$ rpki-client -vvf repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft File: 5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft (raw, json) Hash identifier: quKnghJAU8KqTybfk81vhugPK+hA4uhN/py3twhVrPM= Subject key identifier: 2A:0A:A6:D0:E9:27:72:2D:0B:65:2C:A5:CF:F8:C2:F0:BC:7D:20:9D Authority key identifier: 57:87:AD:66:59:EA:8A:5E:40:18:87:6F:5F:9D:BD:9A:AA:F9:CA:1D Certificate issuer: /CN=5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D Certificate serial: 204A05B955D23F8CB17386EF5E00390B1CA96D22 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft Manifest number: 01BB Signing time: Sat 14 Jun 2025 14:31:45 +0000 Manifest this update: Sat 14 Jun 2025 14:26:45 +0000 Manifest next update: Tue 17 Jun 2025 21:47:45 +0000 Files and hashes: 1: 5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl (hash: GqlfMJ1wXsDtJ4i2VRGOfOguvNdIs55ZDUm/9Hj64h8=) 2: 323030313a6466323a663130303a3a2f34382d3438203d3e20313336383632.roa (hash: ECBhF+e4+If0A3tMP/p9517WUpUqU+SxVkyIhiuFLnc=) 3: 3130332e3130322e3235302e302f32342d3234203d3e20313336383632.roa (hash: SJWCctw3wDy04eyr8uGtaxTxeDcgqn25/ejSSAcBCus=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 21:47:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:4a:05:b9:55:d2:3f:8c:b1:73:86:ef:5e:00:39:0b:1c:a9:6d:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D Validity Not Before: Jun 14 14:26:45 2025 GMT Not After : Jun 17 21:47:45 2025 GMT Subject: CN=2A0AA6D0E927722D0B652CA5CFF8C2F0BC7D209D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:83:56:02:36:ed:25:8d:f9:28:de:b3:89:0d: 4c:c8:d5:87:b7:e3:fe:35:83:19:96:f5:ba:b1:08: 33:8d:98:65:9d:1a:09:27:19:5b:b7:d2:36:cf:ac: 57:dd:22:2e:a7:db:47:74:9e:04:38:db:62:81:ee: 61:86:f2:90:12:a2:38:60:7e:01:78:46:05:0e:fa: b1:be:36:54:3e:1c:e2:ff:10:2f:7d:9f:60:ce:3f: 9a:20:a2:3f:9e:64:1c:08:2f:ae:73:96:f4:df:b3: 21:17:c1:4c:14:95:dc:ed:db:5c:1d:9e:cd:94:1a: 89:fa:d6:d7:3d:4e:46:00:e2:75:c0:14:24:ef:13: 34:88:10:e4:09:fd:75:ca:7e:e4:2f:58:e4:7e:b8: e9:b1:ad:d3:58:3f:93:16:b0:83:6b:a4:e9:4b:a5: 70:0d:49:78:9a:9c:37:bd:aa:64:8a:c0:b4:2f:d7: e7:41:40:e5:30:fa:f1:c2:fc:8f:89:1c:16:50:0b: 4c:0b:86:f0:94:f1:dd:68:d5:e5:f1:6c:83:13:dc: 38:50:66:26:b6:92:60:e7:0d:fa:91:b6:dd:7f:78: 59:29:4f:76:33:27:9c:73:8d:46:c1:99:f7:dd:ac: a9:9a:aa:40:42:81:71:86:33:3f:da:be:c8:e4:65: d1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:0A:A6:D0:E9:27:72:2D:0B:65:2C:A5:CF:F8:C2:F0:BC:7D:20:9D X509v3 Authority Key Identifier: keyid:57:87:AD:66:59:EA:8A:5E:40:18:87:6F:5F:9D:BD:9A:AA:F9:CA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:b5:07:a9:6f:5c:e0:48:e9:f4:d9:5f:de:19:27:25:b3:40: 82:b2:6d:43:d6:4d:88:d2:50:8c:9f:89:b4:aa:bc:2b:fc:93: f5:9d:ef:48:60:16:83:e2:16:e1:1a:35:aa:a2:fb:f6:4d:14: 16:b5:54:16:3c:d5:1f:1f:7d:38:cc:c5:ec:7c:bb:d4:fd:2c: ea:e3:26:4f:d2:e7:7b:4c:2a:9e:6e:48:74:c4:7b:11:b2:dd: 74:86:56:13:b2:37:2b:aa:24:69:8d:3f:5d:dc:3a:2d:04:c8: 6d:05:fd:7b:7c:61:3e:d6:11:a4:50:35:cf:d7:b4:24:f0:c3: f8:52:72:c4:16:86:8d:fa:65:b5:65:85:87:b4:41:f6:ad:8e: c4:0a:d0:4d:c4:f6:45:80:e9:6a:91:98:58:46:42:56:ec:c4: 68:d7:c1:d9:0f:40:26:b1:27:bc:e4:d8:8e:50:4e:3e:79:3f: 7e:64:99:35:cf:af:9b:14:1c:5b:8a:37:6b:16:c9:a5:d7:b7: ab:77:40:c4:82:a9:9f:f3:96:df:e4:93:f1:f1:5a:6c:7b:db: 38:1d:ab:a1:18:27:5d:4c:21:21:ee:93:88:27:df:92:3b:0b: 63:77:9b:b2:25:d0:0f:62:b8:b9:fd:68:83:4a:fb:3e:23:ae: 9a:a8:b9:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIEoFuVXSP4yxc4bvXgA5CxypbSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJEOUFB QUY5Q0ExRDAeFw0yNTA2MTQxNDI2NDVaFw0yNTA2MTcyMTQ3NDVaMDMxMTAvBgNV BAMTKDJBMEFBNkQwRTkyNzcyMkQwQjY1MkNBNUNGRjhDMkYwQkM3RDIwOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIg1YCNu0ljfko3rOJDUzI1Ye3 4/41gxmW9bqxCDONmGWdGgknGVu30jbPrFfdIi6n20d0ngQ422KB7mGG8pASojhg fgF4RgUO+rG+NlQ+HOL/EC99n2DOP5ogoj+eZBwIL65zlvTfsyEXwUwUldzt21wd ns2UGon61tc9TkYA4nXAFCTvEzSIEOQJ/XXKfuQvWOR+uOmxrdNYP5MWsINrpOlL pXANSXianDe9qmSKwLQv1+dBQOUw+vHC/I+JHBZQC0wLhvCU8d1o1eXxbIMT3DhQ Zia2kmDnDfqRtt1/eFkpT3YzJ5xzjUbBmffdrKmaqkBCgXGGMz/avsjkZdFXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKgqm0Oknci0LZSylz/jC8Lx9IJ0wHwYDVR0j BBgwFoAUV4etZlnqil5AGIdvX529mqr5yh0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWI4ZTc3NC0xNjgzLTQ1NmQtYmJjMC0zNDMyMjVmMTdmNGMvMC81Nzg3QUQ2NjU5 RUE4QTVFNDAxODg3NkY1RjlEQkQ5QUFBRjlDQTFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJEOUFBQUY5 Q0ExRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTViOGU3NzQtMTY4My00NTZkLWJi YzAtMzQzMjI1ZjE3ZjRjLzAvNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJE OUFBQUY5Q0ExRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMu1B6lvXOBI6fTZX94ZJyWzQIKybUPWTYjS UIyfibSqvCv8k/Wd70hgFoPiFuEaNaqi+/ZNFBa1VBY81R8ffTjMxex8u9T9LOrj Jk/S53tMKp5uSHTEexGy3XSGVhOyNyuqJGmNP13cOi0EyG0F/Xt8YT7WEaRQNc/X tCTww/hScsQWho36ZbVlhYe0QfatjsQK0E3E9kWA6WqRmFhGQlbsxGjXwdkPQCax J7zk2I5QTj55P35kmTXPr5sUHFuKN2sWyaXXt6t3QMSCqZ/zlt/kk/HxWmx72zgd q6EYJ11MISHuk4gn35I7C2N3m7Il0A9iuLn9aINK+z4jrpqoueE= -----END CERTIFICATE-----Generated at Mon Jun 16 02:04:47 2025 by rpki-client