$ rpki-client -vvf repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft File: 57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft (raw, json) Hash identifier: 02C80AcfQ5q3DqNSPr85UE3WXVfWBwIACPanMal30ig= Subject key identifier: 4B:D0:4E:8B:76:72:5C:EF:F3:7E:18:45:4B:88:2E:2D:06:00:53:49 Authority key identifier: 57:D4:B8:26:9A:DD:A4:60:E8:F7:92:5D:0A:A1:26:EC:D6:F6:0E:24 Certificate issuer: /CN=57D4B8269ADDA460E8F7925D0AA126ECD6F60E24 Certificate serial: 2A0F9EBB77232E2E038834675A738013A1E92C02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft Manifest number: 043C Signing time: Sat 19 Jul 2025 04:30:01 +0000 Manifest this update: Sat 19 Jul 2025 04:25:01 +0000 Manifest next update: Tue 22 Jul 2025 15:34:01 +0000 Files and hashes: 1: 3131372e35332e34342e302f32322d3234203d3e203538333937.roa (hash: Kxj5n3XmBYqwY5xNhQm1hyvdBhggzR17lr3rokbc1x4=) 2: 57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.crl (hash: InAEQdQSba33NZJFpbzvXQpG5M0piDXa9T6cpsWZf8E=) 3: 3130332e34312e3138382e302f32322d3234203d3e203538333937.roa (hash: jW50ms0aH4HgWEQwGNSR71uxpw5ILP6vOExz3k18KwI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.crl rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 15:34:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:0f:9e:bb:77:23:2e:2e:03:88:34:67:5a:73:80:13:a1:e9:2c:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57D4B8269ADDA460E8F7925D0AA126ECD6F60E24 Validity Not Before: Jul 19 04:25:01 2025 GMT Not After : Jul 22 15:34:01 2025 GMT Subject: CN=4BD04E8B76725CEFF37E18454B882E2D06005349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a7:f2:6e:dd:45:dd:4c:9b:ce:b5:b6:b8:bf: be:ac:5a:98:f6:db:cf:7a:4d:a7:fb:af:10:80:f0: 09:c8:a5:2c:4a:2a:ef:32:2d:fe:45:27:ca:08:48: 21:b4:ec:8f:5d:85:37:36:3c:eb:98:4e:35:51:87: de:d1:e3:9b:b0:8b:99:3d:06:f4:9e:98:b4:fe:82: 88:66:6f:56:72:63:a0:64:d3:44:c7:32:11:61:6e: 2e:32:52:e2:bf:c3:d1:91:8b:23:76:e3:62:e7:d3: 20:df:66:19:bd:e6:0b:06:17:c5:da:80:df:e4:f1: 42:05:06:69:11:b1:a6:ff:77:ee:fa:7c:01:39:85: 56:b6:4a:91:66:fc:67:84:3b:0b:b7:00:c1:95:fe: 85:27:a6:e6:08:e6:05:28:12:39:3e:31:fb:cc:88: 00:3b:1b:34:b1:27:07:6d:9c:6c:f3:f7:b8:a8:5d: 2d:b7:a1:5a:26:33:7f:c6:cc:5b:86:bb:bd:60:84: 34:e4:04:de:c6:7d:41:11:e5:93:36:72:31:61:74: e4:52:26:2a:fa:76:0d:e1:6c:6d:e7:56:64:8d:9c: f3:36:7d:f7:34:d7:83:18:be:b8:bc:41:71:9f:87: ea:be:51:6e:94:bd:ea:c2:c3:9b:b1:75:ec:38:46: 3a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D0:4E:8B:76:72:5C:EF:F3:7E:18:45:4B:88:2E:2D:06:00:53:49 X509v3 Authority Key Identifier: keyid:57:D4:B8:26:9A:DD:A4:60:E8:F7:92:5D:0A:A1:26:EC:D6:F6:0E:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:98:04:f7:18:0a:75:c2:6b:0f:de:75:b6:04:4f:e2:26:80: 8b:74:89:82:cb:f3:7f:35:fa:7e:a4:0f:fc:05:bc:71:f1:18: af:89:c0:f6:08:1c:9a:eb:88:49:2b:53:b3:3a:73:d4:16:ef: 89:52:b9:eb:5e:fa:09:f1:3f:f0:31:a2:2b:5b:f8:6e:30:60: 8f:6c:94:2d:d4:11:7e:92:05:e7:47:9a:f6:0d:b0:b5:4c:84: de:b5:11:41:07:36:41:6c:80:e1:69:f7:ef:05:b9:0c:0a:77: bb:73:09:71:a6:fb:e9:a6:60:ed:fc:90:01:47:7c:72:bb:9f: 42:33:a0:c8:81:26:4e:c9:b5:5a:74:9f:24:58:47:94:62:9b: d2:24:90:f2:5f:c3:b6:79:b7:a9:35:ec:88:e9:7e:32:18:73: 8a:2d:a4:ef:68:37:6c:54:f5:ab:b3:c1:56:29:02:2b:f0:24: e3:f2:18:36:de:ee:1d:b6:36:1e:7a:aa:8a:8c:5b:38:22:77: df:58:41:d8:82:ed:dc:ea:0c:fa:bf:cf:28:17:ac:71:e3:b8: 0d:1b:81:5a:84:56:d8:18:9d:05:75:cf:4f:16:fe:18:d2:7f: d8:31:f8:b8:bd:64:a0:26:39:12:d1:e9:8e:70:d0:a6:3c:e0: 16:f9:ce:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKg+eu3cjLi4DiDRnWnOAE6HpLAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdENEI4MjY5QUREQTQ2MEU4Rjc5MjVEMEFBMTI2RUNE NkY2MEUyNDAeFw0yNTA3MTkwNDI1MDFaFw0yNTA3MjIxNTM0MDFaMDMxMTAvBgNV BAMTKDRCRDA0RThCNzY3MjVDRUZGMzdFMTg0NTRCODgyRTJEMDYwMDUzNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrp/Ju3UXdTJvOtba4v76sWpj2 2896Taf7rxCA8AnIpSxKKu8yLf5FJ8oISCG07I9dhTc2POuYTjVRh97R45uwi5k9 BvSemLT+gohmb1ZyY6Bk00THMhFhbi4yUuK/w9GRiyN242Ln0yDfZhm95gsGF8Xa gN/k8UIFBmkRsab/d+76fAE5hVa2SpFm/GeEOwu3AMGV/oUnpuYI5gUoEjk+MfvM iAA7GzSxJwdtnGzz97ioXS23oVomM3/GzFuGu71ghDTkBN7GfUER5ZM2cjFhdORS Jir6dg3hbG3nVmSNnPM2ffc014MYvri8QXGfh+q+UW6UverCw5uxdew4Rjq7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS9BOi3ZyXO/zfhhFS4guLQYAU0kwHwYDVR0j BBgwFoAUV9S4JprdpGDo95JdCqEm7Nb2DiQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjQ5OWM1Ni1hMjQ2LTRkMTgtYmU4Ni1mNDYxZDhmNTU5YzgvMC81N0Q0QjgyNjlB RERBNDYwRThGNzkyNUQwQUExMjZFQ0Q2RjYwRTI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTdENEI4MjY5QUREQTQ2MEU4Rjc5MjVEMEFBMTI2RUNENkY2 MEUyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Y0OTljNTYtYTI0Ni00ZDE4LWJl ODYtZjQ2MWQ4ZjU1OWM4LzAvNTdENEI4MjY5QUREQTQ2MEU4Rjc5MjVEMEFBMTI2 RUNENkY2MEUyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWYBPcYCnXCaw/edbYET+ImgIt0iYLL8381 +n6kD/wFvHHxGK+JwPYIHJrriEkrU7M6c9QW74lSuete+gnxP/Axoitb+G4wYI9s lC3UEX6SBedHmvYNsLVMhN61EUEHNkFsgOFp9+8FuQwKd7tzCXGm++mmYO38kAFH fHK7n0IzoMiBJk7JtVp0nyRYR5Rim9IkkPJfw7Z5t6k17IjpfjIYc4otpO9oN2xU 9auzwVYpAivwJOPyGDbe7h22Nh56qoqMWzgid99YQdiC7dzqDPq/zygXrHHjuA0b gVqEVtgYnQV1z08W/hjSf9gx+Li9ZKAmORLR6Y5w0KY84Bb5zkw= -----END CERTIFICATE-----Generated at Sun Jul 20 21:28:26 2025 by rpki-client