$ rpki-client -vvf repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft File: 5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft (raw, json) Hash identifier: tP6GwthXRxk4j61t9+07fHZO5Pfmgz6iGSo9TBPHe0M= Subject key identifier: AE:00:30:55:C5:D5:83:6D:01:D4:9B:31:F3:8A:C9:82:CF:33:25:55 Authority key identifier: 54:61:EA:BC:86:2E:4C:90:B3:27:90:DB:A2:1C:D5:FF:CB:96:6B:D3 Certificate issuer: /CN=5461EABC862E4C90B32790DBA21CD5FFCB966BD3 Certificate serial: 6CF9E046759DD7D6F21F2C1DD652E16344CAEB94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft Manifest number: 01BA Signing time: Sun 29 Jun 2025 11:50:59 +0000 Manifest this update: Sun 29 Jun 2025 11:45:59 +0000 Manifest next update: Wed 02 Jul 2025 14:57:59 +0000 Files and hashes: 1: 3130332e37332e37322e302f32322d3234203d3e20313335343638.roa (hash: 3abyGt/vv/4zuDknJsyzDzCl6mRH4xhBGG4CS4rRnTg=) 2: 5461EABC862E4C90B32790DBA21CD5FFCB966BD3.crl (hash: FYoLdWtgXDLrOvrKcywikMK3bYGwGI3Jq5ZdnQ73SyM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.crl rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 14:57:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:f9:e0:46:75:9d:d7:d6:f2:1f:2c:1d:d6:52:e1:63:44:ca:eb:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5461EABC862E4C90B32790DBA21CD5FFCB966BD3 Validity Not Before: Jun 29 11:45:59 2025 GMT Not After : Jul 2 14:57:59 2025 GMT Subject: CN=AE003055C5D5836D01D49B31F38AC982CF332555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f8:a9:ae:90:3c:e6:2a:58:9a:77:20:d2:e6: d0:33:df:79:42:43:26:43:76:e9:31:25:ec:18:06: 07:23:5e:f5:c1:ad:7f:b7:11:c8:9a:d3:5f:fb:22: 3d:7e:a3:5f:04:48:1a:57:a6:de:6f:b7:53:07:9a: be:a6:48:aa:bc:2a:48:c3:e6:12:f7:df:87:0e:7d: 61:01:d9:11:75:16:f9:cc:c9:d6:46:2c:b4:5b:2a: d0:35:81:29:ff:d4:fd:d3:1e:84:8e:5c:a0:99:79: 0d:6c:87:de:b1:4b:00:cb:b0:68:76:b9:74:38:42: ef:43:fa:15:61:47:1d:92:23:9c:0e:e7:1a:a2:54: a5:97:58:64:7c:af:68:3f:f8:5f:51:f8:28:d0:0e: e5:ae:05:21:5d:88:25:bb:57:d1:2c:2f:9d:1c:01: c3:2b:0d:5d:e1:1d:a8:20:7d:ca:0e:ca:b6:ab:f6: 0f:88:47:3f:0d:7f:a1:fa:90:df:1b:34:ea:22:75: e8:fb:be:59:17:ba:9d:28:0e:6e:86:0f:c2:4f:2a: 59:11:9d:32:b4:f2:37:e9:47:22:00:9d:16:bc:54: d5:9b:80:df:62:b1:19:0d:1d:ef:53:71:bf:b7:55: 03:33:f6:a0:d7:7b:f4:6f:53:06:d0:01:50:fc:60: 26:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:00:30:55:C5:D5:83:6D:01:D4:9B:31:F3:8A:C9:82:CF:33:25:55 X509v3 Authority Key Identifier: keyid:54:61:EA:BC:86:2E:4C:90:B3:27:90:DB:A2:1C:D5:FF:CB:96:6B:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:02:37:36:a7:73:26:96:b9:de:a4:08:ef:cf:e1:4b:b1:f2: d6:48:5f:28:29:5e:07:0c:df:2a:ca:4a:1b:08:84:f8:94:dd: 1b:99:07:66:1c:15:ae:ea:ca:ae:ca:3b:77:67:b0:6a:93:fb: 6a:93:36:a4:ac:2e:ba:0b:ca:29:95:58:d1:90:31:f3:5d:1b: 61:fd:29:17:c1:25:24:3c:44:49:67:80:c9:2c:63:3e:6c:0b: cd:6c:13:11:3f:1a:0d:a9:ad:11:a1:36:fa:f6:f3:f9:1c:76: 20:39:8f:15:df:55:95:a2:73:79:ef:85:8c:65:1f:ec:7e:81: 7a:45:68:c6:5c:5f:ea:d1:50:71:32:24:81:41:ba:0b:78:dc: f1:e3:9a:a8:02:f3:3c:e1:2d:7d:85:8a:0a:db:17:b4:c5:94: 4c:7b:01:3b:87:cf:ea:4b:d5:54:af:45:74:34:94:2d:0e:31: a0:85:f4:18:de:58:3d:72:df:b1:fe:e5:cf:8d:b5:e7:b4:0d: f2:b1:b1:1c:ba:5d:6d:44:e4:28:3f:32:23:08:89:0a:56:71: 54:38:3d:1f:3a:f1:62:6b:79:e2:bc:12:ee:d1:25:26:9a:58: f2:36:cd:63:01:f4:09:c2:ee:de:6c:a2:c1:60:b2:c4:35:12: af:ab:de:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbPngRnWd19byHywd1lLhY0TK65QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ2MUVBQkM4NjJFNEM5MEIzMjc5MERCQTIxQ0Q1RkZD Qjk2NkJEMzAeFw0yNTA2MjkxMTQ1NTlaFw0yNTA3MDIxNDU3NTlaMDMxMTAvBgNV BAMTKEFFMDAzMDU1QzVENTgzNkQwMUQ0OUIzMUYzOEFDOTgyQ0YzMzI1NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN+KmukDzmKliadyDS5tAz33lC QyZDdukxJewYBgcjXvXBrX+3Ecia01/7Ij1+o18ESBpXpt5vt1MHmr6mSKq8KkjD 5hL334cOfWEB2RF1FvnMydZGLLRbKtA1gSn/1P3THoSOXKCZeQ1sh96xSwDLsGh2 uXQ4Qu9D+hVhRx2SI5wO5xqiVKWXWGR8r2g/+F9R+CjQDuWuBSFdiCW7V9EsL50c AcMrDV3hHaggfcoOyrar9g+IRz8Nf6H6kN8bNOoidej7vlkXup0oDm6GD8JPKlkR nTK08jfpRyIAnRa8VNWbgN9isRkNHe9Tcb+3VQMz9qDXe/RvUwbQAVD8YCYHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrgAwVcXVg20B1Jsx84rJgs8zJVUwHwYDVR0j BBgwFoAUVGHqvIYuTJCzJ5DbohzV/8uWa9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmVjYzcyYS1lOTU0LTQzMDItOTJjNC1mNGYyMzA3MGI5OTcvMC81NDYxRUFCQzg2 MkU0QzkwQjMyNzkwREJBMjFDRDVGRkNCOTY2QkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTQ2MUVBQkM4NjJFNEM5MEIzMjc5MERCQTIxQ0Q1RkZDQjk2 NkJEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZlY2M3MmEtZTk1NC00MzAyLTky YzQtZjRmMjMwNzBiOTk3LzAvNTQ2MUVBQkM4NjJFNEM5MEIzMjc5MERCQTIxQ0Q1 RkZDQjk2NkJEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMkCNzancyaWud6kCO/P4Uux8tZIXygpXgcM 3yrKShsIhPiU3RuZB2YcFa7qyq7KO3dnsGqT+2qTNqSsLroLyimVWNGQMfNdG2H9 KRfBJSQ8RElngMksYz5sC81sExE/Gg2prRGhNvr28/kcdiA5jxXfVZWic3nvhYxl H+x+gXpFaMZcX+rRUHEyJIFBugt43PHjmqgC8zzhLX2FigrbF7TFlEx7ATuHz+pL 1VSvRXQ0lC0OMaCF9BjeWD1y37H+5c+Ntee0DfKxsRy6XW1E5Cg/MiMIiQpWcVQ4 PR868WJreeK8Eu7RJSaaWPI2zWMB9AnC7t5sosFgssQ1Eq+r3sQ= -----END CERTIFICATE-----Generated at Mon Jun 30 19:00:17 2025 by rpki-client