$ rpki-client -vvf repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft File: 5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft (raw, json) Hash identifier: 8gejupFhrijbxlLMde0JQwdf0kmPtn+ANgAj7BSndlk= Subject key identifier: 09:1B:F4:AC:CC:0A:B1:A3:19:5B:9D:50:63:50:BB:8A:27:18:E3:A8 Authority key identifier: 5D:DD:CC:DF:3A:FC:49:2F:6C:C4:87:1D:60:72:A5:AF:A9:73:A0:60 Certificate issuer: /CN=5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060 Certificate serial: 2EFA6F1850624568877FF8DF782F3D6286F4AA9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft Manifest number: 01A7 Signing time: Sat 28 Jun 2025 01:31:24 +0000 Manifest this update: Sat 28 Jun 2025 01:26:24 +0000 Manifest next update: Tue 01 Jul 2025 10:08:24 +0000 Files and hashes: 1: 34392e3135362e35372e302f32342d3234203d3e203535363637.roa (hash: SjmKWLBiEMFhWXiRMo2sqEynUyemXFh8rKM/uEFt5LQ=) 2: 34392e3135362e35362e302f32342d3234203d3e203535363637.roa (hash: nwE4egVuBWgMCKw3YCKh6VmNh2jKygK5nst6ZKFNdIE=) 3: 34392e3135362e36302e302f32342d3234203d3e203535363637.roa (hash: 5nBpHkwL82Gi9NUGyKestOksjx7zZUbyEsgUlUqCAVE=) 4: 34392e3135362e35362e302f32332d3233203d3e203535363637.roa (hash: NbIqv7AUSQMS1xCn0a3rRo2bmONh2GyMw23FeabY33s=) 5: 5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.crl (hash: lhe83hMY9mSJ67DaaoLZhfWD9Q0jIjbf+G7dJBmAiDA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.crl rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 10:08:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:fa:6f:18:50:62:45:68:87:7f:f8:df:78:2f:3d:62:86:f4:aa:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060 Validity Not Before: Jun 28 01:26:24 2025 GMT Not After : Jul 1 10:08:24 2025 GMT Subject: CN=091BF4ACCC0AB1A3195B9D506350BB8A2718E3A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c9:d9:4d:31:32:a2:53:3f:bb:e6:b6:2d:61: 3e:9d:ea:71:34:d3:14:bb:4b:59:95:39:47:b9:67: 6e:e9:cd:61:89:59:76:48:18:6f:85:ed:72:30:0c: 54:63:05:89:93:34:dc:2a:da:ab:a1:bd:3e:2f:aa: 5b:29:22:2c:b7:a9:da:1f:72:30:27:d7:47:83:17: e8:74:fd:e1:bb:e4:be:23:5a:08:38:06:53:4f:18: 6b:70:f2:f7:7b:ee:da:c1:3c:15:83:be:ca:2a:ee: be:46:35:24:1b:91:2f:85:b2:00:59:bd:3d:1e:6e: 70:a0:bd:89:06:d2:86:a4:a5:1c:d5:da:bd:e4:d9: ed:4c:95:66:e5:be:a4:38:ae:ef:10:39:eb:f1:bc: 88:44:23:c6:04:dd:88:e1:a5:4b:c8:3a:8a:b3:01: 5e:2b:21:bf:d3:c7:19:1d:7d:20:bb:2f:6b:3b:1a: 18:b3:75:8a:d7:46:21:90:a5:e0:02:a9:83:15:9a: e6:0f:ff:32:e0:14:d3:b0:12:8a:a7:e1:49:be:71: 2d:5a:69:ae:e9:ab:ca:43:84:63:d3:78:8a:29:b3: 11:20:36:3d:3b:ea:58:77:c5:fe:0a:ad:b3:7b:fe: af:c5:4e:bd:fe:80:b5:8c:92:1c:04:06:ed:e9:25: 7a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:1B:F4:AC:CC:0A:B1:A3:19:5B:9D:50:63:50:BB:8A:27:18:E3:A8 X509v3 Authority Key Identifier: keyid:5D:DD:CC:DF:3A:FC:49:2F:6C:C4:87:1D:60:72:A5:AF:A9:73:A0:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:b3:87:8e:fe:eb:87:cb:4e:ee:be:8e:89:4d:ea:9f:2b:57: 79:91:e5:41:00:7c:32:dc:bb:8a:e8:08:ba:93:c8:41:82:04: 91:3a:29:a2:90:62:24:4a:d9:70:42:fb:9e:09:8a:d8:90:d6: f8:2b:14:ab:29:e3:54:fb:ad:18:ec:b5:e0:45:1a:f3:42:a9: d2:3f:12:03:5c:d7:1b:1e:99:52:74:a3:8d:28:a5:51:a6:9f: 88:a9:14:b2:ed:1a:30:e2:24:7f:65:86:22:aa:85:f7:a4:18: 36:ad:1a:f5:70:ef:45:7c:9b:cb:49:33:91:05:6e:99:7c:bd: 5b:2c:ac:14:c9:66:cc:82:e9:bf:1c:54:57:7f:98:57:33:4b: 63:80:ee:f8:09:cb:26:ab:5d:35:eb:c5:86:cc:0c:11:02:f8: c3:37:98:cf:77:f5:c7:09:77:ee:d3:ae:fe:0d:39:36:fe:97: b9:9d:d3:a5:3f:20:d3:62:80:d5:30:28:1e:7a:00:4c:eb:57: cb:7d:fa:0f:76:ca:ee:6b:74:5c:5e:25:3c:2e:4b:05:1d:8e: e1:28:ad:7f:ac:88:52:31:d6:ec:34:04:d1:59:24:3b:17:d0: ba:e3:18:6f:e2:80:0a:82:be:b9:0d:a0:c5:d8:2c:c5:69:7c: 13:7a:f9:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULvpvGFBiRWiHf/jfeC89Yob0qp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURERENDREYzQUZDNDkyRjZDQzQ4NzFENjA3MkE1QUZB OTczQTA2MDAeFw0yNTA2MjgwMTI2MjRaFw0yNTA3MDExMDA4MjRaMDMxMTAvBgNV BAMTKDA5MUJGNEFDQ0MwQUIxQTMxOTVCOUQ1MDYzNTBCQjhBMjcxOEUzQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ydlNMTKiUz+75rYtYT6d6nE0 0xS7S1mVOUe5Z27pzWGJWXZIGG+F7XIwDFRjBYmTNNwq2quhvT4vqlspIiy3qdof cjAn10eDF+h0/eG75L4jWgg4BlNPGGtw8vd77trBPBWDvsoq7r5GNSQbkS+FsgBZ vT0ebnCgvYkG0oakpRzV2r3k2e1MlWblvqQ4ru8QOevxvIhEI8YE3YjhpUvIOoqz AV4rIb/TxxkdfSC7L2s7GhizdYrXRiGQpeACqYMVmuYP/zLgFNOwEoqn4Um+cS1a aa7pq8pDhGPTeIopsxEgNj076lh3xf4KrbN7/q/FTr3+gLWMkhwEBu3pJXr7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCRv0rMwKsaMZW51QY1C7iicY46gwHwYDVR0j BBgwFoAUXd3M3zr8SS9sxIcdYHKlr6lzoGAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjA2Y2Y1MC1hM2QxLTRjYzktOTI2MC05ODdiMmNhMGM5MjcvMC81REREQ0NERjNB RkM0OTJGNkNDNDg3MUQ2MDcyQTVBRkE5NzNBMDYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNURERENDREYzQUZDNDkyRjZDQzQ4NzFENjA3MkE1QUZBOTcz QTA2MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjIwNmNmNTAtYTNkMS00Y2M5LTky NjAtOTg3YjJjYTBjOTI3LzAvNURERENDREYzQUZDNDkyRjZDQzQ4NzFENjA3MkE1 QUZBOTczQTA2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJOzh47+64fLTu6+jolN6p8rV3mR5UEAfDLc u4roCLqTyEGCBJE6KaKQYiRK2XBC+54JitiQ1vgrFKsp41T7rRjsteBFGvNCqdI/ EgNc1xsemVJ0o40opVGmn4ipFLLtGjDiJH9lhiKqhfekGDatGvVw70V8m8tJM5EF bpl8vVssrBTJZsyC6b8cVFd/mFczS2OA7vgJyyarXTXrxYbMDBEC+MM3mM939ccJ d+7Trv4NOTb+l7md06U/INNigNUwKB56AEzrV8t9+g92yu5rdFxeJTwuSwUdjuEo rX+siFIx1uw0BNFZJDsX0LrjGG/igAqCvrkNoMXYLMVpfBN6+Ss= -----END CERTIFICATE-----Generated at Mon Jun 30 01:09:25 2025 by rpki-client