$ rpki-client -vvf repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft File: 5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft (raw, json) Hash identifier: NA65Tq16sylYi6DXaUVOYE6PD3szy2httxLpUOGswQY= Subject key identifier: 52:19:A6:9F:35:DF:DB:8A:9D:69:E0:0A:0F:E0:2E:F4:85:FD:24:14 Authority key identifier: 5F:E2:D2:A6:AB:51:68:6B:C9:12:62:CC:80:15:2C:19:50:63:7A:EA Certificate issuer: /CN=5FE2D2A6AB51686BC91262CC80152C1950637AEA Certificate serial: 68ADFB61249CAF3F1428E67AA6AF1571E6A39D60 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft Manifest number: 92 Signing time: Sun 15 Jun 2025 19:21:58 +0000 Manifest this update: Sun 15 Jun 2025 19:16:58 +0000 Manifest next update: Thu 19 Jun 2025 02:57:58 +0000 Files and hashes: 1: 3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa (hash: IYlIkK9ZMSP7xUAGZ1Am2ZgHJrv4HQzXJImTEhZj1s8=) 2: 5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl (hash: AhuOE5tyvP60Ej+p/K8kwE541NiPhIOGVk5Mof6usSM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 02:57:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:ad:fb:61:24:9c:af:3f:14:28:e6:7a:a6:af:15:71:e6:a3:9d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FE2D2A6AB51686BC91262CC80152C1950637AEA Validity Not Before: Jun 15 19:16:58 2025 GMT Not After : Jun 19 02:57:58 2025 GMT Subject: CN=5219A69F35DFDB8A9D69E00A0FE02EF485FD2414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d4:5a:e0:bf:ca:66:2e:dd:ce:cc:9c:12:37: 70:cd:3f:54:db:38:33:15:19:d3:3e:e5:cd:c0:d3: 82:92:cd:9f:1b:1b:81:d3:02:a1:b1:d9:1d:23:c1: b2:33:5e:8b:fb:dc:e4:ac:54:eb:04:29:01:d2:c2: 71:d9:ed:0d:77:97:06:17:06:45:b8:78:b6:67:bc: ef:16:42:29:21:b3:8b:bc:51:cb:11:3e:d9:21:64: 53:d6:d1:4b:c6:2e:cf:69:11:b3:97:38:6d:d0:2f: f4:0a:9e:19:8d:dc:40:df:72:da:0c:42:69:f4:07: b8:fa:98:84:51:54:94:4a:ec:8a:d4:7e:1b:93:7a: c1:32:70:72:53:f7:70:f7:8b:7d:de:43:30:11:50: ab:02:02:71:8c:b6:e3:89:41:a0:06:fc:f8:26:24: d9:61:8b:2a:d7:b3:74:75:08:7f:c3:5e:e8:55:23: 8b:93:a5:79:9b:75:1b:de:19:19:a3:6d:e4:dc:3e: 53:d2:a7:95:fe:fd:1b:7e:ba:16:5e:45:67:9e:8f: b2:e1:b3:53:91:e1:49:d5:d1:06:2d:85:ee:cd:73: 1e:d3:78:36:d4:96:56:5e:6e:17:b9:e8:b5:e1:2d: e8:cd:1e:b6:1a:30:13:fc:0e:74:88:8d:5c:35:5f: 37:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:19:A6:9F:35:DF:DB:8A:9D:69:E0:0A:0F:E0:2E:F4:85:FD:24:14 X509v3 Authority Key Identifier: keyid:5F:E2:D2:A6:AB:51:68:6B:C9:12:62:CC:80:15:2C:19:50:63:7A:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:76:15:e4:79:08:b2:83:38:31:ae:fe:0b:f5:37:ef:f2:19: de:85:65:0c:59:1c:b4:e9:ee:ff:66:7c:ba:09:e4:5b:5a:6e: e6:7a:e2:bf:65:8d:c7:7f:a8:0c:92:d3:33:ce:50:cf:5e:3e: b1:04:2e:74:d4:36:6d:e8:4b:51:3f:ee:d6:6f:cf:22:f9:00: c9:41:47:29:dd:f3:a1:33:2d:83:b7:67:b6:a0:ff:7b:3c:38: 00:50:51:cf:35:65:ee:cc:dc:7d:2c:01:6c:e3:f0:5d:65:3b: a5:00:7d:11:0a:e4:4a:a0:45:eb:d5:5f:64:47:32:90:fc:a4: b9:fb:e3:9a:f8:70:55:78:1b:50:03:7a:d8:33:5c:72:e9:a0: be:3f:24:33:f4:a6:73:eb:9f:d5:3f:85:06:62:76:61:58:5e: 70:46:c5:f4:83:cd:35:a3:56:a2:f8:ee:67:22:37:7f:c6:d0: eb:81:75:f6:ca:22:43:58:0b:7f:1c:e6:19:1f:d5:5b:92:35: 0b:35:38:d5:8e:f6:4b:96:3b:b8:f3:8a:4f:cc:ab:44:56:e6: 28:b6:08:ef:a3:b1:87:4b:fe:17:3c:15:e5:03:d2:05:4a:5d: 2e:cc:ca:e1:d3:24:29:24:d5:47:e5:d7:00:e2:3b:b0:11:7f: da:6c:1c:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaK37YSScrz8UKOZ6pq8VceajnWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJDMTk1 MDYzN0FFQTAeFw0yNTA2MTUxOTE2NThaFw0yNTA2MTkwMjU3NThaMDMxMTAvBgNV BAMTKDUyMTlBNjlGMzVERkRCOEE5RDY5RTAwQTBGRTAyRUY0ODVGRDI0MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq1Frgv8pmLt3OzJwSN3DNP1Tb ODMVGdM+5c3A04KSzZ8bG4HTAqGx2R0jwbIzXov73OSsVOsEKQHSwnHZ7Q13lwYX BkW4eLZnvO8WQikhs4u8UcsRPtkhZFPW0UvGLs9pEbOXOG3QL/QKnhmN3EDfctoM Qmn0B7j6mIRRVJRK7IrUfhuTesEycHJT93D3i33eQzARUKsCAnGMtuOJQaAG/Pgm JNlhiyrXs3R1CH/DXuhVI4uTpXmbdRveGRmjbeTcPlPSp5X+/Rt+uhZeRWeej7Lh s1OR4UnV0QYthe7Ncx7TeDbUllZebhe56LXhLejNHrYaMBP8DnSIjVw1XzeLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUhmmnzXf24qdaeAKD+Au9IX9JBQwHwYDVR0j BBgwFoAUX+LSpqtRaGvJEmLMgBUsGVBjeuowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjEwZWMwZi0wNDIwLTQwMmYtOTVmZS03YjMzZTUxMTJiYzMvMC81RkUyRDJBNkFC NTE2ODZCQzkxMjYyQ0M4MDE1MkMxOTUwNjM3QUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJDMTk1MDYz N0FFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDIxMGVjMGYtMDQyMC00MDJmLTk1 ZmUtN2IzM2U1MTEyYmMzLzAvNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJD MTk1MDYzN0FFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADh2FeR5CLKDODGu/gv1N+/yGd6FZQxZHLTp 7v9mfLoJ5FtabuZ64r9ljcd/qAyS0zPOUM9ePrEELnTUNm3oS1E/7tZvzyL5AMlB Rynd86EzLYO3Z7ag/3s8OABQUc81Ze7M3H0sAWzj8F1lO6UAfREK5EqgRevVX2RH MpD8pLn745r4cFV4G1ADetgzXHLpoL4/JDP0pnPrn9U/hQZidmFYXnBGxfSDzTWj VqL47mciN3/G0OuBdfbKIkNYC38c5hkf1VuSNQs1ONWO9kuWO7jzik/Mq0RW5ii2 CO+jsYdL/hc8FeUD0gVKXS7MyuHTJCkk1Ufl1wDiO7ARf9psHPQ= -----END CERTIFICATE-----Generated at Tue Jun 17 05:30:38 2025 by rpki-client