$ rpki-client -vvf repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft File: 5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft (raw, json) Hash identifier: cTfOxZhtt30iZfArnvwbq3GL0TWxIxml7VRwuHMOtm4= Subject key identifier: C6:C8:C3:E0:02:2C:EC:99:B5:41:E4:34:E5:83:EC:FF:99:ED:22:3E Authority key identifier: 55:62:ED:3E:2B:75:AA:4C:E3:61:65:EE:02:F7:69:6C:CB:80:45:E1 Certificate issuer: /CN=5562ED3E2B75AA4CE36165EE02F7696CCB8045E1 Certificate serial: 174F846D966ACFE72AB9550FDF7FD45C57E86DB6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft Manifest number: 033F Signing time: Tue 05 Aug 2025 19:12:15 +0000 Manifest this update: Tue 05 Aug 2025 19:07:15 +0000 Manifest next update: Sat 09 Aug 2025 03:49:15 +0000 Files and hashes: 1: 5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl (hash: /ZMwKerl80AdD3VehMD0wzGi9RyJEs4e8GFioLZqNiY=) 2: 3130332e3137322e33342e302f32332d3234203d3e203538383231.roa (hash: FHzMEbRY0GUv7uZMGg/BZG/YZusPXZ52OHFP1+MW/+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 03:49:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:4f:84:6d:96:6a:cf:e7:2a:b9:55:0f:df:7f:d4:5c:57:e8:6d:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5562ED3E2B75AA4CE36165EE02F7696CCB8045E1 Validity Not Before: Aug 5 19:07:15 2025 GMT Not After : Aug 9 03:49:15 2025 GMT Subject: CN=C6C8C3E0022CEC99B541E434E583ECFF99ED223E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f7:ff:31:62:af:2c:57:e0:62:8c:d6:1b:9d: 57:66:6e:56:df:e9:68:03:fd:bc:bd:c0:24:6a:83: cd:12:1c:f6:54:b0:c9:11:52:e6:2c:42:ef:09:70: 50:cc:6d:32:9d:b3:d9:ab:47:61:77:a0:40:94:d9: f0:0a:51:6f:4b:32:50:0f:14:12:15:0a:e8:49:b1: 90:d7:76:ba:85:95:68:01:89:16:4c:dc:a1:56:d9: ae:97:75:8c:ff:aa:65:72:17:38:38:eb:77:b7:85: 73:08:0b:c9:08:2c:29:fc:1a:51:8b:41:1e:5a:15: 9e:0f:13:a0:8f:4a:02:0f:95:21:40:3d:c4:0d:58: 87:a9:95:47:57:b2:48:dd:5a:ea:50:a7:12:ad:98: 57:42:6f:78:fa:1b:1d:4b:ea:01:66:be:d9:a2:b5: 7a:cb:09:2b:5e:86:ab:cb:e8:9c:25:bd:ae:af:aa: 65:88:6c:51:8e:89:ae:56:e4:c6:b4:e5:d4:ce:ce: 41:63:a1:29:e7:75:45:eb:f0:65:d1:87:34:08:1b: 48:47:32:51:38:30:98:8e:39:bd:5e:86:2f:77:11: f6:fb:f1:72:20:8e:2e:4e:5c:7b:1c:7d:11:86:63: 41:55:cb:2b:9f:a0:02:15:54:ce:0c:f8:39:a3:ae: b1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C8:C3:E0:02:2C:EC:99:B5:41:E4:34:E5:83:EC:FF:99:ED:22:3E X509v3 Authority Key Identifier: keyid:55:62:ED:3E:2B:75:AA:4C:E3:61:65:EE:02:F7:69:6C:CB:80:45:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:7e:03:44:f7:61:c3:d6:64:3f:51:5f:01:c4:f0:94:e6:d8: 29:0c:c2:3a:a5:f1:01:8b:ea:71:00:ed:4a:2e:12:4e:af:21: 91:59:09:39:c0:96:59:a1:fc:fe:95:59:70:f8:25:0e:85:00: f1:96:d7:a0:a6:e4:fd:fb:3e:12:0e:3d:fd:c3:5c:ba:54:42: be:9b:cc:b8:17:55:ad:09:43:99:e1:95:b9:ea:de:f3:d3:88: 0b:ff:4b:9b:4d:10:8b:f7:c3:ef:63:52:4d:3e:71:a1:af:81: db:f1:cf:b3:64:03:2c:af:d0:c4:9b:20:f4:de:60:65:bf:44: 91:be:51:04:ab:d4:c7:06:3e:86:10:e4:c6:ed:aa:bc:84:15: 90:32:61:f0:0b:94:5f:c5:fd:23:ed:02:bd:02:4c:c3:12:09: 63:47:c2:41:fb:c5:77:63:9d:e5:ae:c3:a6:3d:a1:51:8c:eb: 2f:7c:63:c7:56:e7:d3:05:eb:8e:fe:92:ed:5a:45:8d:12:c2: b0:b0:04:2a:ee:6b:40:16:71:ef:dc:4d:90:89:cf:8a:3c:14: 56:41:29:2b:f9:5f:0c:ce:6a:4e:30:fd:85:27:d5:72:44:85: 1c:b8:4a:82:d4:cd:59:7c:ab:eb:a3:d7:7e:ab:3a:3b:44:0e: ed:7b:7f:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF0+EbZZqz+cquVUP33/UXFfobbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU2MkVEM0UyQjc1QUE0Q0UzNjE2NUVFMDJGNzY5NkND QjgwNDVFMTAeFw0yNTA4MDUxOTA3MTVaFw0yNTA4MDkwMzQ5MTVaMDMxMTAvBgNV BAMTKEM2QzhDM0UwMDIyQ0VDOTlCNTQxRTQzNEU1ODNFQ0ZGOTlFRDIyM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL9/8xYq8sV+BijNYbnVdmblbf 6WgD/by9wCRqg80SHPZUsMkRUuYsQu8JcFDMbTKds9mrR2F3oECU2fAKUW9LMlAP FBIVCuhJsZDXdrqFlWgBiRZM3KFW2a6XdYz/qmVyFzg463e3hXMIC8kILCn8GlGL QR5aFZ4PE6CPSgIPlSFAPcQNWIeplUdXskjdWupQpxKtmFdCb3j6Gx1L6gFmvtmi tXrLCStehqvL6Jwlva6vqmWIbFGOia5W5Ma05dTOzkFjoSnndUXr8GXRhzQIG0hH MlE4MJiOOb1ehi93Efb78XIgji5OXHscfRGGY0FVyyufoAIVVM4M+DmjrrHZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxsjD4AIs7Jm1QeQ05YPs/5ntIj4wHwYDVR0j BBgwFoAUVWLtPit1qkzjYWXuAvdpbMuAReEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l N2EzZTkwYS0wMzNhLTRjOGQtOTA3Ny0wZGFmODA1MGZhOGIvMC81NTYyRUQzRTJC NzVBQTRDRTM2MTY1RUUwMkY3Njk2Q0NCODA0NUUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU2MkVEM0UyQjc1QUE0Q0UzNjE2NUVFMDJGNzY5NkNDQjgw NDVFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTdhM2U5MGEtMDMzYS00YzhkLTkw NzctMGRhZjgwNTBmYThiLzAvNTU2MkVEM0UyQjc1QUE0Q0UzNjE2NUVFMDJGNzY5 NkNDQjgwNDVFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1+A0T3YcPWZD9RXwHE8JTm2CkMwjql8QGL 6nEA7UouEk6vIZFZCTnAllmh/P6VWXD4JQ6FAPGW16Cm5P37PhIOPf3DXLpUQr6b zLgXVa0JQ5nhlbnq3vPTiAv/S5tNEIv3w+9jUk0+caGvgdvxz7NkAyyv0MSbIPTe YGW/RJG+UQSr1McGPoYQ5MbtqryEFZAyYfALlF/F/SPtAr0CTMMSCWNHwkH7xXdj neWuw6Y9oVGM6y98Y8dW59MF647+ku1aRY0SwrCwBCrua0AWce/cTZCJz4o8FFZB KSv5XwzOak4w/YUn1XJEhRy4SoLUzVl8q+uj136rOjtEDu17f/4= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:11 2025 by rpki-client