$ rpki-client -vvf repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft File: 5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft (raw, json) Hash identifier: xMle0vyY0R7RagL+BO9y0/SYy9OMuMpSOzxkTzy7arY= Subject key identifier: DE:CD:98:DD:07:DC:AB:73:FF:8B:F4:7A:A4:0A:61:15:2A:84:02:FA Authority key identifier: 5E:68:3D:8B:34:5B:B6:E0:F6:3C:D1:A8:F3:2C:3B:5E:CC:B2:B9:B0 Certificate issuer: /CN=5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0 Certificate serial: 10A46B44F9314C3F93CF9D446469D00C226A25AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft Manifest number: 0455 Signing time: Mon 16 Jun 2025 11:30:52 +0000 Manifest this update: Mon 16 Jun 2025 11:25:52 +0000 Manifest next update: Thu 19 Jun 2025 15:26:52 +0000 Files and hashes: 1: 3130332e3135362e3231372e302f32342d3234203d3e203538333639.roa (hash: BvednQirMsdE9Wqe4ixR538inDj4noipljhyRht7q1c=) 2: 5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl (hash: eo/DXqaUC2YPaUABuqZIcMYfNUYY2EjCnrXsY6JRfbo=) 3: 3130332e3135362e3231362e302f32342d3234203d3e203538333639.roa (hash: XGzaH0iWdCy5zsUnP4rW+qurcQNiJokFY8tcDg0B9Wg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 15:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:a4:6b:44:f9:31:4c:3f:93:cf:9d:44:64:69:d0:0c:22:6a:25:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0 Validity Not Before: Jun 16 11:25:52 2025 GMT Not After : Jun 19 15:26:52 2025 GMT Subject: CN=DECD98DD07DCAB73FF8BF47AA40A61152A8402FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9c:57:e3:e1:d7:55:cc:f7:a5:16:aa:3e:be: c3:89:4c:66:4e:e6:35:c7:e8:ae:29:2f:d3:f0:63: 93:2d:df:d1:b2:59:bf:b7:d0:07:b4:c3:eb:25:d7: cd:c8:db:76:e5:1a:79:59:86:d3:2b:c4:e2:9e:d8: 8a:0b:40:17:34:78:42:d3:0a:01:06:c5:0f:c8:3a: d9:d8:9b:82:59:25:58:8a:d0:9d:54:f1:18:01:1f: e6:cb:6a:5a:5e:bc:d5:a5:7a:c9:da:6a:51:ae:9a: 32:04:ce:0d:e8:e9:2d:73:5b:11:63:47:30:04:97: b8:39:79:2c:83:14:44:20:3a:9a:f2:13:b0:98:9e: 60:ab:ee:da:53:b1:d7:a0:fb:71:14:61:88:d7:c0: 1b:35:7c:95:d9:be:d3:61:f5:df:8f:7a:a6:d6:4d: 0b:ed:75:df:f2:f4:fa:07:64:17:d4:ab:b0:b8:4c: 57:5f:23:06:7d:53:c5:5f:24:4b:f0:b9:e9:75:6c: 82:de:c5:ea:8f:83:b0:c5:12:0c:1d:61:81:62:34: 39:f0:4d:4f:58:60:48:31:51:23:e7:aa:6f:a9:f2: e5:35:88:d7:56:97:75:df:f8:73:b0:03:dd:d7:5d: 7a:e0:a6:97:2a:89:57:8a:87:5b:91:c7:19:c5:d9: 71:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CD:98:DD:07:DC:AB:73:FF:8B:F4:7A:A4:0A:61:15:2A:84:02:FA X509v3 Authority Key Identifier: keyid:5E:68:3D:8B:34:5B:B6:E0:F6:3C:D1:A8:F3:2C:3B:5E:CC:B2:B9:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:37:20:cb:81:d6:c0:55:5c:a9:88:d5:d4:d3:fa:21:a1:f3: 57:29:80:1b:ba:a9:78:32:cd:c9:b5:c4:97:3d:bb:f9:c2:7a: 88:8f:17:0f:b1:94:dd:5e:db:2b:03:1b:33:96:b4:df:8f:d0: 14:0f:01:89:52:14:5b:3a:23:bd:21:32:28:e8:07:56:44:a7: b1:78:ca:9a:e2:06:a0:6a:7d:dc:af:67:93:3b:88:25:5e:e3: aa:35:e6:82:7a:81:28:e1:4c:2e:2a:fc:85:36:35:f1:56:5e: 04:1e:9a:52:c9:05:3d:59:83:8a:e1:e4:ba:8b:5c:ef:16:62: 8d:42:dc:4e:e1:00:bd:0c:66:24:90:fd:23:d2:72:24:5f:97: ac:5c:99:22:05:2b:63:62:19:6c:cd:33:5a:af:d5:56:64:00: c1:ff:04:b1:1b:79:07:6c:81:7f:a8:e1:2d:a9:c1:c3:44:b4: 2b:af:a4:9c:13:d2:15:3e:56:ec:1f:33:9c:1f:e8:37:56:ec: 37:34:ba:3b:b4:58:a5:1a:6e:85:cd:6b:6d:a4:7e:41:e4:3e: b1:20:cf:d3:9f:74:fd:e8:c5:b2:19:e6:b2:0a:cf:85:48:c5: 17:75:63:6a:9d:42:09:01:c6:2f:9e:c5:26:ad:fd:86:8d:b4: 7a:4e:d3:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEKRrRPkxTD+Tz51EZGnQDCJqJa4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU2ODNEOEIzNDVCQjZFMEY2M0NEMUE4RjMyQzNCNUVD Q0IyQjlCMDAeFw0yNTA2MTYxMTI1NTJaFw0yNTA2MTkxNTI2NTJaMDMxMTAvBgNV BAMTKERFQ0Q5OEREMDdEQ0FCNzNGRjhCRjQ3QUE0MEE2MTE1MkE4NDAyRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8nFfj4ddVzPelFqo+vsOJTGZO 5jXH6K4pL9PwY5Mt39GyWb+30Ae0w+sl183I23blGnlZhtMrxOKe2IoLQBc0eELT CgEGxQ/IOtnYm4JZJViK0J1U8RgBH+bLalpevNWlesnaalGumjIEzg3o6S1zWxFj RzAEl7g5eSyDFEQgOpryE7CYnmCr7tpTsdeg+3EUYYjXwBs1fJXZvtNh9d+PeqbW TQvtdd/y9PoHZBfUq7C4TFdfIwZ9U8VfJEvwuel1bILexeqPg7DFEgwdYYFiNDnw TU9YYEgxUSPnqm+p8uU1iNdWl3Xf+HOwA93XXXrgppcqiVeKh1uRxxnF2XHVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3s2Y3Qfcq3P/i/R6pAphFSqEAvowHwYDVR0j BBgwFoAUXmg9izRbtuD2PNGo8yw7XsyyubAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 M2E3ZjM0Yy02M2I4LTQ5NzMtODIyNi1lMTA2OTViMjVkOTQvMC81RTY4M0Q4QjM0 NUJCNkUwRjYzQ0QxQThGMzJDM0I1RUNDQjJCOUIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUU2ODNEOEIzNDVCQjZFMEY2M0NEMUE4RjMyQzNCNUVDQ0Iy QjlCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTNhN2YzNGMtNjNiOC00OTczLTgy MjYtZTEwNjk1YjI1ZDk0LzAvNUU2ODNEOEIzNDVCQjZFMEY2M0NEMUE4RjMyQzNC NUVDQ0IyQjlCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN03IMuB1sBVXKmI1dTT+iGh81cpgBu6qXgy zcm1xJc9u/nCeoiPFw+xlN1e2ysDGzOWtN+P0BQPAYlSFFs6I70hMijoB1ZEp7F4 ypriBqBqfdyvZ5M7iCVe46o15oJ6gSjhTC4q/IU2NfFWXgQemlLJBT1Zg4rh5LqL XO8WYo1C3E7hAL0MZiSQ/SPSciRfl6xcmSIFK2NiGWzNM1qv1VZkAMH/BLEbeQds gX+o4S2pwcNEtCuvpJwT0hU+VuwfM5wf6DdW7Dc0uju0WKUaboXNa22kfkHkPrEg z9OfdP3oxbIZ5rIKz4VIxRd1Y2qdQgkBxi+exSat/YaNtHpO07U= -----END CERTIFICATE-----Generated at Tue Jun 17 08:16:49 2025 by rpki-client