$ rpki-client -vvf repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft File: 5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft (raw, json) Hash identifier: jUnSynV9oQTHyveHcO3QNCeMLhy/7uiQvFi0QyjlUPc= Subject key identifier: AE:07:7D:89:DA:58:77:BC:E6:A0:B9:C2:E3:FD:41:37:0F:0E:18:6C Authority key identifier: 5D:DD:CC:DF:3A:FC:49:2F:6C:C4:87:1D:60:72:A5:AF:A9:73:A0:60 Certificate issuer: /CN=5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060 Certificate serial: 5ECB885BA08EBC88886B7B705DF9CC86AF6BE997 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft Manifest number: 01A1 Signing time: Sat 14 Jun 2025 07:31:23 +0000 Manifest this update: Sat 14 Jun 2025 07:26:23 +0000 Manifest next update: Tue 17 Jun 2025 16:00:23 +0000 Files and hashes: 1: 34392e3135362e36302e302f32342d3234203d3e203535363637.roa (hash: 5nBpHkwL82Gi9NUGyKestOksjx7zZUbyEsgUlUqCAVE=) 2: 34392e3135362e35372e302f32342d3234203d3e203535363637.roa (hash: SjmKWLBiEMFhWXiRMo2sqEynUyemXFh8rKM/uEFt5LQ=) 3: 5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.crl (hash: QkIuiMX1UCiNwT5YWADkvSROkwKZc1gFLVXUh+Db+lI=) 4: 34392e3135362e35362e302f32332d3233203d3e203535363637.roa (hash: NbIqv7AUSQMS1xCn0a3rRo2bmONh2GyMw23FeabY33s=) 5: 34392e3135362e35362e302f32342d3234203d3e203535363637.roa (hash: nwE4egVuBWgMCKw3YCKh6VmNh2jKygK5nst6ZKFNdIE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.crl rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 16:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:cb:88:5b:a0:8e:bc:88:88:6b:7b:70:5d:f9:cc:86:af:6b:e9:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060 Validity Not Before: Jun 14 07:26:23 2025 GMT Not After : Jun 17 16:00:23 2025 GMT Subject: CN=AE077D89DA5877BCE6A0B9C2E3FD41370F0E186C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:5c:b2:34:6f:28:bf:ea:17:63:6b:b0:24:07: a6:36:82:8e:a0:b1:c9:20:2e:e5:78:b1:be:b0:d5: 48:6e:93:64:e7:7c:19:04:80:7a:73:60:7c:6c:6d: 02:e3:00:7f:3e:c6:2f:b1:9b:6f:37:02:09:54:c6: bb:84:1e:1d:56:c9:6a:fe:7b:d4:48:0e:41:46:fb: e3:80:da:e7:dd:12:19:ba:29:b2:a8:71:50:c7:0e: 5d:2a:c0:26:f5:84:6c:09:5c:6b:a6:10:ea:ea:50: f5:6a:5c:c9:b7:62:b3:aa:7c:67:56:bd:a1:32:a2: 17:f3:46:c9:59:8a:ff:ad:71:6f:42:20:ed:9b:fd: 81:c7:0c:be:60:d5:a4:98:15:13:3c:c5:3d:07:ae: 8e:15:cd:8b:7b:f8:0c:ac:2c:cd:2a:af:ee:f6:52: 0e:27:1d:09:11:b2:e9:72:32:3a:06:dc:44:45:23: ec:4e:46:65:3d:6f:07:0d:f3:34:b4:40:9e:a7:79: c1:5a:47:49:b7:53:18:e2:16:dc:fe:50:ed:db:f9: f7:e3:c6:bd:b8:04:1f:6d:8f:f4:9d:80:ac:a8:89: 2a:b3:1a:17:65:b3:2f:ad:5a:5b:0f:9e:40:93:17: 05:0d:fa:be:10:04:5b:83:13:1c:96:44:84:e0:dd: 14:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:07:7D:89:DA:58:77:BC:E6:A0:B9:C2:E3:FD:41:37:0F:0E:18:6C X509v3 Authority Key Identifier: keyid:5D:DD:CC:DF:3A:FC:49:2F:6C:C4:87:1D:60:72:A5:AF:A9:73:A0:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:30:c4:ad:b9:b5:7d:a0:1d:98:6f:90:09:47:a6:4d:ee:fa: e2:50:51:6f:24:5a:c2:22:1f:b6:13:23:6e:05:bd:2f:ef:71: 30:18:1a:f8:d1:66:cb:93:05:94:17:5d:91:45:d7:9a:b6:9f: 1f:9e:bb:fb:32:2e:6b:06:01:6e:22:cd:92:35:f8:ed:b5:9b: 79:8b:75:0c:52:0e:83:b7:28:08:1d:9e:82:c1:db:37:c4:6d: f4:29:7e:cf:06:92:70:df:16:46:7c:58:17:58:cd:9f:cc:db: e1:1a:9c:fa:98:e5:f7:8a:4f:7f:4f:54:22:eb:09:79:b0:46: f6:5b:00:20:91:db:d1:b5:11:9a:a4:f4:c9:0f:e9:94:3f:62: 9e:2f:84:54:79:18:65:60:1f:c0:17:e6:71:41:fc:e0:43:75: 99:80:80:8f:67:5d:82:05:2a:60:5d:fa:5c:c8:fa:36:a0:d4: dd:2b:8f:27:69:19:a7:06:ae:50:6f:c8:80:2b:31:65:45:1e: d3:38:6a:62:9c:0c:d7:a2:55:8f:97:a0:b6:6d:8a:c9:72:79: be:f0:9a:9a:bb:db:85:a5:44:55:23:c4:33:cf:4f:c1:8c:bd: 48:40:9c:7a:7c:e4:0b:7d:ac:52:7b:a7:71:96:d2:44:bb:56: d9:74:88:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXsuIW6COvIiIa3twXfnMhq9r6ZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURERENDREYzQUZDNDkyRjZDQzQ4NzFENjA3MkE1QUZB OTczQTA2MDAeFw0yNTA2MTQwNzI2MjNaFw0yNTA2MTcxNjAwMjNaMDMxMTAvBgNV BAMTKEFFMDc3RDg5REE1ODc3QkNFNkEwQjlDMkUzRkQ0MTM3MEYwRTE4NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvXLI0byi/6hdja7AkB6Y2go6g sckgLuV4sb6w1Uhuk2TnfBkEgHpzYHxsbQLjAH8+xi+xm283AglUxruEHh1WyWr+ e9RIDkFG++OA2ufdEhm6KbKocVDHDl0qwCb1hGwJXGumEOrqUPVqXMm3YrOqfGdW vaEyohfzRslZiv+tcW9CIO2b/YHHDL5g1aSYFRM8xT0Hro4VzYt7+AysLM0qr+72 Ug4nHQkRsulyMjoG3ERFI+xORmU9bwcN8zS0QJ6necFaR0m3UxjiFtz+UO3b+ffj xr24BB9tj/SdgKyoiSqzGhdlsy+tWlsPnkCTFwUN+r4QBFuDExyWRITg3RS3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrgd9idpYd7zmoLnC4/1BNw8OGGwwHwYDVR0j BBgwFoAUXd3M3zr8SS9sxIcdYHKlr6lzoGAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjA2Y2Y1MC1hM2QxLTRjYzktOTI2MC05ODdiMmNhMGM5MjcvMC81REREQ0NERjNB RkM0OTJGNkNDNDg3MUQ2MDcyQTVBRkE5NzNBMDYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNURERENDREYzQUZDNDkyRjZDQzQ4NzFENjA3MkE1QUZBOTcz QTA2MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjIwNmNmNTAtYTNkMS00Y2M5LTky NjAtOTg3YjJjYTBjOTI3LzAvNURERENDREYzQUZDNDkyRjZDQzQ4NzFENjA3MkE1 QUZBOTczQTA2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADEwxK25tX2gHZhvkAlHpk3u+uJQUW8kWsIi H7YTI24FvS/vcTAYGvjRZsuTBZQXXZFF15q2nx+eu/syLmsGAW4izZI1+O21m3mL dQxSDoO3KAgdnoLB2zfEbfQpfs8GknDfFkZ8WBdYzZ/M2+EanPqY5feKT39PVCLr CXmwRvZbACCR29G1EZqk9MkP6ZQ/Yp4vhFR5GGVgH8AX5nFB/OBDdZmAgI9nXYIF KmBd+lzI+jag1N0rjydpGacGrlBvyIArMWVFHtM4amKcDNeiVY+XoLZtislyeb7w mpq724WlRFUjxDPPT8GMvUhAnHp85At9rFJ7p3GW0kS7Vtl0iFE= -----END CERTIFICATE-----Generated at Sun Jun 15 15:26:15 2025 by rpki-client