$ rpki-client -vvf repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft File: 5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft (raw, json) Hash identifier: R7/+nXei6/6BII8hNIo1+Qd1p/HcMR5VEuU60ar+Fi8= Subject key identifier: 8F:56:B7:37:37:21:6B:58:8C:A6:C5:1F:5C:69:23:DE:43:8F:95:21 Authority key identifier: 5A:CB:0F:96:C2:B1:25:5E:AB:AA:EB:C1:42:6E:CD:9E:6D:F6:C4:AD Certificate issuer: /CN=5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD Certificate serial: 1A5553D423D68B8BA001123E6DE00E2BC6532B1D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft Manifest number: 0152 Signing time: Sat 14 Jun 2025 05:40:59 +0000 Manifest this update: Sat 14 Jun 2025 05:35:59 +0000 Manifest next update: Tue 17 Jun 2025 13:47:59 +0000 Files and hashes: 1: 5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.crl (hash: ZDiKyXbnQTliHecH2VV4dTZg8Yc7bI2Ak6CFFopdmAY=) 2: 3130332e3235322e34382e302f32342d3234203d3e20313530393931.roa (hash: 3eXzK+GorV6w9BT+6P2VQObNrkmn7G3kB6eMdcv66zE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.crl rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 13:47:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:55:53:d4:23:d6:8b:8b:a0:01:12:3e:6d:e0:0e:2b:c6:53:2b:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD Validity Not Before: Jun 14 05:35:59 2025 GMT Not After : Jun 17 13:47:59 2025 GMT Subject: CN=8F56B73737216B588CA6C51F5C6923DE438F9521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ae:e9:de:85:89:c8:e8:32:57:f7:11:d7:01: 8e:f0:46:e7:54:20:f0:c8:2f:93:21:05:c0:ab:b3: fd:38:42:7e:72:ca:0d:bf:18:02:3e:e3:93:c6:c4: 66:8a:c8:11:ed:9d:c9:f5:fd:73:8a:2a:84:4d:13: 6b:aa:7d:53:ee:41:77:60:88:97:36:5a:be:0e:71: c4:2a:55:7b:76:9c:f6:40:4c:70:21:33:29:92:f7: 0e:be:6c:f9:83:58:70:18:03:3e:fa:60:19:96:08: 04:1e:ab:58:da:8d:f9:ae:26:00:c7:59:91:e1:58: 57:5e:78:77:2e:ee:7e:ba:5a:38:83:8e:db:5f:48: 91:41:cd:b2:0d:e3:d2:f9:e7:82:61:0e:05:3a:04: 65:4d:46:19:3f:d4:e2:bd:5e:47:1c:d8:25:87:ef: a9:2c:8e:ed:46:db:d8:22:ae:41:63:60:58:8d:56: 67:ac:cd:67:62:53:85:76:19:52:8f:93:30:72:47: 80:9e:b2:bc:50:4b:bc:93:3d:0e:b0:fb:08:ba:cb: d5:da:36:64:bf:80:0e:e8:59:de:7a:0c:b8:24:40: 7c:7b:92:4c:7f:7f:52:ad:3e:7e:d3:16:9b:ef:dc: 5e:be:f8:7e:f5:0f:02:89:e0:40:28:84:b6:83:59: 49:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:56:B7:37:37:21:6B:58:8C:A6:C5:1F:5C:69:23:DE:43:8F:95:21 X509v3 Authority Key Identifier: keyid:5A:CB:0F:96:C2:B1:25:5E:AB:AA:EB:C1:42:6E:CD:9E:6D:F6:C4:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:a6:17:d6:54:46:60:ee:d9:2f:b9:5c:04:7f:1a:ff:78:29: 06:bd:b2:20:df:de:13:2d:d0:da:29:65:f2:e6:fc:b8:35:de: 8e:6d:87:31:08:e3:80:34:cd:90:7a:a7:af:b5:6c:55:2c:91: 41:a0:0d:e9:ce:74:c6:f9:20:63:88:ea:5d:d9:f3:fb:c7:cd: 76:10:7e:3c:64:43:1e:55:67:2b:2e:8f:f6:6c:7e:e8:70:0e: a1:47:c8:72:3e:d8:8c:8c:26:9e:6e:bc:5d:c4:f3:99:b5:1c: f9:0b:40:6d:d4:2a:b9:9a:aa:c6:2c:c6:79:22:77:ca:fb:79: ba:93:be:8b:9d:cf:6d:fd:ac:cb:3b:9b:5b:bd:4e:2c:e4:0a: 8a:cc:71:9e:b2:dc:d6:d7:c3:c6:8a:51:96:be:f4:e9:eb:df: e6:c0:84:e9:ad:3b:2c:12:26:5f:56:f8:e5:27:37:0d:1e:8c: 54:f4:d2:80:71:50:30:42:63:65:f7:7f:02:35:f1:7b:7e:bc: c2:68:8b:59:e6:70:3c:c1:79:1b:90:d5:b5:a1:45:5e:4e:a9: 3f:f6:c0:5e:d8:40:14:d6:57:b5:13:27:f8:c1:8c:d2:1f:18: 81:89:01:07:9c:a0:71:f4:52:22:32:9b:38:2d:59:81:8d:dd: 66:3f:0b:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGlVT1CPWi4ugARI+beAOK8ZTKx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFDQjBGOTZDMkIxMjU1RUFCQUFFQkMxNDI2RUNEOUU2 REY2QzRBRDAeFw0yNTA2MTQwNTM1NTlaFw0yNTA2MTcxMzQ3NTlaMDMxMTAvBgNV BAMTKDhGNTZCNzM3MzcyMTZCNTg4Q0E2QzUxRjVDNjkyM0RFNDM4Rjk1MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/runehYnI6DJX9xHXAY7wRudU IPDIL5MhBcCrs/04Qn5yyg2/GAI+45PGxGaKyBHtncn1/XOKKoRNE2uqfVPuQXdg iJc2Wr4OccQqVXt2nPZATHAhMymS9w6+bPmDWHAYAz76YBmWCAQeq1jajfmuJgDH WZHhWFdeeHcu7n66WjiDjttfSJFBzbIN49L554JhDgU6BGVNRhk/1OK9Xkcc2CWH 76ksju1G29girkFjYFiNVmeszWdiU4V2GVKPkzByR4CesrxQS7yTPQ6w+wi6y9Xa NmS/gA7oWd56DLgkQHx7kkx/f1KtPn7TFpvv3F6++H71DwKJ4EAohLaDWUldAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj1a3Nzcha1iMpsUfXGkj3kOPlSEwHwYDVR0j BBgwFoAUWssPlsKxJV6rquvBQm7Nnm32xK0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MTNlZWQyYi05NTVlLTQwOTMtODhhNC1mNGRlM2NjOWI5Y2QvMC81QUNCMEY5NkMy QjEyNTVFQUJBQUVCQzE0MjZFQ0Q5RTZERjZDNEFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFDQjBGOTZDMkIxMjU1RUFCQUFFQkMxNDI2RUNEOUU2REY2 QzRBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTEzZWVkMmItOTU1ZS00MDkzLTg4 YTQtZjRkZTNjYzliOWNkLzAvNUFDQjBGOTZDMkIxMjU1RUFCQUFFQkMxNDI2RUNE OUU2REY2QzRBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAmmF9ZURmDu2S+5XAR/Gv94KQa9siDf3hMt 0NopZfLm/Lg13o5thzEI44A0zZB6p6+1bFUskUGgDenOdMb5IGOI6l3Z8/vHzXYQ fjxkQx5VZysuj/ZsfuhwDqFHyHI+2IyMJp5uvF3E85m1HPkLQG3UKrmaqsYsxnki d8r7ebqTvoudz239rMs7m1u9TizkCorMcZ6y3NbXw8aKUZa+9Onr3+bAhOmtOywS Jl9W+OUnNw0ejFT00oBxUDBCY2X3fwI18Xt+vMJoi1nmcDzBeRuQ1bWhRV5OqT/2 wF7YQBTWV7UTJ/jBjNIfGIGJAQecoHH0UiIymzgtWYGN3WY/C/E= -----END CERTIFICATE-----Generated at Mon Jun 16 04:31:58 2025 by rpki-client