$ rpki-client -vvf repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft File: 5EC928AFD73AFC70F10C468E21482031920DF521.mft (raw, json) Hash identifier: nzD3lCw/M3UK+pBN9muBkkwYtC5oMfn3wMtj64rUMxA= Subject key identifier: 3A:39:9C:47:AE:86:CE:21:04:EB:1A:F9:A6:C9:6E:95:CB:3C:6A:9D Authority key identifier: 5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21 Certificate issuer: /CN=5EC928AFD73AFC70F10C468E21482031920DF521 Certificate serial: 29AF806AFCEE9CDCFFA6E2B457A3BAF7D5A5374D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft Manifest number: FB Signing time: Sun 29 Jun 2025 07:30:37 +0000 Manifest this update: Sun 29 Jun 2025 07:25:37 +0000 Manifest next update: Wed 02 Jul 2025 16:53:37 +0000 Files and hashes: 1: 3135372e31302e39302e302f32342d3234203d3e20313532303836.roa (hash: G+zk6B4j6LBv4VXf/ZrduIBLIatUxzNWyMHjZfotW/M=) 2: 3135372e31302e39312e302f32342d3234203d3e20313532303836.roa (hash: aoRUG5CQtzRZGdloOpfTrb2fX3fCFwbxN1OMSRI1BYY=) 3: 3135372e31302e39302e302f32332d3233203d3e20313532303836.roa (hash: sqhh6fhWizwXoH9l3XVTNUts+MHffcu11O/8GZa+UZk=) 4: 5EC928AFD73AFC70F10C468E21482031920DF521.crl (hash: Jmaxi/l+dKQTfUWSHF5M5m7dkg8D0XAKLUUj9BIv3eQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.crl rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 16:53:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:af:80:6a:fc:ee:9c:dc:ff:a6:e2:b4:57:a3:ba:f7:d5:a5:37:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EC928AFD73AFC70F10C468E21482031920DF521 Validity Not Before: Jun 29 07:25:37 2025 GMT Not After : Jul 2 16:53:37 2025 GMT Subject: CN=3A399C47AE86CE2104EB1AF9A6C96E95CB3C6A9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:44:2f:19:0f:c8:f0:d5:17:20:2b:43:6b:69: 42:2c:f6:11:ac:f0:08:ef:47:47:83:b5:16:ee:55: d9:63:a8:d4:21:ce:29:83:d5:0c:f6:4c:d5:de:45: 91:0f:6d:8c:3a:7b:e7:93:3b:35:15:70:05:4f:cd: b1:b9:1f:4f:d9:a7:38:d8:68:a1:45:4f:08:ca:44: b3:c9:ff:5f:78:36:f5:6e:3e:70:3b:f9:13:9e:b3: 16:a2:54:c6:07:8c:f1:59:76:bd:63:4a:4c:ce:01: 7f:65:31:65:f3:0a:b6:da:36:56:f4:23:cd:23:71: c6:69:8a:af:ac:51:fb:3c:f0:93:df:20:60:67:72: 84:31:f2:fe:15:1a:7e:d7:00:12:77:68:c1:8b:16: 95:29:9c:6e:e0:a4:6b:29:2d:82:09:0e:ca:16:9f: b4:a8:22:ec:90:08:fd:53:3d:0e:5e:7c:42:49:43: e2:c6:91:80:e2:d7:e9:e6:62:39:d6:9f:6c:26:0e: df:59:8c:83:fd:7e:6b:5e:53:eb:58:86:85:6f:6b: 44:4f:f6:20:f4:aa:45:1c:32:6f:88:be:64:ff:a5: 98:18:3d:fa:db:49:6c:aa:c7:30:2f:31:23:e0:b0: 19:7b:1f:06:45:5f:53:bd:42:f0:48:ba:71:ae:b6: 1a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:39:9C:47:AE:86:CE:21:04:EB:1A:F9:A6:C9:6E:95:CB:3C:6A:9D X509v3 Authority Key Identifier: keyid:5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:e1:11:c0:af:74:1c:a9:e1:a4:4a:4a:1a:0e:be:ff:fd:c6: cd:94:fb:cc:39:8a:7c:81:31:9a:c1:1a:f8:32:10:da:26:a1: d5:f5:6a:65:26:27:13:21:1d:67:ac:db:20:c6:31:42:9a:8d: 14:03:bb:56:d7:72:c0:a9:48:6f:a3:fb:a0:cf:39:ca:6c:54: 11:8a:c1:04:4f:a6:89:64:81:88:b4:d2:bc:a0:80:79:96:ef: a6:51:d1:86:7a:f1:38:13:e6:c5:98:6a:3a:09:4f:eb:dc:cc: 65:94:d7:b7:cc:c4:21:c2:6d:22:0b:ad:3d:c2:bb:d8:37:e7: 94:5d:01:fb:34:4f:cc:c6:aa:08:47:bf:b9:86:78:a3:77:8d: 88:5f:cb:af:77:0a:88:86:e0:98:75:b4:74:8c:f6:9f:9c:f2: ed:bc:76:bc:8e:06:8a:d8:95:b4:44:fa:62:76:ea:01:99:b1: 8a:28:a6:6c:46:85:ca:56:90:a2:43:33:52:6e:86:12:b8:81: c1:3e:b5:e5:b0:7f:ea:43:07:d4:94:b8:a7:d0:cb:17:08:95: 48:10:fa:23:af:b4:c8:62:2c:bb:a5:ea:3f:52:3a:68:0f:bd: 66:b3:76:fb:89:82:9f:54:f5:64:6f:0f:01:3f:3a:fd:4e:33: 42:e5:37:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKa+AavzunNz/puK0V6O699WlN00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIwMzE5 MjBERjUyMTAeFw0yNTA2MjkwNzI1MzdaFw0yNTA3MDIxNjUzMzdaMDMxMTAvBgNV BAMTKDNBMzk5QzQ3QUU4NkNFMjEwNEVCMUFGOUE2Qzk2RTk1Q0IzQzZBOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLRC8ZD8jw1RcgK0NraUIs9hGs 8AjvR0eDtRbuVdljqNQhzimD1Qz2TNXeRZEPbYw6e+eTOzUVcAVPzbG5H0/ZpzjY aKFFTwjKRLPJ/194NvVuPnA7+ROesxaiVMYHjPFZdr1jSkzOAX9lMWXzCrbaNlb0 I80jccZpiq+sUfs88JPfIGBncoQx8v4VGn7XABJ3aMGLFpUpnG7gpGspLYIJDsoW n7SoIuyQCP1TPQ5efEJJQ+LGkYDi1+nmYjnWn2wmDt9ZjIP9fmteU+tYhoVva0RP 9iD0qkUcMm+IvmT/pZgYPfrbSWyqxzAvMSPgsBl7HwZFX1O9QvBIunGuthq9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOjmcR66GziEE6xr5pslulcs8ap0wHwYDVR0j BBgwFoAUXskor9c6/HDxDEaOIUggMZIN9SEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2YzZjhjOC0wNDA2LTRiMzgtYTdhOC1kY2IxNWU0MWYyYjcvMC81RUM5MjhBRkQ3 M0FGQzcwRjEwQzQ2OEUyMTQ4MjAzMTkyMERGNTIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIwMzE5MjBE RjUyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNmM2Y4YzgtMDQwNi00YjM4LWE3 YTgtZGNiMTVlNDFmMmI3LzAvNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIw MzE5MjBERjUyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACDhEcCvdByp4aRKShoOvv/9xs2U+8w5inyB MZrBGvgyENomodX1amUmJxMhHWes2yDGMUKajRQDu1bXcsCpSG+j+6DPOcpsVBGK wQRPpolkgYi00ryggHmW76ZR0YZ68TgT5sWYajoJT+vczGWU17fMxCHCbSILrT3C u9g355RdAfs0T8zGqghHv7mGeKN3jYhfy693CoiG4Jh1tHSM9p+c8u28dryOBorY lbRE+mJ26gGZsYoopmxGhcpWkKJDM1JuhhK4gcE+teWwf+pDB9SUuKfQyxcIlUgQ +iOvtMhiLLul6j9SOmgPvWazdvuJgp9U9WRvDwE/Ov1OM0LlN4s= -----END CERTIFICATE-----Generated at Mon Jun 30 03:40:23 2025 by rpki-client