$ rpki-client -vvf repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft File: 5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft (raw, json) Hash identifier: Y1vV39lYAFzlI41so3FdIdto3KFp8+65XZkmdat4HcA= Subject key identifier: 84:B4:0B:3E:A1:E8:C0:65:68:43:F4:2D:D0:F9:29:2C:5B:4F:0E:44 Authority key identifier: 5E:68:3D:8B:34:5B:B6:E0:F6:3C:D1:A8:F3:2C:3B:5E:CC:B2:B9:B0 Certificate issuer: /CN=5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0 Certificate serial: 706C5D23B9D9BA413507AFE44CF3532A27D1DC27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft Manifest number: 045A Signing time: Fri 27 Jun 2025 16:40:53 +0000 Manifest this update: Fri 27 Jun 2025 16:35:53 +0000 Manifest next update: Mon 30 Jun 2025 19:46:53 +0000 Files and hashes: 1: 5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl (hash: rpVhWgH6haRRquU2eLf3WKUYguY+LgNrmh5/51bq60c=) 2: 3130332e3135362e3231362e302f32342d3234203d3e203538333639.roa (hash: XGzaH0iWdCy5zsUnP4rW+qurcQNiJokFY8tcDg0B9Wg=) 3: 3130332e3135362e3231372e302f32342d3234203d3e203538333639.roa (hash: BvednQirMsdE9Wqe4ixR538inDj4noipljhyRht7q1c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 19:46:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:6c:5d:23:b9:d9:ba:41:35:07:af:e4:4c:f3:53:2a:27:d1:dc:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0 Validity Not Before: Jun 27 16:35:53 2025 GMT Not After : Jun 30 19:46:53 2025 GMT Subject: CN=84B40B3EA1E8C0656843F42DD0F9292C5B4F0E44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fb:17:cd:84:d4:a2:6c:75:2e:f9:dc:26:a8: 37:3e:64:e0:14:51:b7:cc:92:74:d5:60:ee:1d:d1: 05:9b:26:60:86:90:d1:f0:e7:38:72:70:60:92:05: 65:93:a9:33:aa:ef:b4:2b:37:2f:19:28:1f:4b:e6: 59:19:52:07:24:ad:5d:61:30:4c:15:93:94:3d:19: 68:a2:1c:eb:71:53:63:4c:de:b0:c7:7f:6c:cb:1a: 09:d8:b4:1d:74:f7:4a:ed:b5:60:07:80:ea:d3:76: 89:0d:55:d2:60:ad:06:f9:94:f7:da:dc:c3:96:c4: 2c:36:95:7c:3e:11:9f:1f:dc:26:12:20:12:dd:6f: e2:f3:cc:e3:57:4e:31:7d:a3:60:f6:c0:60:1e:a0: fd:82:fe:53:a7:9c:f7:bb:84:87:d6:2f:2e:d1:2c: 4e:2f:d4:29:89:9c:f6:5c:f2:54:cf:59:ce:5d:cd: c5:ea:86:e5:4b:a6:01:1c:0d:ea:cb:68:4a:00:d8: 1b:74:35:ee:4a:22:b5:3a:5b:a7:c2:13:37:e0:45: bc:e2:3d:b8:51:2f:10:33:a4:fd:81:00:48:4f:c1: 89:3c:e4:e0:ce:1e:80:77:59:23:43:7a:ce:35:e3: cf:0b:4d:9e:0f:79:c5:75:84:b5:15:31:d7:62:0e: 05:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B4:0B:3E:A1:E8:C0:65:68:43:F4:2D:D0:F9:29:2C:5B:4F:0E:44 X509v3 Authority Key Identifier: keyid:5E:68:3D:8B:34:5B:B6:E0:F6:3C:D1:A8:F3:2C:3B:5E:CC:B2:B9:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:1b:52:f1:5d:0d:5a:18:89:a3:19:f4:b1:91:02:30:cd:22: de:67:8a:4c:3b:73:88:f3:8b:64:21:3a:be:b8:ce:40:c8:14: 3e:1f:8c:2e:5d:e3:0d:f3:1f:32:02:4e:de:11:b8:f8:49:b8: 83:73:80:57:3a:3a:3c:4b:54:9b:4d:c5:4b:b7:56:ee:7c:c7: b3:88:11:c5:6a:a9:50:8e:7a:79:60:90:20:fc:07:af:ef:c6: 97:0f:e2:d1:2e:e9:92:05:67:83:87:e9:53:24:ce:38:e2:b3: 8b:be:8a:a8:6e:c9:8d:7d:4c:02:be:20:e1:49:b8:9c:77:9d: d3:4c:f0:67:90:af:3c:fb:64:6d:0b:0e:cb:c5:17:b3:94:c0: 35:83:94:db:e9:6e:ef:f9:f7:7b:a7:7d:f0:d8:cf:a7:08:26: 10:42:1d:e0:0c:eb:31:e3:f1:74:ac:95:9e:47:98:69:a8:37: 54:64:50:01:e9:67:ed:ad:63:51:78:72:c6:94:94:bd:4d:b1: 48:27:7e:6e:3d:e8:69:90:96:eb:e4:6e:d8:76:61:67:92:ec: 4a:10:46:38:9e:52:5e:50:b7:0b:2b:39:56:df:62:c3:66:99: 05:96:bd:0f:3f:2d:39:c6:bf:bc:3a:29:bd:05:4a:87:8d:f6: a6:91:b7:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcGxdI7nZukE1B6/kTPNTKifR3CcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU2ODNEOEIzNDVCQjZFMEY2M0NEMUE4RjMyQzNCNUVD Q0IyQjlCMDAeFw0yNTA2MjcxNjM1NTNaFw0yNTA2MzAxOTQ2NTNaMDMxMTAvBgNV BAMTKDg0QjQwQjNFQTFFOEMwNjU2ODQzRjQyREQwRjkyOTJDNUI0RjBFNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB+xfNhNSibHUu+dwmqDc+ZOAU UbfMknTVYO4d0QWbJmCGkNHw5zhycGCSBWWTqTOq77QrNy8ZKB9L5lkZUgckrV1h MEwVk5Q9GWiiHOtxU2NM3rDHf2zLGgnYtB1090rttWAHgOrTdokNVdJgrQb5lPfa 3MOWxCw2lXw+EZ8f3CYSIBLdb+LzzONXTjF9o2D2wGAeoP2C/lOnnPe7hIfWLy7R LE4v1CmJnPZc8lTPWc5dzcXqhuVLpgEcDerLaEoA2Bt0Ne5KIrU6W6fCEzfgRbzi PbhRLxAzpP2BAEhPwYk85ODOHoB3WSNDes41488LTZ4PecV1hLUVMddiDgV7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhLQLPqHowGVoQ/Qt0PkpLFtPDkQwHwYDVR0j BBgwFoAUXmg9izRbtuD2PNGo8yw7XsyyubAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 M2E3ZjM0Yy02M2I4LTQ5NzMtODIyNi1lMTA2OTViMjVkOTQvMC81RTY4M0Q4QjM0 NUJCNkUwRjYzQ0QxQThGMzJDM0I1RUNDQjJCOUIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUU2ODNEOEIzNDVCQjZFMEY2M0NEMUE4RjMyQzNCNUVDQ0Iy QjlCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTNhN2YzNGMtNjNiOC00OTczLTgy MjYtZTEwNjk1YjI1ZDk0LzAvNUU2ODNEOEIzNDVCQjZFMEY2M0NEMUE4RjMyQzNC NUVDQ0IyQjlCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAkbUvFdDVoYiaMZ9LGRAjDNIt5nikw7c4jz i2QhOr64zkDIFD4fjC5d4w3zHzICTt4RuPhJuINzgFc6OjxLVJtNxUu3Vu58x7OI EcVqqVCOenlgkCD8B6/vxpcP4tEu6ZIFZ4OH6VMkzjjis4u+iqhuyY19TAK+IOFJ uJx3ndNM8GeQrzz7ZG0LDsvFF7OUwDWDlNvpbu/593unffDYz6cIJhBCHeAM6zHj 8XSslZ5HmGmoN1RkUAHpZ+2tY1F4csaUlL1NsUgnfm496GmQluvkbth2YWeS7EoQ RjieUl5QtwsrOVbfYsNmmQWWvQ8/LTnGv7w6Kb0FSoeN9qaRt5Q= -----END CERTIFICATE-----Generated at Sun Jun 29 18:49:48 2025 by rpki-client