$ rpki-client -vvf repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft File: 5234A428BC63559E2511B3EFFB085B82B195A8ED.mft (raw, json) Hash identifier: sYr+W1HGVlyqW+94D7e/XJR/+X4+/lfPfERV9cjxaE4= Subject key identifier: 99:41:C6:43:8B:5F:07:7E:E8:E4:D5:49:4D:1D:C4:B1:84:99:21:FC Authority key identifier: 52:34:A4:28:BC:63:55:9E:25:11:B3:EF:FB:08:5B:82:B1:95:A8:ED Certificate issuer: /CN=5234A428BC63559E2511B3EFFB085B82B195A8ED Certificate serial: 477838FD8973F23A67549AE7363D057B5624E52E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft Manifest number: 28 Signing time: Mon 16 Jun 2025 19:02:15 +0000 Manifest this update: Mon 16 Jun 2025 18:57:15 +0000 Manifest next update: Fri 20 Jun 2025 06:17:15 +0000 Files and hashes: 1: 3130332e31372e37362e302f32342d3234203d3e20313331373831.roa (hash: rB8zcfhigYxp6rZG5kgxX6r/oJS8xphHw/YAzK8Sodw=) 2: 3130332e31372e37372e302f32342d3234203d3e20313331373831.roa (hash: 4y750PE+WZPEuQKdgW2BVnFEcTQLxauJA4sENyjZR2o=) 3: 5234A428BC63559E2511B3EFFB085B82B195A8ED.crl (hash: KxsXRqCbg8BtSN/LOJCUGx7sz9uxnQtk51y5J15redQ=) 4: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: 3jZR/32xfuAKeJQ/xf5TVwB85F6YIOYekaTwsoIa1SY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.crl rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:17:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:78:38:fd:89:73:f2:3a:67:54:9a:e7:36:3d:05:7b:56:24:e5:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5234A428BC63559E2511B3EFFB085B82B195A8ED Validity Not Before: Jun 16 18:57:15 2025 GMT Not After : Jun 20 06:17:15 2025 GMT Subject: CN=9941C6438B5F077EE8E4D5494D1DC4B1849921FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b0:2c:e8:18:1c:e2:f9:50:67:44:24:b0:ac: a5:c0:fb:36:48:4e:06:06:51:21:a1:14:44:76:59: ef:5d:49:8b:27:ff:33:84:21:30:31:b9:a4:1b:0f: a1:6d:f6:fa:9b:af:98:18:71:cf:b4:80:37:68:58: 69:c7:25:b1:05:05:b2:4e:20:78:16:e4:f8:61:96: c7:73:82:97:17:c0:1e:df:3e:4c:99:1c:be:d5:a9: ae:2b:bb:5d:95:22:42:f2:68:18:24:b1:ed:b6:ea: 9e:47:70:77:fa:52:0a:20:0b:59:3a:32:59:05:0a: d9:1b:77:c2:92:21:a5:1a:4a:b0:9c:93:5c:b6:c3: 49:d4:c3:30:b6:a1:2c:e7:dd:3e:74:4b:0b:8f:1e: c8:f7:45:25:79:b3:19:95:7c:4c:1f:93:02:d0:aa: 31:70:15:59:fe:7a:a8:91:8c:ec:ea:25:21:15:96: f1:05:87:d9:f4:d7:e9:c5:de:9c:89:b5:b8:07:32: dd:e5:7a:b5:22:eb:78:41:2e:be:e5:05:c4:3f:71: af:b2:d4:9e:9b:cd:13:41:8c:79:cb:c5:32:b0:c9: 1d:23:11:20:50:7a:b7:5f:ba:ca:02:57:3b:67:6e: 6b:c7:01:de:fb:66:73:76:72:60:3a:81:60:2c:3f: fc:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:41:C6:43:8B:5F:07:7E:E8:E4:D5:49:4D:1D:C4:B1:84:99:21:FC X509v3 Authority Key Identifier: keyid:52:34:A4:28:BC:63:55:9E:25:11:B3:EF:FB:08:5B:82:B1:95:A8:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:4f:75:48:7e:07:22:41:35:04:78:8e:02:eb:72:dc:85:cd: 8b:0e:93:20:20:01:ff:39:0a:8c:86:36:97:f2:a4:5d:96:ff: 1b:84:1a:d9:ea:4a:54:b0:cd:59:36:bf:ac:7f:a4:3b:96:4b: fc:c4:f6:41:4a:90:56:f1:7c:54:3b:08:14:d9:32:07:a4:ca: 1b:4f:18:df:81:9c:e8:56:5f:de:3a:70:a2:81:67:9c:da:51: 97:e3:69:9f:f6:eb:4f:ff:1a:48:5a:f0:1b:5d:a7:b3:ba:51: f9:f2:e8:16:c2:a0:7f:d2:71:e9:16:95:ca:56:01:7d:0d:6d: 4e:28:63:68:ee:de:64:c0:96:f7:63:35:8e:3a:c9:88:74:ed: 5c:be:ee:33:8f:cb:0d:d8:6f:fe:39:06:0a:cf:35:76:14:5f: a5:96:d6:c8:3e:79:ba:54:6b:54:6d:dd:1d:33:0e:32:cd:d0: fa:ca:c7:6d:77:10:44:70:e1:bc:c2:13:ff:fd:5a:35:99:0f: fa:08:a9:ca:77:40:41:ab:49:fe:5c:e3:bc:8a:67:1d:d0:d8: e5:95:21:00:60:70:f0:e2:d5:88:e5:fb:2b:c9:5d:60:e5:86: 4a:e5:62:56:e4:3c:6c:8c:49:23:ea:15:b7:4c:a2:c9:8e:89: 47:c7:b7:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR3g4/Ylz8jpnVJrnNj0Fe1Yk5S4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVCODJC MTk1QThFRDAeFw0yNTA2MTYxODU3MTVaFw0yNTA2MjAwNjE3MTVaMDMxMTAvBgNV BAMTKDk5NDFDNjQzOEI1RjA3N0VFOEU0RDU0OTREMURDNEIxODQ5OTIxRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEsCzoGBzi+VBnRCSwrKXA+zZI TgYGUSGhFER2We9dSYsn/zOEITAxuaQbD6Ft9vqbr5gYcc+0gDdoWGnHJbEFBbJO IHgW5PhhlsdzgpcXwB7fPkyZHL7Vqa4ru12VIkLyaBgkse226p5HcHf6UgogC1k6 MlkFCtkbd8KSIaUaSrCck1y2w0nUwzC2oSzn3T50SwuPHsj3RSV5sxmVfEwfkwLQ qjFwFVn+eqiRjOzqJSEVlvEFh9n01+nF3pyJtbgHMt3lerUi63hBLr7lBcQ/ca+y 1J6bzRNBjHnLxTKwyR0jESBQerdfusoCVztnbmvHAd77ZnN2cmA6gWAsP/yfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmUHGQ4tfB37o5NVJTR3EsYSZIfwwHwYDVR0j BBgwFoAUUjSkKLxjVZ4lEbPv+whbgrGVqO0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YTA3MTUxNC1lNGRlLTRhY2UtYTBkZi1mN2M0YWI4MDc0YTUvMC81MjM0QTQyOEJD NjM1NTlFMjUxMUIzRUZGQjA4NUI4MkIxOTVBOEVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVCODJCMTk1 QThFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmEwNzE1MTQtZTRkZS00YWNlLWEw ZGYtZjdjNGFiODA3NGE1LzAvNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVC ODJCMTk1QThFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJPdUh+ByJBNQR4jgLrctyFzYsOkyAgAf85 CoyGNpfypF2W/xuEGtnqSlSwzVk2v6x/pDuWS/zE9kFKkFbxfFQ7CBTZMgekyhtP GN+BnOhWX946cKKBZ5zaUZfjaZ/260//Gkha8Btdp7O6Ufny6BbCoH/ScekWlcpW AX0NbU4oY2ju3mTAlvdjNY46yYh07Vy+7jOPyw3Yb/45BgrPNXYUX6WW1sg+ebpU a1Rt3R0zDjLN0PrKx213EERw4bzCE//9WjWZD/oIqcp3QEGrSf5c47yKZx3Q2OWV IQBgcPDi1Yjl+yvJXWDlhkrlYlbkPGyMSSPqFbdMosmOiUfHt/I= -----END CERTIFICATE-----Generated at Wed Jun 18 05:27:42 2025 by rpki-client