:C3:E6:BA:53:D3:90:9E X509v3 Authority Key Identifier: keyid:5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:d0:da:4d:be:71:1a:16:df:8e:7d:ec:19:eb:9a:2f:09:db: 3f:5e:fa:6d:59:38:a6:0d:2f:70:28:02:f6:e4:c4:90:a3:63: af:f4:94:ab:9c:70:fb:b2:7d:1c:d7:83:6e:ca:40:53:21:23: 21:57:1e:bb:a3:f0:96:8d:fb:ec:16:41:d3:db:4e:a7:bf:b9: e6:9f:e6:4f:4c:22:47:83:a4:56:62:38:22:21:f4:5c:5c:18: fb:64:e8:3e:21:c5:ff:70:51:68:be:d5:0f:a6:22:d0:6c:bc: ac:23:8f:34:62:ca:f8:7c:0a:02:a6:38:dd:f3:fb:03:2a:45: 0a:7b:78:27:b4:ce:4a:15:4f:22:49:ef:ea:95:af:73:93:8a: 66:fd:b3:0a:97:0d:7f:d0:ff:c7:e1:a0:92:88:24:78:ff:ab: de:65:a8:ed:93:4f:35:4b:59:7e:98:7a:2c:3b:95:79:b7:82: 31:0f:d8:14:cc:a2:0d:d3:a2:c6:93:48:7f:a6:61:91:00:de: 59:60:38:fa:cf:48:dd:ce:9b:d1:3a:86:94:f5:76:17:77:a5: 85:cc:ae:53:72:05:b2:15:3b:13:23:fd:98:1a:02:b7:26:50: eb:58:93:6a:78:1e:d3:29:a6:4a:3e:d0:9d:e3:87:54:a0:43: 42:ea:be:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbTAqkQ98nDVoIkl7dvooCiCUI+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBBQTA1 NjBEQzc5MjAeFw0yNTA2MjgxNTM1MzVaFw0yNTA3MDEyMzA4MzVaMDMxMTAvBgNV BAMTKDVFQTUzNjg4RENBOTg3MzQ4Q0YxRTg0N0VCQzNFNkJBNTNEMzkwOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6O9on5UnqDiSny33ql+E5O7uX 2DEVEQvvdRlAzsnvmMDQH2mCXYOQq4cEa5+1F3Ungy8tZ9EfSC+VYTlfsvwOgiSu /m4B+rhdn4HbBkNvGc79jAVO0jBmsjtO+6hS6pNhqu17EJR3e/p8iEyqZRBTpM2a 8L7PSW4pMt1sZcsZAMwb9/N5EZQmNMjrXSqQjnwtvYxlOeFoQffpVuCCK2xQ1w7g tYxeKjFKVOmaHyPNDP8GNzUpKQsYnNBzVvLAZXIAiYUfRS1nM1Osp1O5JCCHghyF aLprexk1BOUp3EvacoN/DDSseoMq1L6VEWJcrOo9Jzu00a0UPbHQfO8UGe/DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXqU2iNyphzSM8ehH68PmulPTkJ4wHwYDVR0j BBgwFoAUXMawSJ5Xa8DWQrYmGVoKoFYNx5IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjRmYTdiOC01MzAyLTQ5MGItOTJlNC0yN2YyOGM2NjU3NWMvMC81Q0M2QjA0ODlF NTc2QkMwRDY0MkI2MjYxOTVBMEFBMDU2MERDNzkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBBQTA1NjBE Qzc5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY0ZmE3YjgtNTMwMi00OTBiLTky ZTQtMjdmMjhjNjY1NzVjLzAvNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBB QTA1NjBEQzc5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAITQ2k2+cRoW34597Bnrmi8J2z9e+m1ZOKYN L3AoAvbkxJCjY6/0lKuccPuyfRzXg27KQFMhIyFXHruj8JaN++wWQdPbTqe/ueaf 5k9MIkeDpFZiOCIh9FxcGPtk6D4hxf9wUWi+1Q+mItBsvKwjjzRiyvh8CgKmON3z +wMqRQp7eCe0zkoVTyJJ7+qVr3OTimb9swqXDX/Q/8fhoJKIJHj/q95lqO2TTzVL WX6Yeiw7lXm3gjEP2BTMog3TosaTSH+mYZEA3llgOPrPSN3Om9E6hpT1dhd3pYXM rlNyBbIVOxMj/ZgaArcmUOtYk2p4HtMppko+0J3jh1SgQ0Lqvrk= -----END CERTIFICATE-----Generated at Mon Jun 30 13:14:04 2025 by rpki-client