$ rpki-client -vvf repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.mft File: 5B558AD01277C8212C974318B6352FB28BF683AD.mft (raw, json) Hash identifier: zcpWceNJ4Pa1aGFgJgIcCK4hPxmw2qUPwXRmaD7dVw8= Subject key identifier: A2:67:40:0B:AD:24:5D:E9:5D:51:BC:38:12:F2:D8:49:51:38:27:6F Authority key identifier: 5B:55:8A:D0:12:77:C8:21:2C:97:43:18:B6:35:2F:B2:8B:F6:83:AD Certificate issuer: /CN=5B558AD01277C8212C974318B6352FB28BF683AD Certificate serial: 05DB4FCE1AB09E33F6409EED854A123D99E6EF6B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B558AD01277C8212C974318B6352FB28BF683AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.mft Manifest number: 0199 Signing time: Sat 28 Jun 2025 01:00:49 +0000 Manifest this update: Sat 28 Jun 2025 00:55:49 +0000 Manifest next update: Tue 01 Jul 2025 04:08:49 +0000 Files and hashes: 1: 3130332e3139362e34302e302f32332d3233203d3e20313530323030.roa (hash: 0agQaQqzfkfho9nuxHylitEA2rT2w6YSuj3i1Cy3BUc=) 2: 3130332e3139362e34302e302f32342d3234203d3e20313530323030.roa (hash: 2i8HfdlFIHezHTi1m8fyUROS/IcCg2re+ftnVgBoAd4=) 3: 3130332e3139362e34312e302f32342d3234203d3e20313530323030.roa (hash: 0shHIoNgf0pQRXh0UI7r08hqky3s0DThmjqdBQikoVM=) 4: 5B558AD01277C8212C974318B6352FB28BF683AD.crl (hash: 1yzztX7at3eQ5tvybp7pXEQdtLHSh0PyKgaZvxPpBEA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.crl rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B558AD01277C8212C974318B6352FB28BF683AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 04:08:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:db:4f:ce:1a:b0:9e:33:f6:40:9e:ed:85:4a:12:3d:99:e6:ef:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B558AD01277C8212C974318B6352FB28BF683AD Validity Not Before: Jun 28 00:55:49 2025 GMT Not After : Jul 1 04:08:49 2025 GMT Subject: CN=A267400BAD245DE95D51BC3812F2D8495138276F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:73:63:e8:0d:1e:0a:f9:87:84:f9:92:f9:61: f0:aa:dd:f8:9b:a5:1c:dc:53:33:29:4f:a8:37:2e: 92:15:48:ab:bf:53:b9:f2:4c:8e:e1:d2:cd:0b:ca: 25:9b:98:00:04:ed:25:46:65:b9:c0:6b:f4:45:29: 06:52:76:b6:0d:79:a1:86:29:20:56:50:f2:c9:de: 4c:f0:35:d5:9c:17:02:25:eb:3c:1b:41:cb:73:b4: cf:d6:bd:54:da:39:36:0f:3e:10:15:7c:96:54:e0: b5:f9:9e:71:be:34:50:e6:5f:10:10:90:f0:8d:d0: 62:90:e9:79:7b:5a:f1:15:2e:96:f2:f8:aa:68:3f: 05:58:be:73:04:5e:33:4b:14:68:f8:11:f4:33:a2: 48:6a:98:c7:c7:e5:6b:e4:4a:53:92:29:58:62:a3: 33:84:e3:8e:e0:a5:58:2c:f4:fd:8f:1d:5b:dd:90: a8:d1:f9:ad:36:d3:76:f1:13:9d:ea:33:c3:97:bc: b5:be:0f:2d:14:d7:c3:d9:26:36:29:09:3f:00:9a: 1a:06:08:37:74:cf:da:12:29:0c:2c:12:5e:0b:73: b4:dc:0f:1f:c6:4a:37:ab:9d:09:5b:a5:0b:56:ba: b4:5e:85:25:05:6b:cd:c1:6b:be:3d:da:ab:e8:fd: 6b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:67:40:0B:AD:24:5D:E9:5D:51:BC:38:12:F2:D8:49:51:38:27:6F X509v3 Authority Key Identifier: keyid:5B:55:8A:D0:12:77:C8:21:2C:97:43:18:B6:35:2F:B2:8B:F6:83:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B558AD01277C8212C974318B6352FB28BF683AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa5b4fa4-328c-4cf2-ade3-c868131d4e0d/0/5B558AD01277C8212C974318B6352FB28BF683AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:8d:11:15:4a:77:2b:54:8a:72:28:4a:3a:de:cf:4f:e3:0f: 5d:a1:1d:53:b1:e7:00:7b:be:94:c2:b2:08:4f:89:1d:68:1b: e7:32:24:91:a8:cf:cd:a9:28:5f:ae:c3:6f:b5:b5:b2:44:7d: 01:f8:c4:a3:89:0e:44:7f:99:89:a8:fd:57:71:58:78:1e:cf: 7b:ab:7d:6a:b8:ac:13:22:59:3f:ab:51:3b:6e:74:38:c6:cc: 4f:c5:32:b3:64:2a:76:f4:ca:ee:93:ad:98:69:35:8f:7a:26: 73:01:5b:53:89:9a:66:f7:49:37:55:cb:c9:e8:f0:36:c3:d9: a8:06:54:e9:5d:0c:02:2f:6b:f0:51:ac:48:42:78:e5:70:e5: 68:91:2d:b7:29:63:f7:2d:4d:a6:8b:af:e6:6d:90:07:86:ea: c5:50:ef:41:12:00:19:ec:37:6c:75:d9:3b:b5:6e:14:3d:37: 34:8d:1e:f6:5a:fa:43:a8:66:87:b4:dd:45:6b:2d:6e:54:43: c9:2b:eb:4c:b4:0e:60:b8:18:70:e6:b7:43:ab:f3:ac:44:b8: 65:d1:ed:98:d3:91:a4:7c:a7:12:e6:a6:dd:96:af:16:13:fe: 4a:da:27:cc:9b:cc:8a:ff:f2:7d:6d:66:0a:31:a2:79:54:31: 5a:a3:09:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBdtPzhqwnjP2QJ7thUoSPZnm72swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI1NThBRDAxMjc3QzgyMTJDOTc0MzE4QjYzNTJGQjI4 QkY2ODNBRDAeFw0yNTA2MjgwMDU1NDlaFw0yNTA3MDEwNDA4NDlaMDMxMTAvBgNV BAMTKEEyNjc0MDBCQUQyNDVERTk1RDUxQkMzODEyRjJEODQ5NTEzODI3NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpc2PoDR4K+YeE+ZL5YfCq3fib pRzcUzMpT6g3LpIVSKu/U7nyTI7h0s0LyiWbmAAE7SVGZbnAa/RFKQZSdrYNeaGG KSBWUPLJ3kzwNdWcFwIl6zwbQctztM/WvVTaOTYPPhAVfJZU4LX5nnG+NFDmXxAQ kPCN0GKQ6Xl7WvEVLpby+KpoPwVYvnMEXjNLFGj4EfQzokhqmMfH5WvkSlOSKVhi ozOE447gpVgs9P2PHVvdkKjR+a0203bxE53qM8OXvLW+Dy0U18PZJjYpCT8AmhoG CDd0z9oSKQwsEl4Lc7TcDx/GSjernQlbpQtWurRehSUFa83Ba7492qvo/WtRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUomdAC60kXeldUbw4EvLYSVE4J28wHwYDVR0j BBgwFoAUW1WK0BJ3yCEsl0MYtjUvsov2g60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YTViNGZhNC0zMjhjLTRjZjItYWRlMy1jODY4MTMxZDRlMGQvMC81QjU1OEFEMDEy NzdDODIxMkM5NzQzMThCNjM1MkZCMjhCRjY4M0FELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUI1NThBRDAxMjc3QzgyMTJDOTc0MzE4QjYzNTJGQjI4QkY2 ODNBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmE1YjRmYTQtMzI4Yy00Y2YyLWFk ZTMtYzg2ODEzMWQ0ZTBkLzAvNUI1NThBRDAxMjc3QzgyMTJDOTc0MzE4QjYzNTJG QjI4QkY2ODNBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFSNERVKdytUinIoSjrez0/jD12hHVOx5wB7 vpTCsghPiR1oG+cyJJGoz82pKF+uw2+1tbJEfQH4xKOJDkR/mYmo/VdxWHgez3ur fWq4rBMiWT+rUTtudDjGzE/FMrNkKnb0yu6TrZhpNY96JnMBW1OJmmb3STdVy8no 8DbD2agGVOldDAIva/BRrEhCeOVw5WiRLbcpY/ctTaaLr+ZtkAeG6sVQ70ESABns N2x12Tu1bhQ9NzSNHvZa+kOoZoe03UVrLW5UQ8kr60y0DmC4GHDmt0Or86xEuGXR 7ZjTkaR8pxLmpt2WrxYT/kraJ8ybzIr/8n1tZgoxonlUMVqjCds= -----END CERTIFICATE-----Generated at Mon Jun 30 04:39:43 2025 by rpki-client