$ rpki-client -vvf repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.mft File: 5715F968646EAE08576ECCEF3FABAC250A40A47B.mft (raw, json) Hash identifier: IEXdObFx2kJQFfA+pnkXYZTFgOe7R+fHpg+/Ldzx780= Subject key identifier: AB:67:72:FD:8B:BF:7A:02:3F:C9:87:EE:1D:AD:3C:2C:41:2D:32:57 Authority key identifier: 57:15:F9:68:64:6E:AE:08:57:6E:CC:EF:3F:AB:AC:25:0A:40:A4:7B Certificate issuer: /CN=5715F968646EAE08576ECCEF3FABAC250A40A47B Certificate serial: 49577ED6599DEFB85BD453B35D4D67012877CA1B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5715F968646EAE08576ECCEF3FABAC250A40A47B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.mft Manifest number: 04DD Signing time: Sun 15 Jun 2025 12:10:44 +0000 Manifest this update: Sun 15 Jun 2025 12:05:44 +0000 Manifest next update: Wed 18 Jun 2025 14:16:44 +0000 Files and hashes: 1: 5715F968646EAE08576ECCEF3FABAC250A40A47B.crl (hash: aWgZ8hRAb3nh1MXVcYOEAtfyhfBzs7O9yiqZzv132D4=) 2: 3130332e31372e3139322e302f32342d3234203d3e20313331373836.roa (hash: +tOUCMAfkXBUrsG+mslHnjPzs7jefLznwIgLOB3xtdM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.crl rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5715F968646EAE08576ECCEF3FABAC250A40A47B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 14:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:57:7e:d6:59:9d:ef:b8:5b:d4:53:b3:5d:4d:67:01:28:77:ca:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5715F968646EAE08576ECCEF3FABAC250A40A47B Validity Not Before: Jun 15 12:05:44 2025 GMT Not After : Jun 18 14:16:44 2025 GMT Subject: CN=AB6772FD8BBF7A023FC987EE1DAD3C2C412D3257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b2:c2:f8:b4:7a:1d:80:a1:ca:0e:f6:03:21: 91:ba:14:1d:9a:70:7d:85:33:24:93:ed:1d:1c:ac: b3:dd:0b:bc:3e:39:0b:fb:83:19:3c:7c:ed:10:5e: 6f:73:7a:33:7f:28:58:e6:ea:c6:26:da:1b:e1:0f: 74:64:5d:95:47:ea:1a:04:d9:74:fe:c4:e4:46:11: 22:d3:1c:95:51:c4:dd:8e:5f:63:86:5e:af:cf:f4: 06:c3:6c:f9:f5:b4:75:57:57:cc:e2:fe:07:e7:d8: c9:55:35:f0:5c:ec:a4:8e:86:32:e0:a5:ec:a7:75: 09:f9:b3:5d:70:bb:f6:2f:e1:c9:28:6a:ff:26:79: bc:b6:f0:ff:ca:82:22:7e:57:8d:29:44:f0:ac:53: 9c:a3:aa:ff:dd:c1:7e:ee:b5:be:2f:b6:18:a9:f0: e1:4c:64:9b:4e:58:ca:cd:c2:08:a8:95:7e:05:28: 8f:ba:5d:12:ae:a3:fc:8b:22:06:44:b4:31:f7:a0: b7:44:04:5a:79:da:4e:f4:4a:32:a8:4e:0d:32:18: fd:3a:d9:ce:54:3a:15:b4:2b:a3:00:f1:b8:8f:83: eb:d0:06:9e:70:45:1e:2f:20:22:81:e6:32:e6:9a: 0d:57:67:f3:28:4a:74:8d:d7:0d:46:e2:ef:91:11: f1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:67:72:FD:8B:BF:7A:02:3F:C9:87:EE:1D:AD:3C:2C:41:2D:32:57 X509v3 Authority Key Identifier: keyid:57:15:F9:68:64:6E:AE:08:57:6E:CC:EF:3F:AB:AC:25:0A:40:A4:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5715F968646EAE08576ECCEF3FABAC250A40A47B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1514d61-99ff-42a9-ba9a-5961dd68db65/0/5715F968646EAE08576ECCEF3FABAC250A40A47B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:c0:be:c3:67:13:ef:fa:b2:7e:bd:49:28:f4:d9:75:a2:94: dc:3b:ab:21:82:8b:43:79:fc:93:ea:c5:5f:46:f1:f3:7c:cd: b9:d2:49:94:7e:2e:c4:ff:73:e6:77:de:b3:c4:19:e0:ec:81: c6:3b:a3:c6:da:3d:4b:a0:31:8a:15:1c:98:02:a4:73:e7:38: 76:16:4a:cc:d7:b4:0c:96:4f:a9:ae:2f:a4:5c:72:9d:49:a3: 92:3a:14:e6:87:54:d9:47:5f:6a:c8:17:b3:8b:db:45:63:ed: ea:a3:ab:db:31:d9:84:97:f3:3d:ec:1e:f7:11:f6:a4:b3:d9: a9:1c:b1:df:77:f7:f1:ea:13:be:d0:39:91:04:81:86:55:ad: 8f:a2:c6:da:93:91:77:f0:a9:c1:70:10:01:01:6b:49:f0:fd: 3b:58:cf:e5:8e:4e:ac:17:32:f9:e6:93:14:b1:37:35:22:06: 07:38:7f:33:ed:cd:fc:a4:9a:60:7a:04:94:60:d2:35:d6:bd: 8e:4c:e4:0f:ce:58:c6:64:f8:c5:7f:b9:f8:42:5f:ac:06:a2: a7:fe:12:68:ef:bd:6f:a1:e2:67:c6:85:31:fc:1a:5d:c1:76: 04:ca:54:c2:7b:a5:d4:b7:79:d8:7c:77:6d:93:1d:54:84:93: 2f:e7:50:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSVd+1lmd77hb1FOzXU1nASh3yhswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTcxNUY5Njg2NDZFQUUwODU3NkVDQ0VGM0ZBQkFDMjUw QTQwQTQ3QjAeFw0yNTA2MTUxMjA1NDRaFw0yNTA2MTgxNDE2NDRaMDMxMTAvBgNV BAMTKEFCNjc3MkZEOEJCRjdBMDIzRkM5ODdFRTFEQUQzQzJDNDEyRDMyNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpssL4tHodgKHKDvYDIZG6FB2a cH2FMyST7R0crLPdC7w+OQv7gxk8fO0QXm9zejN/KFjm6sYm2hvhD3RkXZVH6hoE 2XT+xORGESLTHJVRxN2OX2OGXq/P9AbDbPn1tHVXV8zi/gfn2MlVNfBc7KSOhjLg peyndQn5s11wu/Yv4ckoav8meby28P/KgiJ+V40pRPCsU5yjqv/dwX7utb4vthip 8OFMZJtOWMrNwgiolX4FKI+6XRKuo/yLIgZEtDH3oLdEBFp52k70SjKoTg0yGP06 2c5UOhW0K6MA8biPg+vQBp5wRR4vICKB5jLmmg1XZ/MoSnSN1w1G4u+REfHtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq2dy/Yu/egI/yYfuHa08LEEtMlcwHwYDVR0j BBgwFoAUVxX5aGRurghXbszvP6usJQpApHswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTUxNGQ2MS05OWZmLTQyYTktYmE5YS01OTYxZGQ2OGRiNjUvMC81NzE1Rjk2ODY0 NkVBRTA4NTc2RUNDRUYzRkFCQUMyNTBBNDBBNDdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTcxNUY5Njg2NDZFQUUwODU3NkVDQ0VGM0ZBQkFDMjUwQTQw QTQ3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE1MTRkNjEtOTlmZi00MmE5LWJh OWEtNTk2MWRkNjhkYjY1LzAvNTcxNUY5Njg2NDZFQUUwODU3NkVDQ0VGM0ZBQkFD MjUwQTQwQTQ3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHfAvsNnE+/6sn69SSj02XWilNw7qyGCi0N5 /JPqxV9G8fN8zbnSSZR+LsT/c+Z33rPEGeDsgcY7o8baPUugMYoVHJgCpHPnOHYW SszXtAyWT6muL6Rccp1Jo5I6FOaHVNlHX2rIF7OL20Vj7eqjq9sx2YSX8z3sHvcR 9qSz2akcsd939/HqE77QOZEEgYZVrY+ixtqTkXfwqcFwEAEBa0nw/TtYz+WOTqwX MvnmkxSxNzUiBgc4fzPtzfykmmB6BJRg0jXWvY5M5A/OWMZk+MV/ufhCX6wGoqf+ EmjvvW+h4mfGhTH8Gl3BdgTKVMJ7pdS3edh8d22THVSEky/nULM= -----END CERTIFICATE-----Generated at Tue Jun 17 03:14:57 2025 by rpki-client