$ rpki-client -vvf repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft File: D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft (raw, json) Hash identifier: MciuZyvRfq2J3zghun+ediv7LXqJIU6aDXlb0t9Q+lU= Subject key identifier: 57:B6:A2:3C:F5:1A:6B:18:98:6C:38:8B:28:FA:F8:E8:FF:F5:65:9D Authority key identifier: D5:67:7E:FA:13:70:87:11:CD:AF:B6:7D:9C:4C:8F:5F:FF:A9:A2:71 Certificate issuer: /CN=D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271 Certificate serial: 1CE6A11D56D9C4FCD550A52E1FCBC9EF84F1AD01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft Manifest number: 02F3 Signing time: Sun 15 Jun 2025 12:40:35 +0000 Manifest this update: Sun 15 Jun 2025 12:35:35 +0000 Manifest next update: Wed 18 Jun 2025 17:35:35 +0000 Files and hashes: 1: 3130332e3134372e38342e302f32332d3234203d3e20313339393535.roa (hash: 8pVdONx+0B7HzvlmWjfUUOE8jWcjWCCvoVvW/VBNAgQ=) 2: D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.crl (hash: HY7pTgzaNqkgdtY0QqQZKTxQnjFbtrPfhWz7yJuTn2o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.crl rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:e6:a1:1d:56:d9:c4:fc:d5:50:a5:2e:1f:cb:c9:ef:84:f1:ad:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271 Validity Not Before: Jun 15 12:35:35 2025 GMT Not After : Jun 18 17:35:35 2025 GMT Subject: CN=57B6A23CF51A6B18986C388B28FAF8E8FFF5659D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:76:1b:b5:ae:04:73:5f:9a:ba:28:37:66:19: 9e:65:1e:18:bd:f1:25:eb:5b:a5:19:ad:e8:c1:b0: 7e:50:74:01:f6:e9:1d:6f:2e:a7:69:64:39:7f:ad: ec:99:d6:d8:72:31:e7:3e:86:b4:5e:bc:05:e4:03: 69:22:0e:63:52:cc:22:15:8e:68:54:2e:b7:2c:c5: 60:d6:0e:31:d4:12:80:c4:29:5d:31:37:24:f9:c4: 2e:df:0b:df:45:e5:94:b0:ef:b6:3e:30:8e:9f:67: 52:d2:e3:31:78:ac:c8:f9:8c:45:aa:d6:45:ac:83: c9:58:b0:8f:5e:6e:59:21:57:db:32:27:87:94:1e: a5:8d:15:13:03:89:69:6f:4c:29:63:1a:85:82:6b: 33:1c:57:74:ef:85:08:c2:3b:71:5f:06:12:dd:b0: 76:d6:28:94:5f:b0:94:c3:f6:0b:f8:41:f6:03:5c: 32:cd:2e:57:1e:c7:e2:9d:15:80:cf:f6:a4:f7:ca: 84:53:4a:d6:76:54:d6:fe:38:41:b7:2e:04:b0:79: 95:5c:86:40:93:04:69:e9:97:db:0b:db:44:0b:24: 22:f5:7c:7e:a3:2f:3b:c5:05:cf:06:94:88:cf:f0: 46:47:2c:e4:67:fd:a7:af:46:c8:9d:16:ea:63:eb: 75:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B6:A2:3C:F5:1A:6B:18:98:6C:38:8B:28:FA:F8:E8:FF:F5:65:9D X509v3 Authority Key Identifier: keyid:D5:67:7E:FA:13:70:87:11:CD:AF:B6:7D:9C:4C:8F:5F:FF:A9:A2:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:cc:86:ba:aa:ab:fc:94:0f:08:18:2e:25:53:c2:d1:ef:48: 9e:5a:d6:e1:7f:8b:2e:38:81:22:e8:a6:16:fb:85:4e:fb:50: 34:ef:e8:41:16:67:52:6c:5a:9c:2a:d8:87:44:01:41:94:e8: 60:8f:bf:bb:60:19:90:f3:95:d7:9e:17:fa:3a:34:59:de:a1: ba:82:e1:7d:be:3f:3b:df:84:45:7a:42:93:a4:c2:c0:7e:07: ac:cc:fb:76:ae:75:d3:66:a9:79:4b:b4:11:7e:53:82:bd:e1: 2a:85:b8:38:85:3a:7c:c2:07:43:be:4f:7d:27:64:e6:a1:44: 7a:c4:7e:c0:20:f6:4f:77:cc:85:aa:bf:26:a6:7d:0f:62:13: 8e:27:29:9c:00:a3:97:eb:3f:5a:ac:43:31:30:a1:4e:16:8e: d0:2f:a3:ec:76:e8:fa:a3:14:3f:b6:70:7f:eb:5c:26:c9:e0: 99:11:02:5f:d0:45:ca:45:d2:25:93:3a:cb:fd:91:e4:e0:5c: 42:16:8c:a0:8e:b8:ca:cb:af:02:83:e0:c2:c5:ed:fc:96:a4: fe:d3:8a:9b:91:25:76:d4:b4:4a:01:26:83:ff:58:f3:73:6e: da:b9:c4:1a:f0:23:bc:aa:56:17:3e:c0:b1:97:0e:af:eb:ba: b0:cd:61:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHOahHVbZxPzVUKUuH8vJ74TxrQEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU2NzdFRkExMzcwODcxMUNEQUZCNjdEOUM0QzhGNUZG RkE5QTI3MTAeFw0yNTA2MTUxMjM1MzVaFw0yNTA2MTgxNzM1MzVaMDMxMTAvBgNV BAMTKDU3QjZBMjNDRjUxQTZCMTg5ODZDMzg4QjI4RkFGOEU4RkZGNTY1OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9dhu1rgRzX5q6KDdmGZ5lHhi9 8SXrW6UZrejBsH5QdAH26R1vLqdpZDl/reyZ1thyMec+hrRevAXkA2kiDmNSzCIV jmhULrcsxWDWDjHUEoDEKV0xNyT5xC7fC99F5ZSw77Y+MI6fZ1LS4zF4rMj5jEWq 1kWsg8lYsI9eblkhV9syJ4eUHqWNFRMDiWlvTCljGoWCazMcV3TvhQjCO3FfBhLd sHbWKJRfsJTD9gv4QfYDXDLNLlcex+KdFYDP9qT3yoRTStZ2VNb+OEG3LgSweZVc hkCTBGnpl9sL20QLJCL1fH6jLzvFBc8GlIjP8EZHLORn/aevRsidFupj63VfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV7aiPPUaaxiYbDiLKPr46P/1ZZ0wHwYDVR0j BBgwFoAU1Wd++hNwhxHNr7Z9nEyPX/+ponEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Nzk2NTlhOS01NTA1LTQ5NGItYTAzYy02ZWJhY2ZhZGY5MzEvMC9ENTY3N0VGQTEz NzA4NzExQ0RBRkI2N0Q5QzRDOEY1RkZGQTlBMjcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU2NzdFRkExMzcwODcxMUNEQUZCNjdEOUM0QzhGNUZGRkE5 QTI3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc5NjU5YTktNTUwNS00OTRiLWEw M2MtNmViYWNmYWRmOTMxLzAvRDU2NzdFRkExMzcwODcxMUNEQUZCNjdEOUM0QzhG NUZGRkE5QTI3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGvMhrqqq/yUDwgYLiVTwtHvSJ5a1uF/iy44 gSLophb7hU77UDTv6EEWZ1JsWpwq2IdEAUGU6GCPv7tgGZDzldeeF/o6NFneobqC 4X2+PzvfhEV6QpOkwsB+B6zM+3auddNmqXlLtBF+U4K94SqFuDiFOnzCB0O+T30n ZOahRHrEfsAg9k93zIWqvyamfQ9iE44nKZwAo5frP1qsQzEwoU4WjtAvo+x26Pqj FD+2cH/rXCbJ4JkRAl/QRcpF0iWTOsv9keTgXEIWjKCOuMrLrwKD4MLF7fyWpP7T ipuRJXbUtEoBJoP/WPNzbtq5xBrwI7yqVhc+wLGXDq/rurDNYXw= -----END CERTIFICATE-----Generated at Sun Jun 15 15:20:44 2025 by rpki-client