$ rpki-client -vvf repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft File: C5CA2999FE7612F56CCCB7441743B05181458ED0.mft (raw, json) Hash identifier: 98d75R5jc6AHwORGMgF9pv91UajFUkkVup3FBshdlSg= Subject key identifier: 21:67:2A:01:B0:0C:2B:70:77:05:0E:47:49:06:E7:0D:B0:60:7D:3A Authority key identifier: C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0 Certificate issuer: /CN=C5CA2999FE7612F56CCCB7441743B05181458ED0 Certificate serial: 1D2A200F5EF2BBC84FDF6DC965D1B7D5A3049360 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft Manifest number: 04E0 Signing time: Tue 17 Jun 2025 23:40:38 +0000 Manifest this update: Tue 17 Jun 2025 23:35:38 +0000 Manifest next update: Sat 21 Jun 2025 02:50:38 +0000 Files and hashes: 1: 3130332e3134322e3230322e302f32342d3234203d3e20313339333738.roa (hash: kZ/7LdQ98yA+6ycYvld45u3DxaVBg4NMh+WZ028gPpU=) 2: 3130332e3134322e3230322e302f32332d3233203d3e20313339333738.roa (hash: aOFDhPstKOFaNipOEFwONnhh/OGsZlp5fuQdDXOoo9E=) 3: C5CA2999FE7612F56CCCB7441743B05181458ED0.crl (hash: Zii8riJ/UwsEFITaP3sZJaulOt7bi/vIT4jsqB2eAr4=) 4: 3130332e3134322e3230332e302f32342d3234203d3e20313339333738.roa (hash: TJhHkKwr35GRF8gqIxcj9n16SqAaRRuK8PF46Ie+LXg=) 5: 323030313a6466313a353638303a3a2f34382d3438203d3e20313339333738.roa (hash: q7ox9dPZeS59odB2IJMVaFXBFhKkSZPWVMJt5aLWrRc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 22:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:2a:20:0f:5e:f2:bb:c8:4f:df:6d:c9:65:d1:b7:d5:a3:04:93:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5CA2999FE7612F56CCCB7441743B05181458ED0 Validity Not Before: Jun 17 23:35:38 2025 GMT Not After : Jun 21 02:50:38 2025 GMT Subject: CN=21672A01B00C2B7077050E474906E70DB0607D3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cc:e1:1f:22:a1:bd:b8:dc:e8:85:b7:0f:be: 2f:45:e8:2b:73:ae:a7:66:c8:c2:10:ed:9d:31:5a: 7f:3f:c0:e7:fa:00:09:ba:78:a1:09:01:ea:e0:dc: 9c:04:b3:96:2c:c0:ac:4f:e5:60:15:6b:ff:72:1f: 9a:54:69:45:1d:18:d2:99:54:ef:ca:41:17:87:c5: d4:d7:e0:4c:e3:62:fe:b2:10:fa:0e:0b:cf:bc:dc: a7:2e:6a:a3:9d:40:d4:e9:bc:b7:e1:f8:6c:94:91: 3c:82:e5:15:14:07:27:26:43:23:23:1c:de:1a:45: db:5e:17:e6:58:ef:43:0e:e6:cf:fe:13:ce:26:1e: 0b:a1:26:d0:eb:aa:21:a1:09:f3:cd:7a:d2:3d:9c: 60:92:51:1a:d1:4b:e3:e2:3c:61:e6:24:05:80:82: 67:89:8c:a8:f6:f2:c7:62:b5:4c:b0:37:02:1c:b2: f6:2c:b6:d0:31:56:7d:3c:5a:02:f3:a6:6e:16:58: 81:b0:1b:d8:0a:47:0e:a6:75:ec:04:11:52:75:a1: d1:9c:84:7a:0a:68:d5:16:e8:d9:98:7f:d4:65:11: 6a:3e:ad:cf:e5:68:1d:90:2f:c6:ea:9a:c7:c8:04: 90:8a:24:d0:32:bf:61:30:69:b5:33:53:3c:4b:ec: 91:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:67:2A:01:B0:0C:2B:70:77:05:0E:47:49:06:E7:0D:B0:60:7D:3A X509v3 Authority Key Identifier: keyid:C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:b4:ae:7a:27:78:b4:c4:f1:e0:91:d2:3c:69:4b:1e:b8:c0: 12:c0:6c:48:b7:15:29:7b:ff:89:7c:50:eb:50:d0:d0:59:ea: d7:fe:98:f4:1e:c0:77:64:17:e4:d1:77:a7:83:f3:24:53:94: 88:6a:e3:62:73:72:cd:85:1a:d7:19:52:d4:46:e6:91:d4:79: 50:2c:6e:dc:d4:26:4f:bf:26:90:62:ac:be:72:3d:8f:2c:d5: b9:12:ff:cc:7d:cc:22:48:d5:5a:42:9c:5f:a7:d6:16:c4:64: 7d:06:d9:78:29:0f:78:d7:f1:58:62:90:43:14:3b:0c:ae:76: 50:c8:8e:e2:c9:6a:b9:bb:89:27:62:63:81:89:b2:73:b6:73: e0:4f:cf:1b:e7:5a:6d:19:98:bc:31:a3:53:c3:0d:34:c4:27: d4:bc:64:a8:c6:08:ea:46:ff:4b:76:e7:b9:ee:9b:b6:38:dd: aa:ea:57:21:5b:5e:dd:a7:39:6a:b9:94:10:58:7f:ec:8b:db: 99:33:12:0f:11:47:30:68:4e:8c:fd:3d:d3:52:98:1e:3d:27: b2:8e:94:c8:40:17:6d:44:c0:aa:38:62:a1:51:5d:16:fd:28: f1:74:04:e3:b9:28:fb:d6:89:2a:21:5a:00:be:e0:0c:6f:db: 82:a5:b7:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHSogD17yu8hP323JZdG31aMEk2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0IwNTE4 MTQ1OEVEMDAeFw0yNTA2MTcyMzM1MzhaFw0yNTA2MjEwMjUwMzhaMDMxMTAvBgNV BAMTKDIxNjcyQTAxQjAwQzJCNzA3NzA1MEU0NzQ5MDZFNzBEQjA2MDdEM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClzOEfIqG9uNzohbcPvi9F6Ctz rqdmyMIQ7Z0xWn8/wOf6AAm6eKEJAerg3JwEs5YswKxP5WAVa/9yH5pUaUUdGNKZ VO/KQReHxdTX4EzjYv6yEPoOC8+83KcuaqOdQNTpvLfh+GyUkTyC5RUUBycmQyMj HN4aRdteF+ZY70MO5s/+E84mHguhJtDrqiGhCfPNetI9nGCSURrRS+PiPGHmJAWA gmeJjKj28sditUywNwIcsvYsttAxVn08WgLzpm4WWIGwG9gKRw6mdewEEVJ1odGc hHoKaNUW6NmYf9RlEWo+rc/laB2QL8bqmsfIBJCKJNAyv2EwabUzUzxL7JGxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIWcqAbAMK3B3BQ5HSQbnDbBgfTowHwYDVR0j BBgwFoAUxcopmf52EvVszLdEF0OwUYFFjtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjdmYjgzNy0xYjJmLTRjNGUtYjk5OS02ZTk5MGRkYzE0OTkvMC9DNUNBMjk5OUZF NzYxMkY1NkNDQ0I3NDQxNzQzQjA1MTgxNDU4RUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0IwNTE4MTQ1 OEVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDY3ZmI4MzctMWIyZi00YzRlLWI5 OTktNmU5OTBkZGMxNDk5LzAvQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0Iw NTE4MTQ1OEVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEW0rnoneLTE8eCR0jxpSx64wBLAbEi3FSl7 /4l8UOtQ0NBZ6tf+mPQewHdkF+TRd6eD8yRTlIhq42Jzcs2FGtcZUtRG5pHUeVAs btzUJk+/JpBirL5yPY8s1bkS/8x9zCJI1VpCnF+n1hbEZH0G2XgpD3jX8VhikEMU OwyudlDIjuLJarm7iSdiY4GJsnO2c+BPzxvnWm0ZmLwxo1PDDTTEJ9S8ZKjGCOpG /0t257num7Y43arqVyFbXt2nOWq5lBBYf+yL25kzEg8RRzBoToz9PdNSmB49J7KO lMhAF21EwKo4YqFRXRb9KPF0BOO5KPvWiSohWgC+4Axv24Klt4I= -----END CERTIFICATE-----Generated at Wed Jun 18 01:54:33 2025 by rpki-client