$ rpki-client -vvf repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft File: 5C7240CA135C93835F95A8E1F3526942D3214EC2.mft (raw, json) Hash identifier: YnF7Neh9+zW4/LH/GwobCPiUR0mwdGH1fi7yzZeTZTM= Subject key identifier: E2:9E:24:1C:B9:9B:26:F6:AF:BB:3E:F9:26:13:8B:7A:5F:FD:90:9D Authority key identifier: 5C:72:40:CA:13:5C:93:83:5F:95:A8:E1:F3:52:69:42:D3:21:4E:C2 Certificate issuer: /CN=5C7240CA135C93835F95A8E1F3526942D3214EC2 Certificate serial: 2BB681B4DCE31F837586BCD113700B8DD8D3E06A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft Manifest number: 01E7 Signing time: Mon 16 Jun 2025 15:31:30 +0000 Manifest this update: Mon 16 Jun 2025 15:26:30 +0000 Manifest next update: Thu 19 Jun 2025 16:13:30 +0000 Files and hashes: 1: 5C7240CA135C93835F95A8E1F3526942D3214EC2.crl (hash: yGiglf9lPw21jvY18vppzDPtCNmV/5ZMvmyKJ8+dJvQ=) 2: 3130332e3139302e34362e302f32342d3234203d3e2039333431.roa (hash: jBjxNJ+007Quwhm8JkgTbciN359d/zYXuYTKIMisTrU=) 3: 3130332e3139302e34372e302f32342d3234203d3e2039333431.roa (hash: rr9ymmJLTXtCYmg7wZwMhNNVHwxbRfZ339GatX+MBVg=) 4: 3130332e3139302e34362e302f32332d3233203d3e2039333431.roa (hash: WvXqqkpLSakilobbbh3oi/iYc3pt0ZdEradB47daqG8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.crl rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 16:13:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:b6:81:b4:dc:e3:1f:83:75:86:bc:d1:13:70:0b:8d:d8:d3:e0:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C7240CA135C93835F95A8E1F3526942D3214EC2 Validity Not Before: Jun 16 15:26:30 2025 GMT Not After : Jun 19 16:13:30 2025 GMT Subject: CN=E29E241CB99B26F6AFBB3EF926138B7A5FFD909D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6b:3c:49:19:48:72:cf:d3:d4:fc:53:f7:c2: b0:67:0b:91:59:2a:c6:f5:80:e8:bb:aa:b4:48:b5: 69:58:59:11:f0:54:cf:48:70:af:03:2e:1d:62:93: 7d:f3:88:8b:b7:bd:c2:67:19:b3:1a:6d:30:5b:db: 9d:d3:9e:0f:36:0b:73:3e:2d:84:eb:19:07:c7:03: 18:4b:fe:30:93:e6:db:b1:05:69:74:8d:20:f5:ad: 19:40:14:47:7c:87:13:eb:26:3b:b0:76:44:54:15: 49:f6:0f:b6:eb:aa:a2:40:77:be:77:b7:d2:d5:67: 1e:25:f5:d9:52:5f:d1:6e:87:db:a9:c3:d1:b7:9f: 90:e6:1c:93:cc:99:3a:6b:f4:88:2d:59:42:75:1f: 18:74:b3:8b:c6:2e:23:1c:a6:dc:e6:43:e9:db:ab: 25:be:a0:bb:7f:9d:0e:75:af:7c:8e:65:fb:15:ad: 72:c6:95:e5:5a:83:ae:0e:93:f8:fb:b4:c6:5d:63: 20:77:17:e1:4c:99:95:63:da:cb:c2:68:b4:11:84: e8:20:5a:e9:3b:a9:9e:de:84:bf:16:88:c2:a0:8f: 82:1c:de:5c:d4:cb:3a:0c:fa:b7:41:cf:77:c2:97: ae:c0:3d:25:d4:61:c5:f3:05:58:c2:49:e4:51:f9: d1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:9E:24:1C:B9:9B:26:F6:AF:BB:3E:F9:26:13:8B:7A:5F:FD:90:9D X509v3 Authority Key Identifier: keyid:5C:72:40:CA:13:5C:93:83:5F:95:A8:E1:F3:52:69:42:D3:21:4E:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:ac:ad:93:29:ba:26:bb:44:2c:2c:77:e0:1b:7b:b5:45:6d: b1:80:70:ef:fc:d1:94:f1:72:81:b5:92:3f:ff:c2:38:55:33: 96:4f:1d:05:46:e6:9f:0f:2a:72:1c:d2:b0:65:46:44:ab:2a: 87:b0:d3:60:98:3e:8d:3f:b7:5c:42:f8:2a:3a:09:0c:98:f9: 9f:6d:7a:86:ef:e2:a4:dd:13:18:81:68:05:0b:6f:18:a7:9d: f6:9c:c5:05:8a:e8:67:f0:e0:49:00:55:33:50:57:68:64:df: 1a:72:46:4d:ab:e8:16:0f:15:51:0b:ec:29:e4:c9:ef:b0:41: 78:34:49:e2:08:04:d3:d4:07:0d:58:1a:4f:d7:5d:4c:eb:51: e1:38:73:c7:3c:70:51:b3:01:be:0f:2f:df:d3:a4:7a:c2:a2: 3e:9d:d4:ad:d9:5b:e9:03:77:31:5f:47:f0:af:4b:c9:13:ff: a6:6b:bf:ea:74:a7:38:75:17:0a:65:39:8e:95:47:94:3b:52: d8:e9:f2:ed:c4:b2:36:7f:a0:7e:08:64:73:51:51:55:f0:ee: 85:93:24:db:39:59:37:dd:e1:71:58:5f:75:cd:e7:67:a0:c1: c7:4c:1f:4a:03:2a:57:29:04:ab:ff:c5:51:64:21:c0:3c:b8: b6:98:9d:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK7aBtNzjH4N1hrzRE3ALjdjT4GowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM3MjQwQ0ExMzVDOTM4MzVGOTVBOEUxRjM1MjY5NDJE MzIxNEVDMjAeFw0yNTA2MTYxNTI2MzBaFw0yNTA2MTkxNjEzMzBaMDMxMTAvBgNV BAMTKEUyOUUyNDFDQjk5QjI2RjZBRkJCM0VGOTI2MTM4QjdBNUZGRDkwOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgazxJGUhyz9PU/FP3wrBnC5FZ Ksb1gOi7qrRItWlYWRHwVM9IcK8DLh1ik33ziIu3vcJnGbMabTBb253Tng82C3M+ LYTrGQfHAxhL/jCT5tuxBWl0jSD1rRlAFEd8hxPrJjuwdkRUFUn2D7brqqJAd753 t9LVZx4l9dlSX9Fuh9upw9G3n5DmHJPMmTpr9IgtWUJ1Hxh0s4vGLiMcptzmQ+nb qyW+oLt/nQ51r3yOZfsVrXLGleVag64Ok/j7tMZdYyB3F+FMmZVj2svCaLQRhOgg Wuk7qZ7ehL8WiMKgj4Ic3lzUyzoM+rdBz3fCl67APSXUYcXzBVjCSeRR+dGtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4p4kHLmbJvavuz75JhOLel/9kJ0wHwYDVR0j BBgwFoAUXHJAyhNck4Nflajh81JpQtMhTsIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjFmOTk5Yi1hYmNlLTRmYTktOGU3OS05M2I5YzVlNDU0ZTEvMC81QzcyNDBDQTEz NUM5MzgzNUY5NUE4RTFGMzUyNjk0MkQzMjE0RUMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM3MjQwQ0ExMzVDOTM4MzVGOTVBOEUxRjM1MjY5NDJEMzIx NEVDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIxZjk5OWItYWJjZS00ZmE5LThl NzktOTNiOWM1ZTQ1NGUxLzAvNUM3MjQwQ0ExMzVDOTM4MzVGOTVBOEUxRjM1MjY5 NDJEMzIxNEVDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmsrZMpuia7RCwsd+Abe7VFbbGAcO/80ZTx coG1kj//wjhVM5ZPHQVG5p8PKnIc0rBlRkSrKoew02CYPo0/t1xC+Co6CQyY+Z9t eobv4qTdExiBaAULbxinnfacxQWK6Gfw4EkAVTNQV2hk3xpyRk2r6BYPFVEL7Cnk ye+wQXg0SeIIBNPUBw1YGk/XXUzrUeE4c8c8cFGzAb4PL9/TpHrCoj6d1K3ZW+kD dzFfR/CvS8kT/6Zrv+p0pzh1FwplOY6VR5Q7Utjp8u3EsjZ/oH4IZHNRUVXw7oWT JNs5WTfd4XFYX3XN52egwcdMH0oDKlcpBKv/xVFkIcA8uLaYnbM= -----END CERTIFICATE-----Generated at Tue Jun 17 11:11:36 2025 by rpki-client