$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft File: C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft (raw, json) Hash identifier: hynqVxOBZWHBzUCmKN1i8hn+fu/kt+2WGUv6R5/Pv/w= Subject key identifier: 75:AF:B5:A9:E4:F9:9E:CD:0B:29:E5:4C:6D:86:4F:63:8C:2A:1B:72 Authority key identifier: C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D Certificate issuer: /CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D Certificate serial: 68C94C0AE6CC1F037C545F43E1434544557E02BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft Manifest number: 04E5 Signing time: Mon 16 Jun 2025 17:51:36 +0000 Manifest this update: Mon 16 Jun 2025 17:46:36 +0000 Manifest next update: Fri 20 Jun 2025 04:05:36 +0000 Files and hashes: 1: C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl (hash: XSMj/asXgAhwGC87I3fVTqlgFTR8h+pI/LRohZQS7XA=) 2: 323030313a6466343a626430303a3a2f34382d3438203d3e20313337333338.roa (hash: X0XuQCteFt44X9z4G5hv/Tll9L9Acd6wBAIKaiqJSfU=) 3: 3130332e3131322e3232332e302f32342d3234203d3e20313337333338.roa (hash: h9EnCBlEcC94GebgUJlWGKNfIlqkrzmaOBhnTq8r/5A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:05:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:c9:4c:0a:e6:cc:1f:03:7c:54:5f:43:e1:43:45:44:55:7e:02:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D Validity Not Before: Jun 16 17:46:36 2025 GMT Not After : Jun 20 04:05:36 2025 GMT Subject: CN=75AFB5A9E4F99ECD0B29E54C6D864F638C2A1B72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:43:a2:91:a7:24:93:e8:9d:44:27:cf:50:23: f8:78:9b:7c:fb:f1:d4:a6:53:80:cf:49:88:cb:eb: 09:9c:54:af:c8:bf:f8:ba:6c:1c:8c:c6:6a:c4:5c: 3b:50:f2:0c:46:cd:18:9b:e2:c7:38:f9:72:b0:a6: 72:5e:a1:5f:65:27:da:14:b4:08:5c:6d:bf:31:41: 8d:8a:60:5f:63:77:2b:a8:31:6b:26:c5:e2:da:eb: 92:84:76:90:7d:f2:3f:5d:f2:dd:f6:17:dc:9a:7c: 9f:0b:87:9a:dc:df:ef:86:ff:ec:0e:72:30:fe:d8: 30:13:50:7f:fd:ba:20:37:95:ad:42:2b:d1:bf:a9: c4:ce:3b:d4:21:39:b6:02:ca:c7:cd:eb:f3:2a:1e: 16:37:ac:5d:1c:e0:0c:63:6b:3a:09:b7:75:34:d1: 2b:c3:c8:93:04:b8:54:1e:8f:c5:8e:f6:c3:17:89: 25:fa:ea:ec:c9:11:aa:c7:a4:b0:70:24:03:1e:15: 28:fa:dd:bb:4b:9c:a2:61:89:8f:19:d6:a7:ff:08: 25:8a:a7:2c:bf:c9:d0:21:50:77:08:0c:30:68:b1: ec:0a:50:55:75:0f:e2:05:17:71:62:3d:ea:d4:cf: 2d:5a:9d:69:d3:02:1f:70:83:76:b2:53:18:b8:3c: fa:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:AF:B5:A9:E4:F9:9E:CD:0B:29:E5:4C:6D:86:4F:63:8C:2A:1B:72 X509v3 Authority Key Identifier: keyid:C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:ab:5b:52:c2:7d:95:38:fd:9d:b6:ca:b8:f6:6c:7b:9d:4f: 76:4c:01:fd:94:c1:73:ed:19:20:10:b5:19:5b:88:3f:f7:b3: 69:7e:2e:96:b3:a7:20:ec:a7:3c:53:1c:55:0f:37:01:68:63: cd:79:79:35:ba:de:78:f1:1c:39:0c:53:81:fb:33:f4:e9:f6: b7:43:5f:4e:45:ae:27:59:4f:31:e3:09:db:17:f9:1e:88:bd: 60:8c:1c:6c:c2:4b:2f:9f:b7:21:ff:c1:dd:57:75:ef:b8:e0: 49:ab:f6:9a:c7:d2:f9:8c:2e:9b:7c:10:e0:fb:b2:7f:6e:60: 33:c3:af:ab:77:5e:a5:0d:31:a2:9d:16:72:20:b4:4a:d1:fd: 69:5d:fd:a8:ea:3e:40:b0:03:db:d5:a7:65:4b:8d:52:ea:b6: 86:f7:09:57:9b:f0:d8:99:bb:47:9e:47:b2:c0:c8:e3:7b:da: ef:4a:c5:e7:3b:37:23:fc:62:19:63:72:e8:a5:33:5f:cf:d4: b7:26:90:88:65:99:99:fa:30:23:1d:00:00:8e:1d:5d:67:0e: 92:c9:92:dc:72:36:01:60:c3:63:dc:37:3c:e6:6f:39:9d:88: 8c:f9:b3:b0:2a:a5:4a:26:c0:9b:ec:be:b7:84:74:bf:9c:3e: 8e:ac:44:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaMlMCubMHwN8VF9D4UNFRFV+Ar8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZG MzA2OTQ1RDAeFw0yNTA2MTYxNzQ2MzZaFw0yNTA2MjAwNDA1MzZaMDMxMTAvBgNV BAMTKDc1QUZCNUE5RTRGOTlFQ0QwQjI5RTU0QzZEODY0RjYzOEMyQTFCNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxQ6KRpyST6J1EJ89QI/h4m3z7 8dSmU4DPSYjL6wmcVK/Iv/i6bByMxmrEXDtQ8gxGzRib4sc4+XKwpnJeoV9lJ9oU tAhcbb8xQY2KYF9jdyuoMWsmxeLa65KEdpB98j9d8t32F9yafJ8Lh5rc3++G/+wO cjD+2DATUH/9uiA3la1CK9G/qcTOO9QhObYCysfN6/MqHhY3rF0c4AxjazoJt3U0 0SvDyJMEuFQej8WO9sMXiSX66uzJEarHpLBwJAMeFSj63btLnKJhiY8Z1qf/CCWK pyy/ydAhUHcIDDBosewKUFV1D+IFF3FiPerUzy1anWnTAh9wg3ayUxi4PPrnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUda+1qeT5ns0LKeVMbYZPY4wqG3IwHwYDVR0j BBgwFoAUxQlgLoSS4e8veiuZpMa/T/MGlF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmQ2ZDBkZi1jMjFlLTQ5MWMtYjExNi00YTFkOWEyYzc0YmUvMC9DNTA5NjAyRTg0 OTJFMUVGMkY3QTJCOTlBNEM2QkY0RkYzMDY5NDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZGMzA2 OTQ1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJkNmQwZGYtYzIxZS00OTFjLWIx MTYtNGExZDlhMmM3NGJlLzAvQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJG NEZGMzA2OTQ1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMarW1LCfZU4/Z22yrj2bHudT3ZMAf2UwXPt GSAQtRlbiD/3s2l+LpazpyDspzxTHFUPNwFoY815eTW63njxHDkMU4H7M/Tp9rdD X05FridZTzHjCdsX+R6IvWCMHGzCSy+ftyH/wd1Xde+44Emr9prH0vmMLpt8EOD7 sn9uYDPDr6t3XqUNMaKdFnIgtErR/Wld/ajqPkCwA9vVp2VLjVLqtob3CVeb8NiZ u0eeR7LAyON72u9Kxec7NyP8YhljcuilM1/P1LcmkIhlmZn6MCMdAACOHV1nDpLJ ktxyNgFgw2PcNzzmbzmdiIz5s7AqpUomwJvsvreEdL+cPo6sRKI= -----END CERTIFICATE-----Generated at Tue Jun 17 15:38:43 2025 by rpki-client