$ rpki-client -vvf repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft File: 5E8D1116F8C66182B65521C899B56E89DDB84C57.mft (raw, json) Hash identifier: h3OZ+s6foj0QNuWJx+AxGQASIZ5lK1sTJnQeN+uDBhU= Subject key identifier: C0:45:19:EF:4E:5B:76:EC:0F:8C:2B:2E:A1:9F:3F:FE:64:5E:9D:11 Authority key identifier: 5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 Certificate issuer: /CN=5E8D1116F8C66182B65521C899B56E89DDB84C57 Certificate serial: 2574E9787D963A4A18A73165E2FB75989C195815 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft Manifest number: 04A0 Signing time: Sat 28 Jun 2025 18:10:44 +0000 Manifest this update: Sat 28 Jun 2025 18:05:44 +0000 Manifest next update: Wed 02 Jul 2025 03:44:44 +0000 Files and hashes: 1: 5E8D1116F8C66182B65521C899B56E89DDB84C57.crl (hash: gcqiwQ0NFpb/14trMNZdwXrSww839AxICZ6Dctap0mw=) 2: 3230332e3230312e35302e302f32332d3234203d3e203138313033.roa (hash: BaobXEBDNKVOXPWnASBzuf34gx57Iel2oiiy9v7fdcA=) 3: 3130332e32332e3234302e302f32322d3234203d3e203138313033.roa (hash: etHPTVvqoe6GM4pkSxe9oMH07ZX+2TEP2H+GUDlt63w=) 4: 3230332e3132382e36342e302f31392d3234203d3e203138313033.roa (hash: cImzaCQgH/xKELxeX3ckgK5atsohpplgUl+3u43iFdY=) 5: 34332e3234382e32342e302f32322d3234203d3e203138313033.roa (hash: jjxXOD8YTfHReiK4AK2nOIQXP4l8k6sM7XR6RmO9gn0=) 6: 3130332e31302e39362e302f32322d3234203d3e203138313033.roa (hash: fvggVkKI1Umb3Jdh64URgb1j9L9KJzqzQQjlbZZXATA=) 7: 323430313a316230303a3a2f33322d3438203d3e203138313033.roa (hash: w+rn3hr3SMqGHiqqz9FiRvR/Sg9nolhzcrhUpRbqWiI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.crl rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 03:44:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:74:e9:78:7d:96:3a:4a:18:a7:31:65:e2:fb:75:98:9c:19:58:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E8D1116F8C66182B65521C899B56E89DDB84C57 Validity Not Before: Jun 28 18:05:44 2025 GMT Not After : Jul 2 03:44:44 2025 GMT Subject: CN=C04519EF4E5B76EC0F8C2B2EA19F3FFE645E9D11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c7:4c:da:51:59:96:73:6d:7b:aa:4d:02:39: c6:b4:38:9d:f4:02:71:84:f7:46:8d:b1:5e:9a:e6: e8:07:93:88:72:81:3b:7b:0a:c1:f4:f8:1f:42:08: 58:df:3d:68:e0:e1:e6:cd:00:3b:04:c4:6c:14:40: 43:75:1a:04:00:e4:cf:8c:d9:1c:6b:03:d9:33:9a: 1a:f6:db:c4:83:77:ef:a7:bf:79:b2:e9:a7:19:21: 7d:c7:10:f9:ff:7e:98:78:7d:c0:46:b2:e2:3d:6f: 53:7e:5d:44:16:f6:be:c9:27:8b:54:4e:ba:0f:2a: 7f:42:aa:33:4b:9f:3b:2d:8d:68:0e:a6:df:6f:40: 78:3b:81:c3:dd:dc:63:4e:ef:23:39:37:35:14:54: 7d:23:a9:01:ec:4b:57:72:81:f2:dd:15:84:06:77: 15:4e:13:48:43:ca:55:da:d2:53:bf:21:9d:ca:65: 36:96:13:fb:9c:b8:bf:58:b0:88:e4:36:88:31:06: af:4a:53:7a:6c:04:93:7c:72:44:cb:19:75:a9:7a: ef:cd:79:9f:69:73:88:4a:cc:6c:c9:5a:63:05:c4: 4f:5f:62:5e:d8:d1:33:e8:eb:29:9b:f4:b9:10:5c: fd:68:08:1f:2f:ea:d9:46:2a:d6:e0:ae:79:eb:36: 3e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:45:19:EF:4E:5B:76:EC:0F:8C:2B:2E:A1:9F:3F:FE:64:5E:9D:11 X509v3 Authority Key Identifier: keyid:5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:3b:71:29:9b:d4:79:57:19:96:88:0b:6e:20:7e:5c:ac:11: 97:dd:c5:f7:89:48:22:96:4b:0a:57:aa:99:30:1f:ba:90:6d: da:6c:8d:4f:63:56:41:9b:bf:52:a7:a9:3e:be:bf:08:56:98: 95:0d:a3:e7:3c:65:26:a9:06:72:10:aa:54:8d:65:aa:a8:45: 56:f6:77:17:b5:e2:39:f6:cd:ba:86:d2:9a:78:e2:9c:af:75: 44:d1:18:b0:f8:7e:c1:36:a6:5f:39:3b:3a:98:f2:9a:ec:d4: 87:f6:b1:f1:37:57:c8:9c:8d:ba:b1:a3:58:42:9d:63:4b:e4: 75:bf:37:67:43:b3:9e:95:ed:2e:19:d5:7c:57:da:ae:42:f3: f9:8b:3a:3a:fb:5c:ae:f5:07:24:d3:e5:f5:cd:24:71:f5:27: 85:fc:d8:8a:c3:d1:4c:a2:de:ac:44:e0:04:f7:e0:d8:88:e0: 23:5f:66:bf:97:39:a4:bb:9d:ed:36:9f:d3:bb:df:71:f3:a5: 7f:15:38:a7:a4:ce:37:ff:61:ea:21:e8:ac:12:05:d8:a8:a4: c0:a1:96:9c:e7:5b:1f:ae:a1:0c:6a:01:54:3f:43:55:7a:c6: 17:db:4e:4b:98:86:b2:99:26:d5:09:b3:f2:0e:3a:24:15:bd: c4:c6:16:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJXTpeH2WOkoYpzFl4vt1mJwZWBUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZFODlE REI4NEM1NzAeFw0yNTA2MjgxODA1NDRaFw0yNTA3MDIwMzQ0NDRaMDMxMTAvBgNV BAMTKEMwNDUxOUVGNEU1Qjc2RUMwRjhDMkIyRUExOUYzRkZFNjQ1RTlEMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLx0zaUVmWc217qk0COca0OJ30 AnGE90aNsV6a5ugHk4hygTt7CsH0+B9CCFjfPWjg4ebNADsExGwUQEN1GgQA5M+M 2RxrA9kzmhr228SDd++nv3my6acZIX3HEPn/fph4fcBGsuI9b1N+XUQW9r7JJ4tU TroPKn9CqjNLnzstjWgOpt9vQHg7gcPd3GNO7yM5NzUUVH0jqQHsS1dygfLdFYQG dxVOE0hDylXa0lO/IZ3KZTaWE/ucuL9YsIjkNogxBq9KU3psBJN8ckTLGXWpeu/N eZ9pc4hKzGzJWmMFxE9fYl7Y0TPo6ymb9LkQXP1oCB8v6tlGKtbgrnnrNj6zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwEUZ705bduwPjCsuoZ8//mRenREwHwYDVR0j BBgwFoAUXo0RFvjGYYK2VSHImbVuid24TFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTk5YzFhZi1kOWM3LTRmZmQtYmEwMy1hM2UxY2RkOGFlZTAvMC81RThEMTExNkY4 QzY2MTgyQjY1NTIxQzg5OUI1NkU4OUREQjg0QzU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZFODlEREI4 NEM1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjE5OWMxYWYtZDljNy00ZmZkLWJh MDMtYTNlMWNkZDhhZWUwLzAvNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZF ODlEREI4NEM1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIc7cSmb1HlXGZaIC24gflysEZfdxfeJSCKW SwpXqpkwH7qQbdpsjU9jVkGbv1KnqT6+vwhWmJUNo+c8ZSapBnIQqlSNZaqoRVb2 dxe14jn2zbqG0pp44pyvdUTRGLD4fsE2pl85OzqY8prs1If2sfE3V8icjbqxo1hC nWNL5HW/N2dDs56V7S4Z1XxX2q5C8/mLOjr7XK71ByTT5fXNJHH1J4X82IrD0Uyi 3qxE4AT34NiI4CNfZr+XOaS7ne02n9O733HzpX8VOKekzjf/Yeoh6KwSBdiopMCh lpznWx+uoQxqAVQ/Q1V6xhfbTkuYhrKZJtUJs/IOOiQVvcTGFgI= -----END CERTIFICATE-----Generated at Sun Jun 29 18:49:02 2025 by rpki-client