$ rpki-client -vvf repo-rpki.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/056930DE7F7401B4CCAB5EC010FBE292D6553EE0.mft File: 056930DE7F7401B4CCAB5EC010FBE292D6553EE0.mft (raw, json) Hash identifier: X1108BKPAUdnAOQ/4JTVnhoCWHLKDAAzEi2TVfmlwaA= Subject key identifier: CF:A4:9E:83:18:E1:11:7B:5E:04:F0:97:46:B8:29:C4:40:00:33:01 Authority key identifier: 05:69:30:DE:7F:74:01:B4:CC:AB:5E:C0:10:FB:E2:92:D6:55:3E:E0 Certificate issuer: /CN=056930DE7F7401B4CCAB5EC010FBE292D6553EE0 Certificate serial: 1297F713CDD3F5DE55171C925980A648D8D9B133 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/056930DE7F7401B4CCAB5EC010FBE292D6553EE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/056930DE7F7401B4CCAB5EC010FBE292D6553EE0.mft Manifest number: 01A7 Signing time: Tue 22 Jul 2025 18:41:53 +0000 Manifest this update: Tue 22 Jul 2025 18:36:53 +0000 Manifest next update: Sat 26 Jul 2025 02:27:53 +0000 Files and hashes: 1: 3130332e3130322e32362e302f32342d3234203d3e20313530323833.roa (hash: Yi+osz8wQ+Z3luO3SLERqa4o3Y8p2TKbf0JCW1w6sHU=) 2: 056930DE7F7401B4CCAB5EC010FBE292D6553EE0.crl (hash: zGMZNpdCLMCwr6CL3p65nLkS2Vl21cL+9mvobGR62QA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/056930DE7F7401B4CCAB5EC010FBE292D6553EE0.crl rsync://repo-rpki.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/056930DE7F7401B4CCAB5EC010FBE292D6553EE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/056930DE7F7401B4CCAB5EC010FBE292D6553EE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:27:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:97:f7:13:cd:d3:f5:de:55:17:1c:92:59:80:a6:48:d8:d9:b1:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=056930DE7F7401B4CCAB5EC010FBE292D6553EE0 Validity Not Before: Jul 22 18:36:53 2025 GMT Not After : Jul 26 02:27:53 2025 GMT Subject: CN=CFA49E8318E1117B5E04F09746B829C440003301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:20:c9:8c:7f:c5:fe:7b:46:b9:a1:7c:df:2a: 8c:58:28:ef:e7:65:4a:72:eb:24:75:55:4c:1b:fd: eb:4c:a4:ed:b6:bc:3d:c8:24:4f:70:fc:c9:e4:d4: b3:3f:63:8d:e3:33:d5:17:a7:47:61:fa:8d:e1:6b: 3c:c1:50:a4:43:8e:8a:c0:24:3d:59:f0:f9:d2:8b: 21:c1:a1:c3:2d:74:ad:81:8b:cb:51:70:8a:c1:99: e2:e4:ba:63:5f:e7:1c:bd:d8:81:c7:50:be:99:a0: 8a:a4:62:77:7b:5c:44:1f:28:38:31:13:1e:ab:55: 7f:44:59:77:5b:b8:ab:09:76:3c:bd:64:b1:d2:e9: 3c:a5:88:75:01:0b:4a:41:e1:7b:c1:fc:72:16:15: 8a:4a:7c:9a:a0:39:5e:37:e1:70:d1:88:fc:ad:c8: 62:f6:92:64:7c:4a:a7:82:75:ff:60:31:69:2a:32: 48:cd:cd:69:a0:c0:82:4c:f9:2c:14:0a:2d:e5:45: 8d:22:fd:1f:30:fb:1e:72:37:ef:82:a7:09:7c:a8: 9d:81:8e:87:b8:aa:2f:10:fb:27:54:dd:d4:a8:48: 75:90:9c:e9:f6:34:13:35:cc:61:b2:6a:1b:cf:d2: b5:cd:82:72:47:79:91:08:a7:bd:d3:e7:7b:f9:89: 09:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A4:9E:83:18:E1:11:7B:5E:04:F0:97:46:B8:29:C4:40:00:33:01 X509v3 Authority Key Identifier: keyid:05:69:30:DE:7F:74:01:B4:CC:AB:5E:C0:10:FB:E2:92:D6:55:3E:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/056930DE7F7401B4CCAB5EC010FBE292D6553EE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/056930DE7F7401B4CCAB5EC010FBE292D6553EE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/056930DE7F7401B4CCAB5EC010FBE292D6553EE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:c9:41:df:45:cf:47:14:1b:aa:48:32:62:58:60:ba:ea:d4: 51:6e:5c:99:67:74:28:26:10:23:02:f4:9f:da:6e:5f:ec:8b: 9e:2a:a9:83:dd:5a:13:74:80:86:63:5f:7b:82:00:37:54:19: 6b:14:c3:d3:df:07:ee:a6:59:81:fe:c8:37:e0:64:5b:aa:cc: 35:7b:ad:79:e6:cf:c2:13:01:24:d4:86:32:be:79:33:4e:b2: a9:41:42:15:2e:ef:10:d4:e9:ef:99:60:3a:51:90:d8:01:0a: df:91:05:a6:17:80:a6:dc:b7:57:07:53:9d:53:bc:08:6c:b7: 89:ed:c6:80:d2:64:8e:2d:ae:33:df:d2:57:a7:11:ef:2e:6d: 7d:54:70:34:cd:df:2c:d9:5d:91:61:69:55:8c:89:32:80:3c: 8a:bc:ea:c0:86:aa:28:1a:7b:92:56:c7:8a:0a:c6:c9:b5:90: e5:3f:99:0f:36:c0:4f:3b:cf:7a:24:7e:7c:88:93:68:b5:b9: 54:78:68:c2:ff:2e:14:09:05:e8:eb:91:b6:da:20:1d:84:7b: 64:92:4f:6e:ec:51:93:15:2d:0d:5e:e1:06:3e:08:bb:31:1e: a4:af:47:3a:62:73:9a:d1:eb:79:77:97:9f:c5:e5:c5:5e:68: 42:9a:55:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEpf3E83T9d5VFxySWYCmSNjZsTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU2OTMwREU3Rjc0MDFCNENDQUI1RUMwMTBGQkUyOTJE NjU1M0VFMDAeFw0yNTA3MjIxODM2NTNaFw0yNTA3MjYwMjI3NTNaMDMxMTAvBgNV BAMTKENGQTQ5RTgzMThFMTExN0I1RTA0RjA5NzQ2QjgyOUM0NDAwMDMzMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKIMmMf8X+e0a5oXzfKoxYKO/n ZUpy6yR1VUwb/etMpO22vD3IJE9w/Mnk1LM/Y43jM9UXp0dh+o3hazzBUKRDjorA JD1Z8PnSiyHBocMtdK2Bi8tRcIrBmeLkumNf5xy92IHHUL6ZoIqkYnd7XEQfKDgx Ex6rVX9EWXdbuKsJdjy9ZLHS6TyliHUBC0pB4XvB/HIWFYpKfJqgOV434XDRiPyt yGL2kmR8SqeCdf9gMWkqMkjNzWmgwIJM+SwUCi3lRY0i/R8w+x5yN++Cpwl8qJ2B joe4qi8Q+ydU3dSoSHWQnOn2NBM1zGGyahvP0rXNgnJHeZEIp73T53v5iQkFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz6SegxjhEXteBPCXRrgpxEAAMwEwHwYDVR0j BBgwFoAUBWkw3n90AbTMq17AEPviktZVPuAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzM4NDQ5Ny03NzJkLTQxNzktYjI0Ny1iMDFjNjRlZDEwZDEvMC8wNTY5MzBERTdG NzQwMUI0Q0NBQjVFQzAxMEZCRTI5MkQ2NTUzRUUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDU2OTMwREU3Rjc0MDFCNENDQUI1RUMwMTBGQkUyOTJENjU1 M0VFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTMzODQ0OTctNzcyZC00MTc5LWIy NDctYjAxYzY0ZWQxMGQxLzAvMDU2OTMwREU3Rjc0MDFCNENDQUI1RUMwMTBGQkUy OTJENjU1M0VFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALbJQd9Fz0cUG6pIMmJYYLrq1FFuXJlndCgm ECMC9J/abl/si54qqYPdWhN0gIZjX3uCADdUGWsUw9PfB+6mWYH+yDfgZFuqzDV7 rXnmz8ITASTUhjK+eTNOsqlBQhUu7xDU6e+ZYDpRkNgBCt+RBaYXgKbct1cHU51T vAhst4ntxoDSZI4trjPf0lenEe8ubX1UcDTN3yzZXZFhaVWMiTKAPIq86sCGqiga e5JWx4oKxsm1kOU/mQ82wE87z3okfnyIk2i1uVR4aML/LhQJBejrkbbaIB2Ee2SS T27sUZMVLQ1e4QY+CLsxHqSvRzpic5rR63l3l5/F5cVeaEKaVfI= -----END CERTIFICATE-----Generated at Wed Jul 23 08:26:17 2025 by rpki-client