$ rpki-client -vvf repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft File: 5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft (raw, json) Hash identifier: +F43wTv8hZwE0sjGW9Ngat77ZgD/W2+FycLEBD2SKXg= Subject key identifier: FC:25:FC:2A:C8:6F:F2:53:41:83:7C:E5:03:3E:50:3C:F3:73:48:54 Authority key identifier: 51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C Certificate issuer: /CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C Certificate serial: 31BC054F4261A6B97E1501A746F0B96BF118547A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft Manifest number: 04E5 Signing time: Tue 01 Jul 2025 16:50:01 +0000 Manifest this update: Tue 01 Jul 2025 16:45:01 +0000 Manifest next update: Fri 04 Jul 2025 23:06:01 +0000 Files and hashes: 1: 3138302e3137382e39352e302f32342d3234203d3e203435373232.roa (hash: 9KZ9F45elzM13kws/U0IoAzbbI/YdymyAIpoe5+fMUI=) 2: 3130332e39342e382e302f32342d3234203d3e203435373232.roa (hash: dTEDIPJlLGDlRHB30/PzLB90DYFKiiQue74QgGKHEVI=) 3: 3130332e39342e31312e302f32342d3234203d3e203435373232.roa (hash: qGI/gZ+/LHiM5HYO/jSSY227nu7Rlo4VufnCOUnRtK4=) 4: 3130332e39342e392e302f32342d3234203d3e203435373232.roa (hash: orPkEwdvzbgAdBqwJx5fyoqFz6nU1AjYY7pCrQmrMAU=) 5: 3138302e3137382e39322e302f32342d3234203d3e203435373232.roa (hash: ghDv+E88LbsHp+yiOmZsjAqDuH4NzWOqybkoMe5BmV8=) 6: 5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl (hash: m0bMge2NNA1lLk+9KmPvp242oC636fpYQyqG/ZN4rUM=) 7: 323430313a333334303a3a2f33322d3438203d3e203435373232.roa (hash: tUFNikuzZ5Dxu83zUyF9psB1ZAXrbnO+JVBeZVWaO4g=) 8: 3138302e3137382e39332e302f32342d3234203d3e203435373232.roa (hash: mp213bICEXwH+LqnHma8nvPV6BFgfv4aiHAHQpn9yQs=) 9: 3138302e3137382e39342e302f32342d3234203d3e203435373232.roa (hash: r/svlrZcSr5sJUDVP99x6FJY548aywPcFlNv37DJt2Y=) 10: 3130332e39342e31302e302f32342d3234203d3e203435373232.roa (hash: oriUzK7mgQPCjaTV1H4IccgCRtyIm4Y5jf+70OM+bhw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 23:06:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:bc:05:4f:42:61:a6:b9:7e:15:01:a7:46:f0:b9:6b:f1:18:54:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C Validity Not Before: Jul 1 16:45:01 2025 GMT Not After : Jul 4 23:06:01 2025 GMT Subject: CN=FC25FC2AC86FF25341837CE5033E503CF3734854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6f:db:e0:58:f9:00:98:62:e3:80:ad:7c:23: d5:80:b6:11:1a:fa:8f:00:8c:b3:aa:2c:97:ef:d7: 98:af:0f:00:91:78:9f:69:c1:7a:a7:a2:7b:f2:06: 83:19:33:a2:6d:dc:be:99:ee:11:e1:3c:3b:0d:f2: 8f:8c:cb:8f:8d:c9:0b:0c:53:35:a5:7a:d3:23:f1: ec:ea:72:85:86:71:3d:c2:62:a6:62:17:35:ae:57: b9:42:79:91:c8:bc:bb:fc:4b:a1:7c:fe:12:b9:0b: 92:09:6d:d8:fb:09:ec:56:41:81:a2:96:99:38:cc: 5e:71:6e:31:62:70:34:1d:85:9c:e3:eb:ac:19:dc: 31:c2:13:3d:0e:25:a7:40:ca:8b:a7:8a:95:37:a4: 76:e6:06:46:f3:38:6c:84:79:13:ee:14:d2:de:65: 29:82:e8:52:d6:7e:a0:b9:1e:6f:2b:bf:3f:d2:94: ff:c6:1d:8f:2c:7b:9f:1f:79:71:c2:e4:f7:92:19: 41:2c:ef:9b:23:bf:c9:1f:f5:8a:b8:88:88:c8:9e: af:e0:ff:73:41:70:32:cc:8f:7c:6c:06:cd:1c:b2: f2:ad:bf:6d:b1:df:64:77:0d:c6:40:ad:a9:40:b8: d8:e8:a1:10:4a:7e:86:45:32:4b:75:c7:0c:9e:42: 85:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:25:FC:2A:C8:6F:F2:53:41:83:7C:E5:03:3E:50:3C:F3:73:48:54 X509v3 Authority Key Identifier: keyid:51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:f3:0d:c9:b9:f4:20:2e:49:2e:b5:cb:e3:f1:8a:ab:e9:33: 16:96:df:a4:7a:23:b7:b0:c3:58:f7:91:c2:65:1b:48:20:cf: 96:4b:6d:54:9d:8f:7f:1d:6c:c2:1e:c4:47:7c:8e:fc:eb:a7: 91:df:9e:e2:95:cb:b2:5f:2e:d3:e3:1d:a3:e9:ec:e2:dc:d1: 88:e9:9a:d3:9a:60:34:6d:b9:60:2e:8a:81:13:36:01:62:04: 82:9e:99:e3:df:8e:c6:ec:d0:bc:83:19:7f:25:ff:ac:da:ae: 84:1f:94:43:f3:39:1d:33:9a:fc:68:22:60:05:16:10:fd:2b: b6:d2:9e:53:ea:f7:c4:fc:79:f4:4e:e4:4f:0e:f3:6e:f0:55: 85:e4:4d:a8:12:e6:df:d9:aa:81:1f:79:90:e1:e4:9c:16:52: c9:db:9e:32:20:8d:60:ab:96:c8:7f:f8:b6:ef:4b:13:a6:f2: d0:ee:aa:0b:98:7f:0d:73:40:fd:0f:6f:5d:ed:97:59:73:74: 4f:d3:f2:df:13:6f:e4:e5:5a:81:b2:df:2a:17:4d:0e:54:c3: 48:88:81:2f:64:66:5a:c0:a2:f1:13:67:52:ce:48:49:c2:78: d3:8d:da:d2:04:5f:50:29:d9:e6:ae:38:ea:21:81:81:78:6b: db:8f:60:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMbwFT0Jhprl+FQGnRvC5a/EYVHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTExMEE3MTdFRkU5NkIxMkU1RDNBNDc1RTlCMjE3OUU1 REUwRUEwQzAeFw0yNTA3MDExNjQ1MDFaFw0yNTA3MDQyMzA2MDFaMDMxMTAvBgNV BAMTKEZDMjVGQzJBQzg2RkYyNTM0MTgzN0NFNTAzM0U1MDNDRjM3MzQ4NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFb9vgWPkAmGLjgK18I9WAthEa +o8AjLOqLJfv15ivDwCReJ9pwXqnonvyBoMZM6Jt3L6Z7hHhPDsN8o+My4+NyQsM UzWletMj8ezqcoWGcT3CYqZiFzWuV7lCeZHIvLv8S6F8/hK5C5IJbdj7CexWQYGi lpk4zF5xbjFicDQdhZzj66wZ3DHCEz0OJadAyounipU3pHbmBkbzOGyEeRPuFNLe ZSmC6FLWfqC5Hm8rvz/SlP/GHY8se58feXHC5PeSGUEs75sjv8kf9Yq4iIjInq/g /3NBcDLMj3xsBs0csvKtv22x32R3DcZAralAuNjooRBKfoZFMkt1xwyeQoUvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/CX8Kshv8lNBg3zlAz5QPPNzSFQwHwYDVR0j BBgwFoAUURCnF+/paxLl06R16bIXnl3g6gwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjA3ZDkyOS00Y2E4LTRmNTMtYTI5OC01ZTMzYmUxZjg2MDQvMC81MTEwQTcxN0VG RTk2QjEyRTVEM0E0NzVFOUIyMTc5RTVERTBFQTBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTExMEE3MTdFRkU5NkIxMkU1RDNBNDc1RTlCMjE3OUU1REUw RUEwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTYwN2Q5MjktNGNhOC00ZjUzLWEy OTgtNWUzM2JlMWY4NjA0LzAvNTExMEE3MTdFRkU5NkIxMkU1RDNBNDc1RTlCMjE3 OUU1REUwRUEwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG3zDcm59CAuSS61y+PxiqvpMxaW36R6I7ew w1j3kcJlG0ggz5ZLbVSdj38dbMIexEd8jvzrp5HfnuKVy7JfLtPjHaPp7OLc0Yjp mtOaYDRtuWAuioETNgFiBIKemePfjsbs0LyDGX8l/6zaroQflEPzOR0zmvxoImAF FhD9K7bSnlPq98T8efRO5E8O827wVYXkTagS5t/ZqoEfeZDh5JwWUsnbnjIgjWCr lsh/+LbvSxOm8tDuqguYfw1zQP0Pb13tl1lzdE/T8t8Tb+TlWoGy3yoXTQ5Uw0iI gS9kZlrAovETZ1LOSEnCeNON2tIEX1Ap2eauOOohgYF4a9uPYPg= -----END CERTIFICATE-----Generated at Thu Jul 3 10:03:20 2025 by rpki-client