$ rpki-client -vvf repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft File: 5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft (raw, json) Hash identifier: e+ffi5fdGWt7rUXDsZf2ILHN0RVPDczr0+ohVlZvP6A= Subject key identifier: 4C:F5:35:A6:1A:88:82:17:63:9B:51:67:34:2D:9D:F9:BA:7E:8C:DE Authority key identifier: 5C:55:87:61:8B:4E:1C:1F:4C:EF:C6:99:B0:1F:FC:3C:EC:E3:B6:6C Certificate issuer: /CN=5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C Certificate serial: 4E518FB468CB2B616280C4483E5AA0815BF0E6BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft Manifest number: 01FB Signing time: Tue 01 Jul 2025 00:01:37 +0000 Manifest this update: Mon 30 Jun 2025 23:56:37 +0000 Manifest next update: Fri 04 Jul 2025 08:04:37 +0000 Files and hashes: 1: 3130332e3135372e32352e302f32342d3234203d3e20313431313038.roa (hash: oDfouRUG9Q3gP76+cJluUeYjhwxX116YwTG/X1UiEKo=) 2: 5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl (hash: 4d2LrKZ+DYx7dUBVeTYVvpG+J++xwtAbIPPWZeyJ1kU=) 3: 323030313a6466353a6338303a3a2f34382d3438203d3e20313431313038.roa (hash: X6Rsg1TfWPdkmJNWv+FJnlS7WWkveBK6RzkbYc8aDOc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 08:04:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:51:8f:b4:68:cb:2b:61:62:80:c4:48:3e:5a:a0:81:5b:f0:e6:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C Validity Not Before: Jun 30 23:56:37 2025 GMT Not After : Jul 4 08:04:37 2025 GMT Subject: CN=4CF535A61A888217639B5167342D9DF9BA7E8CDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ab:fa:af:11:3f:6b:11:35:cb:ef:a9:39:70: 36:18:27:b9:49:87:05:1b:1e:f5:56:18:2a:84:f0: 43:a2:da:d6:e3:b6:86:44:0e:02:fb:b0:c6:4c:08: 8b:3e:1f:f2:37:88:1b:24:01:a1:05:cf:12:ff:6a: fc:c5:2c:b2:82:29:6f:80:2f:d5:c0:44:22:78:42: da:62:5b:91:50:e8:5a:49:a4:09:57:0c:de:97:ed: 49:52:c0:ee:14:b6:8e:67:59:9c:23:9b:cc:25:0b: 9d:a2:00:88:36:2d:1e:4f:40:5b:f8:16:eb:1c:4e: f0:0e:16:7d:af:87:73:39:5f:7b:d4:39:50:33:40: 50:79:c4:8f:ec:09:c4:f6:5c:9b:3c:25:30:24:b9: e1:07:69:2a:0c:ff:5e:79:c0:d5:37:5c:fd:c2:5a: e9:ba:14:a5:f1:26:6a:ae:06:d5:e5:1b:a3:65:37: dd:22:e6:62:e3:63:cc:27:67:b8:18:03:f6:ca:81: 04:e5:a5:9f:aa:78:7d:9b:7f:9f:eb:a2:09:28:70: 7a:f6:cf:24:26:47:44:3f:33:f8:64:02:a5:f7:eb: be:3a:b7:7d:73:42:66:f2:6e:7a:b2:0e:b0:8a:d9: 7e:ee:ab:0b:35:71:a2:5f:d7:92:82:91:35:c4:31: 8b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F5:35:A6:1A:88:82:17:63:9B:51:67:34:2D:9D:F9:BA:7E:8C:DE X509v3 Authority Key Identifier: keyid:5C:55:87:61:8B:4E:1C:1F:4C:EF:C6:99:B0:1F:FC:3C:EC:E3:B6:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:f0:38:55:b5:37:fb:f3:c2:ea:39:9b:ab:fb:c7:c4:a5:09: 06:29:c4:30:35:1c:5c:dd:9e:93:98:10:94:4f:1f:30:7d:5b: 26:0d:19:ef:39:90:22:04:a5:0a:c9:fa:9a:d6:99:2d:e8:93: 4e:ed:46:1e:7a:b4:fb:96:4c:1a:dc:0d:2c:bd:69:05:50:ed: 35:5f:bf:f8:02:04:50:06:3f:f3:76:3a:2c:ac:03:2a:c7:03: 3a:d2:f9:df:91:58:8e:1d:42:5a:6e:fb:bb:e6:8b:f0:11:7d: 10:ad:3f:5b:64:84:c1:31:7b:2b:c7:10:54:ee:39:d1:aa:74: 2d:2c:5d:15:e0:cd:70:a6:db:5e:98:99:8f:c9:88:1c:19:49: 98:ec:37:2e:ce:80:62:79:27:cb:73:1b:0e:e4:f3:74:aa:64: ab:42:bf:17:3a:03:c2:ce:ec:17:d2:3e:d9:c2:25:1f:24:3b: f7:89:98:1d:2b:35:08:26:26:bc:ed:f4:90:1d:90:60:5f:34: 7c:ba:97:0b:83:9c:dc:6e:ca:f2:55:61:10:94:08:4a:23:6a: 67:fd:a3:d8:56:94:a1:03:64:27:da:34:a4:85:77:91:79:49: 53:dc:02:47:6d:2a:11:8a:d2:fe:c2:03:7c:c1:5d:a8:73:2d: c1:c0:56:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTlGPtGjLK2FigMRIPlqggVvw5rswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZDM0NF Q0UzQjY2QzAeFw0yNTA2MzAyMzU2MzdaFw0yNTA3MDQwODA0MzdaMDMxMTAvBgNV BAMTKDRDRjUzNUE2MUE4ODgyMTc2MzlCNTE2NzM0MkQ5REY5QkE3RThDREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwq/qvET9rETXL76k5cDYYJ7lJ hwUbHvVWGCqE8EOi2tbjtoZEDgL7sMZMCIs+H/I3iBskAaEFzxL/avzFLLKCKW+A L9XARCJ4QtpiW5FQ6FpJpAlXDN6X7UlSwO4Uto5nWZwjm8wlC52iAIg2LR5PQFv4 FuscTvAOFn2vh3M5X3vUOVAzQFB5xI/sCcT2XJs8JTAkueEHaSoM/155wNU3XP3C Wum6FKXxJmquBtXlG6NlN90i5mLjY8wnZ7gYA/bKgQTlpZ+qeH2bf5/rogkocHr2 zyQmR0Q/M/hkAqX36746t31zQmbybnqyDrCK2X7uqws1caJf15KCkTXEMYuJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTPU1phqIghdjm1FnNC2d+bp+jN4wHwYDVR0j BBgwFoAUXFWHYYtOHB9M78aZsB/8POzjtmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDFiNzlhYy0zMzUxLTQ3MDUtOGMzZC02MDJhZGNkNzliYjcvMC81QzU1ODc2MThC NEUxQzFGNENFRkM2OTlCMDFGRkMzQ0VDRTNCNjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZDM0NFQ0Uz QjY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODAxYjc5YWMtMzM1MS00NzA1LThj M2QtNjAyYWRjZDc5YmI3LzAvNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZD M0NFQ0UzQjY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD7wOFW1N/vzwuo5m6v7x8SlCQYpxDA1HFzd npOYEJRPHzB9WyYNGe85kCIEpQrJ+prWmS3ok07tRh56tPuWTBrcDSy9aQVQ7TVf v/gCBFAGP/N2OiysAyrHAzrS+d+RWI4dQlpu+7vmi/ARfRCtP1tkhMExeyvHEFTu OdGqdC0sXRXgzXCm216YmY/JiBwZSZjsNy7OgGJ5J8tzGw7k83SqZKtCvxc6A8LO 7BfSPtnCJR8kO/eJmB0rNQgmJrzt9JAdkGBfNHy6lwuDnNxuyvJVYRCUCEojamf9 o9hWlKEDZCfaNKSFd5F5SVPcAkdtKhGK0v7CA3zBXahzLcHAVlI= -----END CERTIFICATE-----Generated at Tue Jul 1 14:01:11 2025 by rpki-client