$ rpki-client -vvf repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft File: 5E8D1116F8C66182B65521C899B56E89DDB84C57.mft (raw, json) Hash identifier: 1fuUEm37cTZ1HiskawgsRnCJigRSAfaVT2F559LAsiE= Subject key identifier: 86:71:1F:82:BB:F8:CF:C2:BB:D4:E5:A1:11:F4:37:D9:1E:ED:D4:35 Authority key identifier: 5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 Certificate issuer: /CN=5E8D1116F8C66182B65521C899B56E89DDB84C57 Certificate serial: 64298B288937F8E90859F331AD407B3402193A72 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft Manifest number: 049A Signing time: Sat 14 Jun 2025 23:40:44 +0000 Manifest this update: Sat 14 Jun 2025 23:35:44 +0000 Manifest next update: Wed 18 Jun 2025 09:34:44 +0000 Files and hashes: 1: 34332e3234382e32342e302f32322d3234203d3e203138313033.roa (hash: jjxXOD8YTfHReiK4AK2nOIQXP4l8k6sM7XR6RmO9gn0=) 2: 5E8D1116F8C66182B65521C899B56E89DDB84C57.crl (hash: ysZT2d53ni/Li+byMzNqmUoNPROSo1T4pY8D4Go1DfA=) 3: 3130332e31302e39362e302f32322d3234203d3e203138313033.roa (hash: fvggVkKI1Umb3Jdh64URgb1j9L9KJzqzQQjlbZZXATA=) 4: 323430313a316230303a3a2f33322d3438203d3e203138313033.roa (hash: w+rn3hr3SMqGHiqqz9FiRvR/Sg9nolhzcrhUpRbqWiI=) 5: 3230332e3132382e36342e302f31392d3234203d3e203138313033.roa (hash: cImzaCQgH/xKELxeX3ckgK5atsohpplgUl+3u43iFdY=) 6: 3230332e3230312e35302e302f32332d3234203d3e203138313033.roa (hash: BaobXEBDNKVOXPWnASBzuf34gx57Iel2oiiy9v7fdcA=) 7: 3130332e32332e3234302e302f32322d3234203d3e203138313033.roa (hash: etHPTVvqoe6GM4pkSxe9oMH07ZX+2TEP2H+GUDlt63w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.crl rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 09:34:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:29:8b:28:89:37:f8:e9:08:59:f3:31:ad:40:7b:34:02:19:3a:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E8D1116F8C66182B65521C899B56E89DDB84C57 Validity Not Before: Jun 14 23:35:44 2025 GMT Not After : Jun 18 09:34:44 2025 GMT Subject: CN=86711F82BBF8CFC2BBD4E5A111F437D91EEDD435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f7:90:38:e4:f4:e0:93:b8:61:eb:63:9a:70: f1:08:d4:c0:a8:0e:87:d8:60:2f:15:f2:06:03:22: a9:fb:e2:5a:7f:3b:bc:99:6e:b5:3c:02:64:7c:a3: 21:74:d0:07:12:0a:0a:da:79:59:10:43:61:77:07: 3d:07:23:c9:c4:aa:82:19:85:ed:c6:f1:61:d7:f5: 55:d7:e4:6a:53:9a:82:7a:59:27:86:57:b6:41:49: 77:e8:21:a9:cd:05:df:3a:e4:4b:e8:b7:e6:2a:eb: 69:25:24:7f:b0:e1:c2:68:fd:df:11:78:4a:1a:a9: a3:da:84:d0:7c:b5:12:99:a1:3f:77:36:54:0c:e0: e5:6a:bf:67:f2:75:dc:5e:12:4e:41:04:e1:48:07: 94:02:53:31:aa:81:f1:71:3c:07:2e:1f:bf:8a:1a: b6:56:71:ee:50:dd:99:03:cb:b4:ce:98:ea:43:92: 04:34:8e:d4:14:12:9c:06:a5:c1:4c:a6:46:ad:3c: 7d:d2:f5:ea:9d:d9:17:01:55:5a:9b:c5:81:e8:26: 14:c2:d2:d6:3a:e1:8c:9a:6c:19:79:44:90:0d:59: 1a:29:82:6a:dc:91:eb:78:77:20:0b:42:f5:27:a3: 15:07:62:82:c3:29:ee:56:24:cd:28:04:9c:cb:3b: 3a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:71:1F:82:BB:F8:CF:C2:BB:D4:E5:A1:11:F4:37:D9:1E:ED:D4:35 X509v3 Authority Key Identifier: keyid:5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:ed:1f:a1:9c:2e:69:ad:39:71:cb:1a:43:02:77:7b:23:cd: cb:c9:a4:1e:fe:d4:fa:ec:42:97:75:1b:27:97:9d:5f:e1:ff: 3f:4e:ac:4c:b4:fd:36:f1:4f:73:f8:0c:ef:4d:8b:64:5b:ee: 5c:58:d4:e2:af:85:9a:9a:92:5e:dd:e8:c6:c7:4f:9c:04:ab: 27:d9:1d:f6:51:44:16:df:48:68:d3:d6:35:f5:56:40:05:7b: 57:e5:74:30:dc:b1:e6:6b:40:c8:ed:18:65:19:5c:cf:12:df: 85:1a:a9:34:f4:28:49:92:71:b1:4d:a1:26:7f:ad:87:26:1f: 90:71:42:9c:a3:73:ce:5b:96:e0:21:0f:16:cb:6b:34:be:f7: 82:89:70:12:7d:a7:55:3e:1d:9b:e1:b5:5b:a0:44:ce:fb:2b: 5e:5c:14:2f:c3:19:b1:15:ab:e5:5f:9e:e7:25:eb:a9:51:4e: 6e:43:0f:0a:c0:a3:be:fe:84:ac:d9:9e:55:3c:e0:df:35:29: c2:4d:7f:c9:07:32:a5:79:b9:28:aa:34:1b:3a:5e:06:c2:e1: af:49:e5:c8:3e:dc:84:24:f0:53:d2:70:18:d3:1c:6f:43:db: 21:6f:35:96:33:fc:13:37:69:a8:ec:b1:3b:46:e5:ee:98:b5: 77:53:45:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZCmLKIk3+OkIWfMxrUB7NAIZOnIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZFODlE REI4NEM1NzAeFw0yNTA2MTQyMzM1NDRaFw0yNTA2MTgwOTM0NDRaMDMxMTAvBgNV BAMTKDg2NzExRjgyQkJGOENGQzJCQkQ0RTVBMTExRjQzN0Q5MUVFREQ0MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh95A45PTgk7hh62OacPEI1MCo DofYYC8V8gYDIqn74lp/O7yZbrU8AmR8oyF00AcSCgraeVkQQ2F3Bz0HI8nEqoIZ he3G8WHX9VXX5GpTmoJ6WSeGV7ZBSXfoIanNBd865Evot+Yq62klJH+w4cJo/d8R eEoaqaPahNB8tRKZoT93NlQM4OVqv2fyddxeEk5BBOFIB5QCUzGqgfFxPAcuH7+K GrZWce5Q3ZkDy7TOmOpDkgQ0jtQUEpwGpcFMpkatPH3S9eqd2RcBVVqbxYHoJhTC 0tY64YyabBl5RJANWRopgmrcket4dyALQvUnoxUHYoLDKe5WJM0oBJzLOzopAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhnEfgrv4z8K71OWhEfQ32R7t1DUwHwYDVR0j BBgwFoAUXo0RFvjGYYK2VSHImbVuid24TFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTk5YzFhZi1kOWM3LTRmZmQtYmEwMy1hM2UxY2RkOGFlZTAvMC81RThEMTExNkY4 QzY2MTgyQjY1NTIxQzg5OUI1NkU4OUREQjg0QzU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZFODlEREI4 NEM1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjE5OWMxYWYtZDljNy00ZmZkLWJh MDMtYTNlMWNkZDhhZWUwLzAvNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZF ODlEREI4NEM1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTtH6GcLmmtOXHLGkMCd3sjzcvJpB7+1Prs Qpd1GyeXnV/h/z9OrEy0/TbxT3P4DO9Ni2Rb7lxY1OKvhZqakl7d6MbHT5wEqyfZ HfZRRBbfSGjT1jX1VkAFe1fldDDcseZrQMjtGGUZXM8S34UaqTT0KEmScbFNoSZ/ rYcmH5BxQpyjc85bluAhDxbLazS+94KJcBJ9p1U+HZvhtVugRM77K15cFC/DGbEV q+Vfnucl66lRTm5DDwrAo77+hKzZnlU84N81KcJNf8kHMqV5uSiqNBs6XgbC4a9J 5cg+3IQk8FPScBjTHG9D2yFvNZYz/BM3aajssTtG5e6YtXdTRbI= -----END CERTIFICATE-----Generated at Mon Jun 16 15:37:03 2025 by rpki-client