$ rpki-client -vvf repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft File: 5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft (raw, json) Hash identifier: mphdPgf5ZCmhFQ+JYZ7NKw7fqKxM/Q3QPZALmTzcv/Y= Subject key identifier: 94:2D:06:61:F6:42:6B:4C:3D:7F:2E:F1:76:5F:2C:8F:45:F9:59:48 Authority key identifier: 5A:D1:91:73:FE:66:EE:2B:9E:99:5A:99:ED:7D:C4:23:01:13:BD:EF Certificate issuer: /CN=5AD19173FE66EE2B9E995A99ED7DC4230113BDEF Certificate serial: 3C01AE31BE0FDF1261459195B21BE6A29613B099 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft Manifest number: 014D Signing time: Sun 15 Jun 2025 19:41:59 +0000 Manifest this update: Sun 15 Jun 2025 19:36:59 +0000 Manifest next update: Thu 19 Jun 2025 07:19:59 +0000 Files and hashes: 1: 3130332e3132332e3137352e302f32342d3234203d3e20313530393638.roa (hash: dqxRLNjaP87/BAjwkFlOT+1aQilVY6SUF3ZdlXMJQnY=) 2: 5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl (hash: XxugpbrVvTVq/+VtNCxIlzg/BdYQ1iHDjpmEJloS7EQ=) 3: 3130332e3132332e3137342e302f32332d3233203d3e20313530393638.roa (hash: 5XRHZIZI1oj83KHXG7v/4Bg68uKlgADqYmMHikLr/vU=) 4: 3130332e3132332e3137342e302f32342d3234203d3e20313530393638.roa (hash: HBPJroPXGy8LUopobuBKzRyp/rbJ8xWZnNOPphW6Qlg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 07:19:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:01:ae:31:be:0f:df:12:61:45:91:95:b2:1b:e6:a2:96:13:b0:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AD19173FE66EE2B9E995A99ED7DC4230113BDEF Validity Not Before: Jun 15 19:36:59 2025 GMT Not After : Jun 19 07:19:59 2025 GMT Subject: CN=942D0661F6426B4C3D7F2EF1765F2C8F45F95948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d5:0b:57:bf:4d:7c:ee:3e:2c:17:f4:e9:ee: 9b:e8:f7:50:0b:8c:aa:22:9e:72:d2:79:f1:03:62: 54:ab:21:a3:4c:21:9e:b9:e2:de:cc:d9:af:bf:76: 76:90:ef:51:80:4d:15:c7:b0:b9:8c:54:27:64:90: 1a:38:c2:d1:e5:ea:90:59:b9:d6:eb:26:19:e4:bd: 37:8e:fd:fa:59:63:8b:a1:1b:4c:1f:ed:73:01:3d: d9:06:19:15:39:68:ce:00:09:a1:5d:51:99:d1:2c: cd:76:64:58:ef:e1:b2:0c:00:61:f6:c1:4f:7e:7e: 89:10:25:d3:9a:6a:96:95:23:30:8a:f5:4c:6d:24: 27:87:d9:59:d4:69:d8:65:76:93:fe:a8:4e:06:94: 10:aa:22:06:20:9a:4b:1a:7e:f1:d2:31:b1:31:77: cd:ab:90:fe:b4:e2:e8:f6:f3:76:87:45:51:65:79: cb:af:e8:4e:97:52:2a:66:fb:10:5c:78:7e:9e:3b: 5d:bd:da:47:89:8e:82:b9:43:eb:f4:d2:8a:43:19: b5:9f:49:9d:68:0d:c2:aa:5a:6b:e6:a0:5c:8a:9c: f4:d3:74:42:cc:58:22:87:06:8e:c5:14:e1:20:f2: 65:e8:79:df:11:ba:0e:2f:96:89:3a:a3:b6:c7:20: 9c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:2D:06:61:F6:42:6B:4C:3D:7F:2E:F1:76:5F:2C:8F:45:F9:59:48 X509v3 Authority Key Identifier: keyid:5A:D1:91:73:FE:66:EE:2B:9E:99:5A:99:ED:7D:C4:23:01:13:BD:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:00:61:5b:f0:22:a6:eb:d9:f9:1b:1f:33:f0:89:6f:d5:9a: 3c:10:4b:7a:ba:62:2c:da:05:96:ae:c1:00:65:c8:92:71:c8: 06:18:d1:48:9a:02:fc:99:f9:a7:76:08:6a:15:1d:09:18:bb: 99:bc:ed:d3:dd:de:fb:c9:47:1d:e1:4e:43:83:04:b7:22:88: e9:03:e1:6d:0e:da:ad:06:65:d9:ab:6e:e1:dd:62:3f:7f:a0: bc:f0:e9:6e:b8:ca:3c:4e:48:37:96:8e:d0:e0:7c:f6:b1:71: 4a:8f:02:94:55:fb:92:c5:70:5b:9d:89:e6:02:b7:9b:1d:74: 5e:96:e7:fa:1d:a5:df:fe:4a:36:85:ae:56:4a:7f:17:ad:4a: 5f:a5:33:b7:94:04:ab:51:1e:ef:70:ca:0f:5c:11:4b:8c:57: 83:0d:ff:13:14:ee:f5:96:84:29:99:c5:c4:59:17:7e:13:9e: ef:47:0a:0b:94:de:f3:c9:07:34:a4:e5:2d:2d:80:59:87:62: 1d:e8:54:3e:a8:1b:86:25:b7:3f:9e:e8:79:87:1b:9e:4d:e6: 94:9a:15:87:68:ad:80:aa:d3:aa:a7:66:7b:17:b3:ff:14:78: 68:7d:b2:67:30:be:34:22:86:74:b1:d5:39:1d:8d:2d:c2:bb: b9:59:54:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPAGuMb4P3xJhRZGVshvmopYTsJkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0MjMw MTEzQkRFRjAeFw0yNTA2MTUxOTM2NTlaFw0yNTA2MTkwNzE5NTlaMDMxMTAvBgNV BAMTKDk0MkQwNjYxRjY0MjZCNEMzRDdGMkVGMTc2NUYyQzhGNDVGOTU5NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ1QtXv0187j4sF/Tp7pvo91AL jKoinnLSefEDYlSrIaNMIZ654t7M2a+/dnaQ71GATRXHsLmMVCdkkBo4wtHl6pBZ udbrJhnkvTeO/fpZY4uhG0wf7XMBPdkGGRU5aM4ACaFdUZnRLM12ZFjv4bIMAGH2 wU9+fokQJdOaapaVIzCK9UxtJCeH2VnUadhldpP+qE4GlBCqIgYgmksafvHSMbEx d82rkP604uj283aHRVFlecuv6E6XUipm+xBceH6eO1292keJjoK5Q+v00opDGbWf SZ1oDcKqWmvmoFyKnPTTdELMWCKHBo7FFOEg8mXoed8Rug4vlok6o7bHIJzrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlC0GYfZCa0w9fy7xdl8sj0X5WUgwHwYDVR0j BBgwFoAUWtGRc/5m7iuemVqZ7X3EIwETve8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmVkYjI4Zi1mM2Y5LTQxOTktODVhMy1jOWJmOWE3YTdkZjgvMC81QUQxOTE3M0ZF NjZFRTJCOUU5OTVBOTlFRDdEQzQyMzAxMTNCREVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0MjMwMTEz QkRFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWZlZGIyOGYtZjNmOS00MTk5LTg1 YTMtYzliZjlhN2E3ZGY4LzAvNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0 MjMwMTEzQkRFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEEAYVvwIqbr2fkbHzPwiW/VmjwQS3q6Yiza BZauwQBlyJJxyAYY0UiaAvyZ+ad2CGoVHQkYu5m87dPd3vvJRx3hTkODBLciiOkD 4W0O2q0GZdmrbuHdYj9/oLzw6W64yjxOSDeWjtDgfPaxcUqPApRV+5LFcFudieYC t5sddF6W5/odpd/+SjaFrlZKfxetSl+lM7eUBKtRHu9wyg9cEUuMV4MN/xMU7vWW hCmZxcRZF34Tnu9HCguU3vPJBzSk5S0tgFmHYh3oVD6oG4Yltz+e6HmHG55N5pSa FYdorYCq06qnZnsXs/8UeGh9smcwvjQihnSx1TkdjS3Cu7lZVAk= -----END CERTIFICATE-----Generated at Mon Jun 16 22:16:22 2025 by rpki-client