$ rpki-client -vvf repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft File: 5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft (raw, json) Hash identifier: qps7XwzihBSeh5Uw/wLvSk9qNuOzppwqlNj8o3iJuAw= Subject key identifier: 0A:C6:F2:E5:DA:C7:76:51:DE:FD:90:56:F9:EC:32:9B:4A:CE:0B:DE Authority key identifier: 5E:A6:0C:5C:2A:87:7A:DE:8B:13:E9:94:EA:C2:EC:E8:81:C2:F0:2E Certificate issuer: /CN=5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E Certificate serial: 4A9506E81836FC8F8EE192D1C58C0BE49CFF9730 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft Manifest number: 0119 Signing time: Sat 28 Jun 2025 14:21:40 +0000 Manifest this update: Sat 28 Jun 2025 14:16:40 +0000 Manifest next update: Tue 01 Jul 2025 22:13:40 +0000 Files and hashes: 1: 3130332e32302e3138372e302f32342d3234203d3e203538353533.roa (hash: bUy4CZmFBklHDVwaxUEZUZiNt8d1i/3iKLLtmboWyaU=) 2: 3130332e32302e3138362e302f32342d3234203d3e203538353533.roa (hash: gpL6qnRxLPgeiV+PlG3hB+cnGTmStZNiAx19SwL8f6w=) 3: 5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl (hash: 7k5VyU6Wu4Li0U+Mlxtdf4f8nSDtFveaYRQYNl3nz4w=) 4: 3130332e32302e3138342e302f32342d3234203d3e203538353533.roa (hash: m+tur8s5hF36P9KEnTMPMVDInU7+4/3lGLQOQpvofQk=) 5: 3130332e32302e3138352e302f32342d3234203d3e203538353533.roa (hash: matLkK/0RKOzJ5T6ShVJ+TeIBVCHsHv7ufNKNv6zW+I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 22:13:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:95:06:e8:18:36:fc:8f:8e:e1:92:d1:c5:8c:0b:e4:9c:ff:97:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E Validity Not Before: Jun 28 14:16:40 2025 GMT Not After : Jul 1 22:13:40 2025 GMT Subject: CN=0AC6F2E5DAC77651DEFD9056F9EC329B4ACE0BDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6b:70:59:96:0e:f2:6d:aa:33:a4:87:00:7e: 32:1c:ae:97:5d:99:67:d2:29:5e:7b:33:c8:24:f8: 15:99:53:f4:dd:65:e1:1f:d2:a9:99:ee:10:4f:6c: 09:68:b6:16:ce:9a:66:56:bd:b7:b8:fa:c0:ae:7c: 4f:a5:df:83:ed:bf:c1:7c:c5:b5:08:2f:28:90:7d: 3f:c2:e5:3b:4f:56:41:3d:25:b1:1a:c8:09:82:8b: 9d:1a:4a:7c:91:49:15:1d:8b:f5:cf:53:66:ba:58: 76:69:fd:c8:9c:27:86:35:bb:67:a3:61:b4:1a:36: 25:5e:a5:0a:1d:13:39:df:72:58:30:7f:fe:b3:98: f3:44:d6:d5:fa:6a:dd:d6:12:25:b6:0c:2b:d1:b6: 2d:cf:27:15:8c:7e:14:43:79:e1:25:42:e3:ba:aa: ba:e4:3e:b8:de:a8:a2:1a:ba:e5:31:b7:a1:7d:ec: 3f:67:f0:e9:90:0c:10:82:f8:bf:87:f9:da:82:e7: c0:54:7f:6c:ee:8e:5d:bb:2e:2f:34:f7:ea:a9:d2: 50:70:0c:1e:75:04:04:80:0b:7a:62:85:4d:08:46: 33:f1:16:93:99:25:2f:53:2f:d9:2a:3d:a0:7b:d8: c0:41:b2:42:63:41:5b:aa:fa:71:18:ac:23:4a:55: 97:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C6:F2:E5:DA:C7:76:51:DE:FD:90:56:F9:EC:32:9B:4A:CE:0B:DE X509v3 Authority Key Identifier: keyid:5E:A6:0C:5C:2A:87:7A:DE:8B:13:E9:94:EA:C2:EC:E8:81:C2:F0:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:b2:20:29:ed:ec:4b:a8:17:3f:dd:3c:98:c3:70:58:e8:b5: de:1a:74:1a:9e:b2:49:8c:d2:96:3e:92:c8:9c:29:7b:9b:ed: 05:5f:80:82:a6:53:f1:8f:28:10:69:f6:c4:c9:90:0d:51:69: 1e:8d:04:e9:66:42:51:85:0a:4e:f5:9d:0e:26:86:33:d9:76: e4:c1:c4:5e:35:68:d7:be:b0:63:e5:37:35:ba:ff:4d:96:a3: 80:3d:62:6e:80:d7:15:b2:c9:66:d5:0f:f3:65:d3:df:e1:d6: 90:21:89:01:14:0f:ff:1c:02:7c:49:8f:87:76:20:37:23:aa: 96:5f:06:d7:b8:9f:6c:56:f3:94:58:0d:89:73:50:81:25:53: 35:eb:04:f0:67:df:91:8b:5c:fa:c1:b6:eb:cc:69:0a:e9:9c: cc:77:10:32:0a:bd:3a:d3:3a:2e:57:69:91:94:fe:1f:c3:2b: 74:22:5e:fb:bf:b5:48:07:13:fe:c8:14:79:25:38:3e:4e:7a: 79:b9:6d:e8:09:99:8b:12:08:74:ce:81:51:6e:a3:39:4a:5f: 0b:0b:cc:08:42:1c:a7:b8:ca:06:87:3f:32:67:69:3d:ad:e4: 68:fd:3b:49:de:a3:76:a4:51:91:fe:2d:5e:d8:78:99:9e:d7: 87:2b:a1:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSpUG6Bg2/I+O4ZLRxYwL5Jz/lzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVDRTg4 MUMyRjAyRTAeFw0yNTA2MjgxNDE2NDBaFw0yNTA3MDEyMjEzNDBaMDMxMTAvBgNV BAMTKDBBQzZGMkU1REFDNzc2NTFERUZEOTA1NkY5RUMzMjlCNEFDRTBCREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCua3BZlg7ybaozpIcAfjIcrpdd mWfSKV57M8gk+BWZU/TdZeEf0qmZ7hBPbAlothbOmmZWvbe4+sCufE+l34Ptv8F8 xbUILyiQfT/C5TtPVkE9JbEayAmCi50aSnyRSRUdi/XPU2a6WHZp/cicJ4Y1u2ej YbQaNiVepQodEznfclgwf/6zmPNE1tX6at3WEiW2DCvRti3PJxWMfhRDeeElQuO6 qrrkPrjeqKIauuUxt6F97D9n8OmQDBCC+L+H+dqC58BUf2zujl27Li809+qp0lBw DB51BASAC3pihU0IRjPxFpOZJS9TL9kqPaB72MBBskJjQVuq+nEYrCNKVZcfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCsby5drHdlHe/ZBW+ewym0rOC94wHwYDVR0j BBgwFoAUXqYMXCqHet6LE+mU6sLs6IHC8C4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDk3M2JlYi02NmJhLTQ4YmMtOTM3NC03MmQ3ZmI4OWM1YTMvMC81RUE2MEM1QzJB ODc3QURFOEIxM0U5OTRFQUMyRUNFODgxQzJGMDJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVDRTg4MUMy RjAyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTA5NzNiZWItNjZiYS00OGJjLTkz NzQtNzJkN2ZiODljNWEzLzAvNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVD RTg4MUMyRjAyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEayICnt7EuoFz/dPJjDcFjotd4adBqeskmM 0pY+ksicKXub7QVfgIKmU/GPKBBp9sTJkA1RaR6NBOlmQlGFCk71nQ4mhjPZduTB xF41aNe+sGPlNzW6/02Wo4A9Ym6A1xWyyWbVD/Nl09/h1pAhiQEUD/8cAnxJj4d2 IDcjqpZfBte4n2xW85RYDYlzUIElUzXrBPBn35GLXPrBtuvMaQrpnMx3EDIKvTrT Oi5XaZGU/h/DK3QiXvu/tUgHE/7IFHklOD5Oenm5begJmYsSCHTOgVFuozlKXwsL zAhCHKe4ygaHPzJnaT2t5Gj9O0neo3akUZH+LV7YeJme14croQk= -----END CERTIFICATE-----Generated at Mon Jun 30 01:18:11 2025 by rpki-client