$ rpki-client -vvf repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft File: 5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft (raw, json) Hash identifier: Reoxpz6tk1cmqg+CWBm14CVGcakfanVjmd8nwhq1DV4= Subject key identifier: E6:D4:24:69:82:08:AD:A6:D3:A8:01:8E:4C:EC:FF:C9:EC:19:E5:85 Authority key identifier: 5B:8C:3A:29:E9:0C:25:CB:F4:61:51:24:B1:17:BE:7F:C0:13:C6:1E Certificate issuer: /CN=5B8C3A29E90C25CBF4615124B117BE7FC013C61E Certificate serial: 4727A82E5195E8AA76DE5D9FE7A54962CC066041 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft Manifest number: 01A4 Signing time: Mon 30 Jun 2025 06:41:03 +0000 Manifest this update: Mon 30 Jun 2025 06:36:03 +0000 Manifest next update: Thu 03 Jul 2025 09:01:03 +0000 Files and hashes: 1: 3130332e39302e36372e302f32342d3234203d3e20313530323635.roa (hash: rSbPcUFwbUotF4iGb/0NgCE/rDZm6ThuOkAV/ZhbDr4=) 2: 3130332e39302e36362e302f32332d3233203d3e20313530323635.roa (hash: 03+kmACXHUPe0IyI3YXAvW+JekGIFfxV2tHYWD2l8nE=) 3: 5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl (hash: M430E0vVUtSzniZcCUKUNUnlGDjYfJJ/wk6PSStmw1E=) 4: 3130332e39302e36362e302f32342d3234203d3e20313530323635.roa (hash: 5zPk4MUiirpmEj5/W53RgTUlrb96XIX+LjZrPDV2UMA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 09:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:27:a8:2e:51:95:e8:aa:76:de:5d:9f:e7:a5:49:62:cc:06:60:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B8C3A29E90C25CBF4615124B117BE7FC013C61E Validity Not Before: Jun 30 06:36:03 2025 GMT Not After : Jul 3 09:01:03 2025 GMT Subject: CN=E6D424698208ADA6D3A8018E4CECFFC9EC19E585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ef:da:9d:ff:88:01:d8:88:19:fc:a7:f0:e5: f2:5d:2b:85:7b:53:27:da:0b:d1:56:a5:38:d2:14: ff:9a:b6:19:e7:95:d3:6a:08:7f:9a:d8:c1:98:08: aa:6e:6c:63:d7:b8:06:29:fb:b9:07:f4:3a:48:f7: d2:bd:f6:ad:5e:7c:b7:d3:fd:12:1b:f0:58:01:fb: 47:c8:eb:e3:01:f7:50:c8:cf:e4:50:0e:cc:e0:af: 07:95:19:e3:e3:4b:bd:95:ac:fc:7f:58:20:f8:c6: 4e:c0:c7:fe:61:4e:c2:54:fb:22:0e:7e:98:f5:55: 75:36:16:d9:44:72:52:72:95:4e:3b:6c:40:31:45: ed:a3:ff:73:a1:58:e2:bc:f4:18:69:3b:a6:a3:ee: 69:66:33:99:f6:89:62:67:b6:ea:46:6b:40:66:9f: d6:5f:28:af:91:8f:ae:57:d6:41:22:c6:b6:75:18: 67:b4:64:cd:cd:39:9a:43:e9:00:71:4e:b6:7f:e6: d0:89:2c:6b:24:d0:0b:c8:87:c0:2f:7e:ec:1a:1d: bd:f0:90:d5:5f:3d:fb:d0:70:a7:3e:f8:d7:4d:44: 2b:59:a0:76:1c:b0:cd:cb:4b:df:eb:31:ce:d4:35: 91:11:29:4d:9c:9d:83:60:b8:c2:71:57:d6:ec:5a: e3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D4:24:69:82:08:AD:A6:D3:A8:01:8E:4C:EC:FF:C9:EC:19:E5:85 X509v3 Authority Key Identifier: keyid:5B:8C:3A:29:E9:0C:25:CB:F4:61:51:24:B1:17:BE:7F:C0:13:C6:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:65:19:8d:f4:29:7b:31:f7:92:66:fb:5a:db:09:2c:71:3a: 27:4f:5d:f4:91:09:d2:d1:0a:52:f0:a9:01:d3:f6:a0:ef:35: 60:31:c1:0b:0f:9f:7a:1d:d1:63:46:25:3e:07:a1:01:a8:75: c7:60:5f:ee:49:0f:1e:e1:79:42:ac:20:33:bd:fd:fb:2b:7f: 01:5a:8f:3f:7d:5d:16:ec:40:f8:03:4e:eb:01:28:3c:86:6c: 7d:52:a2:22:c3:58:6f:6d:17:da:4f:4f:84:0b:5c:69:52:ae: 24:9f:b6:01:68:0b:5f:d2:90:fd:2b:e8:ed:84:d7:22:4f:52: 32:07:c5:53:c7:89:f3:30:a6:6d:9a:df:fa:c2:f5:5d:97:08: ae:dc:66:11:f7:ce:6a:b6:68:21:f5:c0:dc:52:c0:10:40:a9: c8:14:bd:f4:f2:70:52:3f:b5:4d:4e:b6:4c:06:f6:09:dd:2c: 48:98:5b:b0:75:72:2d:61:49:dc:f6:a0:fb:6d:81:ee:0c:80: d7:d5:6b:8d:22:9a:c8:c2:0d:af:89:5b:d3:51:86:d0:e0:72: 5a:0c:e1:42:2f:f8:8b:9c:bb:1a:10:36:99:c0:31:e2:62:55: 9a:f4:20:e8:3f:59:5f:a7:a8:1e:17:49:c0:1d:b9:5d:be:ef: cc:56:a5:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURyeoLlGV6Kp23l2f56VJYswGYEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JFN0ZD MDEzQzYxRTAeFw0yNTA2MzAwNjM2MDNaFw0yNTA3MDMwOTAxMDNaMDMxMTAvBgNV BAMTKEU2RDQyNDY5ODIwOEFEQTZEM0E4MDE4RTRDRUNGRkM5RUMxOUU1ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx79qd/4gB2IgZ/Kfw5fJdK4V7 UyfaC9FWpTjSFP+athnnldNqCH+a2MGYCKpubGPXuAYp+7kH9DpI99K99q1efLfT /RIb8FgB+0fI6+MB91DIz+RQDszgrweVGePjS72VrPx/WCD4xk7Ax/5hTsJU+yIO fpj1VXU2FtlEclJylU47bEAxRe2j/3OhWOK89BhpO6aj7mlmM5n2iWJntupGa0Bm n9ZfKK+Rj65X1kEixrZ1GGe0ZM3NOZpD6QBxTrZ/5tCJLGsk0AvIh8AvfuwaHb3w kNVfPfvQcKc++NdNRCtZoHYcsM3LS9/rMc7UNZERKU2cnYNguMJxV9bsWuMDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5tQkaYIIrabTqAGOTOz/yewZ5YUwHwYDVR0j BBgwFoAUW4w6KekMJcv0YVEksRe+f8ATxh4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWYzYzc2OS1jZmIxLTQyMDYtOWY1NC1jMDU4N2U2M2JhNWIvMC81QjhDM0EyOUU5 MEMyNUNCRjQ2MTUxMjRCMTE3QkU3RkMwMTNDNjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JFN0ZDMDEz QzYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzlmM2M3NjktY2ZiMS00MjA2LTlm NTQtYzA1ODdlNjNiYTViLzAvNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JF N0ZDMDEzQzYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH9lGY30KXsx95Jm+1rbCSxxOidPXfSRCdLR ClLwqQHT9qDvNWAxwQsPn3od0WNGJT4HoQGodcdgX+5JDx7heUKsIDO9/fsrfwFa jz99XRbsQPgDTusBKDyGbH1SoiLDWG9tF9pPT4QLXGlSriSftgFoC1/SkP0r6O2E 1yJPUjIHxVPHifMwpm2a3/rC9V2XCK7cZhH3zmq2aCH1wNxSwBBAqcgUvfTycFI/ tU1OtkwG9gndLEiYW7B1ci1hSdz2oPttge4MgNfVa40imsjCDa+JW9NRhtDgcloM 4UIv+IucuxoQNpnAMeJiVZr0IOg/WV+nqB4XScAduV2+78xWpTc= -----END CERTIFICATE-----Generated at Tue Jul 1 05:12:40 2025 by rpki-client