$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft File: 5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft (raw, json) Hash identifier: qUVmxf8LpgNPfVpArR8/OaXzCP4ai/SP0yhjcob4hmI= Subject key identifier: B1:2D:CC:51:D6:93:31:E2:C5:A5:1C:0B:9B:6A:16:56:81:18:4A:18 Authority key identifier: 5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D Certificate issuer: /CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D Certificate serial: 611052E9F95D48F4A8083C9E90152583DAAF2625 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft Manifest number: AF Signing time: Sat 28 Jun 2025 23:41:05 +0000 Manifest this update: Sat 28 Jun 2025 23:36:05 +0000 Manifest next update: Wed 02 Jul 2025 00:39:05 +0000 Files and hashes: 1: 5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl (hash: B+mGu2Lny4kWbIU9dLPV9319ogt04WxdxlhyIF7ytfI=) 2: 3136302e32322e362e302f32332d3233203d3e20313532373936.roa (hash: MlPD1Cp5WkgMa2H7CRUKYw5NrewBHnE4PxE2BVKQlL0=) 3: 3136302e32322e372e302f32342d3234203d3e20313532373936.roa (hash: Se9if4ahUM8UZ9DwPwRriHNSzgliBVi3qv7HNc4T4+A=) 4: 3136302e32322e362e302f32342d3234203d3e20313532373936.roa (hash: lZoAiDIfwdwZRfkj/NcAK+vDJElzUZIJDOrxy0zEGf4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 00:39:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:10:52:e9:f9:5d:48:f4:a8:08:3c:9e:90:15:25:83:da:af:26:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D Validity Not Before: Jun 28 23:36:05 2025 GMT Not After : Jul 2 00:39:05 2025 GMT Subject: CN=B12DCC51D69331E2C5A51C0B9B6A165681184A18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:63:1c:6a:b3:78:d8:fc:12:a9:91:c4:be:b6: a6:d6:64:b0:1a:9a:d8:c5:b8:f7:a3:f0:5c:a6:57: ff:48:1b:77:68:42:cd:38:c7:89:8b:5e:8b:c3:a0: 23:6e:36:b9:d4:1f:fd:64:b4:ce:99:d6:a0:6c:b6: 18:e0:73:96:f2:e5:ca:e3:8d:46:ec:8b:61:9f:6c: 30:bb:e2:2f:fb:41:64:95:64:7f:b7:1b:d5:3c:03: 34:3f:50:9b:b0:1f:f2:91:08:bc:41:e2:36:84:fa: 2e:09:ea:c5:83:74:41:56:ae:24:78:91:06:4f:88: 1a:2a:b9:db:fc:50:ab:84:23:55:c7:f6:59:7c:53: e7:2f:df:60:10:7b:fa:68:0d:1e:4b:2f:42:9c:d0: 5f:0b:b6:25:17:60:3b:20:b9:9f:1e:ef:62:f6:2f: 37:01:45:ad:ff:3d:ee:bd:7d:3a:c6:92:cd:2d:4f: c4:4a:6a:ad:8a:7c:2e:77:d8:d2:74:d1:2c:e7:45: 3b:36:c6:aa:dc:b9:46:6e:0b:b8:23:61:a5:cb:91: 38:f9:e5:6c:cd:c6:0e:06:e2:4e:aa:e8:28:35:61: b2:4b:3d:db:5f:35:2a:7d:01:1e:d4:18:59:c5:b0: b7:bd:22:6c:c7:e8:95:8c:75:ea:d6:3e:1a:40:d2: bf:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:2D:CC:51:D6:93:31:E2:C5:A5:1C:0B:9B:6A:16:56:81:18:4A:18 X509v3 Authority Key Identifier: keyid:5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:ff:01:04:fa:e4:1f:e4:44:ef:61:50:17:36:7d:a7:37:ad: 90:84:24:2a:51:ed:5a:89:c5:b3:1b:a8:41:32:df:63:bd:37: d0:dd:63:46:18:2b:d7:2b:5f:c0:d4:95:e8:5f:6e:4e:a3:40: 9f:bc:60:1a:25:c3:c1:a4:d7:10:20:d4:2f:bc:73:4a:8a:ed: b7:f8:00:f4:d2:9e:53:57:76:91:db:6a:77:26:35:ff:e2:92: 08:51:7d:0c:68:1c:90:6d:04:e8:b8:90:3f:1d:94:25:69:54: 63:51:0f:ae:6b:1d:f2:d4:d0:e6:26:8a:33:56:7e:23:0d:c4: 1e:45:10:32:b6:61:a1:3a:78:4f:50:e2:e1:cc:77:2e:07:68: da:cc:39:3b:4d:3e:b4:5d:e3:9b:02:ec:97:bd:34:46:62:47: c4:7f:47:94:cb:c5:d2:c5:0b:d1:6a:17:c4:28:8c:66:14:42: 67:7f:e8:c8:fb:0d:14:d3:c2:25:28:4a:fc:e3:43:e5:60:3d: c7:66:22:62:25:1e:72:0f:14:d7:c4:07:4d:46:6e:4e:72:c5: 4e:2e:b8:bf:01:9c:d2:59:e8:4a:f5:71:90:17:d3:64:72:8c: 71:02:0f:89:b5:5d:bd:61:e9:43:dd:3d:b5:56:67:d8:a4:cd: b8:5b:75:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYRBS6fldSPSoCDyekBUlg9qvJiUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2MDQy RjBCNkQ3RDAeFw0yNTA2MjgyMzM2MDVaFw0yNTA3MDIwMDM5MDVaMDMxMTAvBgNV BAMTKEIxMkRDQzUxRDY5MzMxRTJDNUE1MUMwQjlCNkExNjU2ODExODRBMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6Yxxqs3jY/BKpkcS+tqbWZLAa mtjFuPej8FymV/9IG3doQs04x4mLXovDoCNuNrnUH/1ktM6Z1qBsthjgc5by5crj jUbsi2GfbDC74i/7QWSVZH+3G9U8AzQ/UJuwH/KRCLxB4jaE+i4J6sWDdEFWriR4 kQZPiBoqudv8UKuEI1XH9ll8U+cv32AQe/poDR5LL0Kc0F8LtiUXYDsguZ8e72L2 LzcBRa3/Pe69fTrGks0tT8RKaq2KfC532NJ00SznRTs2xqrcuUZuC7gjYaXLkTj5 5WzNxg4G4k6q6Cg1YbJLPdtfNSp9AR7UGFnFsLe9ImzH6JWMderWPhpA0r/JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsS3MUdaTMeLFpRwLm2oWVoEYShgwHwYDVR0j BBgwFoAUXjI/nX2oTYVuukjHbps2BC8LbX0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5ODgxNi01YWY5LTQ3ZWYtYjk4OS00MmYyNzMxODQ4YmUvMC81RTMyM0Y5RDdE QTg0RDg1NkVCQTQ4Qzc2RTlCMzYwNDJGMEI2RDdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2MDQyRjBC NkQ3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzAvNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2 MDQyRjBCNkQ3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABX/AQT65B/kRO9hUBc2fac3rZCEJCpR7VqJ xbMbqEEy32O9N9DdY0YYK9crX8DUlehfbk6jQJ+8YBolw8Gk1xAg1C+8c0qK7bf4 APTSnlNXdpHbancmNf/ikghRfQxoHJBtBOi4kD8dlCVpVGNRD65rHfLU0OYmijNW fiMNxB5FEDK2YaE6eE9Q4uHMdy4HaNrMOTtNPrRd45sC7Je9NEZiR8R/R5TLxdLF C9FqF8QojGYUQmd/6Mj7DRTTwiUoSvzjQ+VgPcdmImIlHnIPFNfEB01Gbk5yxU4u uL8BnNJZ6Er1cZAX02RyjHECD4m1Xb1h6UPdPbVWZ9ikzbhbdfc= -----END CERTIFICATE-----Generated at Mon Jun 30 21:06:21 2025 by rpki-client