$ rpki-client -vvf repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft File: 575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft (raw, json) Hash identifier: JIW0hyu61FWwwuUm63zEq4xjd0bNfQMam3mS02EdAFU= Subject key identifier: FE:F6:85:74:1F:FF:00:8B:48:98:2C:1B:ED:0F:53:A6:8A:ED:FB:DB Authority key identifier: 57:5C:39:86:5D:3A:E2:3D:CC:C3:22:AD:08:D1:42:4F:D4:0F:B8:C2 Certificate issuer: /CN=575C39865D3AE23DCCC322AD08D1424FD40FB8C2 Certificate serial: 419C215568D7A41AF1901B4028C6699589486508 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft Manifest number: 011F Signing time: Tue 05 Aug 2025 09:32:07 +0000 Manifest this update: Tue 05 Aug 2025 09:27:07 +0000 Manifest next update: Fri 08 Aug 2025 10:37:07 +0000 Files and hashes: 1: 575C39865D3AE23DCCC322AD08D1424FD40FB8C2.crl (hash: AcJe57Zui9MfAkZATkWCHF/JPRXqEbKekdfkTvyAmUQ=) 2: 3130332e3235302e3132392e302f32342d3234203d3e20313531353536.roa (hash: /A9HXd13I0+DkmsbISwlDHjrM6YvxlLYkQQcEaMVLGM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.crl rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 10:37:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:9c:21:55:68:d7:a4:1a:f1:90:1b:40:28:c6:69:95:89:48:65:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=575C39865D3AE23DCCC322AD08D1424FD40FB8C2 Validity Not Before: Aug 5 09:27:07 2025 GMT Not After : Aug 8 10:37:07 2025 GMT Subject: CN=FEF685741FFF008B48982C1BED0F53A68AEDFBDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1f:c0:ad:34:be:52:24:eb:ea:64:34:db:fd: f6:6c:4b:fb:75:08:3b:4b:75:da:19:48:53:d7:84: e6:24:7f:bf:e1:5a:c8:87:11:db:98:0c:1f:f1:52: ac:0a:4e:cb:e3:73:38:4b:82:a7:37:dc:dc:35:ff: ac:06:c4:57:d5:c0:99:a0:c9:6e:ec:fa:23:f5:06: 00:0c:fe:41:cd:5c:db:f7:cf:4f:8f:48:52:f5:5a: 17:c7:8c:8a:73:8e:5b:f6:d2:9d:e1:8d:0b:39:9f: 16:f7:dc:7d:8c:e0:f8:ca:cd:e7:12:c4:64:10:b8: 7c:8f:6f:00:e0:af:32:59:3f:c4:97:72:82:20:ff: 28:d4:fa:d3:1b:88:28:00:4e:fc:d2:8b:07:5c:3b: 4e:16:e9:2c:fa:96:6d:c8:fb:75:90:8d:a4:16:74: 53:e2:a5:0c:c5:8c:ac:55:38:16:97:dc:28:7b:d5: 6d:a6:e2:f8:2c:cc:03:1a:7b:93:a0:7c:0c:39:b8: 96:aa:4e:17:f3:58:d9:21:98:85:5d:6f:3e:db:a8: e2:b6:d7:e4:7a:ec:a5:94:7f:af:e8:aa:53:f2:5c: 4e:40:ef:9d:16:f7:34:70:b2:c3:26:ef:26:13:e4: d7:5b:c9:62:ac:83:57:7f:3c:d4:62:6b:2d:5b:f8: e8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F6:85:74:1F:FF:00:8B:48:98:2C:1B:ED:0F:53:A6:8A:ED:FB:DB X509v3 Authority Key Identifier: keyid:57:5C:39:86:5D:3A:E2:3D:CC:C3:22:AD:08:D1:42:4F:D4:0F:B8:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:e6:22:4b:bb:ce:50:9e:de:4e:c3:aa:a2:40:39:84:ee:06: 85:ee:76:65:c7:74:8b:8a:02:cd:93:fe:a8:db:8e:d5:67:5c: d9:9e:f6:e3:bb:47:74:1d:f3:77:69:5f:02:8a:da:5c:a0:37: 69:b0:e4:74:41:24:4b:62:4a:d2:ea:e9:d1:c5:39:1c:1b:77: 73:89:ac:0a:6b:39:0f:f2:ff:09:50:2e:13:03:e3:9e:c4:ec: e2:25:2a:b2:c7:cc:a9:46:83:32:43:04:37:96:e8:74:a0:e0: ce:1b:54:4a:a9:96:b6:6a:a1:81:ad:24:55:0b:05:0b:f8:72: c0:c2:f9:5c:0c:64:73:a0:e1:e8:2e:4d:aa:44:9b:47:e5:a2: b9:d1:ad:f7:f5:4c:52:1d:10:09:e0:ec:91:d0:bc:d2:b9:2c: e2:5d:72:b7:9b:0d:eb:8d:39:cf:9c:04:46:48:20:97:8b:51: aa:6c:18:c3:9e:8d:2d:2d:c9:1b:37:7b:fb:16:e8:2f:2a:37: 32:6a:e8:e4:9c:7f:09:22:67:60:9f:37:8c:29:82:76:9e:27: f7:e7:f5:0f:ad:61:05:e3:50:f2:b2:ec:4b:f9:81:36:23:5c: 14:68:ef:a1:4b:b7:a0:7c:b9:f3:03:d9:e5:39:b1:61:8f:35: 97:da:1d:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQZwhVWjXpBrxkBtAKMZplYlIZQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc1QzM5ODY1RDNBRTIzRENDQzMyMkFEMDhEMTQyNEZE NDBGQjhDMjAeFw0yNTA4MDUwOTI3MDdaFw0yNTA4MDgxMDM3MDdaMDMxMTAvBgNV BAMTKEZFRjY4NTc0MUZGRjAwOEI0ODk4MkMxQkVEMEY1M0E2OEFFREZCREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNH8CtNL5SJOvqZDTb/fZsS/t1 CDtLddoZSFPXhOYkf7/hWsiHEduYDB/xUqwKTsvjczhLgqc33Nw1/6wGxFfVwJmg yW7s+iP1BgAM/kHNXNv3z0+PSFL1WhfHjIpzjlv20p3hjQs5nxb33H2M4PjKzecS xGQQuHyPbwDgrzJZP8SXcoIg/yjU+tMbiCgATvzSiwdcO04W6Sz6lm3I+3WQjaQW dFPipQzFjKxVOBaX3Ch71W2m4vgszAMae5OgfAw5uJaqThfzWNkhmIVdbz7bqOK2 1+R67KWUf6/oqlPyXE5A750W9zRwssMm7yYT5NdbyWKsg1d/PNRiay1b+OhpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/vaFdB//AItImCwb7Q9Tport+9swHwYDVR0j BBgwFoAUV1w5hl064j3MwyKtCNFCT9QPuMIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTFkOWFiYy00OTg3LTRkYmMtOTc2ZC0zZjMyYjI5MTcxNWQvMC81NzVDMzk4NjVE M0FFMjNEQ0NDMzIyQUQwOEQxNDI0RkQ0MEZCOEMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTc1QzM5ODY1RDNBRTIzRENDQzMyMkFEMDhEMTQyNEZENDBG QjhDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODExZDlhYmMtNDk4Ny00ZGJjLTk3 NmQtM2YzMmIyOTE3MTVkLzAvNTc1QzM5ODY1RDNBRTIzRENDQzMyMkFEMDhEMTQy NEZENDBGQjhDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHDmIku7zlCe3k7DqqJAOYTuBoXudmXHdIuK As2T/qjbjtVnXNme9uO7R3Qd83dpXwKK2lygN2mw5HRBJEtiStLq6dHFORwbd3OJ rAprOQ/y/wlQLhMD457E7OIlKrLHzKlGgzJDBDeW6HSg4M4bVEqplrZqoYGtJFUL BQv4csDC+VwMZHOg4eguTapEm0flornRrff1TFIdEAng7JHQvNK5LOJdcrebDeuN Oc+cBEZIIJeLUapsGMOejS0tyRs3e/sW6C8qNzJq6OScfwkiZ2CfN4wpgnaeJ/fn 9Q+tYQXjUPKy7Ev5gTYjXBRo76FLt6B8ufMD2eU5sWGPNZfaHQw= -----END CERTIFICATE-----Generated at Thu Aug 7 07:17:38 2025 by rpki-client