$ rpki-client -vvf repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft File: 5AE57F3F97F40888F93913350A218863E705CD34.mft (raw, json) Hash identifier: I33+e1Q4OfRKyslZVesWeEQ8TKBWj7LfTVN+qbXqHD8= Subject key identifier: C2:A6:48:6B:46:17:0D:2D:73:0D:6E:9B:D2:89:53:07:A5:3E:CD:36 Authority key identifier: 5A:E5:7F:3F:97:F4:08:88:F9:39:13:35:0A:21:88:63:E7:05:CD:34 Certificate issuer: /CN=5AE57F3F97F40888F93913350A218863E705CD34 Certificate serial: 6B7FF23E02ADA366F632BEBB2367FD3BC6B9F2A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft Manifest number: 0220 Signing time: Mon 30 Jun 2025 01:31:25 +0000 Manifest this update: Mon 30 Jun 2025 01:26:25 +0000 Manifest next update: Thu 03 Jul 2025 07:28:25 +0000 Files and hashes: 1: 3130332e3138332e31312e302f32342d3234203d3e20313339393637.roa (hash: NfTWOpBX5TEsx2AN4GNz4kZXIBLNbd1V2CGYNCmRu/U=) 2: 5AE57F3F97F40888F93913350A218863E705CD34.crl (hash: 6gMVjZiasHrmp/ibitDZ5RP+C4T5sxgKo/jJfuoWyP8=) 3: 3130332e3138332e31302e302f32342d3234203d3e20313339393637.roa (hash: lDreBV2a5k+F2nOzqdVDXyLmxgTFmhT5IbglBwCmDnU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.crl rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 07:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:7f:f2:3e:02:ad:a3:66:f6:32:be:bb:23:67:fd:3b:c6:b9:f2:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AE57F3F97F40888F93913350A218863E705CD34 Validity Not Before: Jun 30 01:26:25 2025 GMT Not After : Jul 3 07:28:25 2025 GMT Subject: CN=C2A6486B46170D2D730D6E9BD2895307A53ECD36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:da:04:8e:d3:75:e1:4a:81:5b:cc:a9:70:5b: 85:11:91:12:ad:b8:4c:59:87:19:67:0c:a1:e4:e2: 06:fd:17:93:00:47:cf:55:a0:18:6e:a9:e7:48:ba: a6:e6:04:c9:1e:61:2a:4e:53:4f:a9:fb:c8:71:cf: 72:f0:c6:d6:14:a8:3b:84:5b:20:39:c0:58:73:5b: aa:37:e9:c5:93:48:c6:82:e9:5e:6d:36:8c:8e:4d: c8:6e:88:42:2e:69:32:80:b0:b9:bc:b9:36:cb:6b: 56:e4:dd:7e:6c:af:74:e0:48:d1:5f:af:f7:dc:09: f3:5a:58:fd:90:e6:9c:e3:ad:b4:5b:df:bc:34:c0: c3:76:fe:db:f2:d5:65:1b:38:58:d8:00:9e:9d:f8: e3:c5:9b:99:86:cc:23:e3:e8:2c:6c:c4:b2:60:00: ec:41:4c:8c:01:ee:c2:d8:c4:41:83:cf:78:14:1a: 45:cb:1f:a6:5e:6b:f1:cb:ac:ff:c1:11:a2:8a:56: 6a:75:21:e3:78:50:0b:57:7b:89:b5:05:71:a0:80: b6:7b:7b:da:ce:61:d1:f3:42:57:9e:10:e1:14:c5: 72:ec:d9:3e:b6:9f:19:03:a3:47:7f:c4:df:28:b2: b0:a8:bc:cb:1d:80:47:c8:32:2f:f6:fa:17:1f:c9: c3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A6:48:6B:46:17:0D:2D:73:0D:6E:9B:D2:89:53:07:A5:3E:CD:36 X509v3 Authority Key Identifier: keyid:5A:E5:7F:3F:97:F4:08:88:F9:39:13:35:0A:21:88:63:E7:05:CD:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:95:5a:b4:72:94:2e:3a:e7:ed:5b:ea:73:b7:5b:48:fe:cd: 61:c5:6f:d2:90:db:5d:5a:d4:88:64:39:b9:a5:35:ef:9b:4e: 14:c3:ff:40:52:8a:29:0d:08:91:b5:66:6d:83:8a:0c:61:49: 65:44:61:f5:23:fb:5c:ee:17:24:e3:b3:a4:d8:83:91:bc:cf: b9:31:a7:98:ab:c5:4a:b2:bc:5c:f2:59:38:f2:30:7b:98:97: 28:29:ac:6e:1c:58:3f:60:23:53:cd:e8:e1:69:de:ee:ff:94: e1:2e:e8:00:c6:f6:b6:d3:29:c7:51:49:87:48:a3:68:6a:57: f3:53:d9:92:32:65:d7:1a:a6:a8:32:ff:a5:ca:ac:00:86:8e: 9a:12:ad:37:32:b9:1c:19:00:20:2f:af:1f:68:2f:b4:b3:cc: b8:95:ee:33:f1:cc:39:c6:38:d8:47:98:ec:08:10:47:24:7e: 63:8e:27:bf:6c:4f:50:68:bc:6b:79:b2:45:4b:0e:08:a1:af: 0d:3c:a7:ea:70:4e:fc:2c:46:16:98:63:c6:d9:03:9a:3d:3a: ac:68:21:e8:d2:a4:f5:32:37:9f:46:bb:9a:55:94:37:cc:41: 2f:5a:fb:c4:88:dc:bd:ac:d1:6b:b9:20:bb:be:30:c6:48:f4: 49:39:d3:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa3/yPgKto2b2Mr67I2f9O8a58qgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4NjNF NzA1Q0QzNDAeFw0yNTA2MzAwMTI2MjVaFw0yNTA3MDMwNzI4MjVaMDMxMTAvBgNV BAMTKEMyQTY0ODZCNDYxNzBEMkQ3MzBENkU5QkQyODk1MzA3QTUzRUNEMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm2gSO03XhSoFbzKlwW4URkRKt uExZhxlnDKHk4gb9F5MAR89VoBhuqedIuqbmBMkeYSpOU0+p+8hxz3LwxtYUqDuE WyA5wFhzW6o36cWTSMaC6V5tNoyOTchuiEIuaTKAsLm8uTbLa1bk3X5sr3TgSNFf r/fcCfNaWP2Q5pzjrbRb37w0wMN2/tvy1WUbOFjYAJ6d+OPFm5mGzCPj6CxsxLJg AOxBTIwB7sLYxEGDz3gUGkXLH6Zea/HLrP/BEaKKVmp1IeN4UAtXe4m1BXGggLZ7 e9rOYdHzQleeEOEUxXLs2T62nxkDo0d/xN8osrCovMsdgEfIMi/2+hcfycNbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwqZIa0YXDS1zDW6b0olTB6U+zTYwHwYDVR0j BBgwFoAUWuV/P5f0CIj5ORM1CiGIY+cFzTQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDhjZGY1YS1iOWE3LTQ0NjktYTY1My1jOWZmMmEwMDM3NzMvMC81QUU1N0YzRjk3 RjQwODg4RjkzOTEzMzUwQTIxODg2M0U3MDVDRDM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4NjNFNzA1 Q0QzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ4Y2RmNWEtYjlhNy00NDY5LWE2 NTMtYzlmZjJhMDAzNzczLzAvNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4 NjNFNzA1Q0QzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALOVWrRylC465+1b6nO3W0j+zWHFb9KQ211a 1IhkObmlNe+bThTD/0BSiikNCJG1Zm2DigxhSWVEYfUj+1zuFyTjs6TYg5G8z7kx p5irxUqyvFzyWTjyMHuYlygprG4cWD9gI1PN6OFp3u7/lOEu6ADG9rbTKcdRSYdI o2hqV/NT2ZIyZdcapqgy/6XKrACGjpoSrTcyuRwZACAvrx9oL7SzzLiV7jPxzDnG ONhHmOwIEEckfmOOJ79sT1BovGt5skVLDgihrw08p+pwTvwsRhaYY8bZA5o9Oqxo IejSpPUyN59Gu5pVlDfMQS9a+8SI3L2s0Wu5ILu+MMZI9Ek50xI= -----END CERTIFICATE-----Generated at Mon Jun 30 07:21:06 2025 by rpki-client