$ rpki-client -vvf repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft File: 5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft (raw, json) Hash identifier: u7AQsSKI6yTRtpNsDhZwAFaA9BO0urR2xQ2wNLnp90I= Subject key identifier: 4F:FC:4F:39:BC:EF:DD:36:A5:5B:88:E8:56:76:6D:EB:00:22:5C:6F Authority key identifier: 5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B Certificate issuer: /CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B Certificate serial: 3897020451D71F8D5168D3BBE78019F561D2616D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft Manifest number: 020B Signing time: Sat 14 Jun 2025 16:52:17 +0000 Manifest this update: Sat 14 Jun 2025 16:47:17 +0000 Manifest next update: Wed 18 Jun 2025 03:29:17 +0000 Files and hashes: 1: 3130332e3138342e31382e302f32342d3234203d3e20313439363735.roa (hash: 4BUtx10alv/ZZ9FJolZJ3I8WhlB5v1F5iKW6alQrr7c=) 2: 3130332e3138342e31382e302f32332d3233203d3e20313439363735.roa (hash: 8hPXkuW34xkK66/r5oL+jYYUmOueTjKMrZh36goENDw=) 3: 3130332e3138342e31392e302f32342d3234203d3e20313439363735.roa (hash: i4XCxm32VCNZ/zacmmSjbAzxATWwcS43fZzejb3pvRo=) 4: 5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl (hash: 9uAKVpgXXgrUjSqPTPS2w3g5ohLBlcB8FdhCM9oFAJk=) 5: 3130332e3138342e31382e302f32342d3234203d3e203438343635.roa (hash: kfMJp93aHLtwVeCUrmYfQM5gVAHXLSAuJM9cgnbx5Nc=) 6: 3130332e3138342e31392e302f32342d3234203d3e203438343635.roa (hash: oRDI+y7+2vAjOMCym2uKEk4t0/jm1uVrqQN7OiYXy0E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 03:29:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:97:02:04:51:d7:1f:8d:51:68:d3:bb:e7:80:19:f5:61:d2:61:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B Validity Not Before: Jun 14 16:47:17 2025 GMT Not After : Jun 18 03:29:17 2025 GMT Subject: CN=4FFC4F39BCEFDD36A55B88E856766DEB00225C6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1f:19:1b:9a:7f:65:15:1e:8f:49:77:6a:9d: cc:ff:c5:f4:c1:1f:18:ec:b2:25:7b:a0:9e:be:60: a2:b6:ce:c0:fa:cd:c5:aa:f3:d7:57:c7:ad:63:ed: d5:7b:88:10:14:2b:ac:b7:61:3b:72:29:f7:e8:9e: e1:f4:49:9e:18:18:fe:93:c8:f1:db:21:7d:74:ff: b3:23:65:b8:26:a2:ab:62:03:12:57:df:d2:b9:0c: c2:f1:0b:81:b9:ad:9e:b0:3c:7c:3f:30:ec:c4:67: 49:af:8d:b2:e6:f9:24:e9:ba:f1:91:7f:75:a0:89: 5e:38:0f:26:c3:a8:90:99:88:b3:8c:ad:1d:b1:f2: 91:ae:61:20:a4:de:02:f1:7f:3c:ce:cc:80:f4:e5: 6c:fd:c7:e2:cd:74:fc:6b:15:03:0f:71:22:53:77: 1b:83:bf:76:7e:6f:98:2e:e2:2e:a3:a0:d5:ef:54: fd:e3:ca:ae:92:ba:a6:a4:fc:40:fa:43:fa:27:2e: 3a:4a:93:f3:8b:a5:70:fe:f1:ce:6e:83:b8:d3:df: 2f:5b:43:fd:9b:04:e2:70:3f:e8:c2:6a:6d:34:7d: 17:3b:00:72:97:e3:72:3a:d0:16:e9:17:bc:55:9f: dc:48:63:23:47:6c:43:7d:22:4d:45:b8:54:92:a7: 3d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:FC:4F:39:BC:EF:DD:36:A5:5B:88:E8:56:76:6D:EB:00:22:5C:6F X509v3 Authority Key Identifier: keyid:5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:96:e9:8e:23:80:1b:91:df:81:7f:dc:ff:94:33:d5:00:ce: b2:c2:75:21:4d:c6:16:ca:2a:d5:3a:df:ee:4d:43:23:a8:77: ff:c6:ea:e8:81:cd:23:41:ed:0f:5c:2f:e3:22:12:ea:48:e2: 66:25:95:72:3a:40:7c:bb:80:94:b1:38:d6:05:3b:98:00:87: 49:ca:9b:e8:f0:bc:64:93:7d:16:ef:88:79:80:de:1f:fa:f8: 30:03:9f:fb:74:58:f2:30:c7:ba:71:b9:34:4e:be:30:2b:6b: 34:5d:79:48:ca:64:54:f4:9b:01:18:2a:12:fc:0c:85:57:4d: db:83:06:ee:5e:51:d1:53:3c:9b:4a:fe:a3:f7:22:36:50:27: 27:3f:10:aa:00:c8:06:3f:79:ed:43:47:73:c6:0c:9e:c0:ed: b6:02:58:eb:7a:5c:8c:2a:c3:b6:ea:f9:1c:5d:39:5f:14:30: 5f:48:b1:86:15:ab:9c:24:dc:50:0e:80:92:76:7e:8d:b7:42: 49:24:57:17:a1:d0:a4:99:5b:bb:09:78:78:34:43:ea:5c:52: c5:bb:3e:51:bf:72:e2:5f:e2:57:d3:28:e9:52:9c:d9:8c:cd: fa:e5:e5:fe:02:67:44:20:e7:07:a5:24:55:b7:de:ca:8d:d0: 9b:69:fd:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOJcCBFHXH41RaNO754AZ9WHSYW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIyMkY5 MDg5NTUyQjAeFw0yNTA2MTQxNjQ3MTdaFw0yNTA2MTgwMzI5MTdaMDMxMTAvBgNV BAMTKDRGRkM0RjM5QkNFRkREMzZBNTVCODhFODU2NzY2REVCMDAyMjVDNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Hxkbmn9lFR6PSXdqncz/xfTB HxjssiV7oJ6+YKK2zsD6zcWq89dXx61j7dV7iBAUK6y3YTtyKffonuH0SZ4YGP6T yPHbIX10/7MjZbgmoqtiAxJX39K5DMLxC4G5rZ6wPHw/MOzEZ0mvjbLm+STpuvGR f3WgiV44DybDqJCZiLOMrR2x8pGuYSCk3gLxfzzOzID05Wz9x+LNdPxrFQMPcSJT dxuDv3Z+b5gu4i6joNXvVP3jyq6Suqak/ED6Q/onLjpKk/OLpXD+8c5ug7jT3y9b Q/2bBOJwP+jCam00fRc7AHKX43I60BbpF7xVn9xIYyNHbEN9Ik1FuFSSpz2nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT/xPObzv3TalW4joVnZt6wAiXG8wHwYDVR0j BBgwFoAUWkD9GeLdU4DLblAvFtsiL5CJVSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MGQ5MTRlZi0wYjFmLTQ5MGItODA4ZC1hMjdiODNmZjlhM2UvMC81QTQwRkQxOUUy REQ1MzgwQ0I2RTUwMkYxNkRCMjIyRjkwODk1NTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIyMkY5MDg5 NTUyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjBkOTE0ZWYtMGIxZi00OTBiLTgw OGQtYTI3YjgzZmY5YTNlLzAvNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIy MkY5MDg5NTUyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGW6Y4jgBuR34F/3P+UM9UAzrLCdSFNxhbK KtU63+5NQyOod//G6uiBzSNB7Q9cL+MiEupI4mYllXI6QHy7gJSxONYFO5gAh0nK m+jwvGSTfRbviHmA3h/6+DADn/t0WPIwx7pxuTROvjArazRdeUjKZFT0mwEYKhL8 DIVXTduDBu5eUdFTPJtK/qP3IjZQJyc/EKoAyAY/ee1DR3PGDJ7A7bYCWOt6XIwq w7bq+RxdOV8UMF9IsYYVq5wk3FAOgJJ2fo23QkkkVxeh0KSZW7sJeHg0Q+pcUsW7 PlG/cuJf4lfTKOlSnNmMzfrl5f4CZ0Qg5welJFW33sqN0Jtp/Z4= -----END CERTIFICATE-----Generated at Mon Jun 16 00:06:23 2025 by rpki-client