$ rpki-client -vvf repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft File: 566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft (raw, json) Hash identifier: QfCxtvyQ6CVE5yN1tHpnr3E8KKvv/5i4U/UNrFxZtBw= Subject key identifier: 70:38:13:C1:2F:8B:F7:91:F7:F0:CF:AC:DF:2A:64:55:BC:85:FE:F6 Authority key identifier: 56:6A:7E:C3:EF:CD:EB:4A:BF:A2:A9:6A:BE:93:EC:33:17:A0:D2:E1 Certificate issuer: /CN=566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1 Certificate serial: 2585C1F1B87502DFBA1A49D1F51CBB3E3AF0B8F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft Manifest number: B3 Signing time: Sun 15 Jun 2025 17:32:12 +0000 Manifest this update: Sun 15 Jun 2025 17:27:12 +0000 Manifest next update: Thu 19 Jun 2025 04:43:12 +0000 Files and hashes: 1: 3136302e31392e3136372e302f32342d3234203d3e20313338313135.roa (hash: vaVGHdGli6Iv+8iqprdOLSuAbPd3FA6ND2Th7m72R9c=) 2: 566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl (hash: a53yEuKD32KJHLjPBEdRB4nviZY7hb6Zgf01mytAsoA=) 3: 3136302e31392e3136362e302f32342d3234203d3e20313338313135.roa (hash: M9qSlv+zIfSmVbEsaY34nduGSV2Q+WvDFXPUxu1uo0Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 04:43:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:85:c1:f1:b8:75:02:df:ba:1a:49:d1:f5:1c:bb:3e:3a:f0:b8:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1 Validity Not Before: Jun 15 17:27:12 2025 GMT Not After : Jun 19 04:43:12 2025 GMT Subject: CN=703813C12F8BF791F7F0CFACDF2A6455BC85FEF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:42:4e:42:42:29:c5:4a:05:72:0a:19:99:89: 62:80:08:ab:ce:3f:04:5f:19:c7:31:87:49:5f:60: dd:23:83:42:96:5e:93:7d:56:60:82:ba:01:3b:66: 71:c6:db:48:f2:fd:f6:8e:eb:aa:b8:5d:12:5b:43: 31:1c:e4:b5:c3:d6:04:f0:cd:84:57:e1:e5:c5:3a: 3f:7a:e5:64:39:5f:41:7c:49:e1:56:5a:f3:fc:0d: d2:74:7b:c6:08:93:eb:a4:64:09:e8:f3:cd:1d:7a: 12:08:ef:fb:4a:d8:7e:b5:4b:32:0f:53:49:8b:6a: 64:12:66:a1:d4:9a:b1:90:9a:ef:ce:2f:41:a2:ed: 33:27:01:11:96:de:b5:91:9b:f4:c2:23:61:a9:0c: 1c:76:dc:fe:66:13:73:20:bd:95:55:60:fd:0b:62: ea:fb:76:99:df:14:54:c5:d2:8c:c1:6e:3e:ff:f1: 40:62:01:f4:39:db:3e:7e:8d:2b:f7:c0:67:53:ce: 20:18:34:22:03:24:29:18:3c:07:b2:e1:c7:b2:9e: 15:9b:12:e0:43:95:a5:60:cc:79:d2:b0:f9:25:75: 6b:3d:ba:c0:9d:4e:ae:8c:bd:ca:2c:7c:b4:49:06: 86:87:45:8c:d7:89:13:fe:1d:45:ca:82:ca:40:13: 35:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:38:13:C1:2F:8B:F7:91:F7:F0:CF:AC:DF:2A:64:55:BC:85:FE:F6 X509v3 Authority Key Identifier: keyid:56:6A:7E:C3:EF:CD:EB:4A:BF:A2:A9:6A:BE:93:EC:33:17:A0:D2:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5582fca9-3222-45b6-b422-ff2c6a9fd247/0/566A7EC3EFCDEB4ABFA2A96ABE93EC3317A0D2E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:34:a6:c4:5e:7d:98:5f:da:9f:c1:9d:79:fe:fc:f8:07:5a: 94:eb:bc:6b:09:74:85:68:81:0d:1f:ee:15:ad:b0:27:49:46: 3d:28:82:22:7a:3a:5a:4d:8f:73:75:a9:58:35:1b:48:07:1a: f8:15:a5:ad:07:24:f8:0f:e5:5b:24:30:c0:52:47:b7:82:1b: c4:e4:44:38:1b:aa:ae:f8:fd:ea:fb:0a:12:ba:b7:be:f4:5c: ba:bb:27:aa:6d:82:59:19:43:14:48:49:1a:4b:c5:94:21:1b: 24:19:b3:b0:31:85:93:80:ca:3f:f6:d6:29:9b:bc:5f:1b:d9: 99:fb:3f:cf:97:a2:80:21:b8:7e:63:57:6e:6f:9d:0c:98:85: 13:aa:d0:9a:64:b4:da:54:a0:90:cc:44:2c:66:8a:ed:a1:08: bd:c4:cd:1e:ad:9d:b8:7a:d9:ad:5c:39:03:68:f8:ba:9a:41: 05:5b:4d:13:45:64:03:6a:59:fa:a9:c0:6f:03:a0:28:de:0b: f6:46:4e:f5:e3:8e:3b:d7:6d:6a:26:f7:f9:34:70:84:2e:77: c6:af:ed:f0:a3:b7:d0:51:3f:d7:db:5e:fd:18:30:1c:62:55: a5:5b:6e:c0:0e:61:cf:44:4c:27:fc:a9:b2:de:58:df:e2:8c: 7f:6c:d0:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJYXB8bh1At+6GknR9Ry7PjrwuPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VDMzMx N0EwRDJFMTAeFw0yNTA2MTUxNzI3MTJaFw0yNTA2MTkwNDQzMTJaMDMxMTAvBgNV BAMTKDcwMzgxM0MxMkY4QkY3OTFGN0YwQ0ZBQ0RGMkE2NDU1QkM4NUZFRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXQk5CQinFSgVyChmZiWKACKvO PwRfGccxh0lfYN0jg0KWXpN9VmCCugE7ZnHG20jy/faO66q4XRJbQzEc5LXD1gTw zYRX4eXFOj965WQ5X0F8SeFWWvP8DdJ0e8YIk+ukZAno880dehII7/tK2H61SzIP U0mLamQSZqHUmrGQmu/OL0Gi7TMnARGW3rWRm/TCI2GpDBx23P5mE3MgvZVVYP0L Yur7dpnfFFTF0ozBbj7/8UBiAfQ52z5+jSv3wGdTziAYNCIDJCkYPAey4ceynhWb EuBDlaVgzHnSsPkldWs9usCdTq6MvcosfLRJBoaHRYzXiRP+HUXKgspAEzXJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcDgTwS+L95H38M+s3ypkVbyF/vYwHwYDVR0j BBgwFoAUVmp+w+/N60q/oqlqvpPsMxeg0uEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTgyZmNhOS0zMjIyLTQ1YjYtYjQyMi1mZjJjNmE5ZmQyNDcvMC81NjZBN0VDM0VG Q0RFQjRBQkZBMkE5NkFCRTkzRUMzMzE3QTBEMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VDMzMxN0Ew RDJFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTU4MmZjYTktMzIyMi00NWI2LWI0 MjItZmYyYzZhOWZkMjQ3LzAvNTY2QTdFQzNFRkNERUI0QUJGQTJBOTZBQkU5M0VD MzMxN0EwRDJFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEY0psRefZhf2p/BnXn+/PgHWpTrvGsJdIVo gQ0f7hWtsCdJRj0ogiJ6OlpNj3N1qVg1G0gHGvgVpa0HJPgP5VskMMBSR7eCG8Tk RDgbqq74/er7ChK6t770XLq7J6ptglkZQxRISRpLxZQhGyQZs7AxhZOAyj/21imb vF8b2Zn7P8+XooAhuH5jV25vnQyYhROq0JpktNpUoJDMRCxmiu2hCL3EzR6tnbh6 2a1cOQNo+LqaQQVbTRNFZANqWfqpwG8DoCjeC/ZGTvXjjjvXbWom9/k0cIQud8av 7fCjt9BRP9fbXv0YMBxiVaVbbsAOYc9ETCf8qbLeWN/ijH9s0Dc= -----END CERTIFICATE-----Generated at Wed Jun 18 04:41:12 2025 by rpki-client