$ rpki-client -vvf repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft File: 57D075B2873A1E1F844485DAAC774C656EB9A611.mft (raw, json) Hash identifier: Yhql42Xp9XiNY2U43dFY+rMExgA9qpv71DJHCps6QAY= Subject key identifier: 37:2E:75:B4:3F:C4:BF:AE:AE:54:42:38:4A:11:29:04:CD:1E:5B:1F Authority key identifier: 57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11 Certificate issuer: /CN=57D075B2873A1E1F844485DAAC774C656EB9A611 Certificate serial: 4B239C9C8BEABA1A677A8D574CF67A19E9D9D749 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft Manifest number: 0382 Signing time: Tue 22 Jul 2025 20:31:46 +0000 Manifest this update: Tue 22 Jul 2025 20:26:46 +0000 Manifest next update: Sat 26 Jul 2025 04:22:46 +0000 Files and hashes: 1: 3130332e39302e3235352e302f32342d3234203d3e20313338303836.roa (hash: CMIYNlZq2wW30QRZM8aVN94gnX6NjhrlvsnBm9PvN+0=) 2: 57D075B2873A1E1F844485DAAC774C656EB9A611.crl (hash: 4XLjcbbMa7GUZy4CSnBZG6/ZOu8ifm8yZgTNVa12QKI=) 3: 3130332e39302e3235332e302f32342d3234203d3e203338343936.roa (hash: VfuZSouZTsq571ghIBuDI0RvCeUniEkqt+AyLLYswCI=) 4: 3130332e39302e3235342e302f32342d3234203d3e203338343936.roa (hash: iMulVgKCxwqPFbAFOeAzE5yh4tPkiOrz17ayjx5bBCI=) 5: 3130332e39302e3235322e302f32342d3234203d3e203338343936.roa (hash: N91VkEyIONXI8YjWF6UzPMS2HMBAziqn1kBl9mmK1M4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:22:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:23:9c:9c:8b:ea:ba:1a:67:7a:8d:57:4c:f6:7a:19:e9:d9:d7:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57D075B2873A1E1F844485DAAC774C656EB9A611 Validity Not Before: Jul 22 20:26:46 2025 GMT Not After : Jul 26 04:22:46 2025 GMT Subject: CN=372E75B43FC4BFAEAE5442384A112904CD1E5B1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1a:73:5b:6d:07:3f:b0:94:99:f6:c7:2c:4f: ec:68:a2:67:09:2d:36:26:ea:e6:c9:e8:29:a4:66: 86:15:f1:c5:8c:ba:f1:32:ba:83:6b:30:29:8f:0d: ef:a3:ce:0d:98:17:89:d5:0f:df:87:bf:2c:95:1b: 3d:f8:3a:60:35:31:f9:37:7c:12:8d:ff:a7:ec:48: cf:a5:fb:52:da:91:e0:f0:4f:81:9f:ab:57:e1:e6: 92:7a:bf:f2:9e:59:f7:e9:e3:fb:97:32:ee:66:55: e5:9e:39:07:a6:0d:22:22:ed:96:e8:f2:83:f6:47: 34:85:26:be:13:49:ac:db:61:1f:fb:56:c3:ff:2f: c7:a0:f9:f5:38:82:39:12:6e:b7:23:9d:e5:dc:2c: 2e:ef:aa:ae:f8:19:a7:40:58:55:23:6c:84:ab:56: d2:fb:12:a7:0c:9e:58:e8:ae:3c:78:13:ba:47:91: 2d:f9:17:a3:cd:d8:30:4e:f0:9b:c1:ab:0d:08:48: 65:af:56:12:1f:65:c3:7c:f0:49:dd:12:ce:af:e8: 29:bf:e8:28:02:ac:06:02:26:cc:a2:ac:74:04:9d: e0:89:68:57:87:bd:64:81:63:d3:a0:2c:a5:2a:43: 4a:42:b1:19:89:bd:4f:ec:6a:4e:03:fc:d4:aa:f6: fd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:2E:75:B4:3F:C4:BF:AE:AE:54:42:38:4A:11:29:04:CD:1E:5B:1F X509v3 Authority Key Identifier: keyid:57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:53:06:4f:e8:d4:60:1f:d5:85:bd:b2:7e:b7:22:e0:0a:79: 79:cd:f0:56:1e:0e:96:e2:e6:00:12:27:14:89:c9:81:58:f1: ba:80:2f:ad:3e:01:cb:73:a1:14:e3:4a:11:3c:d7:6e:1c:c4: 61:77:1d:4f:07:4d:00:44:00:1b:69:52:90:c3:29:f8:56:f3: e4:6d:92:33:b2:b1:4c:0f:bf:80:83:d4:9e:8f:36:d8:c6:c8: 5b:5f:a6:8c:d5:a7:a6:0e:d3:66:16:ea:50:f0:08:a7:09:ee: b8:3a:50:2b:d6:4b:ae:1d:06:78:f9:da:99:d5:ee:f8:0b:b9: 5e:a4:1c:cb:ef:bf:5b:6a:91:80:be:ff:7f:5a:0e:3f:fb:e4: ff:e5:e3:e6:11:09:5e:41:a0:58:df:cc:9d:91:cc:5b:5f:1e: e5:13:3e:d7:05:50:78:6a:78:5b:bd:5f:26:0d:a4:73:c2:42: 20:1e:68:c6:0e:59:1e:69:3d:a9:cf:29:ea:cd:0b:bd:f4:54: b1:9c:80:d6:e8:f8:1c:a1:d6:27:c5:0d:64:54:84:1d:08:1a: 2c:28:4c:d6:52:7c:a4:66:52:a4:15:a7:b7:94:86:cd:f6:56: 72:ba:b5:7e:3a:72:73:f9:8b:9d:73:bd:57:ec:98:a3:47:62: 40:25:99:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSyOcnIvquhpneo1XTPZ6GenZ10kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRDNjU2 RUI5QTYxMTAeFw0yNTA3MjIyMDI2NDZaFw0yNTA3MjYwNDIyNDZaMDMxMTAvBgNV BAMTKDM3MkU3NUI0M0ZDNEJGQUVBRTU0NDIzODRBMTEyOTA0Q0QxRTVCMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMGnNbbQc/sJSZ9scsT+xoomcJ LTYm6ubJ6CmkZoYV8cWMuvEyuoNrMCmPDe+jzg2YF4nVD9+HvyyVGz34OmA1Mfk3 fBKN/6fsSM+l+1LakeDwT4Gfq1fh5pJ6v/KeWffp4/uXMu5mVeWeOQemDSIi7Zbo 8oP2RzSFJr4TSazbYR/7VsP/L8eg+fU4gjkSbrcjneXcLC7vqq74GadAWFUjbISr VtL7EqcMnljorjx4E7pHkS35F6PN2DBO8JvBqw0ISGWvVhIfZcN88EndEs6v6Cm/ 6CgCrAYCJsyirHQEneCJaFeHvWSBY9OgLKUqQ0pCsRmJvU/sak4D/NSq9v0hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNy51tD/Ev66uVEI4ShEpBM0eWx8wHwYDVR0j BBgwFoAUV9B1soc6Hh+ERIXarHdMZW65phEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Nzc0YjE4Yy1mMjYzLTRmZTEtOGRmOC0xZTdjNjhiZmJlZmMvMC81N0QwNzVCMjg3 M0ExRTFGODQ0NDg1REFBQzc3NEM2NTZFQjlBNjExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRDNjU2RUI5 QTYxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc3NGIxOGMtZjI2My00ZmUxLThk ZjgtMWU3YzY4YmZiZWZjLzAvNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRD NjU2RUI5QTYxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1TBk/o1GAf1YW9sn63IuAKeXnN8FYeDpbi 5gASJxSJyYFY8bqAL60+ActzoRTjShE8124cxGF3HU8HTQBEABtpUpDDKfhW8+Rt kjOysUwPv4CD1J6PNtjGyFtfpozVp6YO02YW6lDwCKcJ7rg6UCvWS64dBnj52pnV 7vgLuV6kHMvvv1tqkYC+/39aDj/75P/l4+YRCV5BoFjfzJ2RzFtfHuUTPtcFUHhq eFu9XyYNpHPCQiAeaMYOWR5pPanPKerNC730VLGcgNbo+Byh1ifFDWRUhB0IGiwo TNZSfKRmUqQVp7eUhs32VnK6tX46cnP5i51zvVfsmKNHYkAlmcI= -----END CERTIFICATE-----Generated at Thu Jul 24 23:40:50 2025 by rpki-client