$ rpki-client -vvf repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft File: 5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft (raw, json) Hash identifier: PUfuZT62P3REaUJ4tNOOLv1Fs/9tbM0R4PEKtpboJVs= Subject key identifier: DC:61:2B:46:3C:E8:AB:54:D4:AB:0A:C4:0B:DB:B5:F2:94:64:06:7E Authority key identifier: 5B:B7:E8:A3:AB:F6:DF:6D:46:C3:D5:F9:1E:C3:B7:78:70:CE:6C:61 Certificate issuer: /CN=5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61 Certificate serial: 45CBC0D2A50C4F920E54A50E0431E4B1EAC6B4E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft Manifest number: A3 Signing time: Tue 17 Jun 2025 12:30:38 +0000 Manifest this update: Tue 17 Jun 2025 12:25:38 +0000 Manifest next update: Fri 20 Jun 2025 23:50:38 +0000 Files and hashes: 1: 3136302e32322e37302e302f32332d3234203d3e203538333831.roa (hash: FO3pGbtDCey282ifjhO/l/kBiiy065aX3qH0ZWB4XyM=) 2: 5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl (hash: INvkNZ4buOErQZKjYOnQCt0AHfr5eJmTqsbXTN3aNng=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 18:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:cb:c0:d2:a5:0c:4f:92:0e:54:a5:0e:04:31:e4:b1:ea:c6:b4:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61 Validity Not Before: Jun 17 12:25:38 2025 GMT Not After : Jun 20 23:50:38 2025 GMT Subject: CN=DC612B463CE8AB54D4AB0AC40BDBB5F29464067E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2d:57:e8:29:c8:f1:e2:74:a2:87:95:a2:fa: c3:23:4e:e9:7e:a6:95:50:79:63:08:f6:bb:2f:95: b4:2f:d9:23:9b:7a:aa:19:d1:55:6e:c5:11:70:3e: 8d:7c:6a:11:10:4a:55:8c:34:6c:65:4d:30:90:d2: 40:df:93:b6:0c:dd:7f:dc:c1:2e:32:f4:22:0d:ed: e6:87:75:30:07:f4:3d:10:2a:3a:f9:b1:de:a1:cc: 60:77:36:13:e5:49:9b:11:80:aa:6e:6c:4a:8f:81: af:3a:79:8a:09:4b:fb:ad:23:04:24:cf:d5:ff:e9: 21:45:3d:14:eb:e9:ed:54:5b:bf:c4:00:f5:3d:cf: c8:5f:2a:28:b2:55:00:85:88:e8:e9:88:75:eb:04: a9:2f:b2:31:c0:d9:b7:ea:5a:df:e4:56:40:c9:6a: f5:eb:6e:44:63:67:04:80:18:5c:eb:f0:44:00:53: 17:96:3c:9d:99:54:8c:c3:f1:08:c9:02:18:54:9c: 68:06:22:a9:ff:cc:6c:d9:f2:59:dd:97:15:b6:bd: e0:fa:94:85:93:0e:f7:9e:05:63:fe:a9:53:d5:92: cd:d6:2c:03:8d:80:00:5b:71:06:97:89:d0:3e:5e: 94:7d:bb:9d:56:c9:e8:39:56:49:c2:c9:2f:94:52: 73:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:61:2B:46:3C:E8:AB:54:D4:AB:0A:C4:0B:DB:B5:F2:94:64:06:7E X509v3 Authority Key Identifier: keyid:5B:B7:E8:A3:AB:F6:DF:6D:46:C3:D5:F9:1E:C3:B7:78:70:CE:6C:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:18:c1:cc:83:7b:80:a9:47:2e:84:7c:8a:6b:41:3b:38:69: a2:ee:55:5c:bf:41:3d:51:4b:0e:f9:7b:5b:84:fa:84:e4:be: ac:50:45:a6:90:47:6e:d5:ec:ca:d8:55:26:cf:5b:78:db:5b: 7a:b5:6a:27:7f:1a:a1:b7:f3:66:d5:53:77:93:30:44:ea:7d: b9:8d:61:e7:64:43:bf:74:e2:17:e8:31:bb:64:2e:ec:63:2d: 4a:aa:42:e5:56:a5:1d:50:6a:1b:b5:8a:93:e7:b3:cc:cc:af: 34:7b:9d:f4:e0:55:5b:7c:75:57:c3:49:fd:bb:5b:9b:7c:26: 99:49:e4:bd:c9:e8:d4:72:f6:6e:04:32:4b:c7:18:cd:ed:b9: 11:5b:fc:d1:82:48:5e:67:7e:1c:56:b2:ba:d8:23:62:7f:bb: e5:83:e6:ba:02:14:84:c0:3b:e4:8f:af:c3:cb:95:d4:dc:d4: 69:ae:c3:d2:74:aa:74:ec:bd:22:ab:83:7a:63:70:c3:78:58: 57:66:84:47:07:61:d7:5b:ae:0d:8a:dc:04:7a:7a:73:af:a4: 7e:f7:70:e5:51:6b:ed:7b:9d:d1:b1:4a:99:c0:02:aa:62:9e: 16:a7:4f:83:83:cc:d5:44:36:d1:2b:fe:5e:14:3f:2e:05:c3: 08:77:e5:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURcvA0qUMT5IOVKUOBDHkserGtOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJCN0U4QTNBQkY2REY2RDQ2QzNENUY5MUVDM0I3Nzg3 MENFNkM2MTAeFw0yNTA2MTcxMjI1MzhaFw0yNTA2MjAyMzUwMzhaMDMxMTAvBgNV BAMTKERDNjEyQjQ2M0NFOEFCNTRENEFCMEFDNDBCREJCNUYyOTQ2NDA2N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzLVfoKcjx4nSih5Wi+sMjTul+ ppVQeWMI9rsvlbQv2SObeqoZ0VVuxRFwPo18ahEQSlWMNGxlTTCQ0kDfk7YM3X/c wS4y9CIN7eaHdTAH9D0QKjr5sd6hzGB3NhPlSZsRgKpubEqPga86eYoJS/utIwQk z9X/6SFFPRTr6e1UW7/EAPU9z8hfKiiyVQCFiOjpiHXrBKkvsjHA2bfqWt/kVkDJ avXrbkRjZwSAGFzr8EQAUxeWPJ2ZVIzD8QjJAhhUnGgGIqn/zGzZ8lndlxW2veD6 lIWTDveeBWP+qVPVks3WLAONgABbcQaXidA+XpR9u51Wyeg5VknCyS+UUnPbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3GErRjzoq1TUqwrEC9u18pRkBn4wHwYDVR0j BBgwFoAUW7foo6v2321Gw9X5HsO3eHDObGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NWEyMDA3Ny1mYzUzLTQzYTMtYmRhNy1mMzk5NTZkOTkyNmQvMC81QkI3RThBM0FC RjZERjZENDZDM0Q1RjkxRUMzQjc3ODcwQ0U2QzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUJCN0U4QTNBQkY2REY2RDQ2QzNENUY5MUVDM0I3Nzg3MENF NkM2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzVhMjAwNzctZmM1My00M2EzLWJk YTctZjM5OTU2ZDk5MjZkLzAvNUJCN0U4QTNBQkY2REY2RDQ2QzNENUY5MUVDM0I3 Nzg3MENFNkM2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJsYwcyDe4CpRy6EfIprQTs4aaLuVVy/QT1R Sw75e1uE+oTkvqxQRaaQR27V7MrYVSbPW3jbW3q1aid/GqG382bVU3eTMETqfbmN YedkQ7904hfoMbtkLuxjLUqqQuVWpR1Qahu1ipPns8zMrzR7nfTgVVt8dVfDSf27 W5t8JplJ5L3J6NRy9m4EMkvHGM3tuRFb/NGCSF5nfhxWsrrYI2J/u+WD5roCFITA O+SPr8PLldTc1Gmuw9J0qnTsvSKrg3pjcMN4WFdmhEcHYddbrg2K3AR6enOvpH73 cOVRa+17ndGxSpnAAqpinhanT4ODzNVENtEr/l4UPy4Fwwh35TI= -----END CERTIFICATE-----Generated at Tue Jun 17 14:54:51 2025 by rpki-client