$ rpki-client -vvf repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft File: 5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft (raw, json) Hash identifier: bhCIswib1wJIOMZY8BBpGBh482H9YBtN6inzvGFbhog= Subject key identifier: 16:61:F0:07:3C:BC:F7:1B:E8:7B:EE:95:7A:3E:6B:F4:A4:43:58:14 Authority key identifier: 5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4 Certificate issuer: /CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4 Certificate serial: 11BD9505C81F002F9C3A0DEAE76B678C60D3FEE9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft Manifest number: 04E3 Signing time: Sun 15 Jun 2025 13:32:19 +0000 Manifest this update: Sun 15 Jun 2025 13:27:19 +0000 Manifest next update: Thu 19 Jun 2025 00:06:19 +0000 Files and hashes: 1: 5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl (hash: yJHUN6qwePhJKNNCXm53wJSH89zno0A0YzFGCC5H624=) 2: 3130332e3134382e3131302e302f32332d3233203d3e203436303332.roa (hash: RZtqlNtv9j/zdsR3rna/ubvTnfhlTuFaDhbJ7496Ge0=) 3: 3130332e3134382e3131302e302f32332d3234203d3e2039333236.roa (hash: Ckdihridi5YgkHAHnE1gWSgdRJtPymHKAE3vS9CEVM0=) 4: 3130332e3134382e3131312e302f32342d3234203d3e203436303332.roa (hash: DWq7gOHQtotSffmOIQvGK+9UykyBLdACrcroiwaJAwY=) 5: 3130332e3134382e3131302e302f32342d3234203d3e203436303332.roa (hash: BJgtZE4CiLbqvj8IAg5L3Vwr4txyhS0zWerD1TQbUtY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:bd:95:05:c8:1f:00:2f:9c:3a:0d:ea:e7:6b:67:8c:60:d3:fe:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4 Validity Not Before: Jun 15 13:27:19 2025 GMT Not After : Jun 19 00:06:19 2025 GMT Subject: CN=1661F0073CBCF71BE87BEE957A3E6BF4A4435814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:13:b1:59:75:9f:3d:c3:a9:70:25:a6:c9:54: 0e:c5:5e:be:ac:0f:37:c7:f1:48:3e:d5:5a:89:0b: 28:31:08:ee:5e:89:e8:5b:5b:55:d1:76:9a:91:3a: ee:f8:bd:6e:ea:e4:76:f3:3b:ec:5f:41:09:71:73: 3b:9e:cc:89:32:c1:3c:e8:0c:ab:42:f2:ef:18:76: b7:3f:0f:46:0f:b5:65:6d:69:e9:19:16:dc:bc:81: 98:33:0a:58:e0:a7:f2:f9:14:1c:f1:85:d6:d3:fe: 1a:09:05:bd:01:87:c1:d1:42:63:14:3e:84:35:d6: 90:36:00:2d:34:c9:15:ee:de:c5:56:73:68:c6:7d: 8c:4d:69:69:c9:0a:46:85:0a:52:9f:d6:02:3f:99: 09:10:71:40:ab:85:13:37:16:6c:c5:40:d3:5f:8f: 37:21:fb:54:63:52:b5:de:d2:fd:56:07:fe:f2:b6: a1:04:b4:47:bb:5c:a5:01:0b:81:f2:7d:42:8e:bf: 1f:19:5b:3b:5f:52:3f:5b:9c:38:fe:5f:18:67:92: 6d:aa:1e:cf:b8:68:02:30:ed:83:77:00:7d:23:9b: b7:a8:ad:91:fe:33:da:d8:dd:c0:6f:fe:a7:19:79: 31:46:41:fc:70:77:71:a0:8d:6c:c2:81:41:9b:60: 96:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:61:F0:07:3C:BC:F7:1B:E8:7B:EE:95:7A:3E:6B:F4:A4:43:58:14 X509v3 Authority Key Identifier: keyid:5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:66:2e:48:b6:55:3b:98:09:b7:79:1f:0d:50:60:65:be:53: 76:58:f0:ff:a9:f6:3a:b5:55:18:e8:a6:e4:ed:05:4f:ee:41: 03:0c:16:e0:3c:9b:99:2a:d4:8a:0d:ef:6a:3d:ce:c4:c3:94: 0b:f4:e6:13:11:1c:bb:ab:f8:b7:6b:33:c8:26:6d:ac:b2:a3: 21:89:e6:b9:4a:d5:ff:68:b4:dc:30:48:81:fa:7a:da:94:ac: cb:d0:67:fa:03:fb:fb:7f:26:f2:07:88:d9:f1:d9:66:58:b7: 7e:f7:75:76:1a:47:e6:9a:4a:d4:20:da:88:4b:af:1b:8e:4b: 01:20:e0:81:a3:fc:93:7b:44:a6:fb:db:fd:aa:d2:c7:c3:e9: c4:8b:f0:ec:88:f5:21:6a:da:cb:e3:39:d3:4d:69:44:d8:1e: 25:23:46:c0:db:bd:91:99:df:87:11:be:eb:76:59:6c:85:d6: e2:b3:aa:67:b2:de:12:ec:4a:1d:59:11:22:49:2b:bf:09:c7: 0b:16:72:f1:08:34:47:e9:c2:59:34:ae:a4:35:89:e5:b4:22: 17:27:f9:43:03:64:01:57:0f:ae:3c:ad:b9:de:22:6b:fe:18: b4:1c:93:ef:db:6c:21:2e:c7:1c:ea:61:85:46:ad:3f:b3:33: 10:7d:05:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEb2VBcgfAC+cOg3q52tnjGDT/ukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0OTUw MUQ5N0RDNDAeFw0yNTA2MTUxMzI3MTlaFw0yNTA2MTkwMDA2MTlaMDMxMTAvBgNV BAMTKDE2NjFGMDA3M0NCQ0Y3MUJFODdCRUU5NTdBM0U2QkY0QTQ0MzU4MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrE7FZdZ89w6lwJabJVA7FXr6s DzfH8Ug+1VqJCygxCO5eiehbW1XRdpqROu74vW7q5HbzO+xfQQlxczuezIkywTzo DKtC8u8Ydrc/D0YPtWVtaekZFty8gZgzCljgp/L5FBzxhdbT/hoJBb0Bh8HRQmMU PoQ11pA2AC00yRXu3sVWc2jGfYxNaWnJCkaFClKf1gI/mQkQcUCrhRM3FmzFQNNf jzch+1RjUrXe0v1WB/7ytqEEtEe7XKUBC4HyfUKOvx8ZWztfUj9bnDj+Xxhnkm2q Hs+4aAIw7YN3AH0jm7eorZH+M9rY3cBv/qcZeTFGQfxwd3GgjWzCgUGbYJaTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFmHwBzy89xvoe+6Vej5r9KRDWBQwHwYDVR0j BBgwFoAUX836qrhJBYaNT72+cYuUlQHZfcQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGY5MjQ0Ny1hY2QzLTQyN2MtYjVlNy1kYjM5MTdmMTg1YzgvMC81RkNERkFBQUI4 NDkwNTg2OEQ0RkJEQkU3MThCOTQ5NTAxRDk3REM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0OTUwMUQ5 N0RDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOThmOTI0NDctYWNkMy00MjdjLWI1 ZTctZGIzOTE3ZjE4NWM4LzAvNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0 OTUwMUQ5N0RDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEpmLki2VTuYCbd5Hw1QYGW+U3ZY8P+p9jq1 VRjopuTtBU/uQQMMFuA8m5kq1IoN72o9zsTDlAv05hMRHLur+LdrM8gmbayyoyGJ 5rlK1f9otNwwSIH6etqUrMvQZ/oD+/t/JvIHiNnx2WZYt373dXYaR+aaStQg2ohL rxuOSwEg4IGj/JN7RKb72/2q0sfD6cSL8OyI9SFq2svjOdNNaUTYHiUjRsDbvZGZ 34cRvut2WWyF1uKzqmey3hLsSh1ZESJJK78JxwsWcvEINEfpwlk0rqQ1ieW0Ihcn +UMDZAFXD648rbneImv+GLQck+/bbCEuxxzqYYVGrT+zMxB9BWY= -----END CERTIFICATE-----Generated at Sun Jun 15 15:20:14 2025 by rpki-client