$ rpki-client -vvf repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft File: 575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft (raw, json) Hash identifier: W2XSG4XJCZ1FYV+pBbHRRHOk8eJDXvvWyA0bt+yGrD8= Subject key identifier: C2:4D:21:DA:D7:79:E4:66:16:6C:EE:37:98:9D:ED:8F:1E:0F:EF:DC Authority key identifier: 57:5C:39:86:5D:3A:E2:3D:CC:C3:22:AD:08:D1:42:4F:D4:0F:B8:C2 Certificate issuer: /CN=575C39865D3AE23DCCC322AD08D1424FD40FB8C2 Certificate serial: 48F73D708D723DC63F210C588DDC1F337ADDAC0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft Manifest number: F3 Signing time: Mon 28 Apr 2025 12:22:15 +0000 Manifest this update: Mon 28 Apr 2025 12:17:15 +0000 Manifest next update: Thu 01 May 2025 19:39:15 +0000 Files and hashes: 1: 575C39865D3AE23DCCC322AD08D1424FD40FB8C2.crl (hash: 0s7iytpFzvdbAWT8Iin/0SNelngoImlB8xWfEeByf1U=) 2: 3130332e3235302e3132392e302f32342d3234203d3e20313531353536.roa (hash: /A9HXd13I0+DkmsbISwlDHjrM6YvxlLYkQQcEaMVLGM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.crl rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:39:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:f7:3d:70:8d:72:3d:c6:3f:21:0c:58:8d:dc:1f:33:7a:dd:ac:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=575C39865D3AE23DCCC322AD08D1424FD40FB8C2 Validity Not Before: Apr 28 12:17:15 2025 GMT Not After : May 1 19:39:15 2025 GMT Subject: CN=C24D21DAD779E466166CEE37989DED8F1E0FEFDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:66:67:c6:46:b0:cd:5b:6d:12:7d:dd:84:2c: ee:28:33:59:01:c3:c8:8f:64:dd:9d:1f:8d:fc:65: 91:f3:b9:42:9d:b6:14:a1:19:84:3f:19:00:46:88: cf:1c:37:58:d5:91:3a:e3:4d:b6:8a:22:10:df:9f: 5f:70:d7:99:5e:e0:2b:31:b7:04:f5:ee:31:b8:e4: e5:bf:81:5c:5f:7c:5a:1d:f5:75:8f:c7:d0:52:67: 22:0f:87:16:2b:f6:b2:5b:70:0b:2e:41:ce:58:fb: ab:de:4b:ff:cd:e4:08:88:e5:dc:d2:18:07:71:f2: 67:2d:05:79:13:f5:87:62:27:b6:63:37:43:de:50: dc:80:7d:9a:fc:d3:3d:0d:77:35:3c:d0:5f:d1:55: 0c:04:89:ad:43:af:01:a7:8e:0a:85:f1:08:b9:b8: 02:5c:32:4c:25:98:4c:94:ce:70:65:c9:51:38:02: e8:7b:6b:14:aa:ba:0f:b5:fa:0c:7e:92:c0:10:77: d5:11:60:57:f4:bc:6f:b3:f6:d7:e2:c7:c0:99:e7: e9:42:e1:8e:d2:e9:d8:3b:13:30:e5:a1:30:a0:55: c9:c3:0e:ab:2e:50:01:3b:3e:99:08:b1:d9:70:a5: 6c:d1:8e:12:6b:4a:bb:a5:7c:02:70:1c:11:39:7e: 14:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:4D:21:DA:D7:79:E4:66:16:6C:EE:37:98:9D:ED:8F:1E:0F:EF:DC X509v3 Authority Key Identifier: keyid:57:5C:39:86:5D:3A:E2:3D:CC:C3:22:AD:08:D1:42:4F:D4:0F:B8:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:1b:12:cb:c4:ec:1b:81:83:80:5a:74:11:5d:a0:5e:2e:9c: 84:28:f8:b9:bf:6d:c2:d5:96:1e:34:09:18:82:22:61:4e:6a: 1d:fa:75:93:c1:ec:3b:d6:51:c2:55:5d:01:6a:68:83:0d:24: 5b:08:e3:1c:33:b7:6c:cc:74:29:b2:9f:b1:93:6e:98:57:ed: e2:56:6f:a8:81:76:24:79:11:00:9a:83:8c:d4:7b:1f:80:f2: 5c:10:bf:95:b8:aa:2b:33:f6:f6:6f:69:0e:87:4f:59:f9:dd: 2b:bc:e1:70:51:7d:c1:16:b9:e6:98:5c:11:5f:9e:3a:f1:d5: 34:1a:b5:b6:f0:3b:01:a8:00:10:c9:5d:60:3c:e0:de:59:b2: 1f:ee:23:4a:de:69:3c:54:01:13:4a:33:11:d0:ca:58:8f:3a: d6:3b:a1:ab:85:1c:89:6e:75:bf:e4:4d:aa:75:41:72:fd:fc: 6c:e4:36:39:3a:f2:52:ea:55:b9:65:65:d2:ef:d8:e4:77:e1: 3a:53:f9:83:c9:50:d9:07:ac:8f:83:89:18:78:a2:af:67:3d: 4c:c5:dd:9d:fd:50:cf:aa:39:d1:fc:9c:5b:36:c1:6c:39:34: 4a:9d:b0:50:84:ec:83:48:0e:b2:af:03:ca:0e:d5:51:24:82: 5b:36:fc:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSPc9cI1yPcY/IQxYjdwfM3rdrAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc1QzM5ODY1RDNBRTIzRENDQzMyMkFEMDhEMTQyNEZE NDBGQjhDMjAeFw0yNTA0MjgxMjE3MTVaFw0yNTA1MDExOTM5MTVaMDMxMTAvBgNV BAMTKEMyNEQyMURBRDc3OUU0NjYxNjZDRUUzNzk4OURFRDhGMUUwRkVGREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ZmfGRrDNW20Sfd2ELO4oM1kB w8iPZN2dH438ZZHzuUKdthShGYQ/GQBGiM8cN1jVkTrjTbaKIhDfn19w15le4Csx twT17jG45OW/gVxffFod9XWPx9BSZyIPhxYr9rJbcAsuQc5Y+6veS//N5AiI5dzS GAdx8mctBXkT9YdiJ7ZjN0PeUNyAfZr80z0NdzU80F/RVQwEia1DrwGnjgqF8Qi5 uAJcMkwlmEyUznBlyVE4Auh7axSqug+1+gx+ksAQd9URYFf0vG+z9tfix8CZ5+lC 4Y7S6dg7EzDloTCgVcnDDqsuUAE7PpkIsdlwpWzRjhJrSrulfAJwHBE5fhQTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwk0h2td55GYWbO43mJ3tjx4P79wwHwYDVR0j BBgwFoAUV1w5hl064j3MwyKtCNFCT9QPuMIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTFkOWFiYy00OTg3LTRkYmMtOTc2ZC0zZjMyYjI5MTcxNWQvMC81NzVDMzk4NjVE M0FFMjNEQ0NDMzIyQUQwOEQxNDI0RkQ0MEZCOEMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTc1QzM5ODY1RDNBRTIzRENDQzMyMkFEMDhEMTQyNEZENDBG QjhDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODExZDlhYmMtNDk4Ny00ZGJjLTk3 NmQtM2YzMmIyOTE3MTVkLzAvNTc1QzM5ODY1RDNBRTIzRENDQzMyMkFEMDhEMTQy NEZENDBGQjhDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHIbEsvE7BuBg4BadBFdoF4unIQo+Lm/bcLV lh40CRiCImFOah36dZPB7DvWUcJVXQFqaIMNJFsI4xwzt2zMdCmyn7GTbphX7eJW b6iBdiR5EQCag4zUex+A8lwQv5W4qisz9vZvaQ6HT1n53Su84XBRfcEWueaYXBFf njrx1TQatbbwOwGoABDJXWA84N5Zsh/uI0reaTxUARNKMxHQyliPOtY7oauFHIlu db/kTap1QXL9/GzkNjk68lLqVbllZdLv2OR34TpT+YPJUNkHrI+DiRh4oq9nPUzF 3Z39UM+qOdH8nFs2wWw5NEqdsFCE7INIDrKvA8oO1VEkgls2/Fo= -----END CERTIFICATE-----Generated at Tue Apr 29 12:38:42 2025 by rpki-client