$ rpki-client -vvf repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft File: C5CA2999FE7612F56CCCB7441743B05181458ED0.mft (raw, json) Hash identifier: FQUQpw3o5RU9YodAVMABEnqrbZxCIXkzU2cou8awrkQ= Subject key identifier: 22:56:AE:CF:62:B1:A2:E3:6D:8E:5B:84:D0:EF:6B:78:C9:C9:63:9F Authority key identifier: C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0 Certificate issuer: /CN=C5CA2999FE7612F56CCCB7441743B05181458ED0 Certificate serial: 3B02CEAAD36D320F077F46A326F416670ADC5668 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft Manifest number: 04E5 Signing time: Sun 29 Jun 2025 04:00:38 +0000 Manifest this update: Sun 29 Jun 2025 03:55:38 +0000 Manifest next update: Wed 02 Jul 2025 10:49:38 +0000 Files and hashes: 1: 3130332e3134322e3230322e302f32332d3233203d3e20313339333738.roa (hash: aOFDhPstKOFaNipOEFwONnhh/OGsZlp5fuQdDXOoo9E=) 2: 323030313a6466313a353638303a3a2f34382d3438203d3e20313339333738.roa (hash: q7ox9dPZeS59odB2IJMVaFXBFhKkSZPWVMJt5aLWrRc=) 3: C5CA2999FE7612F56CCCB7441743B05181458ED0.crl (hash: WbEHgiwTIZHRpG7iQ77NoE3oHwJsBqNHDlxbg2AFTzY=) 4: 3130332e3134322e3230332e302f32342d3234203d3e20313339333738.roa (hash: TJhHkKwr35GRF8gqIxcj9n16SqAaRRuK8PF46Ie+LXg=) 5: 3130332e3134322e3230322e302f32342d3234203d3e20313339333738.roa (hash: kZ/7LdQ98yA+6ycYvld45u3DxaVBg4NMh+WZ028gPpU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:02:ce:aa:d3:6d:32:0f:07:7f:46:a3:26:f4:16:67:0a:dc:56:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5CA2999FE7612F56CCCB7441743B05181458ED0 Validity Not Before: Jun 29 03:55:38 2025 GMT Not After : Jul 2 10:49:38 2025 GMT Subject: CN=2256AECF62B1A2E36D8E5B84D0EF6B78C9C9639F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:83:41:0b:b5:fc:93:6c:55:94:28:22:52:60: 55:f8:2d:da:76:a4:20:d1:4c:11:37:a1:37:4e:85: 3e:36:18:95:9e:0c:f2:fd:30:dd:6e:3b:0a:5c:ee: f9:5d:57:6f:ed:b9:4e:40:4b:77:5c:94:a6:c2:11: 23:aa:35:3f:b4:28:c0:63:89:8c:2f:7d:ad:29:39: 08:e0:e5:c3:84:b3:45:d8:3a:dc:e8:4c:c7:22:6f: 4d:13:f2:80:cb:a1:4a:a2:f7:5b:3d:23:2a:5b:42: 55:3f:65:23:d1:cb:05:bd:b7:18:64:bf:4e:28:3a: b8:64:8f:c7:87:5a:d0:d4:e8:ab:b9:50:aa:9b:84: bb:88:75:6a:85:e9:8a:ff:89:64:85:66:9d:91:70: 2d:80:0d:bc:c0:95:8c:42:78:ff:03:a2:5c:41:b0: 17:2c:84:d0:6c:63:ea:25:c4:99:d5:24:56:48:ce: cb:4d:5f:87:a5:7b:57:2d:d5:fc:e8:48:68:fe:30: 7d:3e:c1:f2:2f:6d:79:d9:82:1e:1a:ae:cd:46:ff: 88:2f:28:16:fb:15:e8:df:2a:98:ba:ac:f6:9a:74: 6b:51:e0:59:f1:02:72:4d:d9:8a:e6:a9:d6:94:91: b8:5d:ae:fb:13:d2:df:34:47:f4:dd:44:b8:88:29: 0d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:56:AE:CF:62:B1:A2:E3:6D:8E:5B:84:D0:EF:6B:78:C9:C9:63:9F X509v3 Authority Key Identifier: keyid:C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:f6:81:2b:ed:bd:04:63:c3:37:2f:79:da:90:99:01:13:db: a6:4e:19:79:65:16:96:f8:2a:b8:c6:44:bf:91:7f:d5:38:fb: 7d:06:5a:88:4d:b0:84:16:e9:c6:fe:a8:f9:45:b7:21:9a:a6: 2f:3e:fe:fb:af:06:6e:2b:dd:6a:f9:55:56:f7:9f:4c:dd:0a: bc:f5:0f:80:d1:20:f7:44:2f:e5:0a:c2:13:f3:23:33:fa:2f: 5f:2d:58:7c:23:49:d0:84:24:cc:07:88:25:14:eb:02:20:9f: e5:bc:ba:c0:b0:37:17:06:12:07:84:f1:b4:82:e3:ab:bd:90: f7:32:38:6c:4a:37:07:98:60:b4:60:20:7e:b7:e1:c7:1a:db: cc:33:d5:f7:5d:96:3f:9c:85:a0:01:3e:fa:ba:95:f5:03:d1: 6a:00:83:36:cd:95:d0:af:a5:48:83:cc:b4:81:77:ad:19:b1: 7f:a3:04:c1:d4:02:61:2a:b3:0b:fe:17:dd:31:6e:c5:26:80: 4f:09:c3:73:06:f1:39:13:da:2b:6f:ec:02:1e:8e:bb:c6:8e: 6a:1c:2b:8b:72:c8:cb:e9:81:05:25:d7:38:72:8e:e6:5a:cc: 99:16:fa:37:32:f5:05:d0:5d:37:a6:43:81:7f:c0:af:f3:63: 42:b6:3a:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOwLOqtNtMg8Hf0ajJvQWZwrcVmgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0IwNTE4 MTQ1OEVEMDAeFw0yNTA2MjkwMzU1MzhaFw0yNTA3MDIxMDQ5MzhaMDMxMTAvBgNV BAMTKDIyNTZBRUNGNjJCMUEyRTM2RDhFNUI4NEQwRUY2Qjc4QzlDOTYzOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOg0ELtfyTbFWUKCJSYFX4Ldp2 pCDRTBE3oTdOhT42GJWeDPL9MN1uOwpc7vldV2/tuU5AS3dclKbCESOqNT+0KMBj iYwvfa0pOQjg5cOEs0XYOtzoTMcib00T8oDLoUqi91s9IypbQlU/ZSPRywW9txhk v04oOrhkj8eHWtDU6Ku5UKqbhLuIdWqF6Yr/iWSFZp2RcC2ADbzAlYxCeP8DolxB sBcshNBsY+olxJnVJFZIzstNX4ele1ct1fzoSGj+MH0+wfIvbXnZgh4ars1G/4gv KBb7FejfKpi6rPaadGtR4FnxAnJN2YrmqdaUkbhdrvsT0t80R/TdRLiIKQ2BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIlauz2KxouNtjluE0O9reMnJY58wHwYDVR0j BBgwFoAUxcopmf52EvVszLdEF0OwUYFFjtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjdmYjgzNy0xYjJmLTRjNGUtYjk5OS02ZTk5MGRkYzE0OTkvMC9DNUNBMjk5OUZF NzYxMkY1NkNDQ0I3NDQxNzQzQjA1MTgxNDU4RUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0IwNTE4MTQ1 OEVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDY3ZmI4MzctMWIyZi00YzRlLWI5 OTktNmU5OTBkZGMxNDk5LzAvQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0Iw NTE4MTQ1OEVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACv2gSvtvQRjwzcvedqQmQET26ZOGXllFpb4 KrjGRL+Rf9U4+30GWohNsIQW6cb+qPlFtyGapi8+/vuvBm4r3Wr5VVb3n0zdCrz1 D4DRIPdEL+UKwhPzIzP6L18tWHwjSdCEJMwHiCUU6wIgn+W8usCwNxcGEgeE8bSC 46u9kPcyOGxKNweYYLRgIH634cca28wz1fddlj+chaABPvq6lfUD0WoAgzbNldCv pUiDzLSBd60ZsX+jBMHUAmEqswv+F90xbsUmgE8Jw3MG8TkT2itv7AIejrvGjmoc K4tyyMvpgQUl1zhyjuZazJkW+jcy9QXQXTemQ4F/wK/zY0K2Ols= -----END CERTIFICATE-----Generated at Sun Jun 29 19:12:33 2025 by rpki-client