$ rpki-client -vvf repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft File: 5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft (raw, json) Hash identifier: 4WPrT+GRXQwh6es87m5l3eZAbkJBc0kSWQYmlc3Ati0= Subject key identifier: 51:06:F7:F0:78:70:16:4A:34:DB:98:40:D5:D3:32:47:41:09:6D:9C Authority key identifier: 5E:02:7C:2A:BE:4A:1F:46:34:0E:D8:3A:3A:D8:F0:6D:BC:CD:CD:21 Certificate issuer: /CN=5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21 Certificate serial: 16169FB38512F84D4E932A30106B5F4BC514F94F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft Manifest number: 0258 Signing time: Tue 17 Jun 2025 00:01:30 +0000 Manifest this update: Mon 16 Jun 2025 23:56:29 +0000 Manifest next update: Fri 20 Jun 2025 03:01:29 +0000 Files and hashes: 1: 5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.crl (hash: tvqFQt5DXKiRp5klIAgJt5I5wP4YMN0x0/J458dev/k=) 2: 3130332e3137392e3133362e302f32332d3234203d3e20313339393737.roa (hash: IQxk+RVCCE4pKnBFAa/I+n4PlSjcG9LFvLyIRAqgipY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.crl rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:16:9f:b3:85:12:f8:4d:4e:93:2a:30:10:6b:5f:4b:c5:14:f9:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21 Validity Not Before: Jun 16 23:56:29 2025 GMT Not After : Jun 20 03:01:29 2025 GMT Subject: CN=5106F7F07870164A34DB9840D5D3324741096D9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1f:1e:6b:60:71:e3:65:a3:40:2c:d6:f6:0c: c3:ba:cb:9f:f6:66:ed:59:9f:1a:62:bd:82:0c:b1: 1a:e5:6a:cb:c2:14:34:25:8d:d2:88:c2:03:8d:50: e7:6e:82:59:c9:b1:d6:0e:35:dd:91:05:b7:5c:b6: 28:02:e5:52:f1:c2:cb:18:18:88:d4:c4:1a:a6:da: ef:e9:10:1d:ac:b3:c9:a1:d6:38:0d:29:33:f7:ad: f9:7b:e2:44:c5:5d:26:7e:95:b4:00:aa:38:31:16: 54:d0:64:51:5c:8e:b9:7e:89:3b:fa:36:19:48:47: 14:31:87:9a:5d:9c:32:66:3b:3b:ec:29:37:63:92: 3f:6b:bb:4b:3b:8a:8d:0b:a6:29:63:d0:95:80:61: a5:b7:bc:30:11:a7:06:8e:d5:76:8c:a9:48:0c:f0: 61:f4:0d:5b:67:af:10:a9:db:c7:f9:5a:ae:29:0d: 92:38:64:bb:dc:e1:3d:27:1f:02:e1:5e:6d:1d:80: 15:9d:d5:f3:2d:30:8b:0e:c8:63:3d:95:70:55:b3: 5c:19:cc:a0:ed:26:f5:64:da:66:c1:ad:3c:16:9e: 51:a8:05:dd:21:44:d3:a8:c0:18:49:21:7a:6a:59: 0c:d7:48:9c:6f:c4:91:e6:17:e6:40:ca:1f:f2:b8: b9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:06:F7:F0:78:70:16:4A:34:DB:98:40:D5:D3:32:47:41:09:6D:9C X509v3 Authority Key Identifier: keyid:5E:02:7C:2A:BE:4A:1F:46:34:0E:D8:3A:3A:D8:F0:6D:BC:CD:CD:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:0b:47:cc:77:e5:24:25:26:d6:fd:16:71:be:5d:58:46:39: 74:40:2e:ee:42:51:56:28:58:f8:00:b2:ec:3e:1f:1f:3e:3b: 11:0b:62:fd:4f:41:5e:51:c8:ce:6e:25:e3:57:6c:0f:34:80: 71:49:c2:c2:88:bc:0f:31:d0:9d:cb:21:eb:cd:ca:32:a5:a7: 0b:42:b2:37:1e:ed:ae:e2:01:31:2e:e0:56:c3:9c:cf:5e:bb: 2a:0b:f7:7e:1a:ff:5d:e2:75:c2:21:09:ab:6c:d9:72:6d:8c: 43:9c:76:fc:dd:7e:a7:48:8a:f6:6b:cf:f6:76:87:ff:fb:e0: 74:88:77:a3:36:24:65:dd:01:ae:dc:4a:ad:97:b5:d3:20:86: 9f:84:55:c7:d2:8b:a1:3c:65:fb:cd:fa:91:17:69:8f:23:48: 13:2a:19:c1:d7:2b:ab:5e:33:64:7f:f2:2e:e4:71:23:40:55: 78:d1:bb:3e:bf:1a:7d:56:93:15:ea:e2:2a:ec:ca:cd:e6:d1: 92:f0:04:50:67:a0:11:6a:86:a3:36:fb:01:f1:8b:37:42:ec: 13:bc:6d:45:e9:ba:d8:a8:ef:36:e5:e8:7e:2f:a3:ee:69:0b: 9b:61:c1:19:89:5c:75:0e:62:5b:6c:c5:5c:e9:61:5b:8c:89: 4c:37:e4:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFhafs4US+E1OkyowEGtfS8UU+U8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUwMjdDMkFCRTRBMUY0NjM0MEVEODNBM0FEOEYwNkRC Q0NEQ0QyMTAeFw0yNTA2MTYyMzU2MjlaFw0yNTA2MjAwMzAxMjlaMDMxMTAvBgNV BAMTKDUxMDZGN0YwNzg3MDE2NEEzNERCOTg0MEQ1RDMzMjQ3NDEwOTZEOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Hx5rYHHjZaNALNb2DMO6y5/2 Zu1ZnxpivYIMsRrlasvCFDQljdKIwgONUOduglnJsdYONd2RBbdctigC5VLxwssY GIjUxBqm2u/pEB2ss8mh1jgNKTP3rfl74kTFXSZ+lbQAqjgxFlTQZFFcjrl+iTv6 NhlIRxQxh5pdnDJmOzvsKTdjkj9ru0s7io0Lpilj0JWAYaW3vDARpwaO1XaMqUgM 8GH0DVtnrxCp28f5Wq4pDZI4ZLvc4T0nHwLhXm0dgBWd1fMtMIsOyGM9lXBVs1wZ zKDtJvVk2mbBrTwWnlGoBd0hRNOowBhJIXpqWQzXSJxvxJHmF+ZAyh/yuLndAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUQb38HhwFko025hA1dMyR0EJbZwwHwYDVR0j BBgwFoAUXgJ8Kr5KH0Y0Dtg6OtjwbbzNzSEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDgwYjMyMS1hYTMxLTQzMTctOWQzMS1jMmJkMTkwYzEzODQvMC81RTAyN0MyQUJF NEExRjQ2MzQwRUQ4M0EzQUQ4RjA2REJDQ0RDRDIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUUwMjdDMkFCRTRBMUY0NjM0MEVEODNBM0FEOEYwNkRCQ0NE Q0QyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ4MGIzMjEtYWEzMS00MzE3LTlk MzEtYzJiZDE5MGMxMzg0LzAvNUUwMjdDMkFCRTRBMUY0NjM0MEVEODNBM0FEOEYw NkRCQ0NEQ0QyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJsLR8x35SQlJtb9FnG+XVhGOXRALu5CUVYo WPgAsuw+Hx8+OxELYv1PQV5RyM5uJeNXbA80gHFJwsKIvA8x0J3LIevNyjKlpwtC sjce7a7iATEu4FbDnM9euyoL934a/13idcIhCats2XJtjEOcdvzdfqdIivZrz/Z2 h//74HSId6M2JGXdAa7cSq2XtdMghp+EVcfSi6E8ZfvN+pEXaY8jSBMqGcHXK6te M2R/8i7kcSNAVXjRuz6/Gn1WkxXq4irsys3m0ZLwBFBnoBFqhqM2+wHxizdC7BO8 bUXputio7zbl6H4vo+5pC5thwRmJXHUOYltsxVzpYVuMiUw35Lg= -----END CERTIFICATE-----Generated at Wed Jun 18 12:18:49 2025 by rpki-client