$ rpki-client -vvf repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft File: 732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft (raw, json) Hash identifier: vGnQ5x8pt6WGhGGEGVeL1BzNXsz6vKCGzMEDBX4dGd4= Subject key identifier: A2:A4:55:EF:ED:18:CC:27:2C:12:24:7C:A1:80:39:DC:57:A3:EB:E5 Authority key identifier: 73:2F:46:D7:4C:7A:8C:5D:88:8A:70:91:A7:06:F3:A0:9E:FE:96:A3 Certificate issuer: /CN=732F46D74C7A8C5D888A7091A706F3A09EFE96A3 Certificate serial: 564CC4FBA9BC0D035C47E7D52AA7FC3131A42F63 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft Manifest number: 025A Signing time: Tue 03 Jun 2025 22:12:21 +0000 Manifest this update: Tue 03 Jun 2025 22:07:21 +0000 Manifest next update: Sat 07 Jun 2025 00:32:21 +0000 Files and hashes: 1: 732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl (hash: 7c7zGAJSq6+/jlvvHwevN73KZg1FM5uOnqi5Vc+vWYM=) 2: 3230322e3138332e302e302f31392d3139203d3e203338313630.roa (hash: MEztuZqZgD3unDvE9UbT7j2miLRVC0ZWnvrCm6yOt54=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:32:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:4c:c4:fb:a9:bc:0d:03:5c:47:e7:d5:2a:a7:fc:31:31:a4:2f:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=732F46D74C7A8C5D888A7091A706F3A09EFE96A3 Validity Not Before: Jun 3 22:07:21 2025 GMT Not After : Jun 7 00:32:21 2025 GMT Subject: CN=A2A455EFED18CC272C12247CA18039DC57A3EBE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:78:01:31:40:b4:33:98:38:58:8f:f1:b8:6e: e2:38:b7:03:3e:34:b1:41:7b:53:a5:cf:1b:fd:8f: 3a:d4:1c:80:ca:8d:10:ac:b0:7a:e8:1f:4f:ac:f2: ea:1c:d1:10:41:bf:c0:f6:e6:1d:8c:50:97:b6:6f: bd:03:1b:89:8a:85:67:02:9c:5c:fd:c3:f4:99:03: fa:3d:04:e9:d8:7f:8f:90:4f:49:27:1f:13:02:65: d7:ff:5f:76:ee:3d:69:7d:45:50:7d:ba:55:27:9a: 8e:82:2e:13:2d:07:d9:c1:1b:0a:92:00:3a:d8:26: 3f:36:d1:d3:43:d8:8c:33:8d:63:72:8e:03:dc:c8: 52:c9:71:9a:2f:ee:02:fd:3c:ed:4f:49:53:27:8f: 86:7a:24:e0:ae:ea:0d:4b:73:85:5a:32:b5:65:43: 68:81:ff:39:65:de:70:a4:55:5f:67:84:4d:82:c2: 16:fb:24:e8:c5:c6:ff:00:07:cc:d3:ee:68:40:f5: 59:c9:b4:c4:a7:98:57:88:8c:58:29:c1:0c:62:f3: 8f:4b:7e:31:95:43:23:2d:a5:8c:bb:8b:d0:67:a7: 1b:fa:51:84:41:5d:94:4d:f3:46:34:a9:bb:5f:1d: 50:8a:b1:eb:6c:32:45:a5:61:68:37:24:69:83:2d: a4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A4:55:EF:ED:18:CC:27:2C:12:24:7C:A1:80:39:DC:57:A3:EB:E5 X509v3 Authority Key Identifier: keyid:73:2F:46:D7:4C:7A:8C:5D:88:8A:70:91:A7:06:F3:A0:9E:FE:96:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:31:90:18:a7:a6:c1:15:95:33:33:ac:17:26:98:cd:b5:dd: 9a:0d:c5:4b:8c:0b:b4:d8:54:13:57:c0:43:af:b7:98:89:b9: 74:3f:20:30:4b:11:a4:f5:ee:5f:26:1d:89:67:20:62:2a:ce: 4c:9f:07:73:a7:89:b6:13:cb:e8:73:ba:be:02:e4:49:72:eb: 82:0b:43:57:86:6c:89:b8:68:c1:0a:40:97:8c:06:6a:26:10: ba:7e:3e:84:41:bf:68:9d:06:5f:4f:3f:63:ce:11:76:50:65: 2b:41:21:b2:09:c0:45:a4:be:da:af:d5:cf:fd:1b:b6:6d:5e: 55:46:cb:32:96:5d:ca:88:ee:c7:7e:e3:a2:bf:20:3a:ac:4d: bb:e5:7a:24:d8:a9:d0:03:d4:71:ee:fc:85:a4:f5:5d:fc:c1: 33:f8:f9:f6:91:5f:16:f9:35:94:ec:b6:0a:33:06:b1:92:f7: e0:0c:3f:d9:79:ba:60:6d:d7:2e:3e:50:59:af:7a:d9:33:c6: d2:4e:0a:03:eb:b5:89:58:f1:ae:23:1c:44:d2:6d:69:59:a9: 40:a8:d6:3e:3b:8b:d1:32:9b:53:8e:da:66:52:9e:36:0b:45: 89:35:77:78:c0:a3:4f:ba:47:e2:dd:65:02:83:a0:50:4e:90: 69:29:a3:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVkzE+6m8DQNcR+fVKqf8MTGkL2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMyRjQ2RDc0QzdBOEM1RDg4OEE3MDkxQTcwNkYzQTA5 RUZFOTZBMzAeFw0yNTA2MDMyMjA3MjFaFw0yNTA2MDcwMDMyMjFaMDMxMTAvBgNV BAMTKEEyQTQ1NUVGRUQxOENDMjcyQzEyMjQ3Q0ExODAzOURDNTdBM0VCRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxeAExQLQzmDhYj/G4buI4twM+ NLFBe1Olzxv9jzrUHIDKjRCssHroH0+s8uoc0RBBv8D25h2MUJe2b70DG4mKhWcC nFz9w/SZA/o9BOnYf4+QT0knHxMCZdf/X3buPWl9RVB9ulUnmo6CLhMtB9nBGwqS ADrYJj820dND2IwzjWNyjgPcyFLJcZov7gL9PO1PSVMnj4Z6JOCu6g1Lc4VaMrVl Q2iB/zll3nCkVV9nhE2Cwhb7JOjFxv8AB8zT7mhA9VnJtMSnmFeIjFgpwQxi849L fjGVQyMtpYy7i9Bnpxv6UYRBXZRN80Y0qbtfHVCKsetsMkWlYWg3JGmDLaSxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoqRV7+0YzCcsEiR8oYA53Fej6+UwHwYDVR0j BBgwFoAUcy9G10x6jF2IinCRpwbzoJ7+lqMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTBkMWFhMS00YzdmLTQ0OGItYjJiYi0wMmM1NzE1MWYyMTAvMC83MzJGNDZENzRD N0E4QzVEODg4QTcwOTFBNzA2RjNBMDlFRkU5NkEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzMyRjQ2RDc0QzdBOEM1RDg4OEE3MDkxQTcwNkYzQTA5RUZF OTZBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUwZDFhYTEtNGM3Zi00NDhiLWIy YmItMDJjNTcxNTFmMjEwLzAvNzMyRjQ2RDc0QzdBOEM1RDg4OEE3MDkxQTcwNkYz QTA5RUZFOTZBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFsxkBinpsEVlTMzrBcmmM213ZoNxUuMC7TY VBNXwEOvt5iJuXQ/IDBLEaT17l8mHYlnIGIqzkyfB3OnibYTy+hzur4C5Ely64IL Q1eGbIm4aMEKQJeMBmomELp+PoRBv2idBl9PP2POEXZQZStBIbIJwEWkvtqv1c/9 G7ZtXlVGyzKWXcqI7sd+46K/IDqsTbvleiTYqdAD1HHu/IWk9V38wTP4+faRXxb5 NZTstgozBrGS9+AMP9l5umBt1y4+UFmvetkzxtJOCgPrtYlY8a4jHETSbWlZqUCo 1j47i9Eym1OO2mZSnjYLRYk1d3jAo0+6R+LdZQKDoFBOkGkpo/w= -----END CERTIFICATE-----Generated at Thu Jun 5 18:15:01 2025 by rpki-client