$ rpki-client -vvf repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft File: 5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft (raw, json) Hash identifier: bY+PkwiLzxHXszB8jZeFn4ubSgpgGnK15wxHIS3wGvE= Subject key identifier: BB:D0:F0:1C:6B:7A:3C:CB:63:FC:DB:0B:9A:7E:36:7B:31:A0:6F:2D Authority key identifier: 5B:8C:3A:29:E9:0C:25:CB:F4:61:51:24:B1:17:BE:7F:C0:13:C6:1E Certificate issuer: /CN=5B8C3A29E90C25CBF4615124B117BE7FC013C61E Certificate serial: 2368707EC8842D122ABDE429D68C7675C39E5F95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft Manifest number: 019E Signing time: Mon 16 Jun 2025 14:11:03 +0000 Manifest this update: Mon 16 Jun 2025 14:06:03 +0000 Manifest next update: Thu 19 Jun 2025 18:52:03 +0000 Files and hashes: 1: 5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl (hash: rZYOlJ0Z6kzuwogzniYtTB1NUobiJD566WurU1K//rI=) 2: 3130332e39302e36372e302f32342d3234203d3e20313530323635.roa (hash: rSbPcUFwbUotF4iGb/0NgCE/rDZm6ThuOkAV/ZhbDr4=) 3: 3130332e39302e36362e302f32332d3233203d3e20313530323635.roa (hash: 03+kmACXHUPe0IyI3YXAvW+JekGIFfxV2tHYWD2l8nE=) 4: 3130332e39302e36362e302f32342d3234203d3e20313530323635.roa (hash: 5zPk4MUiirpmEj5/W53RgTUlrb96XIX+LjZrPDV2UMA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:52:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:68:70:7e:c8:84:2d:12:2a:bd:e4:29:d6:8c:76:75:c3:9e:5f:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B8C3A29E90C25CBF4615124B117BE7FC013C61E Validity Not Before: Jun 16 14:06:03 2025 GMT Not After : Jun 19 18:52:03 2025 GMT Subject: CN=BBD0F01C6B7A3CCB63FCDB0B9A7E367B31A06F2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b0:5b:40:e1:84:f7:de:11:af:60:28:cd:ff: e0:df:48:c6:c2:7b:70:92:bc:04:f0:40:ef:e3:63: 97:41:03:36:e9:9b:5d:7c:ea:4a:25:8f:66:e5:a1: 88:77:fe:81:cd:ca:eb:85:b0:3b:c0:00:a4:23:33: 74:03:d0:f2:73:78:bf:3b:5a:17:61:e4:e0:e5:7f: 0e:e5:98:f6:28:95:9c:f7:4c:e0:5d:4b:27:72:c7: 86:34:fc:89:4d:86:70:64:e7:55:e1:22:f5:2a:be: dd:da:ae:89:d4:1d:9f:69:2e:41:0a:a2:e8:af:7c: 0c:56:7f:d9:6e:33:ae:bf:e4:e0:c3:f8:73:b4:10: 95:e1:58:f2:0d:b6:32:0b:7d:3b:c8:a3:10:45:57: eb:a6:12:9b:c1:15:a2:3b:40:e2:f5:3b:0a:a7:15: 73:c1:18:e0:12:4b:83:56:20:c5:39:cd:ea:17:c4: 25:0d:20:82:13:44:82:44:8c:ba:20:94:86:57:a8: e5:09:d3:9a:55:5b:03:7e:01:8b:14:cb:c3:90:23: 7e:85:ee:aa:25:a2:7f:5c:6d:ff:c2:67:e4:23:68: d2:00:57:38:cd:4d:16:4b:06:16:fa:8b:0f:30:14: 70:1e:90:63:3c:60:d7:bd:3c:39:c7:dc:43:29:56: 9f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D0:F0:1C:6B:7A:3C:CB:63:FC:DB:0B:9A:7E:36:7B:31:A0:6F:2D X509v3 Authority Key Identifier: keyid:5B:8C:3A:29:E9:0C:25:CB:F4:61:51:24:B1:17:BE:7F:C0:13:C6:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:69:44:13:5d:6e:5c:6b:24:8e:55:ce:de:63:51:c0:5e:7e: 13:ee:00:0f:77:ec:b9:28:b2:e2:57:2f:2f:bc:54:b5:71:44: 59:9f:eb:cc:b9:a0:f7:d6:ca:54:83:d6:13:d1:54:41:8a:2c: 9b:98:ec:e4:86:25:b5:c1:08:8f:aa:d7:46:fd:68:bd:40:b6: 2b:24:42:1a:7a:ba:2d:ab:74:42:23:09:23:b2:2b:ae:f8:15: 35:13:fe:92:d4:95:5d:2e:4d:a5:c7:00:5b:d2:4a:f5:9f:b4: 01:40:86:a4:a4:31:71:48:a4:94:6b:7b:ee:dd:37:bc:f8:98: a0:3e:c8:6b:80:66:2a:65:20:1b:36:35:97:a7:39:cb:ab:9d: ae:7b:ee:81:02:9d:3f:ca:5b:f5:57:4f:f1:7a:08:45:50:ba: d4:95:0b:63:3e:98:61:ad:9b:6c:2c:43:f2:f4:26:55:79:7d: 43:00:c0:2d:8e:35:6c:ed:0e:dd:72:05:24:9c:d3:6b:5e:50: 18:1b:1e:a9:32:3c:9a:34:6e:c8:44:66:cf:e2:04:e0:6f:da: 20:0b:c8:91:52:26:93:c8:13:c4:89:5b:c1:ee:20:f0:28:b1: f4:db:a2:1c:c0:1b:81:5d:93:b1:4f:92:07:6c:85:e4:72:7b: c7:13:a2:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI2hwfsiELRIqveQp1ox2dcOeX5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JFN0ZD MDEzQzYxRTAeFw0yNTA2MTYxNDA2MDNaFw0yNTA2MTkxODUyMDNaMDMxMTAvBgNV BAMTKEJCRDBGMDFDNkI3QTNDQ0I2M0ZDREIwQjlBN0UzNjdCMzFBMDZGMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2sFtA4YT33hGvYCjN/+DfSMbC e3CSvATwQO/jY5dBAzbpm1186kolj2bloYh3/oHNyuuFsDvAAKQjM3QD0PJzeL87 Whdh5ODlfw7lmPYolZz3TOBdSydyx4Y0/IlNhnBk51XhIvUqvt3aronUHZ9pLkEK ouivfAxWf9luM66/5ODD+HO0EJXhWPINtjILfTvIoxBFV+umEpvBFaI7QOL1Owqn FXPBGOASS4NWIMU5zeoXxCUNIIITRIJEjLoglIZXqOUJ05pVWwN+AYsUy8OQI36F 7qolon9cbf/CZ+QjaNIAVzjNTRZLBhb6iw8wFHAekGM8YNe9PDnH3EMpVp/NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu9DwHGt6PMtj/NsLmn42ezGgby0wHwYDVR0j BBgwFoAUW4w6KekMJcv0YVEksRe+f8ATxh4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWYzYzc2OS1jZmIxLTQyMDYtOWY1NC1jMDU4N2U2M2JhNWIvMC81QjhDM0EyOUU5 MEMyNUNCRjQ2MTUxMjRCMTE3QkU3RkMwMTNDNjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JFN0ZDMDEz QzYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzlmM2M3NjktY2ZiMS00MjA2LTlm NTQtYzA1ODdlNjNiYTViLzAvNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JF N0ZDMDEzQzYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMBpRBNdblxrJI5Vzt5jUcBefhPuAA937Lko suJXLy+8VLVxRFmf68y5oPfWylSD1hPRVEGKLJuY7OSGJbXBCI+q10b9aL1Atisk Qhp6ui2rdEIjCSOyK674FTUT/pLUlV0uTaXHAFvSSvWftAFAhqSkMXFIpJRre+7d N7z4mKA+yGuAZiplIBs2NZenOcurna577oECnT/KW/VXT/F6CEVQutSVC2M+mGGt m2wsQ/L0JlV5fUMAwC2ONWztDt1yBSSc02teUBgbHqkyPJo0bshEZs/iBOBv2iAL yJFSJpPIE8SJW8HuIPAosfTbohzAG4Fdk7FPkgdsheRye8cTohA= -----END CERTIFICATE-----Generated at Wed Jun 18 00:18:05 2025 by rpki-client