$ rpki-client -vvf repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft File: 5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft (raw, json) Hash identifier: HGQykuSY46RXas8h3C3qSWsHPyuc8kc2zSbnntK+rmQ= Subject key identifier: 6E:1A:FA:F5:8A:2D:BA:57:70:67:D7:21:87:40:67:D4:48:9E:65:34 Authority key identifier: 5B:D3:41:A6:D4:6A:F5:2C:FF:23:A5:D1:E2:58:94:94:EE:AC:A2:70 Certificate issuer: /CN=5BD341A6D46AF52CFF23A5D1E2589494EEACA270 Certificate serial: 3B89C47C75977F35E9229E924EBB8734C10B1DB4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft Manifest number: 0267 Signing time: Mon 16 Jun 2025 19:50:54 +0000 Manifest this update: Mon 16 Jun 2025 19:45:54 +0000 Manifest next update: Thu 19 Jun 2025 20:03:54 +0000 Files and hashes: 1: 5BD341A6D46AF52CFF23A5D1E2589494EEACA270.crl (hash: i4PjmVALoZNpX9sZ15FuU6aDtsg2tbby3R3MC+fp0j4=) 2: 3130332e3137392e36362e302f32332d3234203d3e20313531303030.roa (hash: 3ytI4WNdkarTA98AKzILbdHeDtsgun+xePSvAI/3j/w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.crl rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:89:c4:7c:75:97:7f:35:e9:22:9e:92:4e:bb:87:34:c1:0b:1d:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BD341A6D46AF52CFF23A5D1E2589494EEACA270 Validity Not Before: Jun 16 19:45:54 2025 GMT Not After : Jun 19 20:03:54 2025 GMT Subject: CN=6E1AFAF58A2DBA577067D721874067D4489E6534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e2:fa:80:fb:96:26:d4:a2:5f:54:14:5b:a4: 58:85:5f:92:63:db:dc:a1:b5:f6:05:1e:3e:72:2e: 46:b6:8d:09:48:fd:2d:69:d2:84:ae:66:2f:29:8a: 9b:27:8f:a5:e7:2b:32:01:41:f0:ae:8e:6e:3d:c0: 78:de:9a:ee:ec:76:47:c5:96:21:40:6f:19:7d:68: d9:d2:f8:53:fc:4d:76:8a:c7:7e:8b:90:51:78:e1: f6:77:18:e2:8e:ba:f9:50:14:af:b3:5e:b9:7b:57: e4:48:13:19:99:97:69:16:3e:47:d1:e4:fe:9e:26: 4c:c6:c1:82:42:37:61:81:66:83:50:4f:c5:7d:d7: a0:ba:a6:67:a5:38:66:ef:2b:66:8e:fd:64:c0:7a: 9c:57:2d:96:42:45:1c:e2:c6:1d:f1:2a:7e:3d:65: f6:17:ae:f8:90:45:ca:ad:d3:34:04:f3:e2:39:d6: bf:05:6f:3b:9f:48:b3:5b:ee:0d:83:2e:9d:51:7b: fb:d8:f7:f5:66:d8:19:de:40:c0:48:17:39:cb:74: c5:a6:0b:bd:f7:67:46:6b:b3:ba:64:b5:55:63:33: 3d:7a:53:ae:56:34:78:9f:de:49:88:90:d3:94:5c: 0b:b8:24:22:f7:09:93:44:8d:04:f2:a3:77:11:87: 5f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:1A:FA:F5:8A:2D:BA:57:70:67:D7:21:87:40:67:D4:48:9E:65:34 X509v3 Authority Key Identifier: keyid:5B:D3:41:A6:D4:6A:F5:2C:FF:23:A5:D1:E2:58:94:94:EE:AC:A2:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:6b:47:13:58:70:4f:d3:72:f1:59:19:e4:33:aa:80:f0:51: d2:c9:59:19:65:b6:ba:8d:dc:3e:1d:a4:dc:d3:8b:57:4b:d7: 8f:c0:05:3b:23:d8:e2:43:7e:66:53:65:a7:a3:22:4d:3c:7c: 95:b3:61:e6:42:2b:9c:76:e3:ee:f0:68:e8:f5:34:e4:a4:19: 02:a8:3d:5a:15:6b:11:91:e6:ad:a7:6c:19:d8:f4:0f:67:67: 9c:75:4b:b2:7b:0c:20:b7:42:cb:eb:06:da:9d:c8:e0:74:10: 93:dd:c4:93:51:13:c9:b6:a1:87:67:55:90:7e:09:e7:ed:9f: 20:c6:65:b6:c2:f4:ba:89:9f:30:bd:9b:3a:15:3f:0c:01:ad: 5c:0f:e3:52:99:9d:4b:df:36:3f:ac:19:c3:06:aa:b0:75:c5: 30:a5:e3:62:b6:95:07:a0:c5:e6:ca:8e:a3:d8:25:bb:fb:8d: 38:0c:22:87:70:9d:51:c2:1d:56:5e:08:f1:7b:bc:4c:e2:84: e1:1d:99:13:8d:9f:bf:e5:a4:cf:0d:33:a1:b1:08:ed:ab:28: 9f:a2:12:17:1b:96:a8:5f:04:1d:59:91:d5:12:7e:2c:ff:a0: f6:1d:3a:c9:5b:55:a5:28:50:ec:40:7b:12:14:a7:64:41:30: ce:18:f9:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO4nEfHWXfzXpIp6STruHNMELHbQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJEMzQxQTZENDZBRjUyQ0ZGMjNBNUQxRTI1ODk0OTRF RUFDQTI3MDAeFw0yNTA2MTYxOTQ1NTRaFw0yNTA2MTkyMDAzNTRaMDMxMTAvBgNV BAMTKDZFMUFGQUY1OEEyREJBNTc3MDY3RDcyMTg3NDA2N0Q0NDg5RTY1MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD4vqA+5Ym1KJfVBRbpFiFX5Jj 29yhtfYFHj5yLka2jQlI/S1p0oSuZi8pipsnj6XnKzIBQfCujm49wHjemu7sdkfF liFAbxl9aNnS+FP8TXaKx36LkFF44fZ3GOKOuvlQFK+zXrl7V+RIExmZl2kWPkfR 5P6eJkzGwYJCN2GBZoNQT8V916C6pmelOGbvK2aO/WTAepxXLZZCRRzixh3xKn49 ZfYXrviQRcqt0zQE8+I51r8FbzufSLNb7g2DLp1Re/vY9/Vm2BneQMBIFznLdMWm C733Z0Zrs7pktVVjMz16U65WNHif3kmIkNOUXAu4JCL3CZNEjQTyo3cRh18zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbhr69YotuldwZ9chh0Bn1EieZTQwHwYDVR0j BBgwFoAUW9NBptRq9Sz/I6XR4liUlO6sonAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTEyNzQzZC1kNTZkLTRhNzctOTBlMi1jNTJlNmRmZTA2YzIvMC81QkQzNDFBNkQ0 NkFGNTJDRkYyM0E1RDFFMjU4OTQ5NEVFQUNBMjcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUJEMzQxQTZENDZBRjUyQ0ZGMjNBNUQxRTI1ODk0OTRFRUFD QTI3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2UxMjc0M2QtZDU2ZC00YTc3LTkw ZTItYzUyZTZkZmUwNmMyLzAvNUJEMzQxQTZENDZBRjUyQ0ZGMjNBNUQxRTI1ODk0 OTRFRUFDQTI3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJdrRxNYcE/TcvFZGeQzqoDwUdLJWRlltrqN 3D4dpNzTi1dL14/ABTsj2OJDfmZTZaejIk08fJWzYeZCK5x24+7waOj1NOSkGQKo PVoVaxGR5q2nbBnY9A9nZ5x1S7J7DCC3QsvrBtqdyOB0EJPdxJNRE8m2oYdnVZB+ CeftnyDGZbbC9LqJnzC9mzoVPwwBrVwP41KZnUvfNj+sGcMGqrB1xTCl42K2lQeg xebKjqPYJbv7jTgMIodwnVHCHVZeCPF7vEzihOEdmRONn7/lpM8NM6GxCO2rKJ+i EhcblqhfBB1ZkdUSfiz/oPYdOslbVaUoUOxAexIUp2RBMM4Y+RE= -----END CERTIFICATE-----Generated at Tue Jun 17 06:49:31 2025 by rpki-client