$ rpki-client -vvf repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft File: 5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft (raw, json) Hash identifier: yMvLAeCLWkaKfQ0vZ899yzX83rkP/ZPHUu7mIKvLoR8= Subject key identifier: C4:F9:22:A3:0D:48:43:60:5B:BC:F2:D1:D1:12:3B:EA:C9:DD:A6:F0 Authority key identifier: 51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 Certificate issuer: /CN=5131743F5E95BB0AD5AE61B0BDC1884C1021B476 Certificate serial: 407E0844C7A374ADBE9C35D484AB6B2788BA09BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft Manifest number: A9 Signing time: Thu 05 Jun 2025 18:41:57 +0000 Manifest this update: Thu 05 Jun 2025 18:36:57 +0000 Manifest next update: Mon 09 Jun 2025 02:20:57 +0000 Files and hashes: 1: 5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl (hash: +ABxzLp68a/QnECXuNJaDF6IC6YALXK6XSLjqs2IpF0=) 2: 3135372e36362e35362e302f32342d3234203d3e203538343737.roa (hash: mNyigsx6fiPTgdjz6nFdMMBq/cl8SacZCUjTw8QheXg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 02:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:7e:08:44:c7:a3:74:ad:be:9c:35:d4:84:ab:6b:27:88:ba:09:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5131743F5E95BB0AD5AE61B0BDC1884C1021B476 Validity Not Before: Jun 5 18:36:57 2025 GMT Not After : Jun 9 02:20:57 2025 GMT Subject: CN=C4F922A30D4843605BBCF2D1D1123BEAC9DDA6F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b1:13:3f:76:16:79:70:bb:65:36:46:52:fb: 9c:5c:38:40:00:b8:c7:a2:1a:dc:87:74:99:41:66: ff:29:bf:31:b8:19:b0:80:5e:36:d0:0b:9d:d8:61: ab:31:32:0a:d4:54:d8:68:b1:2a:ec:39:b2:38:52: fe:b6:b4:3a:28:3d:6e:7f:5b:2c:41:4d:3e:56:17: fb:73:2b:0c:e6:eb:e4:89:7a:df:a5:e0:b5:63:47: 86:51:cd:58:33:07:9d:7e:07:45:f4:b2:87:fd:83: 08:b1:74:c0:28:7d:16:85:0f:d2:e7:68:48:5d:a3: 38:3e:c9:0b:ea:0d:14:6c:e0:b3:5d:76:d5:d6:6f: b3:0e:f4:09:50:d9:98:3d:f2:d1:4b:b5:36:77:ac: e4:c3:24:a8:d8:fd:01:e0:93:92:4d:6c:52:4f:a4: 30:80:8e:04:6f:d9:52:85:65:6e:9f:59:3b:8f:0a: 39:57:62:60:ca:3f:7c:44:09:e9:56:a4:14:c3:d1: 3e:f1:ff:e4:52:63:b4:24:e9:2e:78:73:e5:b6:b0: 53:75:2d:2d:95:57:69:19:15:d9:ab:f6:d4:12:a9: ef:98:6e:f7:72:fc:da:35:49:22:31:0c:65:cd:d0: 1f:c7:cf:ea:ff:19:d1:ad:0f:75:4c:dd:46:25:38: c8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F9:22:A3:0D:48:43:60:5B:BC:F2:D1:D1:12:3B:EA:C9:DD:A6:F0 X509v3 Authority Key Identifier: keyid:51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:77:2c:57:82:1e:6d:b8:02:4b:1f:a1:68:10:29:03:fc:c0: a2:1d:0e:4e:e1:aa:f3:e5:b0:c8:56:8d:7e:1a:09:b7:ca:c4: f5:62:6f:6a:ef:a0:c6:bb:e3:12:cb:0b:de:05:c9:b1:8f:3b: 22:eb:2d:98:89:9a:b5:0b:4a:a5:19:00:f8:55:c1:dc:fd:21: 9f:ee:e5:f6:99:09:6e:a3:d6:79:ce:27:b4:0f:2c:f5:06:89: 45:a0:7b:4e:6c:ba:1b:2e:24:b7:07:14:3b:6b:77:54:cc:06: 75:39:41:c6:a6:0d:fd:d2:19:97:54:35:23:98:83:92:0b:2a: 0b:c0:16:53:eb:99:d4:ce:48:75:93:41:1b:5f:35:61:71:3c: 26:f8:8a:db:52:c3:fd:3f:24:8d:2b:9c:14:f5:54:2b:b7:b9: 92:e5:c0:18:04:8f:45:9e:1f:1a:51:f3:b7:a2:8e:85:a8:54: 06:5b:c3:9f:65:c5:e2:11:71:68:a5:af:23:ba:52:d4:fe:1e: 58:a2:c4:09:45:f4:3f:94:69:56:17:79:4f:88:66:5f:db:92: b3:da:7c:fe:60:71:8f:e3:56:a4:ca:76:90:d2:66:ed:95:99: e1:e4:f8:0e:66:e6:ec:48:b1:5d:ec:4c:c0:f9:6f:7f:1b:85: d8:29:af:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQH4IRMejdK2+nDXUhKtrJ4i6CbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4NEMx MDIxQjQ3NjAeFw0yNTA2MDUxODM2NTdaFw0yNTA2MDkwMjIwNTdaMDMxMTAvBgNV BAMTKEM0RjkyMkEzMEQ0ODQzNjA1QkJDRjJEMUQxMTIzQkVBQzlEREE2RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCksRM/dhZ5cLtlNkZS+5xcOEAA uMeiGtyHdJlBZv8pvzG4GbCAXjbQC53YYasxMgrUVNhosSrsObI4Uv62tDooPW5/ WyxBTT5WF/tzKwzm6+SJet+l4LVjR4ZRzVgzB51+B0X0sof9gwixdMAofRaFD9Ln aEhdozg+yQvqDRRs4LNddtXWb7MO9AlQ2Zg98tFLtTZ3rOTDJKjY/QHgk5JNbFJP pDCAjgRv2VKFZW6fWTuPCjlXYmDKP3xECelWpBTD0T7x/+RSY7Qk6S54c+W2sFN1 LS2VV2kZFdmr9tQSqe+Ybvdy/No1SSIxDGXN0B/Hz+r/GdGtD3VM3UYlOMilAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxPkiow1IQ2BbvPLR0RI76sndpvAwHwYDVR0j BBgwFoAUUTF0P16VuwrVrmGwvcGITBAhtHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDc1NTM0Ny02YjFjLTQyYzEtOWY1NC1kN2VhYjIyZTE4MmMvMC81MTMxNzQzRjVF OTVCQjBBRDVBRTYxQjBCREMxODg0QzEwMjFCNDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4NEMxMDIx QjQ3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQ3NTUzNDctNmIxYy00MmMxLTlm NTQtZDdlYWIyMmUxODJjLzAvNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4 NEMxMDIxQjQ3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMd3LFeCHm24AksfoWgQKQP8wKIdDk7hqvPl sMhWjX4aCbfKxPVib2rvoMa74xLLC94FybGPOyLrLZiJmrULSqUZAPhVwdz9IZ/u 5faZCW6j1nnOJ7QPLPUGiUWge05suhsuJLcHFDtrd1TMBnU5QcamDf3SGZdUNSOY g5ILKgvAFlPrmdTOSHWTQRtfNWFxPCb4ittSw/0/JI0rnBT1VCu3uZLlwBgEj0We HxpR87eijoWoVAZbw59lxeIRcWilryO6UtT+HliixAlF9D+UaVYXeU+IZl/bkrPa fP5gcY/jVqTKdpDSZu2VmeHk+A5m5uxIsV3sTMD5b38bhdgpr/Q= -----END CERTIFICATE-----Generated at Sun Jun 8 02:00:53 2025 by rpki-client