$ rpki-client -vvf repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft File: 5DFC46925E2D4B3FB044F284111222A8B4C78392.mft (raw, json) Hash identifier: 94qXsUffOqO5v0QW6JctGcEwxsnaAuGBnEniQMN9W5c= Subject key identifier: 2E:26:2C:D8:73:9B:F3:11:27:41:FA:1A:0E:D8:C0:DD:02:8B:D2:93 Authority key identifier: 5D:FC:46:92:5E:2D:4B:3F:B0:44:F2:84:11:12:22:A8:B4:C7:83:92 Certificate issuer: /CN=5DFC46925E2D4B3FB044F284111222A8B4C78392 Certificate serial: 40EFD9DB991EA93FDC25E3475AEDFE5C7E79C59C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft Manifest number: 0185 Signing time: Mon 16 Jun 2025 15:21:02 +0000 Manifest this update: Mon 16 Jun 2025 15:16:02 +0000 Manifest next update: Fri 20 Jun 2025 01:49:02 +0000 Files and hashes: 1: 3130332e32322e39382e302f32342d3234203d3e20313530323433.roa (hash: RBUkVebuQcs/eoD+DsobzhNFA6Y0GlvHxLIjvG85Lgo=) 2: 5DFC46925E2D4B3FB044F284111222A8B4C78392.crl (hash: +peXtiV8c4NZIHQRfOl7pFynUsQ/IcqN12Q3DxA7jrc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.crl rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:49:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:ef:d9:db:99:1e:a9:3f:dc:25:e3:47:5a:ed:fe:5c:7e:79:c5:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DFC46925E2D4B3FB044F284111222A8B4C78392 Validity Not Before: Jun 16 15:16:02 2025 GMT Not After : Jun 20 01:49:02 2025 GMT Subject: CN=2E262CD8739BF3112741FA1A0ED8C0DD028BD293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a2:71:70:ac:c7:0b:4b:88:07:ca:9a:af:68: d9:8c:ca:ab:b4:6d:85:e4:d0:9c:d4:bf:2b:99:fc: 5f:9f:d8:ea:6a:e2:d6:3a:3c:5b:36:49:75:69:38: 6c:3b:6e:4a:85:51:04:36:52:da:f0:12:37:42:63: cb:07:37:3b:a5:4a:e1:85:e1:2d:03:77:b4:3c:57: 56:77:96:3f:80:3e:6a:ff:27:a4:c6:23:49:66:c0: dc:f2:99:f3:b4:f5:01:fd:0c:cb:7b:b6:72:7f:16: 1c:d6:1e:bc:5e:91:ab:3a:51:38:22:a9:46:d0:32: 13:dd:74:3e:78:8d:0f:2e:5f:15:3d:e7:c4:1f:38: 6f:74:e5:ce:74:e1:d0:31:87:0e:de:42:5a:8c:4e: 63:ca:4e:09:70:bc:25:23:e6:2b:7a:a6:af:bf:c4: a8:2f:8a:6a:e3:7d:c2:a6:c9:7d:ec:a3:a0:19:2b: 13:c5:0d:16:db:14:45:15:a1:20:2d:76:cd:bd:ac: 8b:9a:3f:c3:af:6a:8a:ec:d7:08:de:d9:3b:1c:98: f7:bc:62:c4:24:09:fa:98:40:5e:d8:90:e1:7d:e7: bf:ef:45:ff:76:e6:a4:80:1c:36:ca:6a:8f:12:56: e1:b7:39:ea:52:52:c1:7a:bf:84:3c:86:78:c7:e1: cb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:26:2C:D8:73:9B:F3:11:27:41:FA:1A:0E:D8:C0:DD:02:8B:D2:93 X509v3 Authority Key Identifier: keyid:5D:FC:46:92:5E:2D:4B:3F:B0:44:F2:84:11:12:22:A8:B4:C7:83:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:fb:c5:1c:7c:c0:18:78:21:af:1e:ff:de:5f:85:0e:a9:b2: 19:b2:b3:53:c5:6e:8f:af:d9:54:b8:60:cb:81:ae:83:b3:b2: 9b:f2:78:eb:8a:b0:58:79:4f:49:5b:90:c9:b7:f9:d9:a8:e3: a4:56:18:28:a0:16:9c:0c:0e:da:84:a6:5a:d0:f8:8a:b7:0a: 4b:bb:41:ef:7c:40:ae:d9:1d:6c:ec:b7:75:2b:40:0d:ef:b7: 29:b9:11:6c:ae:4f:a7:81:f7:73:a5:a4:72:23:e4:a9:d2:3c: 08:a8:75:2e:d8:92:55:df:cf:5b:b8:0a:4d:cb:40:77:41:7f: 48:f1:04:55:0f:21:ac:6a:80:8c:31:43:93:08:82:3c:58:c0: 3e:9e:40:b0:26:c6:5c:a2:99:d6:3e:dc:3f:62:0d:40:4d:81: c7:0a:20:d8:5f:7e:52:71:14:9f:f2:91:ec:79:18:58:42:4d: d8:21:c3:37:5a:69:38:52:7d:f6:bf:ce:00:83:e6:d5:39:c2: 4c:d2:e4:4a:57:d6:39:b2:69:96:b2:f8:3d:d7:a1:17:15:da: 32:b9:bd:10:1d:f1:04:f6:f5:ef:4f:59:42:4c:02:b7:45:e9: 9a:3f:a7:85:8b:47:d4:a0:73:21:67:2f:41:47:9f:99:77:15: b1:2f:87:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQO/Z25keqT/cJeNHWu3+XH55xZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIyQThC NEM3ODM5MjAeFw0yNTA2MTYxNTE2MDJaFw0yNTA2MjAwMTQ5MDJaMDMxMTAvBgNV BAMTKDJFMjYyQ0Q4NzM5QkYzMTEyNzQxRkExQTBFRDhDMEREMDI4QkQyOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6onFwrMcLS4gHypqvaNmMyqu0 bYXk0JzUvyuZ/F+f2Opq4tY6PFs2SXVpOGw7bkqFUQQ2UtrwEjdCY8sHNzulSuGF 4S0Dd7Q8V1Z3lj+APmr/J6TGI0lmwNzymfO09QH9DMt7tnJ/FhzWHrxekas6UTgi qUbQMhPddD54jQ8uXxU958QfOG905c504dAxhw7eQlqMTmPKTglwvCUj5it6pq+/ xKgvimrjfcKmyX3so6AZKxPFDRbbFEUVoSAtds29rIuaP8Ovaors1wje2TscmPe8 YsQkCfqYQF7YkOF957/vRf925qSAHDbKao8SVuG3OepSUsF6v4Q8hnjH4csNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULiYs2HOb8xEnQfoaDtjA3QKL0pMwHwYDVR0j BBgwFoAUXfxGkl4tSz+wRPKEERIiqLTHg5IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzAxYjI3Ny1jODBjLTQ1ZDUtODA4OS1hOWVmYTM0MDU0MmEvMC81REZDNDY5MjVF MkQ0QjNGQjA0NEYyODQxMTEyMjJBOEI0Qzc4MzkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIyQThCNEM3 ODM5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDcwMWIyNzctYzgwYy00NWQ1LTgw ODktYTllZmEzNDA1NDJhLzAvNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIy QThCNEM3ODM5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/7xRx8wBh4Ia8e/95fhQ6pshmys1PFbo+v 2VS4YMuBroOzspvyeOuKsFh5T0lbkMm3+dmo46RWGCigFpwMDtqEplrQ+Iq3Cku7 Qe98QK7ZHWzst3UrQA3vtym5EWyuT6eB93OlpHIj5KnSPAiodS7YklXfz1u4Ck3L QHdBf0jxBFUPIaxqgIwxQ5MIgjxYwD6eQLAmxlyimdY+3D9iDUBNgccKINhfflJx FJ/ykex5GFhCTdghwzdaaThSffa/zgCD5tU5wkzS5EpX1jmyaZay+D3XoRcV2jK5 vRAd8QT29e9PWUJMArdF6Zo/p4WLR9SgcyFnL0FHn5l3FbEvh5A= -----END CERTIFICATE-----Generated at Wed Jun 18 03:26:55 2025 by rpki-client