$ rpki-client -vvf repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft File: 575614534DD1047EA1BA290176D96470FCBA1ECA.mft (raw, json) Hash identifier: wmcJOGD+IRaMLmmERzyjcVuRERi3adYWKAh0QnHzOc8= Subject key identifier: F4:EF:7C:A7:FE:30:51:20:94:3F:76:46:37:27:4C:03:A8:D9:77:E6 Authority key identifier: 57:56:14:53:4D:D1:04:7E:A1:BA:29:01:76:D9:64:70:FC:BA:1E:CA Certificate issuer: /CN=575614534DD1047EA1BA290176D96470FCBA1ECA Certificate serial: 08A9D9A74E2DDF13F38CECDBC2840AD546E62171 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft Manifest number: A0 Signing time: Sun 15 Jun 2025 06:30:38 +0000 Manifest this update: Sun 15 Jun 2025 06:25:38 +0000 Manifest next update: Wed 18 Jun 2025 07:06:38 +0000 Files and hashes: 1: 575614534DD1047EA1BA290176D96470FCBA1ECA.crl (hash: aVDiCgAyMPUgjmcwgcWejQHFsqmLoxZyBEmS8DG8ktM=) 2: 3136302e32322e39302e302f32342d3234203d3e20313532383135.roa (hash: s193StwN0Z9fOKLEn3xGZ1WwxkYPgh/jBrrzDTrFlDA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.crl rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 07:06:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:a9:d9:a7:4e:2d:df:13:f3:8c:ec:db:c2:84:0a:d5:46:e6:21:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=575614534DD1047EA1BA290176D96470FCBA1ECA Validity Not Before: Jun 15 06:25:38 2025 GMT Not After : Jun 18 07:06:38 2025 GMT Subject: CN=F4EF7CA7FE305120943F764637274C03A8D977E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:40:b8:89:b1:5b:3b:03:77:d2:df:9b:e2:c4: bf:c2:11:cc:0a:14:d0:ba:27:95:33:e7:c1:a6:ca: ac:a7:fb:3b:66:29:c9:47:7f:5e:0d:25:64:ed:0a: 39:07:9f:79:72:09:cc:da:99:3e:4a:38:7e:1e:3c: 6a:eb:13:44:4d:4d:69:71:46:d6:c5:2d:f7:bf:62: b0:d7:cd:b5:71:32:ff:c3:ea:ff:a0:c3:f1:7b:df: cf:49:f9:55:fb:22:42:57:4c:74:7b:3c:d2:e9:46: fc:d5:d6:de:91:d8:bd:23:d7:66:2d:3f:83:3f:d0: 2b:63:36:36:a4:75:89:9f:e5:d4:9b:c9:c7:ae:8b: 9f:db:93:10:b6:cc:e2:fa:fd:4d:85:36:d2:0e:91: 22:f5:2c:6e:9c:a4:63:4b:d4:29:a3:9e:b1:6d:d7: ea:51:02:bc:da:b5:9b:a4:f3:64:68:42:9b:41:7f: 65:12:2b:b2:5f:13:45:68:a4:e0:2a:4d:00:a9:75: dd:b5:85:f5:58:98:81:c3:28:ab:9b:f9:d8:6b:94: 3c:1f:09:bc:93:2b:e9:78:b8:44:8a:e7:4c:b8:03: de:1e:6c:86:8c:64:ad:10:ee:82:7b:92:fc:92:38: 32:f1:86:c8:b4:8f:a2:2d:45:92:88:ec:8c:46:3b: 82:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:EF:7C:A7:FE:30:51:20:94:3F:76:46:37:27:4C:03:A8:D9:77:E6 X509v3 Authority Key Identifier: keyid:57:56:14:53:4D:D1:04:7E:A1:BA:29:01:76:D9:64:70:FC:BA:1E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:04:de:45:3c:4c:29:33:42:0a:6a:13:2e:09:cb:b6:c1:9e: 10:d2:8a:9a:c3:18:56:1f:6b:99:0f:84:fc:d3:8e:fb:77:5b: 51:65:f7:65:87:c6:da:18:f2:df:e9:43:67:22:1c:22:38:9c: 4f:bd:32:f3:07:dd:92:d5:28:9d:6c:0e:83:b9:f2:e7:ca:0b: d3:47:83:78:29:3c:d8:45:34:f7:b0:42:8a:dc:da:b5:14:48: 90:fc:3e:4b:36:e6:7a:0b:80:fe:4e:4f:7b:49:06:dc:05:b6: a8:4f:84:9c:2d:63:d7:65:8b:2f:fd:7c:98:36:0a:9f:67:f5: 7f:71:c0:6b:f4:b3:06:2b:a3:97:51:9c:a2:6f:19:88:eb:44: 7f:66:35:a4:19:d5:3d:f1:75:d0:64:5b:c7:db:1f:7c:ea:d1: 43:04:ae:da:90:e4:94:bd:89:ef:4b:78:23:44:af:8e:9b:63: 10:07:69:0d:3f:1e:05:c9:f1:33:63:24:a4:63:8f:1d:ab:c5: 9d:69:c3:5f:f8:76:3e:90:12:73:3e:ff:b4:64:3f:9f:6b:1d: c9:dd:69:f9:07:e8:12:74:e8:b0:94:d8:bd:03:8c:f7:f0:28: 03:3f:c1:0f:98:87:7f:42:dc:34:3b:25:3c:9b:41:85:d4:77: bc:ee:ee:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCKnZp04t3xPzjOzbwoQK1UbmIXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc1NjE0NTM0REQxMDQ3RUExQkEyOTAxNzZEOTY0NzBG Q0JBMUVDQTAeFw0yNTA2MTUwNjI1MzhaFw0yNTA2MTgwNzA2MzhaMDMxMTAvBgNV BAMTKEY0RUY3Q0E3RkUzMDUxMjA5NDNGNzY0NjM3Mjc0QzAzQThEOTc3RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtQLiJsVs7A3fS35vixL/CEcwK FNC6J5Uz58Gmyqyn+ztmKclHf14NJWTtCjkHn3lyCczamT5KOH4ePGrrE0RNTWlx RtbFLfe/YrDXzbVxMv/D6v+gw/F7389J+VX7IkJXTHR7PNLpRvzV1t6R2L0j12Yt P4M/0CtjNjakdYmf5dSbyceui5/bkxC2zOL6/U2FNtIOkSL1LG6cpGNL1CmjnrFt 1+pRArzatZuk82RoQptBf2USK7JfE0VopOAqTQCpdd21hfVYmIHDKKub+dhrlDwf CbyTK+l4uESK50y4A94ebIaMZK0Q7oJ7kvySODLxhsi0j6ItRZKI7IxGO4L1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9O98p/4wUSCUP3ZGNydMA6jZd+YwHwYDVR0j BBgwFoAUV1YUU03RBH6huikBdtlkcPy6HsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTdmNzliMC1iOWUzLTRjM2QtYTExMy1iNmM2YTE4YWY0ZDEvMC81NzU2MTQ1MzRE RDEwNDdFQTFCQTI5MDE3NkQ5NjQ3MEZDQkExRUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTc1NjE0NTM0REQxMDQ3RUExQkEyOTAxNzZEOTY0NzBGQ0JB MUVDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE3Zjc5YjAtYjllMy00YzNkLWEx MTMtYjZjNmExOGFmNGQxLzAvNTc1NjE0NTM0REQxMDQ3RUExQkEyOTAxNzZEOTY0 NzBGQ0JBMUVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABAE3kU8TCkzQgpqEy4Jy7bBnhDSiprDGFYf a5kPhPzTjvt3W1Fl92WHxtoY8t/pQ2ciHCI4nE+9MvMH3ZLVKJ1sDoO58ufKC9NH g3gpPNhFNPewQorc2rUUSJD8Pks25noLgP5OT3tJBtwFtqhPhJwtY9dliy/9fJg2 Cp9n9X9xwGv0swYro5dRnKJvGYjrRH9mNaQZ1T3xddBkW8fbH3zq0UMErtqQ5JS9 ie9LeCNEr46bYxAHaQ0/HgXJ8TNjJKRjjx2rxZ1pw1/4dj6QEnM+/7RkP59rHcnd afkH6BJ06LCU2L0DjPfwKAM/wQ+Yh39C3DQ7JTybQYXUd7zu7jo= -----END CERTIFICATE-----Generated at Tue Jun 17 01:39:04 2025 by rpki-client