$ rpki-client -vvf repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft File: C5247B1CF64591B1DB27280B439B507E56BF0232.mft (raw, json) Hash identifier: iyiVjwuEzZD/Nep8HMRh/A9kC0Hmd3UEf8KOpJOE0lI= Subject key identifier: 5C:16:FA:50:5C:08:9C:AF:45:4D:F8:FB:7E:50:6E:D9:5F:84:3B:92 Authority key identifier: C5:24:7B:1C:F6:45:91:B1:DB:27:28:0B:43:9B:50:7E:56:BF:02:32 Certificate issuer: /CN=C5247B1CF64591B1DB27280B439B507E56BF0232 Certificate serial: 355AA76BA4E8819E71B9237AC4FFBAEC219F149A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5247B1CF64591B1DB27280B439B507E56BF0232.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft Manifest number: 042F Signing time: Mon 30 Jun 2025 07:01:15 +0000 Manifest this update: Mon 30 Jun 2025 06:56:15 +0000 Manifest next update: Thu 03 Jul 2025 07:11:15 +0000 Files and hashes: 1: C5247B1CF64591B1DB27280B439B507E56BF0232.crl (hash: PFHZo+4R2+NpPJzuFDwA1pyDVqwe/TRn6FktbEUrBs4=) 2: 3230332e38312e3138342e302f32312d3234203d3e203234353338.roa (hash: MMjEYaklE81WaDCrUueGQmjdNC6x98nzJuWl2kfKoDE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.crl rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5247B1CF64591B1DB27280B439B507E56BF0232.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 07:11:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:5a:a7:6b:a4:e8:81:9e:71:b9:23:7a:c4:ff:ba:ec:21:9f:14:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5247B1CF64591B1DB27280B439B507E56BF0232 Validity Not Before: Jun 30 06:56:15 2025 GMT Not After : Jul 3 07:11:15 2025 GMT Subject: CN=5C16FA505C089CAF454DF8FB7E506ED95F843B92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3a:a3:91:41:53:f6:ba:1b:41:a5:24:cd:5c: 26:bb:c1:af:66:76:cd:6b:71:d2:c1:65:4e:c4:16: c8:39:d9:58:40:90:ed:a7:a9:e4:74:7a:aa:d1:d6: 45:4c:81:eb:26:5a:fc:38:46:b9:4a:bf:40:ca:6d: 8f:d4:8f:94:c0:34:ed:0d:05:2e:e4:16:0b:69:64: d6:19:bf:88:cc:15:25:be:93:e3:4a:36:b4:32:29: 61:8b:26:8a:a5:b3:58:89:38:f0:ba:ee:93:d3:65: 0e:b2:81:f8:9b:d5:03:e6:8c:cf:87:1e:ad:f7:92: 5d:60:8d:6b:cb:fd:87:0e:fd:8d:53:7e:12:7a:93: ab:fd:ce:a5:44:c8:b2:e9:b7:ed:02:58:34:1e:ae: 90:95:b1:36:6f:f2:eb:0c:db:58:fe:4b:cb:8d:be: e8:65:96:0d:70:e4:f2:b6:36:ac:89:51:3a:f5:43: c4:dc:37:8e:0b:03:4c:b3:b3:20:21:b6:ae:b4:ed: 70:45:ce:40:e6:e5:ed:fe:fc:eb:68:58:40:f5:7b: 14:9a:e8:92:96:57:8a:25:40:e3:d2:7e:30:13:d8: ee:44:87:26:0f:0f:89:88:7d:03:96:09:42:6a:bf: 05:51:12:7c:08:ff:37:96:04:03:4b:ac:83:40:4b: e0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:16:FA:50:5C:08:9C:AF:45:4D:F8:FB:7E:50:6E:D9:5F:84:3B:92 X509v3 Authority Key Identifier: keyid:C5:24:7B:1C:F6:45:91:B1:DB:27:28:0B:43:9B:50:7E:56:BF:02:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5247B1CF64591B1DB27280B439B507E56BF0232.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1a29a75-c5b9-475b-9d96-6d1a15eae24d/0/C5247B1CF64591B1DB27280B439B507E56BF0232.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:8b:e4:27:b1:f0:61:1c:c1:c5:81:2f:28:0f:a9:53:4b:74: 70:76:53:a1:2f:01:1f:93:d3:65:71:97:e5:d6:8d:8d:98:8b: c7:8d:e6:4f:3f:87:81:03:4e:ca:07:29:3a:9b:80:1c:17:94: b6:b1:7c:1c:6f:37:e7:aa:17:bb:61:bf:6e:da:08:3b:95:1b: b9:a9:21:02:2e:bf:d5:5d:e4:0c:d7:04:62:c0:5b:0e:0d:0c: db:76:cb:4e:1d:1e:ff:ca:e0:32:9b:cf:c0:c5:17:cd:96:30: 06:13:30:3d:d9:0f:b0:f4:5e:86:4a:ca:9c:ec:37:fb:51:73: 73:87:bc:21:50:5c:08:d9:2f:11:87:93:f5:39:6c:60:54:29: 23:f2:84:25:47:7d:80:59:0d:dc:cd:25:2c:c2:82:1f:ab:76: af:a6:50:2d:f0:d7:98:90:c5:30:99:cd:ab:a3:af:6d:6d:c9: ce:a3:49:1d:d4:4e:dc:8e:75:87:8f:10:7c:41:61:f9:24:ec: 99:41:26:a7:31:89:30:c7:96:36:4f:df:4e:67:bc:58:20:f6: c1:9b:17:61:7c:a2:4e:f2:2f:83:48:06:2a:3f:53:5a:68:31: dd:ca:6f:e4:8a:0f:0b:8b:a2:d1:c9:d6:fd:3e:18:af:0d:a7: d2:dd:93:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNVqna6TogZ5xuSN6xP+67CGfFJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUyNDdCMUNGNjQ1OTFCMURCMjcyODBCNDM5QjUwN0U1 NkJGMDIzMjAeFw0yNTA2MzAwNjU2MTVaFw0yNTA3MDMwNzExMTVaMDMxMTAvBgNV BAMTKDVDMTZGQTUwNUMwODlDQUY0NTRERjhGQjdFNTA2RUQ5NUY4NDNCOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiOqORQVP2uhtBpSTNXCa7wa9m ds1rcdLBZU7EFsg52VhAkO2nqeR0eqrR1kVMgesmWvw4RrlKv0DKbY/Uj5TANO0N BS7kFgtpZNYZv4jMFSW+k+NKNrQyKWGLJoqls1iJOPC67pPTZQ6ygfib1QPmjM+H Hq33kl1gjWvL/YcO/Y1TfhJ6k6v9zqVEyLLpt+0CWDQerpCVsTZv8usM21j+S8uN vuhllg1w5PK2NqyJUTr1Q8TcN44LA0yzsyAhtq607XBFzkDm5e3+/OtoWED1exSa 6JKWV4olQOPSfjAT2O5EhyYPD4mIfQOWCUJqvwVREnwI/zeWBANLrINAS+CTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXBb6UFwInK9FTfj7flBu2V+EO5IwHwYDVR0j BBgwFoAUxSR7HPZFkbHbJygLQ5tQfla/AjIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWEyOWE3NS1jNWI5LTQ3NWItOWQ5Ni02ZDFhMTVlYWUyNGQvMC9DNTI0N0IxQ0Y2 NDU5MUIxREIyNzI4MEI0MzlCNTA3RTU2QkYwMjMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUyNDdCMUNGNjQ1OTFCMURCMjcyODBCNDM5QjUwN0U1NkJG MDIzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFhMjlhNzUtYzViOS00NzViLTlk OTYtNmQxYTE1ZWFlMjRkLzAvQzUyNDdCMUNGNjQ1OTFCMURCMjcyODBCNDM5QjUw N0U1NkJGMDIzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKL5Cex8GEcwcWBLygPqVNLdHB2U6EvAR+T 02Vxl+XWjY2Yi8eN5k8/h4EDTsoHKTqbgBwXlLaxfBxvN+eqF7thv27aCDuVG7mp IQIuv9Vd5AzXBGLAWw4NDNt2y04dHv/K4DKbz8DFF82WMAYTMD3ZD7D0XoZKypzs N/tRc3OHvCFQXAjZLxGHk/U5bGBUKSPyhCVHfYBZDdzNJSzCgh+rdq+mUC3w15iQ xTCZzaujr21tyc6jSR3UTtyOdYePEHxBYfkk7JlBJqcxiTDHljZP305nvFgg9sGb F2F8ok7yL4NIBio/U1poMd3Kb+SKDwuLotHJ1v0+GK8Np9Ldk6Q= -----END CERTIFICATE-----Generated at Tue Jul 1 23:23:36 2025 by rpki-client