$ rpki-client -vvf repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft File: D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft (raw, json) Hash identifier: Dqtzu0kUJqgS4L9e41AiUYh6Oth7f70+IK2+OJyjKuQ= Subject key identifier: 58:43:B0:B2:56:82:4E:00:33:79:7B:C9:3E:D9:A8:2A:ED:3E:F3:D1 Authority key identifier: D5:C9:29:9A:E0:0F:00:35:70:4B:10:A8:43:10:B3:C3:DA:D9:BE:19 Certificate issuer: /CN=D5C9299AE00F0035704B10A84310B3C3DAD9BE19 Certificate serial: 20797E94BA0AFA662842661576157CEC89CCDEC3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft Manifest number: AF Signing time: Fri 06 Jun 2025 20:22:23 +0000 Manifest this update: Fri 06 Jun 2025 20:17:23 +0000 Manifest next update: Tue 10 Jun 2025 02:29:23 +0000 Files and hashes: 1: 3130332e3136302e3230312e302f32342d3234203d3e20313431363030.roa (hash: K3ZH6ZIWAcw45r2g/qdIM9HAVNibF7452ItmA+/7HTE=) 2: D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl (hash: 3/LEghYzzCgYWHYo3VNgr6M/Y0DVIuSxKarHGp6asEc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 02:29:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:79:7e:94:ba:0a:fa:66:28:42:66:15:76:15:7c:ec:89:cc:de:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5C9299AE00F0035704B10A84310B3C3DAD9BE19 Validity Not Before: Jun 6 20:17:23 2025 GMT Not After : Jun 10 02:29:23 2025 GMT Subject: CN=5843B0B256824E0033797BC93ED9A82AED3EF3D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a1:9f:b5:96:12:95:d5:50:87:33:7e:c1:99: 2d:ef:81:2b:be:0c:89:a6:1c:f2:cf:65:eb:93:33: e2:61:93:49:2a:74:c0:02:19:4c:a3:fc:df:4c:22: d4:8e:1b:eb:55:d8:0c:04:23:e7:8d:d1:74:f7:1e: 29:44:f2:f2:9a:e4:25:ea:92:e9:2d:cd:90:e8:10: cb:d6:d9:67:7b:6e:71:de:01:db:8e:51:b7:f6:15: be:c7:9e:e1:70:b8:e6:16:c3:a3:cc:be:03:dc:95: 91:e2:34:e8:93:53:ed:bd:b0:9c:69:9b:aa:49:2d: ba:c8:83:ab:d4:91:a1:64:f3:f1:de:42:12:8f:13: e2:57:6c:22:9b:5a:cb:fe:41:af:76:15:dd:bc:c3: 00:af:7c:07:99:08:4a:ca:d3:c8:e0:a0:23:45:6c: 0b:fd:78:31:e3:cc:ed:8f:ca:a8:39:43:48:17:c3: ec:d4:fb:9a:16:f8:c1:c8:98:0d:c3:93:37:33:65: cc:4b:32:85:e2:70:db:dc:04:a9:e1:23:8a:28:15: cc:bb:a3:d7:d2:b0:2f:62:90:aa:db:d9:ed:d8:c5: 77:f8:db:a7:0e:c2:dd:d2:d3:60:9e:49:36:74:db: 5c:6c:81:00:9f:0c:8c:7e:53:4f:c1:13:75:92:16: 35:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:43:B0:B2:56:82:4E:00:33:79:7B:C9:3E:D9:A8:2A:ED:3E:F3:D1 X509v3 Authority Key Identifier: keyid:D5:C9:29:9A:E0:0F:00:35:70:4B:10:A8:43:10:B3:C3:DA:D9:BE:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:37:f9:c3:3b:99:87:24:da:d1:c9:16:14:61:01:bb:a0:21: 38:31:19:94:7e:7d:e4:4d:08:2f:2b:2a:b8:4c:00:19:e8:86: 20:5f:f1:d7:38:32:f0:78:80:14:94:50:2c:83:00:bd:14:a6: 84:5b:68:0d:98:c9:16:4c:c0:27:36:e2:2a:d3:5f:e5:cc:c4: 89:05:82:97:76:42:a9:bc:1c:8f:62:29:b4:1d:f8:7e:10:b8: 98:73:2a:36:9b:94:3c:7c:16:41:a3:7c:4d:96:aa:9f:80:ef: fe:41:78:f2:a9:33:2b:a3:cc:25:31:86:00:db:31:be:1e:96: 85:21:5f:7a:ab:99:fb:2c:1f:b5:a5:15:02:d4:5a:07:d4:04: 0c:c0:34:70:21:30:54:c4:61:e6:f9:8a:10:cb:e8:60:24:87: 06:1b:ec:3a:61:d8:60:21:31:53:f4:c3:c9:04:2b:08:e6:00: e8:71:dd:09:ae:6c:c7:03:6b:23:dc:d5:0a:92:10:31:be:10: 87:fe:1d:9c:dd:38:d4:93:19:04:54:08:85:92:d7:ac:89:7d: 3a:27:b2:58:05:c0:5f:3a:a6:9d:3a:ea:cb:cd:f9:c6:df:73: 20:7f:79:8f:dc:c2:f6:63:e2:98:8f:59:99:63:ea:b2:35:c5: ad:6e:ea:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIHl+lLoK+mYoQmYVdhV87InM3sMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIzQzNE QUQ5QkUxOTAeFw0yNTA2MDYyMDE3MjNaFw0yNTA2MTAwMjI5MjNaMDMxMTAvBgNV BAMTKDU4NDNCMEIyNTY4MjRFMDAzMzc5N0JDOTNFRDlBODJBRUQzRUYzRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDoZ+1lhKV1VCHM37BmS3vgSu+ DImmHPLPZeuTM+Jhk0kqdMACGUyj/N9MItSOG+tV2AwEI+eN0XT3HilE8vKa5CXq kuktzZDoEMvW2Wd7bnHeAduOUbf2Fb7HnuFwuOYWw6PMvgPclZHiNOiTU+29sJxp m6pJLbrIg6vUkaFk8/HeQhKPE+JXbCKbWsv+Qa92Fd28wwCvfAeZCErK08jgoCNF bAv9eDHjzO2Pyqg5Q0gXw+zU+5oW+MHImA3DkzczZcxLMoXicNvcBKnhI4ooFcy7 o9fSsC9ikKrb2e3YxXf426cOwt3S02CeSTZ021xsgQCfDIx+U0/BE3WSFjWRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWEOwslaCTgAzeXvJPtmoKu0+89EwHwYDVR0j BBgwFoAU1ckpmuAPADVwSxCoQxCzw9rZvhkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTQ0ZDk3YS1lM2ZiLTRmZmMtYjdmNy1mN2I4YjY2NTlhYzQvMS9ENUM5Mjk5QUUw MEYwMDM1NzA0QjEwQTg0MzEwQjNDM0RBRDlCRTE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIzQzNEQUQ5 QkUxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3 ZjctZjdiOGI2NjU5YWM0LzEvRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIz QzNEQUQ5QkUxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADY3+cM7mYck2tHJFhRhAbugITgxGZR+feRN CC8rKrhMABnohiBf8dc4MvB4gBSUUCyDAL0UpoRbaA2YyRZMwCc24irTX+XMxIkF gpd2Qqm8HI9iKbQd+H4QuJhzKjablDx8FkGjfE2Wqp+A7/5BePKpMyujzCUxhgDb Mb4eloUhX3qrmfssH7WlFQLUWgfUBAzANHAhMFTEYeb5ihDL6GAkhwYb7Dph2GAh MVP0w8kEKwjmAOhx3QmubMcDayPc1QqSEDG+EIf+HZzdONSTGQRUCIWS16yJfTon slgFwF86pp066svN+cbfcyB/eY/cwvZj4piPWZlj6rI1xa1u6vE= -----END CERTIFICATE-----Generated at Sat Jun 7 22:01:03 2025 by rpki-client