$ rpki-client -vvf repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft File: 5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft (raw, json) Hash identifier: RyO9wMHnmTYG0dMCRA+2ju521/wz/M89Qx85timQZ2g= Subject key identifier: 76:A9:6F:B9:6E:A6:DB:CA:B2:BE:1D:4E:78:A1:9C:05:E4:D9:09:60 Authority key identifier: 5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F Certificate issuer: /CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F Certificate serial: 7CE41F539F7D26E5C4566939BA2A49E62598FF94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft Manifest number: 0319 Signing time: Sat 14 Jun 2025 12:41:05 +0000 Manifest this update: Sat 14 Jun 2025 12:36:05 +0000 Manifest next update: Tue 17 Jun 2025 21:10:05 +0000 Files and hashes: 1: 3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (hash: UdMMuDzVeoO8FHRaQDUzSG3siVMxaIJM4SzGz06W/gA=) 2: 3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (hash: MsMpPPcpIZuSudoMMepNN+ZazUOetlA5JvcEYSzR82g=) 3: 5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl (hash: o2ecIoIQynPo4jrbefCgllTkd31GhQY4nOVAxcgJDgo=) 4: 3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (hash: AdQ+JO/REhdDwDAu63+KE7Cs+bTRN78/P47D5a5DoZI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 21:10:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:e4:1f:53:9f:7d:26:e5:c4:56:69:39:ba:2a:49:e6:25:98:ff:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F Validity Not Before: Jun 14 12:36:05 2025 GMT Not After : Jun 17 21:10:05 2025 GMT Subject: CN=76A96FB96EA6DBCAB2BE1D4E78A19C05E4D90960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c3:7e:1e:eb:4c:04:92:86:38:25:50:29:58: a0:de:93:34:50:ad:f6:9f:73:58:bc:de:cf:4b:cc: 93:2a:e9:ca:20:e7:63:81:38:9a:a3:f7:03:ad:6f: 7f:d5:31:f1:6a:9b:59:55:ff:b1:9c:fc:52:fc:e5: 1a:c6:51:0f:9e:b1:05:27:92:35:85:9f:56:a0:87: 14:40:58:82:d1:f4:ba:1a:5e:06:1b:30:c8:e1:64: 8e:2a:50:00:63:b5:8f:ac:e7:7b:4d:af:35:99:3c: 75:2a:87:d8:38:5c:7d:c3:75:5a:32:cb:23:e2:9f: 96:17:3f:28:4a:22:07:d0:76:d8:e4:8e:99:c7:f2: 6a:d0:c6:2d:44:f3:f0:a4:87:25:54:01:f2:a5:1b: 86:3b:0a:77:f6:69:05:07:d1:5c:ef:81:22:0d:e3: 93:c0:77:30:d0:1e:88:af:c2:b6:19:97:63:5a:62: 5d:cc:ad:1c:d8:f8:29:2b:b3:ad:c6:38:b6:9c:77: f2:3f:f7:fc:84:5d:48:1b:ef:a8:80:5f:7f:b2:f7: 6f:81:69:58:f8:f9:39:a7:ae:3a:3f:d6:cf:90:a4: 8d:eb:b7:f5:2f:d8:51:4a:5f:9a:65:ed:2b:8f:ac: 65:fb:81:cb:f2:08:2c:3d:aa:86:bf:aa:a1:b2:42: 6f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:A9:6F:B9:6E:A6:DB:CA:B2:BE:1D:4E:78:A1:9C:05:E4:D9:09:60 X509v3 Authority Key Identifier: keyid:5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:d9:08:05:30:7e:86:07:c1:9b:1d:bb:6c:69:43:f3:29:a0: dd:a0:6e:01:a1:a1:75:ae:20:4d:f4:85:d8:ff:fd:1d:e4:6c: e6:0e:3c:ac:19:cc:52:4f:8a:d6:f1:1f:5a:be:06:0c:8c:6c: 0f:e1:0f:8d:ed:2d:ad:27:52:fa:f8:b0:65:20:98:d7:36:1c: 3c:fd:e6:03:a1:6b:e9:01:f7:13:50:f9:59:b6:ca:e2:02:6d: a2:fe:ab:81:77:5e:b4:ab:ae:f2:d9:23:c6:0d:98:12:ea:25: d2:a0:de:18:9b:df:aa:a0:42:6b:3b:a7:8a:a9:8b:b8:fe:d2: 98:c9:5e:ae:19:62:f3:ca:a6:85:8e:ee:98:e6:84:c2:36:31: e1:88:3d:0f:31:96:1d:8f:4c:d7:87:7c:bc:c7:09:e9:7c:6b: 26:5c:09:ff:97:ba:3c:d5:40:0f:3c:bb:24:1d:dd:6d:54:76: 02:36:14:11:d6:22:9d:c0:a1:e7:f3:b8:6f:07:14:84:63:6c: 54:b8:ea:e9:0d:a5:7b:ce:03:ea:a6:26:c9:64:b5:c7:1e:95: 42:32:6b:33:44:8f:0e:bc:e7:b4:49:e7:21:68:2a:ad:66:e6: 64:e6:8d:2f:dc:25:b9:f0:4c:d9:4e:50:7c:67:b4:e6:0e:58: 68:78:66:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfOQfU599JuXEVmk5uipJ5iWY/5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJCQ0My RTZCM0Q4RjAeFw0yNTA2MTQxMjM2MDVaFw0yNTA2MTcyMTEwMDVaMDMxMTAvBgNV BAMTKDc2QTk2RkI5NkVBNkRCQ0FCMkJFMUQ0RTc4QTE5QzA1RTREOTA5NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYw34e60wEkoY4JVApWKDekzRQ rfafc1i83s9LzJMq6cog52OBOJqj9wOtb3/VMfFqm1lV/7Gc/FL85RrGUQ+esQUn kjWFn1aghxRAWILR9LoaXgYbMMjhZI4qUABjtY+s53tNrzWZPHUqh9g4XH3DdVoy yyPin5YXPyhKIgfQdtjkjpnH8mrQxi1E8/CkhyVUAfKlG4Y7Cnf2aQUH0VzvgSIN 45PAdzDQHoivwrYZl2NaYl3MrRzY+Ckrs63GOLacd/I/9/yEXUgb76iAX3+y92+B aVj4+Tmnrjo/1s+QpI3rt/Uv2FFKX5pl7SuPrGX7gcvyCCw9qoa/qqGyQm8RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdqlvuW6m28qyvh1OeKGcBeTZCWAwHwYDVR0j BBgwFoAUXB3H6HRXqR81kVrx3j+7zC5rPY8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yzg4NDQyYi1jNDhlLTRiYTAtOGFkNy01OGUxMjYzYzZkYzcvMC81QzFEQzdFODc0 NTdBOTFGMzU5MTVBRjFERTNGQkJDQzJFNkIzRDhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJCQ0MyRTZC M0Q4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M4ODQ0MmItYzQ4ZS00YmEwLThh ZDctNThlMTI2M2M2ZGM3LzAvNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJC Q0MyRTZCM0Q4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK3ZCAUwfoYHwZsdu2xpQ/MpoN2gbgGhoXWu IE30hdj//R3kbOYOPKwZzFJPitbxH1q+BgyMbA/hD43tLa0nUvr4sGUgmNc2HDz9 5gOha+kB9xNQ+Vm2yuICbaL+q4F3XrSrrvLZI8YNmBLqJdKg3hib36qgQms7p4qp i7j+0pjJXq4ZYvPKpoWO7pjmhMI2MeGIPQ8xlh2PTNeHfLzHCel8ayZcCf+XujzV QA88uyQd3W1UdgI2FBHWIp3AoefzuG8HFIRjbFS46ukNpXvOA+qmJslktccelUIy azNEjw6857RJ5yFoKq1m5mTmjS/cJbnwTNlOUHxntOYOWGh4ZuI= -----END CERTIFICATE-----Generated at Sun Jun 15 15:42:10 2025 by rpki-client