$ rpki-client -vvf repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft File: 5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft (raw, json) Hash identifier: xmMotHb/mERqP14mipySv40vRA7WexI2Y9aZN7Y+3C4= Subject key identifier: 3E:9C:9F:33:41:9D:B0:14:C1:3E:04:1A:B0:33:AE:29:2A:4A:8F:38 Authority key identifier: 51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 Certificate issuer: /CN=5131743F5E95BB0AD5AE61B0BDC1884C1021B476 Certificate serial: 66A4772779AC758C33856FB4E7CD7653063D63F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft Manifest number: AD Signing time: Sat 14 Jun 2025 16:51:56 +0000 Manifest this update: Sat 14 Jun 2025 16:46:56 +0000 Manifest next update: Tue 17 Jun 2025 18:22:56 +0000 Files and hashes: 1: 3135372e36362e35362e302f32342d3234203d3e203538343737.roa (hash: mNyigsx6fiPTgdjz6nFdMMBq/cl8SacZCUjTw8QheXg=) 2: 5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl (hash: iZ5eE8g91C2zgXu3M7ruxwEIrFaQhiZyDlF0nIp6giA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 18:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:a4:77:27:79:ac:75:8c:33:85:6f:b4:e7:cd:76:53:06:3d:63:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5131743F5E95BB0AD5AE61B0BDC1884C1021B476 Validity Not Before: Jun 14 16:46:56 2025 GMT Not After : Jun 17 18:22:56 2025 GMT Subject: CN=3E9C9F33419DB014C13E041AB033AE292A4A8F38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:49:8a:d5:75:3f:e2:d3:78:f1:6f:00:99:5d: 52:18:eb:2c:02:97:9b:2c:c3:21:c1:1b:c7:1a:75: 30:c8:e0:f6:8e:3c:fd:54:ee:df:dd:3d:94:db:6c: b6:fd:99:2b:2b:de:d8:39:16:3f:48:99:88:d8:2a: 71:e0:90:03:56:44:70:e7:02:45:30:b1:d6:66:69: 89:6a:67:3a:96:d3:64:cb:16:0e:2c:b6:04:59:0e: f6:04:3c:7f:b3:ec:d0:72:ff:ba:e4:ca:cb:a6:5d: fb:a4:51:55:d9:ab:45:31:c1:55:af:48:75:e9:a2: b9:84:4f:f0:53:94:0f:30:1f:fb:eb:61:90:64:70: 04:3c:97:2c:af:14:bf:83:4b:d0:48:7e:d2:da:90: 64:ba:2f:26:6f:3c:36:83:aa:5d:b3:47:1f:05:ee: 6f:46:92:70:e0:75:e4:51:65:05:b0:0b:58:ca:e3: 00:21:cc:a2:c7:74:5e:90:34:ee:19:f9:19:ab:a5: 89:d5:9a:dd:ce:49:f4:94:70:3c:01:77:e8:40:c3: 64:1a:f4:f2:26:36:4e:41:96:c5:96:8c:8c:2f:e0: 41:ff:62:f2:2b:e2:35:6a:56:78:b6:59:c0:c7:19: d6:d9:d1:53:8d:34:6c:2b:f2:49:f6:43:e2:04:8a: 58:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:9C:9F:33:41:9D:B0:14:C1:3E:04:1A:B0:33:AE:29:2A:4A:8F:38 X509v3 Authority Key Identifier: keyid:51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:bc:d4:9e:7c:be:61:e3:1f:5f:bb:b5:bf:fa:eb:12:60:5a: 34:dc:c1:74:f8:ff:1d:55:6d:9a:71:9e:43:8a:6b:ed:79:f5: 22:30:78:aa:a3:30:50:ec:a5:b4:9c:10:8c:a1:3d:61:f4:1b: 54:10:db:b1:1d:d9:a9:a4:3a:d2:ef:9b:6e:a7:b4:bc:ca:b9: 1a:1b:67:92:3c:bc:44:d9:1f:fb:4b:b3:b9:71:ea:30:4d:16: ee:8e:2d:16:a4:3f:95:c0:c7:9f:8f:ec:64:ca:88:27:43:cf: 27:59:1f:90:36:83:1e:ec:b5:19:dc:61:07:f8:5c:c1:8b:3e: f2:32:ec:96:02:ca:ec:c5:2f:04:5d:f2:e7:69:19:c5:e2:f6: 43:65:36:35:1d:ab:0e:68:92:99:a2:05:74:61:01:0e:38:19: d2:42:e9:86:38:00:fa:b7:01:1d:49:17:01:97:91:a0:a7:56: 24:a4:e7:09:75:57:c7:a0:5b:05:5c:07:59:71:f1:3b:81:63: 24:49:8c:67:09:ca:6c:e1:94:9b:29:86:2b:6d:9f:6b:fa:0e: 6e:b8:c0:fe:2f:18:c5:b5:a8:fe:26:55:fc:bc:ce:e3:c9:f7: 23:a3:d6:ad:4f:7a:ad:5a:86:ae:00:46:fd:05:d0:5f:df:df: 0f:95:21:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZqR3J3msdYwzhW+05812UwY9Y/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4NEMx MDIxQjQ3NjAeFw0yNTA2MTQxNjQ2NTZaFw0yNTA2MTcxODIyNTZaMDMxMTAvBgNV BAMTKDNFOUM5RjMzNDE5REIwMTRDMTNFMDQxQUIwMzNBRTI5MkE0QThGMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCySYrVdT/i03jxbwCZXVIY6ywC l5sswyHBG8cadTDI4PaOPP1U7t/dPZTbbLb9mSsr3tg5Fj9ImYjYKnHgkANWRHDn AkUwsdZmaYlqZzqW02TLFg4stgRZDvYEPH+z7NBy/7rkysumXfukUVXZq0UxwVWv SHXpormET/BTlA8wH/vrYZBkcAQ8lyyvFL+DS9BIftLakGS6LyZvPDaDql2zRx8F 7m9GknDgdeRRZQWwC1jK4wAhzKLHdF6QNO4Z+RmrpYnVmt3OSfSUcDwBd+hAw2Qa 9PImNk5BlsWWjIwv4EH/YvIr4jVqVni2WcDHGdbZ0VONNGwr8kn2Q+IEiljhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPpyfM0GdsBTBPgQasDOuKSpKjzgwHwYDVR0j BBgwFoAUUTF0P16VuwrVrmGwvcGITBAhtHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDc1NTM0Ny02YjFjLTQyYzEtOWY1NC1kN2VhYjIyZTE4MmMvMC81MTMxNzQzRjVF OTVCQjBBRDVBRTYxQjBCREMxODg0QzEwMjFCNDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4NEMxMDIx QjQ3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQ3NTUzNDctNmIxYy00MmMxLTlm NTQtZDdlYWIyMmUxODJjLzAvNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4 NEMxMDIxQjQ3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFa81J58vmHjH1+7tb/66xJgWjTcwXT4/x1V bZpxnkOKa+159SIweKqjMFDspbScEIyhPWH0G1QQ27Ed2amkOtLvm26ntLzKuRob Z5I8vETZH/tLs7lx6jBNFu6OLRakP5XAx5+P7GTKiCdDzydZH5A2gx7stRncYQf4 XMGLPvIy7JYCyuzFLwRd8udpGcXi9kNlNjUdqw5okpmiBXRhAQ44GdJC6YY4APq3 AR1JFwGXkaCnViSk5wl1V8egWwVcB1lx8TuBYyRJjGcJymzhlJsphittn2v6Dm64 wP4vGMW1qP4mVfy8zuPJ9yOj1q1Peq1ahq4ARv0F0F/f3w+VIQk= -----END CERTIFICATE-----Generated at Mon Jun 16 15:46:45 2025 by rpki-client