$ rpki-client -vvf repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft File: 5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft (raw, json) Hash identifier: zfGPuHxux3mQ3FfHOEWHm5/9+NYN/Fi/4v8metsTdZw= Subject key identifier: 7C:C7:D8:FD:55:9C:39:FB:0F:6F:8B:7E:45:5D:6A:EC:2F:80:EF:EF Authority key identifier: 5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B Certificate issuer: /CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B Certificate serial: 3AAB3BBDF3546DB04246319AF0AC9879636339E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft Manifest number: 0212 Signing time: Sun 29 Jun 2025 15:12:16 +0000 Manifest this update: Sun 29 Jun 2025 15:07:16 +0000 Manifest next update: Thu 03 Jul 2025 01:28:16 +0000 Files and hashes: 1: 3130332e3138342e31382e302f32342d3234203d3e20313439363735.roa (hash: 4BUtx10alv/ZZ9FJolZJ3I8WhlB5v1F5iKW6alQrr7c=) 2: 3130332e3138342e31392e302f32342d3234203d3e203438343635.roa (hash: QzihEc5MkFa7NqybYwRpohd7XvTO9rPruJzvUalzVM8=) 3: 3130332e3138342e31382e302f32342d3234203d3e203438343635.roa (hash: 0IGopCvXSRXbCg3kz6wjCn1/1Kczl4zkhji2/R4GIz4=) 4: 3130332e3138342e31382e302f32332d3233203d3e20313439363735.roa (hash: 8hPXkuW34xkK66/r5oL+jYYUmOueTjKMrZh36goENDw=) 5: 3130332e3138342e31392e302f32342d3234203d3e20313439363735.roa (hash: i4XCxm32VCNZ/zacmmSjbAzxATWwcS43fZzejb3pvRo=) 6: 5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl (hash: Vt4GX0ntinb0gQwpnWTyxnsnrmmIeLdbswanhpr8kOQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ab:3b:bd:f3:54:6d:b0:42:46:31:9a:f0:ac:98:79:63:63:39:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B Validity Not Before: Jun 29 15:07:16 2025 GMT Not After : Jul 3 01:28:16 2025 GMT Subject: CN=7CC7D8FD559C39FB0F6F8B7E455D6AEC2F80EFEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e0:c5:5c:fc:c8:15:b2:b4:0b:93:3b:47:c6: 36:61:48:1b:3d:20:74:3c:15:de:26:98:eb:03:bb: 58:29:ee:6c:ce:4b:95:d0:b4:da:1e:48:99:c1:47: f2:e4:24:27:e5:10:b7:0f:40:c6:b9:1d:80:40:4e: ff:87:6f:93:5f:ca:05:29:97:98:d4:7f:6d:14:87: f9:48:5d:3d:55:25:af:cb:34:bd:e1:a0:ae:30:2e: ae:1c:25:57:8c:7e:ab:52:c7:1b:a8:d0:0e:d8:de: 24:fc:20:9b:8c:88:d3:4b:e6:7d:8e:1f:0e:3e:f9: e0:15:17:56:15:3e:09:59:51:80:f7:13:71:42:94: 1d:e5:30:f6:1a:63:c9:bb:da:ff:0b:ca:36:93:95: c5:db:73:49:03:f1:ca:20:ec:01:01:f2:50:b6:60: 39:41:d4:db:ea:1d:af:01:c3:26:3f:11:ad:9a:0a: 27:27:2f:42:7f:28:76:73:1d:47:c9:b6:df:fd:b8: 75:15:ff:23:eb:9e:ba:69:38:f0:db:42:36:d5:d7: 07:f0:44:ac:d3:7f:99:00:bb:43:1d:7c:2c:fb:e3: 7a:e1:fc:d5:46:dc:f6:25:2a:2b:63:ca:16:84:5e: d6:b6:c8:a2:c8:dd:0c:c9:cf:b2:71:76:ae:40:d2: 61:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C7:D8:FD:55:9C:39:FB:0F:6F:8B:7E:45:5D:6A:EC:2F:80:EF:EF X509v3 Authority Key Identifier: keyid:5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:5d:66:99:9b:3f:db:d1:2e:9c:82:e2:06:22:37:18:43:e1: 76:67:e7:e4:fe:ff:cd:6f:d4:44:cf:13:a5:93:40:d0:82:61: 72:ed:c0:16:ea:12:b6:4b:f3:53:09:75:cc:55:81:cf:e9:81: c8:7f:7c:94:76:2e:5a:63:c9:ff:ba:91:b5:63:95:f1:e6:30: 43:8c:60:c8:a6:53:23:86:af:16:c8:c6:1d:01:59:c3:6d:28: e7:76:88:f3:4f:d6:75:69:44:eb:2d:3c:af:66:28:0e:d0:26: f8:5e:46:bf:91:9b:79:9f:f8:72:6a:ab:74:ec:48:3a:52:96: 39:1f:4a:f0:5f:a4:42:91:f1:4a:93:fa:4e:d7:61:75:4b:a9: ee:d4:24:c5:1c:2c:42:c5:e1:ad:9e:17:7f:34:48:d5:40:55: 49:4f:ad:c4:7c:44:9c:c4:15:52:a3:80:b4:ae:8d:89:2d:69: 33:d4:47:0a:52:e0:10:40:aa:29:79:65:69:e1:2f:e6:3f:c3: 3f:74:70:a8:52:03:fa:c3:1c:de:56:89:cc:5f:da:b5:22:e3: e9:58:d3:fe:0f:6f:da:7a:f1:b0:1d:80:17:79:c7:2e:96:01: 50:f5:01:72:b0:6b:80:4a:87:05:be:61:74:0f:b2:58:af:05: 47:10:d6:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOqs7vfNUbbBCRjGa8KyYeWNjOeUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIyMkY5 MDg5NTUyQjAeFw0yNTA2MjkxNTA3MTZaFw0yNTA3MDMwMTI4MTZaMDMxMTAvBgNV BAMTKDdDQzdEOEZENTU5QzM5RkIwRjZGOEI3RTQ1NUQ2QUVDMkY4MEVGRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ4MVc/MgVsrQLkztHxjZhSBs9 IHQ8Fd4mmOsDu1gp7mzOS5XQtNoeSJnBR/LkJCflELcPQMa5HYBATv+Hb5NfygUp l5jUf20Uh/lIXT1VJa/LNL3hoK4wLq4cJVeMfqtSxxuo0A7Y3iT8IJuMiNNL5n2O Hw4++eAVF1YVPglZUYD3E3FClB3lMPYaY8m72v8LyjaTlcXbc0kD8cog7AEB8lC2 YDlB1NvqHa8BwyY/Ea2aCicnL0J/KHZzHUfJtt/9uHUV/yPrnrppOPDbQjbV1wfw RKzTf5kAu0MdfCz743rh/NVG3PYlKitjyhaEXta2yKLI3QzJz7Jxdq5A0mG9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfMfY/VWcOfsPb4t+RV1q7C+A7+8wHwYDVR0j BBgwFoAUWkD9GeLdU4DLblAvFtsiL5CJVSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MGQ5MTRlZi0wYjFmLTQ5MGItODA4ZC1hMjdiODNmZjlhM2UvMC81QTQwRkQxOUUy REQ1MzgwQ0I2RTUwMkYxNkRCMjIyRjkwODk1NTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIyMkY5MDg5 NTUyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjBkOTE0ZWYtMGIxZi00OTBiLTgw OGQtYTI3YjgzZmY5YTNlLzAvNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIy MkY5MDg5NTUyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIxdZpmbP9vRLpyC4gYiNxhD4XZn5+T+/81v 1ETPE6WTQNCCYXLtwBbqErZL81MJdcxVgc/pgch/fJR2Llpjyf+6kbVjlfHmMEOM YMimUyOGrxbIxh0BWcNtKOd2iPNP1nVpROstPK9mKA7QJvheRr+Rm3mf+HJqq3Ts SDpSljkfSvBfpEKR8UqT+k7XYXVLqe7UJMUcLELF4a2eF380SNVAVUlPrcR8RJzE FVKjgLSujYktaTPURwpS4BBAqil5ZWnhL+Y/wz90cKhSA/rDHN5Wicxf2rUi4+lY 0/4Pb9p68bAdgBd5xy6WAVD1AXKwa4BKhwW+YXQPslivBUcQ1ls= -----END CERTIFICATE-----Generated at Sun Jun 29 18:16:01 2025 by rpki-client