$ rpki-client -vvf repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft File: 56302D09256688774B85DCD3BAEEB0CB17E8884D.mft (raw, json) Hash identifier: vPGtSysmFKLTtvpzg6S+U4OTRY44HMQeiDVtSNeOGZ8= Subject key identifier: 50:74:24:DC:E2:E3:ED:22:59:B9:71:8B:75:4C:63:E3:1A:EB:31:56 Authority key identifier: 56:30:2D:09:25:66:88:77:4B:85:DC:D3:BA:EE:B0:CB:17:E8:88:4D Certificate issuer: /CN=56302D09256688774B85DCD3BAEEB0CB17E8884D Certificate serial: 57AFC9F40D3F3B50C436747E48ED7545F047EC19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft Manifest number: 83 Signing time: Sat 14 Jun 2025 17:32:10 +0000 Manifest this update: Sat 14 Jun 2025 17:27:10 +0000 Manifest next update: Wed 18 Jun 2025 05:05:10 +0000 Files and hashes: 1: 56302D09256688774B85DCD3BAEEB0CB17E8884D.crl (hash: 1MsZhvn6a3MheJHCVFuJj9ur/Li1LhRhzqLD9pOtrwM=) 2: 3136302e32352e3132362e302f32342d3234203d3e20313532383338.roa (hash: bOyeQBsCUPkjEJuoFJfo/gsC9zyThIVXOOR+IQS9abo=) 3: 3136302e32352e3132362e302f32332d3233203d3e20313532383338.roa (hash: sWlaCPAtmIMRr2DxpJ25xh0gx4/gEACaEf8N+AdSR9E=) 4: 3136302e32352e3132372e302f32342d3234203d3e20313532383338.roa (hash: PvrnKYIfPpFXEwJxZOJJiyFnP0iVYl6I16zYw2N2zOU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.crl rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 05:05:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:af:c9:f4:0d:3f:3b:50:c4:36:74:7e:48:ed:75:45:f0:47:ec:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56302D09256688774B85DCD3BAEEB0CB17E8884D Validity Not Before: Jun 14 17:27:10 2025 GMT Not After : Jun 18 05:05:10 2025 GMT Subject: CN=507424DCE2E3ED2259B9718B754C63E31AEB3156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1e:13:65:60:1c:a7:09:41:76:55:d5:a6:45: f2:0f:a7:c9:1c:44:a4:56:7b:aa:55:35:76:84:47: 90:1b:f3:e5:d2:a8:1e:3a:23:d5:6e:e2:9f:00:36: 8f:49:6a:b4:ad:61:65:6b:4e:f3:bc:e3:15:f2:53: 25:e4:cc:01:28:ba:2a:ca:6b:dc:55:fa:e0:85:89: 65:1d:12:cb:95:44:2d:00:43:f3:2f:6b:be:00:f4: 3c:5e:55:9b:2c:a5:79:95:2c:02:8e:b2:61:75:4d: ea:0f:54:ef:2e:6b:64:74:1f:c7:99:d1:2f:20:eb: 29:6b:97:9d:2c:c8:80:cb:50:be:da:cf:bc:57:7d: 10:56:49:90:e3:6e:4d:8d:1a:4b:85:dc:f7:ca:9b: 47:ae:8b:e9:c9:51:43:91:2f:dc:02:6d:1e:66:8d: fd:e6:16:b1:bd:c7:2e:7e:0c:48:76:ba:a6:69:66: f3:b5:9f:75:a0:eb:78:bc:1c:83:7b:d4:20:a6:29: 2c:b9:17:2e:fb:35:3a:13:14:98:82:0e:89:4e:8a: c8:20:39:16:33:59:8f:b0:14:df:90:36:78:e9:b4: 54:a0:51:3e:d4:50:1e:5f:99:ea:06:82:56:ab:9c: 97:3a:38:9d:b4:9d:20:59:cc:6a:a6:52:4b:98:42: ba:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:74:24:DC:E2:E3:ED:22:59:B9:71:8B:75:4C:63:E3:1A:EB:31:56 X509v3 Authority Key Identifier: keyid:56:30:2D:09:25:66:88:77:4B:85:DC:D3:BA:EE:B0:CB:17:E8:88:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:3e:9d:ef:be:6f:16:87:22:2c:11:1c:82:83:c5:c9:22:02: 09:50:f7:c4:12:42:51:8d:c4:2c:47:4a:79:3b:f0:73:49:53: 53:90:aa:e0:f4:8a:74:25:76:17:a4:1f:b2:28:55:01:38:43: 48:65:bb:32:b9:3a:ea:ce:20:5a:e4:36:37:43:06:3c:fe:85: b5:de:59:4f:5a:ef:49:3e:7b:1d:d0:41:ad:99:8e:15:a3:7f: 97:a1:03:15:69:c4:1d:8f:02:e6:d7:17:6d:82:da:ca:0c:85: 2a:e2:74:13:65:aa:ec:ed:7f:5e:0a:22:98:85:39:e0:9d:69: 3d:d6:b3:71:27:7f:8b:13:e2:c1:c2:d8:21:13:11:ca:e0:ed: 33:0c:5f:5d:da:79:0b:b8:c1:07:46:e4:35:91:3a:fd:ca:a2: da:f2:e3:fb:ed:b6:cd:02:ee:3b:f0:74:72:6e:e3:a1:cc:03: e6:ea:31:6a:f8:4c:28:d1:52:e9:82:7b:33:aa:7e:0a:45:7c: 0b:1b:7b:ba:6b:a2:1c:8a:de:42:6d:63:e1:6a:33:7c:ca:03: b9:38:54:64:e0:78:be:d3:b5:e4:0c:c4:b0:8d:45:6d:3a:8a: b4:6f:d3:47:eb:0b:f5:ed:ee:ca:d4:77:28:fe:bd:77:22:fc: 02:b3:88:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV6/J9A0/O1DENnR+SO11RfBH7BkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTYzMDJEMDkyNTY2ODg3NzRCODVEQ0QzQkFFRUIwQ0Ix N0U4ODg0RDAeFw0yNTA2MTQxNzI3MTBaFw0yNTA2MTgwNTA1MTBaMDMxMTAvBgNV BAMTKDUwNzQyNERDRTJFM0VEMjI1OUI5NzE4Qjc1NEM2M0UzMUFFQjMxNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7HhNlYBynCUF2VdWmRfIPp8kc RKRWe6pVNXaER5Ab8+XSqB46I9Vu4p8ANo9JarStYWVrTvO84xXyUyXkzAEouirK a9xV+uCFiWUdEsuVRC0AQ/Mva74A9DxeVZsspXmVLAKOsmF1TeoPVO8ua2R0H8eZ 0S8g6ylrl50syIDLUL7az7xXfRBWSZDjbk2NGkuF3PfKm0eui+nJUUORL9wCbR5m jf3mFrG9xy5+DEh2uqZpZvO1n3Wg63i8HIN71CCmKSy5Fy77NToTFJiCDolOisgg ORYzWY+wFN+QNnjptFSgUT7UUB5fmeoGglarnJc6OJ20nSBZzGqmUkuYQrohAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUHQk3OLj7SJZuXGLdUxj4xrrMVYwHwYDVR0j BBgwFoAUVjAtCSVmiHdLhdzTuu6wyxfoiE0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MjA2ZGVmYS1mYTQzLTRmOTMtOTNjZS0zOWZkZmY4MWMxOWEvMC81NjMwMkQwOTI1 NjY4ODc3NEI4NURDRDNCQUVFQjBDQjE3RTg4ODRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTYzMDJEMDkyNTY2ODg3NzRCODVEQ0QzQkFFRUIwQ0IxN0U4 ODg0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTIwNmRlZmEtZmE0My00ZjkzLTkz Y2UtMzlmZGZmODFjMTlhLzAvNTYzMDJEMDkyNTY2ODg3NzRCODVEQ0QzQkFFRUIw Q0IxN0U4ODg0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKI+ne++bxaHIiwRHIKDxckiAglQ98QSQlGN xCxHSnk78HNJU1OQquD0inQldhekH7IoVQE4Q0hluzK5OurOIFrkNjdDBjz+hbXe WU9a70k+ex3QQa2ZjhWjf5ehAxVpxB2PAubXF22C2soMhSridBNlquztf14KIpiF OeCdaT3Ws3Enf4sT4sHC2CETEcrg7TMMX13aeQu4wQdG5DWROv3Kotry4/vtts0C 7jvwdHJu46HMA+bqMWr4TCjRUumCezOqfgpFfAsbe7prohyK3kJtY+FqM3zKA7k4 VGTgeL7TteQMxLCNRW06irRv00frC/Xt7srUdyj+vXci/AKziKg= -----END CERTIFICATE-----Generated at Mon Jun 16 21:14:38 2025 by rpki-client