$ rpki-client -vvf repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft File: 57D075B2873A1E1F844485DAAC774C656EB9A611.mft (raw, json) Hash identifier: 0ctPpnfnuRPwYnbJZRqphF8KTDI8TYTC0cFaktgdY3g= Subject key identifier: D1:26:20:53:E2:5E:E3:FF:ED:56:C4:E2:0B:EB:9B:43:3D:70:E9:85 Authority key identifier: 57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11 Certificate issuer: /CN=57D075B2873A1E1F844485DAAC774C656EB9A611 Certificate serial: 7925CB085AE432FAD88A293E6C565DBF0B7B7CDB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft Manifest number: 0388 Signing time: Tue 05 Aug 2025 09:51:43 +0000 Manifest this update: Tue 05 Aug 2025 09:46:43 +0000 Manifest next update: Fri 08 Aug 2025 16:50:43 +0000 Files and hashes: 1: 57D075B2873A1E1F844485DAAC774C656EB9A611.crl (hash: kFQHfyM79ef7kvEYQYgl3L1w9urZpaOP17eTtcoxB9w=) 2: 3130332e39302e3235322e302f32342d3234203d3e203338343936.roa (hash: N91VkEyIONXI8YjWF6UzPMS2HMBAziqn1kBl9mmK1M4=) 3: 3130332e39302e3235332e302f32342d3234203d3e203338343936.roa (hash: VfuZSouZTsq571ghIBuDI0RvCeUniEkqt+AyLLYswCI=) 4: 3130332e39302e3235342e302f32342d3234203d3e203338343936.roa (hash: iMulVgKCxwqPFbAFOeAzE5yh4tPkiOrz17ayjx5bBCI=) 5: 3130332e39302e3235352e302f32342d3234203d3e20313338303836.roa (hash: CMIYNlZq2wW30QRZM8aVN94gnX6NjhrlvsnBm9PvN+0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 16:50:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:25:cb:08:5a:e4:32:fa:d8:8a:29:3e:6c:56:5d:bf:0b:7b:7c:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57D075B2873A1E1F844485DAAC774C656EB9A611 Validity Not Before: Aug 5 09:46:43 2025 GMT Not After : Aug 8 16:50:43 2025 GMT Subject: CN=D1262053E25EE3FFED56C4E20BEB9B433D70E985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0d:b2:62:20:7b:71:f1:18:50:ba:c1:b5:11: e8:98:30:0e:55:f2:07:d7:21:b5:4e:80:4f:b1:7e: d7:42:b3:cb:87:fe:a2:09:9e:b1:d3:5e:85:e4:b6: af:2f:ad:0e:ea:af:4f:c0:a8:51:2b:3c:42:58:45: 64:77:df:dd:79:ed:ce:5f:fa:23:4e:4e:0b:fb:94: b3:76:b4:e1:00:79:6d:ae:da:6f:28:5f:8e:8f:ac: 91:d6:24:5a:0e:f7:5d:76:fc:b3:2d:19:74:4d:cd: de:c0:26:56:2f:98:e7:d4:9b:e7:e0:5f:29:9b:0f: 5a:de:9a:65:9b:6a:2c:1e:ed:33:eb:e6:2a:4d:31: cd:ef:18:61:3a:10:f9:1b:a3:5b:eb:51:ae:09:db: 81:51:3f:7b:ec:19:26:fe:3b:19:49:7a:22:ff:6a: b9:51:6d:10:12:1e:c7:d7:53:ca:b1:a9:a2:2a:f5: 28:b8:9d:cb:9f:72:36:0e:f7:da:d3:00:57:a2:59: e2:84:ae:17:85:e1:84:36:81:ed:d8:4e:2b:4d:e3: d8:8d:df:57:99:b7:ae:df:ee:ba:51:07:4a:34:f0: 90:c5:c9:31:9d:ef:b5:52:ba:d5:ba:98:72:72:b9: 66:df:45:ee:85:eb:55:50:ea:fd:56:59:ad:dc:dd: 97:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:26:20:53:E2:5E:E3:FF:ED:56:C4:E2:0B:EB:9B:43:3D:70:E9:85 X509v3 Authority Key Identifier: keyid:57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:61:3f:10:c8:46:1a:06:1e:46:91:60:4c:83:70:0a:74:e1: 57:84:1e:95:1c:d8:f8:90:71:1d:7a:95:2a:21:6a:9a:bf:a0: 30:ab:d8:08:fa:66:1e:a8:b9:98:5b:cb:df:f7:9d:18:d8:45: 62:f9:5a:e2:0e:de:7a:d8:50:8e:cb:5e:53:58:55:7e:dc:7c: b0:c0:07:56:34:6c:95:80:63:88:32:bd:e1:59:f6:8c:d1:fd: 53:84:1f:db:12:5a:4e:c4:34:e3:bf:6a:59:54:c1:3d:b6:0b: 5b:e0:fd:57:87:18:b2:2b:d1:d2:6d:97:97:8a:7d:7d:cf:d3: 56:b3:82:2d:a6:94:d7:2d:44:9a:0b:ca:4f:2d:e9:e5:9b:10: 25:b0:c2:7c:39:c0:53:c0:62:76:22:7d:f7:41:e2:fa:ec:e9: 5f:52:b5:a1:1a:74:b3:68:72:0a:05:f5:76:a4:6a:32:53:67: 8d:df:3f:95:13:4b:af:de:e4:eb:b6:d7:e2:32:81:e9:0d:24: ec:6e:b5:86:c9:e2:8c:12:ce:c7:72:bc:2d:33:64:c6:80:46: bb:9e:bb:85:94:1c:a4:7e:44:3d:a3:47:2d:85:0f:de:da:90: 5f:ce:74:b7:98:1b:ff:24:cf:73:49:ce:18:7e:02:8c:0a:52: 78:ff:ec:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeSXLCFrkMvrYiik+bFZdvwt7fNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRDNjU2 RUI5QTYxMTAeFw0yNTA4MDUwOTQ2NDNaFw0yNTA4MDgxNjUwNDNaMDMxMTAvBgNV BAMTKEQxMjYyMDUzRTI1RUUzRkZFRDU2QzRFMjBCRUI5QjQzM0Q3MEU5ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdDbJiIHtx8RhQusG1EeiYMA5V 8gfXIbVOgE+xftdCs8uH/qIJnrHTXoXktq8vrQ7qr0/AqFErPEJYRWR339157c5f +iNOTgv7lLN2tOEAeW2u2m8oX46PrJHWJFoO9112/LMtGXRNzd7AJlYvmOfUm+fg XymbD1remmWbaiwe7TPr5ipNMc3vGGE6EPkbo1vrUa4J24FRP3vsGSb+OxlJeiL/ arlRbRASHsfXU8qxqaIq9Si4ncufcjYO99rTAFeiWeKErheF4YQ2ge3YTitN49iN 31eZt67f7rpRB0o08JDFyTGd77VSutW6mHJyuWbfRe6F61VQ6v1WWa3c3ZeZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0SYgU+Je4//tVsTiC+ubQz1w6YUwHwYDVR0j BBgwFoAUV9B1soc6Hh+ERIXarHdMZW65phEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Nzc0YjE4Yy1mMjYzLTRmZTEtOGRmOC0xZTdjNjhiZmJlZmMvMC81N0QwNzVCMjg3 M0ExRTFGODQ0NDg1REFBQzc3NEM2NTZFQjlBNjExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRDNjU2RUI5 QTYxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc3NGIxOGMtZjI2My00ZmUxLThk ZjgtMWU3YzY4YmZiZWZjLzAvNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRD NjU2RUI5QTYxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGJhPxDIRhoGHkaRYEyDcAp04VeEHpUc2PiQ cR16lSohapq/oDCr2Aj6Zh6ouZhby9/3nRjYRWL5WuIO3nrYUI7LXlNYVX7cfLDA B1Y0bJWAY4gyveFZ9ozR/VOEH9sSWk7ENOO/allUwT22C1vg/VeHGLIr0dJtl5eK fX3P01azgi2mlNctRJoLyk8t6eWbECWwwnw5wFPAYnYiffdB4vrs6V9StaEadLNo cgoF9XakajJTZ43fP5UTS6/e5Ou21+IygekNJOxutYbJ4owSzsdyvC0zZMaARrue u4WUHKR+RD2jRy2FD97akF/OdLeYG/8kz3NJzhh+AowKUnj/7OE= -----END CERTIFICATE-----Generated at Thu Aug 7 07:17:42 2025 by rpki-client