$ rpki-client -vvf repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft File: 597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft (raw, json) Hash identifier: DTh2SZu4jLZs0WgV2Xf05PaUcVuRgi5vdQ10fqxpmVE= Subject key identifier: 0F:5B:AA:95:7B:4A:6E:7B:82:28:EE:DC:4C:E2:40:54:D3:D3:27:C1 Authority key identifier: 59:77:34:A2:61:58:D7:7A:6E:D0:22:22:DF:93:D1:CE:2B:D6:EA:03 Certificate issuer: /CN=597734A26158D77A6ED02222DF93D1CE2BD6EA03 Certificate serial: 171C9AC0229055F6BD8E667DB0937F37F538E423 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft Manifest number: BA Signing time: Tue 17 Jun 2025 02:00:55 +0000 Manifest this update: Tue 17 Jun 2025 01:55:55 +0000 Manifest next update: Fri 20 Jun 2025 08:01:55 +0000 Files and hashes: 1: 3130332e3137302e3139382e302f32342d3234203d3e20313530343634.roa (hash: 0bZb0428Qs9WgXKe/lQqf94hdv+XNfzIhYjEupAnHpI=) 2: 597734A26158D77A6ED02222DF93D1CE2BD6EA03.crl (hash: TmrKVtPHFAkQVwRjPeH9TGbflSQqi4v4cYKTPRRhG+w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.crl rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 08:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:1c:9a:c0:22:90:55:f6:bd:8e:66:7d:b0:93:7f:37:f5:38:e4:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=597734A26158D77A6ED02222DF93D1CE2BD6EA03 Validity Not Before: Jun 17 01:55:55 2025 GMT Not After : Jun 20 08:01:55 2025 GMT Subject: CN=0F5BAA957B4A6E7B8228EEDC4CE24054D3D327C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:63:1e:39:b5:f0:69:08:33:df:4b:c6:bb:50: 95:dc:b0:1c:57:ca:2c:7c:57:ab:41:f3:7c:bd:da: d1:49:17:c2:16:d9:ce:ad:74:67:b9:2e:76:75:e7: cb:46:3b:1a:75:b1:fd:83:4f:cd:61:4a:10:f8:07: ed:8f:01:ea:07:6a:4f:29:a9:91:79:8d:bf:ed:82: 4b:5b:e7:1b:e2:3b:09:75:49:70:d2:ef:e4:47:0d: e3:ed:88:d3:1f:f5:01:d5:d1:14:76:45:a5:dd:dc: 19:ca:03:09:3f:54:ce:72:c8:0f:61:74:cb:0a:8d: 9f:fd:4c:38:4c:c1:bb:0b:09:1c:59:fb:59:4e:46: e3:18:ef:73:b6:b2:80:40:ce:6c:38:89:cd:fb:c7: 4c:4a:4d:5d:b0:ca:fe:08:73:c3:a9:8f:a0:07:cd: 05:fd:ea:09:57:69:a0:45:97:dc:c1:63:04:da:de: d0:a5:f6:a9:61:c6:0a:0a:da:36:6a:67:c7:09:d4: 72:bc:7d:09:3f:73:d8:74:7e:61:b8:51:f1:9f:1c: 37:93:19:9c:5f:09:88:15:a9:cc:6e:21:02:92:62: 3f:08:8e:4e:b1:d6:ca:d5:b4:a0:37:90:ea:48:49: f6:f7:b0:9c:b9:31:fc:f7:08:62:1e:c2:6e:85:59: 17:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5B:AA:95:7B:4A:6E:7B:82:28:EE:DC:4C:E2:40:54:D3:D3:27:C1 X509v3 Authority Key Identifier: keyid:59:77:34:A2:61:58:D7:7A:6E:D0:22:22:DF:93:D1:CE:2B:D6:EA:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:55:f3:6e:e9:35:e7:1f:a6:a8:6c:38:e3:12:0f:2e:c1:44: 98:8e:8d:02:0b:f7:5f:ea:65:c1:62:e5:67:69:dc:e1:4f:f5: 63:e4:d0:ab:2c:57:e2:87:00:12:84:9f:81:4f:61:32:91:ee: 43:5e:ee:51:d3:f4:e6:77:05:dd:c0:e1:a9:7e:8d:6f:0e:d6: 04:a1:5f:61:f6:53:bb:7a:68:cd:2e:23:6b:28:25:cd:43:62: 14:79:db:80:b1:8c:cd:48:92:47:d5:0d:ba:36:06:47:4b:e1: bd:49:f0:d2:7b:56:b6:1d:18:aa:1d:f0:ff:6f:c0:56:39:04: 41:d8:f1:a3:3a:66:b0:9f:87:aa:55:b0:72:8b:59:49:12:d9: 26:8d:80:86:52:6a:29:fd:c9:f9:8e:0e:3d:e4:a8:11:75:27: 94:d8:fd:ef:7e:e2:e0:7a:05:93:f8:c9:22:38:e7:0e:98:95: 68:9e:0e:81:c6:0b:a4:b0:c1:e0:91:f6:c1:66:09:bc:d1:5e: 34:8c:30:78:dc:4c:50:57:c4:57:43:58:ba:4a:96:2b:84:bc: 37:4c:5e:92:c7:4e:37:a3:93:a4:a4:e7:78:aa:fd:d8:7b:f2: bb:b6:ff:be:f6:a1:03:57:82:4b:6c:21:af:8b:46:7d:22:30: d1:6e:03:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFxyawCKQVfa9jmZ9sJN/N/U45CMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTk3NzM0QTI2MTU4RDc3QTZFRDAyMjIyREY5M0QxQ0Uy QkQ2RUEwMzAeFw0yNTA2MTcwMTU1NTVaFw0yNTA2MjAwODAxNTVaMDMxMTAvBgNV BAMTKDBGNUJBQTk1N0I0QTZFN0I4MjI4RUVEQzRDRTI0MDU0RDNEMzI3QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuYx45tfBpCDPfS8a7UJXcsBxX yix8V6tB83y92tFJF8IW2c6tdGe5LnZ158tGOxp1sf2DT81hShD4B+2PAeoHak8p qZF5jb/tgktb5xviOwl1SXDS7+RHDePtiNMf9QHV0RR2RaXd3BnKAwk/VM5yyA9h dMsKjZ/9TDhMwbsLCRxZ+1lORuMY73O2soBAzmw4ic37x0xKTV2wyv4Ic8Opj6AH zQX96glXaaBFl9zBYwTa3tCl9qlhxgoK2jZqZ8cJ1HK8fQk/c9h0fmG4UfGfHDeT GZxfCYgVqcxuIQKSYj8Ijk6x1srVtKA3kOpISfb3sJy5Mfz3CGIewm6FWRevAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD1uqlXtKbnuCKO7cTOJAVNPTJ8EwHwYDVR0j BBgwFoAUWXc0omFY13pu0CIi35PRzivW6gMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGRhNTg4Mi1iODA0LTQxNTQtOTU5Yi02MzM2YjI0ZTE4YjIvMC81OTc3MzRBMjYx NThENzdBNkVEMDIyMjJERjkzRDFDRTJCRDZFQTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTk3NzM0QTI2MTU4RDc3QTZFRDAyMjIyREY5M0QxQ0UyQkQ2 RUEwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBkYTU4ODItYjgwNC00MTU0LTk1 OWItNjMzNmIyNGUxOGIyLzAvNTk3NzM0QTI2MTU4RDc3QTZFRDAyMjIyREY5M0Qx Q0UyQkQ2RUEwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAARV827pNecfpqhsOOMSDy7BRJiOjQIL91/q ZcFi5Wdp3OFP9WPk0KssV+KHABKEn4FPYTKR7kNe7lHT9OZ3Bd3A4al+jW8O1gSh X2H2U7t6aM0uI2soJc1DYhR524CxjM1IkkfVDbo2BkdL4b1J8NJ7VrYdGKod8P9v wFY5BEHY8aM6ZrCfh6pVsHKLWUkS2SaNgIZSain9yfmODj3kqBF1J5TY/e9+4uB6 BZP4ySI45w6YlWieDoHGC6SwweCR9sFmCbzRXjSMMHjcTFBXxFdDWLpKliuEvDdM XpLHTjejk6Sk53iq/dh78ru2/772oQNXgktsIa+LRn0iMNFuA4s= -----END CERTIFICATE-----Generated at Tue Jun 17 17:40:48 2025 by rpki-client