$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft File: 5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft (raw, json) Hash identifier: DPoHs1xW57VJO1LISZqBSBVilbWX2UENOCu2dYxXr0I= Subject key identifier: D6:BF:3F:1C:D0:C7:DF:C8:BC:20:4A:DE:08:D3:4B:D6:BB:C4:FE:F2 Authority key identifier: 5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D Certificate issuer: /CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D Certificate serial: 72F353FDC466DB5C0EC95A0DC8DEE457C16A7ACE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft Manifest number: A9 Signing time: Sun 15 Jun 2025 17:21:06 +0000 Manifest this update: Sun 15 Jun 2025 17:16:06 +0000 Manifest next update: Wed 18 Jun 2025 17:51:06 +0000 Files and hashes: 1: 3136302e32322e372e302f32342d3234203d3e20313532373936.roa (hash: Se9if4ahUM8UZ9DwPwRriHNSzgliBVi3qv7HNc4T4+A=) 2: 3136302e32322e362e302f32332d3233203d3e20313532373936.roa (hash: MlPD1Cp5WkgMa2H7CRUKYw5NrewBHnE4PxE2BVKQlL0=) 3: 5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl (hash: Fcq/xaaIbXoIBaRKdly71VigMK1noBdiWbTsPQFBE8Q=) 4: 3136302e32322e362e302f32342d3234203d3e20313532373936.roa (hash: lZoAiDIfwdwZRfkj/NcAK+vDJElzUZIJDOrxy0zEGf4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 17:51:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:f3:53:fd:c4:66:db:5c:0e:c9:5a:0d:c8:de:e4:57:c1:6a:7a:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D Validity Not Before: Jun 15 17:16:06 2025 GMT Not After : Jun 18 17:51:06 2025 GMT Subject: CN=D6BF3F1CD0C7DFC8BC204ADE08D34BD6BBC4FEF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:87:91:7b:80:30:d7:b5:d3:55:1f:31:f4:29: 0b:e9:49:e7:61:43:6a:0b:2a:b4:af:f1:bf:ef:54: a8:4a:e2:93:99:90:43:52:c0:a7:bd:0f:a6:a8:c5: 11:5c:31:fe:b0:75:46:57:d3:31:7f:92:8f:6a:0f: 15:70:76:16:d0:b0:33:7f:98:2c:a9:38:b4:89:90: 59:a9:e3:96:29:b5:b8:85:09:60:5a:9f:42:2a:f9: a5:27:99:13:53:4f:f5:52:58:4c:08:fe:65:fc:2b: 9c:8e:2c:99:ea:96:86:bd:28:b3:4a:6c:01:9e:bc: 99:38:40:85:79:ea:65:20:4f:de:91:c8:8f:f0:10: d6:93:ff:5e:37:3b:ff:54:6f:81:f9:77:a6:08:7f: ec:85:f2:04:0c:ba:ff:47:40:8d:93:88:a0:b1:52: 0f:7b:92:cf:c1:9b:17:b0:96:5d:f4:f7:18:d9:16: c9:f5:16:62:73:df:6f:52:fe:00:ea:d4:f7:4e:51: cc:e2:2f:a2:96:8b:8e:08:d4:18:9d:be:24:d6:7e: 2a:0c:b2:2d:5e:44:da:79:30:06:a4:69:f9:d1:b6: f9:ae:f4:bc:78:e4:c7:8e:39:9d:ef:bc:b2:8c:9f: 16:3b:19:12:fc:2c:bb:29:ef:65:d2:5e:00:f7:92: 7d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:BF:3F:1C:D0:C7:DF:C8:BC:20:4A:DE:08:D3:4B:D6:BB:C4:FE:F2 X509v3 Authority Key Identifier: keyid:5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:ce:50:fd:1e:41:15:71:b4:c2:3a:27:82:c4:7a:7c:20:ee: 32:09:80:25:1c:12:53:94:c7:64:a2:5a:3e:38:a6:13:f2:14: 90:ee:91:52:95:fc:c5:e0:3a:42:ad:cc:57:0a:ca:be:bf:b5: 83:49:ce:4d:a2:ae:d4:46:b0:05:83:6f:9a:80:ba:72:97:09: f1:64:4a:06:ec:c1:a7:50:89:7c:b3:2d:ff:d8:07:03:07:1c: a5:24:23:60:a3:eb:11:40:50:73:96:72:4d:0a:f1:6a:40:93: 1a:10:d1:80:d0:4e:cf:e9:c8:b1:e8:0b:81:8b:bc:50:eb:ba: 10:bf:da:96:de:ac:11:32:5d:82:42:6b:da:53:0d:d4:68:d0: 57:bb:e9:40:26:71:60:d3:1b:d5:1f:df:0e:b0:63:4b:d1:c3: 6a:cd:ec:b5:25:a8:84:db:1f:b5:4d:aa:2a:d4:c8:b5:8d:3e: ea:fb:68:2f:7c:83:4b:55:81:d6:5e:27:3b:26:40:1e:5d:90: cc:cd:61:f2:81:8f:0b:39:f4:46:34:04:45:2f:77:5c:4f:bb: 8a:b8:d6:cd:98:71:5a:f8:17:da:2a:41:2a:da:6d:c2:e8:3f: 6e:4b:9e:4e:b5:89:bb:b8:71:20:58:ed:20:1a:d0:64:7c:6e: 0e:9b:28:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcvNT/cRm21wOyVoNyN7kV8Fqes4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2MDQy RjBCNkQ3RDAeFw0yNTA2MTUxNzE2MDZaFw0yNTA2MTgxNzUxMDZaMDMxMTAvBgNV BAMTKEQ2QkYzRjFDRDBDN0RGQzhCQzIwNEFERTA4RDM0QkQ2QkJDNEZFRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGh5F7gDDXtdNVHzH0KQvpSedh Q2oLKrSv8b/vVKhK4pOZkENSwKe9D6aoxRFcMf6wdUZX0zF/ko9qDxVwdhbQsDN/ mCypOLSJkFmp45YptbiFCWBan0Iq+aUnmRNTT/VSWEwI/mX8K5yOLJnqloa9KLNK bAGevJk4QIV56mUgT96RyI/wENaT/143O/9Ub4H5d6YIf+yF8gQMuv9HQI2TiKCx Ug97ks/Bmxewll309xjZFsn1FmJz329S/gDq1PdOUcziL6KWi44I1BidviTWfioM si1eRNp5MAakafnRtvmu9Lx45MeOOZ3vvLKMnxY7GRL8LLsp72XSXgD3kn2PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1r8/HNDH38i8IEreCNNL1rvE/vIwHwYDVR0j BBgwFoAUXjI/nX2oTYVuukjHbps2BC8LbX0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5ODgxNi01YWY5LTQ3ZWYtYjk4OS00MmYyNzMxODQ4YmUvMC81RTMyM0Y5RDdE QTg0RDg1NkVCQTQ4Qzc2RTlCMzYwNDJGMEI2RDdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2MDQyRjBC NkQ3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzAvNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2 MDQyRjBCNkQ3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALrOUP0eQRVxtMI6J4LEenwg7jIJgCUcElOU x2SiWj44phPyFJDukVKV/MXgOkKtzFcKyr6/tYNJzk2irtRGsAWDb5qAunKXCfFk SgbswadQiXyzLf/YBwMHHKUkI2Cj6xFAUHOWck0K8WpAkxoQ0YDQTs/pyLHoC4GL vFDruhC/2pberBEyXYJCa9pTDdRo0Fe76UAmcWDTG9Uf3w6wY0vRw2rN7LUlqITb H7VNqirUyLWNPur7aC98g0tVgdZeJzsmQB5dkMzNYfKBjws59EY0BEUvd1xPu4q4 1s2YcVr4F9oqQSrabcLoP25Lnk61ibu4cSBY7SAa0GR8bg6bKN0= -----END CERTIFICATE-----Generated at Mon Jun 16 07:47:50 2025 by rpki-client