$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft File: C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft (raw, json) Hash identifier: CLg+7d/OFwR2Ad9k2Q6ty2hACgXhgK0fTzgYOwZgXNk= Subject key identifier: 56:E0:FE:FD:C9:6B:65:4B:72:09:A0:26:1C:50:00:F9:B3:F1:F2:11 Authority key identifier: C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D Certificate issuer: /CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D Certificate serial: 3169EE56845CB64C4E9AE6161A31C152930F5C98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft Manifest number: 04FB Signing time: Tue 05 Aug 2025 22:31:37 +0000 Manifest this update: Tue 05 Aug 2025 22:26:37 +0000 Manifest next update: Fri 08 Aug 2025 23:15:37 +0000 Files and hashes: 1: 323030313a6466343a626430303a3a2f34382d3438203d3e20313337333338.roa (hash: X0XuQCteFt44X9z4G5hv/Tll9L9Acd6wBAIKaiqJSfU=) 2: 3130332e3131322e3232332e302f32342d3234203d3e20313337333338.roa (hash: h9EnCBlEcC94GebgUJlWGKNfIlqkrzmaOBhnTq8r/5A=) 3: C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl (hash: PvHh8/y61CKlW3hg9eeM2jrZsA7wNR+0OaJe0z5Q63M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 23:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:69:ee:56:84:5c:b6:4c:4e:9a:e6:16:1a:31:c1:52:93:0f:5c:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D Validity Not Before: Aug 5 22:26:37 2025 GMT Not After : Aug 8 23:15:37 2025 GMT Subject: CN=56E0FEFDC96B654B7209A0261C5000F9B3F1F211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6d:0f:8d:3a:a6:4c:4e:32:d1:1b:cb:78:59: a0:fa:12:28:64:f7:4d:df:23:66:7c:0b:1e:33:f0: 46:e8:5b:24:37:35:b7:50:e1:70:17:69:4a:b6:b6: 64:c6:cc:b3:3e:82:38:0c:e5:ac:4d:59:a0:d8:5e: 1e:93:0c:6b:3e:91:b7:02:2b:f8:25:4d:79:dd:24: 41:04:95:95:e8:82:09:1d:21:0e:08:9c:f0:77:02: 0e:4c:55:33:d0:23:77:33:95:80:88:4c:32:1f:26: b1:7f:c5:f6:c6:fc:95:c6:95:3a:22:b7:e2:65:64: ac:6c:7e:5f:17:30:63:a2:98:d9:39:db:a0:29:9f: 73:d8:58:a8:ee:bb:2d:b9:8d:60:79:7f:4e:d0:c2: 94:85:3a:a7:5b:55:c7:23:26:ea:50:a1:39:48:a8: 7a:1e:8b:11:a8:c1:18:28:8c:10:5b:d3:88:63:ae: 7c:ad:c6:04:a0:1f:13:94:f7:40:bf:8b:5a:99:91: 60:d4:9f:7c:74:e7:34:15:70:9d:7e:81:b0:87:a4: d6:01:4e:6d:ac:3e:f0:2b:1b:0a:af:ea:0f:77:5a: 2a:44:89:b6:12:dd:6b:75:db:15:93:a8:91:18:ac: 67:f4:85:7f:a5:33:36:82:1d:c9:70:5f:f0:15:03: a0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E0:FE:FD:C9:6B:65:4B:72:09:A0:26:1C:50:00:F9:B3:F1:F2:11 X509v3 Authority Key Identifier: keyid:C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:38:d9:06:8e:4d:46:6a:67:c4:31:30:02:68:5e:77:33:37: 43:24:28:1d:58:6f:fc:fd:3b:cd:91:21:3d:ee:5e:46:93:8f: 40:5c:58:4a:c4:d7:ce:99:fd:8e:ee:66:29:ae:48:ea:44:ab: 9b:99:16:67:c1:cd:63:c9:f0:de:ea:83:ce:42:e1:c4:45:3a: 7a:71:56:de:67:60:34:9e:8b:df:38:d0:16:73:b0:ed:35:9b: f2:04:d6:72:75:25:3f:31:c4:30:3a:c9:cd:b5:18:a9:30:7b: 10:6f:00:21:b9:bb:3a:60:4e:fe:29:84:94:ec:af:1b:88:83: f2:c4:4c:f0:38:46:c1:f2:ce:c4:83:ca:0e:52:1e:33:85:98: 3e:2c:3d:0d:10:38:70:1c:32:f7:61:bf:d9:91:e7:33:d3:3b: 81:40:3d:82:04:72:93:d9:ee:a1:e6:f2:bf:49:d8:f8:d9:06: 5f:cd:e5:74:6a:b3:30:aa:80:d0:3b:5b:64:7e:ae:9e:36:8b: 19:17:4e:2e:52:e2:11:39:1a:10:62:79:39:b1:16:55:53:c4: 94:3b:ea:63:99:cf:60:f3:86:e9:d4:57:2d:0f:9f:03:3d:d5: 06:39:44:be:2b:d9:4e:df:0b:a0:11:16:cf:87:5b:bd:b0:f7: c3:2e:82:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMWnuVoRctkxOmuYWGjHBUpMPXJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZG MzA2OTQ1RDAeFw0yNTA4MDUyMjI2MzdaFw0yNTA4MDgyMzE1MzdaMDMxMTAvBgNV BAMTKDU2RTBGRUZEQzk2QjY1NEI3MjA5QTAyNjFDNTAwMEY5QjNGMUYyMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNbQ+NOqZMTjLRG8t4WaD6Eihk 903fI2Z8Cx4z8EboWyQ3NbdQ4XAXaUq2tmTGzLM+gjgM5axNWaDYXh6TDGs+kbcC K/glTXndJEEElZXoggkdIQ4InPB3Ag5MVTPQI3czlYCITDIfJrF/xfbG/JXGlToi t+JlZKxsfl8XMGOimNk526Apn3PYWKjuuy25jWB5f07QwpSFOqdbVccjJupQoTlI qHoeixGowRgojBBb04hjrnytxgSgHxOU90C/i1qZkWDUn3x05zQVcJ1+gbCHpNYB Tm2sPvArGwqv6g93WipEibYS3Wt12xWTqJEYrGf0hX+lMzaCHclwX/AVA6A5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVuD+/clrZUtyCaAmHFAA+bPx8hEwHwYDVR0j BBgwFoAUxQlgLoSS4e8veiuZpMa/T/MGlF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmQ2ZDBkZi1jMjFlLTQ5MWMtYjExNi00YTFkOWEyYzc0YmUvMC9DNTA5NjAyRTg0 OTJFMUVGMkY3QTJCOTlBNEM2QkY0RkYzMDY5NDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZGMzA2 OTQ1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJkNmQwZGYtYzIxZS00OTFjLWIx MTYtNGExZDlhMmM3NGJlLzAvQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJG NEZGMzA2OTQ1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADw42QaOTUZqZ8QxMAJoXnczN0MkKB1Yb/z9 O82RIT3uXkaTj0BcWErE186Z/Y7uZimuSOpEq5uZFmfBzWPJ8N7qg85C4cRFOnpx Vt5nYDSei9840BZzsO01m/IE1nJ1JT8xxDA6yc21GKkwexBvACG5uzpgTv4phJTs rxuIg/LETPA4RsHyzsSDyg5SHjOFmD4sPQ0QOHAcMvdhv9mR5zPTO4FAPYIEcpPZ 7qHm8r9J2PjZBl/N5XRqszCqgNA7W2R+rp42ixkXTi5S4hE5GhBieTmxFlVTxJQ7 6mOZz2DzhunUVy0PnwM91QY5RL4r2U7fC6ARFs+HW72w98Mugjg= -----END CERTIFICATE-----Generated at Thu Aug 7 07:17:33 2025 by rpki-client