$ rpki-client -vvf repo-rpki.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/D4171C4C06975A4309FC59F2D340D6801EC26DD1.mft File: D4171C4C06975A4309FC59F2D340D6801EC26DD1.mft (raw, json) Hash identifier: NLZFbxqa18I9vbfAJMHTd20M7sj64CL518nllp71jM8= Subject key identifier: 57:A4:12:E0:8B:8F:85:A6:E6:93:EF:02:0C:27:4E:44:14:40:1F:F6 Authority key identifier: D4:17:1C:4C:06:97:5A:43:09:FC:59:F2:D3:40:D6:80:1E:C2:6D:D1 Certificate issuer: /CN=D4171C4C06975A4309FC59F2D340D6801EC26DD1 Certificate serial: 600367A55CA4624B5223D4D479097814ECA776FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4171C4C06975A4309FC59F2D340D6801EC26DD1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/D4171C4C06975A4309FC59F2D340D6801EC26DD1.mft Manifest number: 01CA Signing time: Wed 04 Jun 2025 05:22:00 +0000 Manifest this update: Wed 04 Jun 2025 05:17:00 +0000 Manifest next update: Sat 07 Jun 2025 07:14:00 +0000 Files and hashes: 1: D4171C4C06975A4309FC59F2D340D6801EC26DD1.crl (hash: dgxDYBNDfuvtU2Y2CtjtLe4DJUeJ3vJaSTu/9n4FMRk=) 2: 3130332e3138362e3230342e302f32342d3234203d3e20313439373233.roa (hash: 6UhOGV8DI7PfyTejWhCSmpLpe0trLgn56lREPd3WDVA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/D4171C4C06975A4309FC59F2D340D6801EC26DD1.crl rsync://repo-rpki.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/D4171C4C06975A4309FC59F2D340D6801EC26DD1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4171C4C06975A4309FC59F2D340D6801EC26DD1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:03:67:a5:5c:a4:62:4b:52:23:d4:d4:79:09:78:14:ec:a7:76:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4171C4C06975A4309FC59F2D340D6801EC26DD1 Validity Not Before: Jun 4 05:17:00 2025 GMT Not After : Jun 7 07:14:00 2025 GMT Subject: CN=57A412E08B8F85A6E693EF020C274E4414401FF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d5:e2:70:71:89:4d:fa:3e:84:78:fb:e4:c6: e9:d3:1c:d4:9d:b8:86:38:75:0d:59:1c:c0:b9:5f: 7e:4f:c0:38:0e:8e:47:ae:c4:02:c4:ff:7d:ff:2b: b2:09:9a:43:ae:08:e8:62:8a:b2:8e:31:d3:0f:b3: 14:3e:eb:40:40:15:56:51:0a:f1:99:53:ee:c1:57: 79:59:fa:7b:01:06:1b:2f:23:e9:5c:31:82:dd:4d: 07:60:07:52:ec:d6:2c:4d:fe:04:b8:de:c5:37:ac: 9c:84:07:19:a3:f5:8d:d3:cf:a8:20:87:19:e1:57: 1b:0b:f0:ac:07:45:08:71:02:10:25:e8:37:2f:2b: 49:12:31:a7:a0:9f:76:10:06:08:3f:44:61:50:17: 58:22:a6:c4:10:79:a2:78:d7:19:98:98:08:d3:72: 04:01:62:75:63:c4:9f:3d:48:58:91:04:5a:ec:a5: a6:bc:8e:eb:17:47:17:1c:f0:27:43:e8:ee:78:02: c9:df:87:4d:0d:db:81:6b:1d:90:2b:3a:ec:b7:4d: 8d:53:e3:5b:7f:5c:4a:5f:a7:b0:d9:ed:2b:47:15: 9a:6a:79:32:42:ac:c5:33:ec:44:5b:fe:fc:55:5b: 8e:27:19:04:fd:bb:ab:78:ae:6b:76:7f:08:48:46: 6b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A4:12:E0:8B:8F:85:A6:E6:93:EF:02:0C:27:4E:44:14:40:1F:F6 X509v3 Authority Key Identifier: keyid:D4:17:1C:4C:06:97:5A:43:09:FC:59:F2:D3:40:D6:80:1E:C2:6D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/D4171C4C06975A4309FC59F2D340D6801EC26DD1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4171C4C06975A4309FC59F2D340D6801EC26DD1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/D4171C4C06975A4309FC59F2D340D6801EC26DD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:f7:8f:8f:74:4e:32:18:eb:9d:71:7a:50:6c:e8:33:a0:62: e8:02:2e:57:d7:f5:0d:d4:10:92:68:a8:f9:43:85:4f:b7:91: 0f:e7:e1:56:f8:fd:1f:58:27:61:fd:f7:81:54:87:7a:7e:e3: 86:ab:f5:86:69:7a:f7:4d:03:b0:08:cc:03:48:5d:6a:03:b3: ad:9f:74:90:44:90:11:08:62:86:98:0b:b8:6b:72:9b:83:aa: 7b:61:9a:6e:ef:69:65:9f:e9:05:27:3e:7a:dc:24:98:14:6b: 6d:81:e9:84:86:b5:88:3f:3d:0f:63:c5:d0:da:59:91:b4:1c: e1:f0:7b:5e:59:76:37:ba:76:a0:b3:0b:cc:08:08:29:4a:93: 83:53:3e:5a:57:7b:51:8a:88:0c:f4:75:ab:1f:89:06:b8:09: 89:7a:3d:99:94:62:b9:0d:c2:2e:3f:62:88:34:5d:3c:aa:4d: 26:c1:a6:2f:7d:5e:1f:4f:fc:d9:5e:a4:93:09:34:af:ce:27: 15:5c:35:e6:98:05:fd:36:37:7b:b1:86:63:a8:06:09:2f:a5: 5d:c2:7b:74:66:f6:c5:c6:15:3d:79:ef:a4:2f:63:6d:55:06: 21:f5:5d:d6:8d:62:4c:ed:fa:db:58:ae:bc:a9:eb:ef:49:25: 02:e9:a9:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYANnpVykYktSI9TUeQl4FOyndv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQxNzFDNEMwNjk3NUE0MzA5RkM1OUYyRDM0MEQ2ODAx RUMyNkREMTAeFw0yNTA2MDQwNTE3MDBaFw0yNTA2MDcwNzE0MDBaMDMxMTAvBgNV BAMTKDU3QTQxMkUwOEI4Rjg1QTZFNjkzRUYwMjBDMjc0RTQ0MTQ0MDFGRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk1eJwcYlN+j6EePvkxunTHNSd uIY4dQ1ZHMC5X35PwDgOjkeuxALE/33/K7IJmkOuCOhiirKOMdMPsxQ+60BAFVZR CvGZU+7BV3lZ+nsBBhsvI+lcMYLdTQdgB1Ls1ixN/gS43sU3rJyEBxmj9Y3Tz6gg hxnhVxsL8KwHRQhxAhAl6DcvK0kSMaegn3YQBgg/RGFQF1gipsQQeaJ41xmYmAjT cgQBYnVjxJ89SFiRBFrspaa8jusXRxcc8CdD6O54Asnfh00N24FrHZArOuy3TY1T 41t/XEpfp7DZ7StHFZpqeTJCrMUz7ERb/vxVW44nGQT9u6t4rmt2fwhIRmuNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV6QS4IuPhabmk+8CDCdORBRAH/YwHwYDVR0j BBgwFoAU1BccTAaXWkMJ/Fny00DWgB7CbdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NzY4MGQwZC1lMjQwLTRhYWYtYmMyMy0yODIzNTkzNzMyODkvMC9ENDE3MUM0QzA2 OTc1QTQzMDlGQzU5RjJEMzQwRDY4MDFFQzI2REQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQxNzFDNEMwNjk3NUE0MzA5RkM1OUYyRDM0MEQ2ODAxRUMy NkREMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDc2ODBkMGQtZTI0MC00YWFmLWJj MjMtMjgyMzU5MzczMjg5LzAvRDQxNzFDNEMwNjk3NUE0MzA5RkM1OUYyRDM0MEQ2 ODAxRUMyNkREMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH73j490TjIY651xelBs6DOgYugCLlfX9Q3U EJJoqPlDhU+3kQ/n4Vb4/R9YJ2H994FUh3p+44ar9YZpevdNA7AIzANIXWoDs62f dJBEkBEIYoaYC7hrcpuDqnthmm7vaWWf6QUnPnrcJJgUa22B6YSGtYg/PQ9jxdDa WZG0HOHwe15Zdje6dqCzC8wICClKk4NTPlpXe1GKiAz0dasfiQa4CYl6PZmUYrkN wi4/Yog0XTyqTSbBpi99Xh9P/NlepJMJNK/OJxVcNeaYBf02N3uxhmOoBgkvpV3C e3Rm9sXGFT1576QvY21VBiH1XdaNYkzt+ttYrryp6+9JJQLpqSI= -----END CERTIFICATE-----Generated at Thu Jun 5 18:39:51 2025 by rpki-client