$ rpki-client -vvf repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft File: 5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft (raw, json) Hash identifier: /O33dEdGQhftiZ6pAooFRsWZxKTmy90UutQkiEjZ8DA= Subject key identifier: 27:D7:C2:E6:29:CB:57:56:97:E8:49:63:03:B3:CE:05:EE:3A:DC:C7 Authority key identifier: 5A:0C:BE:2D:BC:F9:88:35:69:F8:C2:4B:FB:9E:59:54:42:D8:35:D0 Certificate issuer: /CN=5A0CBE2DBCF9883569F8C24BFB9E595442D835D0 Certificate serial: 508AC4AED4EE4790354DEE33CCF854DD917AC183 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft Manifest number: 04E6 Signing time: Sun 15 Jun 2025 12:31:41 +0000 Manifest this update: Sun 15 Jun 2025 12:26:41 +0000 Manifest next update: Wed 18 Jun 2025 23:56:41 +0000 Files and hashes: 1: 3130332e3134382e37362e302f32342d3234203d3e20313339393839.roa (hash: 4DHvFxVV4LIBkA3x8qQp+DBWnN9OK+EeEYU9y73AnvA=) 2: 3130332e3134382e37372e302f32342d3234203d3e20313339393839.roa (hash: MWm2F1DhYXk8gG9Y58JwnEVzuJMu3hmMEBr/crsMrlo=) 3: 3130332e3134382e37362e302f32332d3233203d3e20313339393839.roa (hash: tHgBQBHZyelL12LDcNEGOIdBk1KUkf5Y80WNybt6NLU=) 4: 323030313a6466323a633238303a3a2f34382d3438203d3e20313339393839.roa (hash: REe8Gnbzv+cpC5r6l+mKFTeY9qAThVwp1bhR4g0ii3Q=) 5: 5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl (hash: sVG7Xp753Qg7Cc1CguagtEezMIndk4pWFINpHU/arVc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 23:56:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:8a:c4:ae:d4:ee:47:90:35:4d:ee:33:cc:f8:54:dd:91:7a:c1:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A0CBE2DBCF9883569F8C24BFB9E595442D835D0 Validity Not Before: Jun 15 12:26:41 2025 GMT Not After : Jun 18 23:56:41 2025 GMT Subject: CN=27D7C2E629CB575697E8496303B3CE05EE3ADCC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d5:dd:4f:d4:67:db:4d:fd:0e:82:13:8e:62: 50:6a:62:2b:50:01:e0:2a:16:34:78:23:64:29:86: ec:01:f9:b5:ed:e5:38:0f:fb:37:2c:63:7e:1b:c5: 3e:2d:5a:66:31:c5:89:d3:4a:47:4a:e2:77:2c:34: 6b:c4:78:96:5b:d1:cb:b3:9b:68:31:45:ce:be:f9: f4:eb:be:8e:c9:08:92:06:85:5d:9e:60:61:b5:80: aa:6d:d2:75:59:07:33:ac:09:04:5c:b3:72:ac:44: c9:43:62:45:e3:04:6c:80:8b:91:3f:3d:bb:52:2b: e8:7c:68:3b:c6:96:35:d5:45:71:e4:76:0f:48:b0: 6e:73:bd:e7:f3:01:c9:d8:db:da:b4:e3:ac:9c:77: 45:1a:4c:1b:6c:dc:9c:a1:c4:37:35:a0:fb:4c:06: 14:6e:d6:29:97:ca:4f:b4:63:48:4c:b6:5a:f1:28: e4:b8:81:ac:b8:c8:93:68:66:b4:da:aa:9b:29:ad: 7f:37:45:e7:21:68:61:65:cd:38:fe:60:e8:88:a9: 84:f3:75:88:3c:e1:55:d7:21:7a:20:9d:ab:b4:12: f7:5c:d5:f7:7c:6c:a5:3b:fc:29:21:d1:3a:19:88: ef:dd:b4:16:ef:a4:fa:20:7a:24:ac:d7:8e:0b:34: 8e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D7:C2:E6:29:CB:57:56:97:E8:49:63:03:B3:CE:05:EE:3A:DC:C7 X509v3 Authority Key Identifier: keyid:5A:0C:BE:2D:BC:F9:88:35:69:F8:C2:4B:FB:9E:59:54:42:D8:35:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:a1:65:a5:59:69:8f:8f:0c:0b:d5:72:4e:ba:7c:df:b9:8f: 6b:fe:9e:9c:a7:4d:a6:09:03:65:37:8a:55:54:0c:85:23:95: c6:4b:34:6a:7f:7c:40:f0:d3:1f:61:c5:07:55:0f:2a:74:89: eb:e5:bd:86:02:c0:58:0a:d1:44:c0:3c:d1:dd:66:c0:f1:a7: 22:6a:92:c7:16:5d:d6:ec:be:e0:e6:8d:99:21:91:08:d0:07: 9e:1f:00:54:10:ee:35:ad:85:e6:85:87:4e:00:7a:65:97:d0: bf:bb:39:95:78:c5:bd:c8:64:a2:ec:5b:9e:59:2e:0d:85:48: 49:a1:10:53:e8:2c:d8:6f:d6:25:1f:93:04:0b:84:dc:41:72: 1a:77:e5:f3:75:8b:c2:f0:6b:ae:87:36:d8:f7:df:e3:15:cb: 1c:3b:e6:93:90:05:91:d8:39:e2:42:cd:35:b7:1a:bd:7b:3d: 31:22:ca:3c:b6:77:1c:77:44:80:db:84:ba:dc:12:cf:49:94: c0:47:97:43:05:74:51:d5:8a:20:8c:eb:6a:6f:55:79:c9:9e: 51:a5:d7:7c:d7:1c:d7:10:60:97:6e:77:04:72:23:d8:45:91: e2:b6:08:c5:13:ce:dd:69:67:fe:83:36:b9:91:ba:03:46:1b: 93:fb:f5:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUIrErtTuR5A1Te4zzPhU3ZF6wYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5NTQ0 MkQ4MzVEMDAeFw0yNTA2MTUxMjI2NDFaFw0yNTA2MTgyMzU2NDFaMDMxMTAvBgNV BAMTKDI3RDdDMkU2MjlDQjU3NTY5N0U4NDk2MzAzQjNDRTA1RUUzQURDQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE1d1P1GfbTf0OghOOYlBqYitQ AeAqFjR4I2QphuwB+bXt5TgP+zcsY34bxT4tWmYxxYnTSkdK4ncsNGvEeJZb0cuz m2gxRc6++fTrvo7JCJIGhV2eYGG1gKpt0nVZBzOsCQRcs3KsRMlDYkXjBGyAi5E/ PbtSK+h8aDvGljXVRXHkdg9IsG5zvefzAcnY29q046ycd0UaTBts3JyhxDc1oPtM BhRu1imXyk+0Y0hMtlrxKOS4gay4yJNoZrTaqpsprX83RechaGFlzTj+YOiIqYTz dYg84VXXIXognau0Evdc1fd8bKU7/Ckh0ToZiO/dtBbvpPogeiSs144LNI59AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ9fC5inLV1aX6EljA7POBe463McwHwYDVR0j BBgwFoAUWgy+Lbz5iDVp+MJL+55ZVELYNdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDMxNzQ2ZS1iMGY2LTQ4MjctOGM0ZS1iODE5MmRlY2MzOWEvMC81QTBDQkUyREJD Rjk4ODM1NjlGOEMyNEJGQjlFNTk1NDQyRDgzNUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5NTQ0MkQ4 MzVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAzMTc0NmUtYjBmNi00ODI3LThj NGUtYjgxOTJkZWNjMzlhLzAvNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5 NTQ0MkQ4MzVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACyhZaVZaY+PDAvVck66fN+5j2v+npynTaYJ A2U3ilVUDIUjlcZLNGp/fEDw0x9hxQdVDyp0ievlvYYCwFgK0UTAPNHdZsDxpyJq kscWXdbsvuDmjZkhkQjQB54fAFQQ7jWtheaFh04AemWX0L+7OZV4xb3IZKLsW55Z Lg2FSEmhEFPoLNhv1iUfkwQLhNxBchp35fN1i8Lwa66HNtj33+MVyxw75pOQBZHY OeJCzTW3Gr17PTEiyjy2dxx3RIDbhLrcEs9JlMBHl0MFdFHViiCM62pvVXnJnlGl 13zXHNcQYJdudwRyI9hFkeK2CMUTzt1pZ/6DNrmRugNGG5P79WE= -----END CERTIFICATE-----Generated at Mon Jun 16 20:52:37 2025 by rpki-client