$ rpki-client -vvf repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft File: D5265466AE0186702AF52D11170A29AC32F54EF5.mft (raw, json) Hash identifier: zOFH+wAw4t5KE/qMP74Gadq9rkzCcKljlbWaLQeSehw= Subject key identifier: FF:48:1A:BF:35:F8:89:06:FD:7A:07:50:0A:69:EB:D5:6A:82:E5:3F Authority key identifier: D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5 Certificate issuer: /CN=D5265466AE0186702AF52D11170A29AC32F54EF5 Certificate serial: 74815BFC66614ACD6F7CC8C4777440F02D878F47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft Manifest number: A9 Signing time: Sun 15 Jun 2025 06:00:40 +0000 Manifest this update: Sun 15 Jun 2025 05:55:40 +0000 Manifest next update: Wed 18 Jun 2025 13:11:40 +0000 Files and hashes: 1: D5265466AE0186702AF52D11170A29AC32F54EF5.crl (hash: nVrjDbgbf7vP5xRmpWSUMgYTyT9L1Bn6FKPDOHwVm7w=) 2: 3135372e31352e302e302f32332d3234203d3e20313532373639.roa (hash: wP7WlQEFbQk8vKWjoSw9Vlhgkk9UBNqB1fB0mYPDnk8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.crl rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 13:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:81:5b:fc:66:61:4a:cd:6f:7c:c8:c4:77:74:40:f0:2d:87:8f:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5265466AE0186702AF52D11170A29AC32F54EF5 Validity Not Before: Jun 15 05:55:40 2025 GMT Not After : Jun 18 13:11:40 2025 GMT Subject: CN=FF481ABF35F88906FD7A07500A69EBD56A82E53F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:71:17:fe:23:9d:07:16:94:7b:12:33:1b:fa: b5:88:bb:93:ec:27:46:01:82:24:74:ae:5b:55:76: 9a:4a:2f:da:2b:61:02:22:a1:fc:04:1e:b3:a1:3b: ed:97:b1:4a:e9:b0:73:f3:be:31:95:43:cf:65:eb: 1c:84:c6:aa:ad:44:8a:9e:e0:f2:37:14:7e:2e:50: 65:d0:19:66:2d:f1:9a:5b:a9:b6:b9:3b:01:87:05: 94:6b:c7:7c:42:52:d1:8b:84:b5:fe:09:2a:71:97: c5:71:f0:83:50:d9:dc:da:34:6a:a3:f0:98:1f:4f: b4:f3:c5:13:b0:90:42:33:9b:d9:7c:49:ff:df:b6: 05:29:af:7e:39:47:1d:bc:7f:b7:8e:ff:9d:50:c4: 5e:88:82:2b:bb:5e:b0:bd:f4:07:8c:50:5a:44:f8: e9:fa:28:21:2c:e5:ac:18:00:94:e5:dc:e3:6a:ac: 9d:54:d4:24:78:b0:50:e2:56:84:13:5e:3d:b3:86: 86:cc:25:9a:bf:ff:3d:cc:b2:c3:ae:63:b2:38:96: 10:71:80:7e:c6:dc:6a:23:79:f5:93:c5:7d:6f:ef: b4:b1:5b:d4:5c:75:11:5c:fe:c7:8c:a0:b4:1a:bc: 8e:87:e1:45:8a:f6:52:72:c5:fb:aa:16:bd:3c:70: ca:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:48:1A:BF:35:F8:89:06:FD:7A:07:50:0A:69:EB:D5:6A:82:E5:3F X509v3 Authority Key Identifier: keyid:D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:cd:ff:67:7d:11:1a:b3:2b:48:22:e0:e1:c9:bf:ae:7f:24: a7:29:12:5d:05:55:ee:5c:ae:7a:0a:8e:da:b1:f6:ce:ef:10: 35:8b:a8:f5:05:6a:90:cf:8a:10:8c:81:11:e9:3e:fb:43:4f: d3:85:fb:59:f8:00:3f:a0:ff:47:8e:eb:cc:bd:1f:6d:e2:d3: 0a:a8:b4:78:ac:13:9a:8a:5d:5c:b3:f2:33:2e:28:86:38:21: 0b:62:5a:fb:b2:58:04:51:f6:75:db:c8:8c:99:49:6c:ed:70: 3c:77:eb:a9:f3:b0:8d:74:2c:24:71:dd:4b:8c:f5:3c:81:0d: 5a:62:9d:32:65:84:15:ac:57:13:2e:48:2e:e9:97:1a:f4:0c: ba:f8:73:97:9a:0a:ce:66:01:9d:c7:14:4e:38:3e:f4:83:0f: bb:cd:60:4c:fc:fe:2e:38:35:fe:3a:6b:d5:b9:79:23:59:f5: a8:18:e4:12:6d:10:3c:3f:8f:55:80:bb:0b:d7:a0:48:12:86: 92:56:9b:d6:67:62:97:c2:ca:0a:6e:07:73:9f:82:90:1e:33: 75:5d:25:46:c2:a6:d6:74:6d:20:ea:a3:36:0a:8b:9e:30:55: 77:38:99:e8:59:5d:7d:fc:23:d7:4e:ee:4a:08:16:20:ec:cf: fe:1e:92:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdIFb/GZhSs1vfMjEd3RA8C2Hj0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5QUMz MkY1NEVGNTAeFw0yNTA2MTUwNTU1NDBaFw0yNTA2MTgxMzExNDBaMDMxMTAvBgNV BAMTKEZGNDgxQUJGMzVGODg5MDZGRDdBMDc1MDBBNjlFQkQ1NkE4MkU1M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDecRf+I50HFpR7EjMb+rWIu5Ps J0YBgiR0rltVdppKL9orYQIiofwEHrOhO+2XsUrpsHPzvjGVQ89l6xyExqqtRIqe 4PI3FH4uUGXQGWYt8Zpbqba5OwGHBZRrx3xCUtGLhLX+CSpxl8Vx8INQ2dzaNGqj 8JgfT7TzxROwkEIzm9l8Sf/ftgUpr345Rx28f7eO/51QxF6Igiu7XrC99AeMUFpE +On6KCEs5awYAJTl3ONqrJ1U1CR4sFDiVoQTXj2zhobMJZq//z3MssOuY7I4lhBx gH7G3GojefWTxX1v77SxW9RcdRFc/seMoLQavI6H4UWK9lJyxfuqFr08cMq5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/0gavzX4iQb9egdQCmnr1WqC5T8wHwYDVR0j BBgwFoAU1SZUZq4BhnAq9S0RFwoprDL1TvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDYxMzdhZS0yZWZiLTQzYzAtYmRiNy00M2Y1ZDkzOWNmMGMvMC9ENTI2NTQ2NkFF MDE4NjcwMkFGNTJEMTExNzBBMjlBQzMyRjU0RUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5QUMzMkY1 NEVGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQ2MTM3YWUtMmVmYi00M2MwLWJk YjctNDNmNWQ5MzljZjBjLzAvRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5 QUMzMkY1NEVGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjN/2d9ERqzK0gi4OHJv65/JKcpEl0FVe5c rnoKjtqx9s7vEDWLqPUFapDPihCMgRHpPvtDT9OF+1n4AD+g/0eO68y9H23i0wqo tHisE5qKXVyz8jMuKIY4IQtiWvuyWARR9nXbyIyZSWztcDx366nzsI10LCRx3UuM 9TyBDVpinTJlhBWsVxMuSC7plxr0DLr4c5eaCs5mAZ3HFE44PvSDD7vNYEz8/i44 Nf46a9W5eSNZ9agY5BJtEDw/j1WAuwvXoEgShpJWm9ZnYpfCygpuB3OfgpAeM3Vd JUbCptZ0bSDqozYKi54wVXc4mehZXX38I9dO7koIFiDsz/4ekjA= -----END CERTIFICATE-----Generated at Mon Jun 16 15:34:23 2025 by rpki-client