$ rpki-client -vvf repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft File: 571E2EFA23FEA611810611410635E23A090F4550.mft (raw, json) Hash identifier: mghRxXfLE1a28JwqPusbBlr6t+Sh5TEDsGsLY5aS6Jc= Subject key identifier: 38:99:6F:FF:9C:00:FB:9D:9F:D0:47:CE:FC:55:5C:5E:93:70:81:42 Authority key identifier: 57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50 Certificate issuer: /CN=571E2EFA23FEA611810611410635E23A090F4550 Certificate serial: 36B9D39E9550BBD558EAFA4754750401972D22CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft Manifest number: 04F1 Signing time: Fri 06 Jun 2025 05:42:10 +0000 Manifest this update: Fri 06 Jun 2025 05:37:10 +0000 Manifest next update: Mon 09 Jun 2025 07:46:10 +0000 Files and hashes: 1: 571E2EFA23FEA611810611410635E23A090F4550.crl (hash: 0nxj9u5HlbvXsA/tNijL7sp+ei9bf5n+nfckEwfRnOY=) 2: 3130332e3135352e36342e302f32332d3233203d3e20313432333831.roa (hash: YxNi6/uAllHxRs/TmMjIhKw+j/AevGbXCAwCtWlO7/Y=) 3: 3130332e3135352e36342e302f32342d3234203d3e20313432333831.roa (hash: oMW/juSzl+5S8B2tH+GiR7KV/7mKnJINuimdyFIaiWU=) 4: 3130332e3135352e36352e302f32342d3234203d3e20313431363231.roa (hash: CeAdG0+iQqX7R4GwVIJ8BeduoZGnHUGjqn0LAsOfmaQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 07:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:b9:d3:9e:95:50:bb:d5:58:ea:fa:47:54:75:04:01:97:2d:22:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=571E2EFA23FEA611810611410635E23A090F4550 Validity Not Before: Jun 6 05:37:10 2025 GMT Not After : Jun 9 07:46:10 2025 GMT Subject: CN=38996FFF9C00FB9D9FD047CEFC555C5E93708142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c2:55:51:e5:67:8e:80:e9:2a:d0:eb:46:02: f8:0a:64:71:38:f2:62:8e:b3:8b:d5:05:c8:b1:a1: a1:e1:10:db:41:ff:89:51:93:96:35:a2:f6:f4:16: 4f:71:71:45:a4:c7:bf:a1:41:67:7e:fa:c8:67:17: cb:de:f5:8e:58:95:8c:fc:9e:99:07:c5:ea:b8:cd: 88:f6:5b:83:fe:30:be:d2:56:0e:4f:29:49:80:43: fc:84:79:98:27:22:a3:e6:55:0c:e9:fd:e1:97:39: 48:cf:2e:90:23:35:a0:32:cd:25:c0:e1:84:ce:72: ad:ec:c8:9c:e2:7d:f4:d7:f3:57:ea:7d:4c:d8:d9: 81:08:b9:9f:b3:4e:47:23:0b:d6:80:d2:09:63:97: b4:36:80:ad:af:cb:e7:58:0a:72:83:39:ed:ab:91: b1:78:4b:72:65:c3:1f:39:be:d2:90:a9:6a:6f:13: 7d:ad:5a:e9:9d:59:98:10:db:3d:65:d8:f9:12:05: d3:3c:ec:9a:e3:1e:cb:f2:6f:5e:84:dc:f0:cd:a9: fe:9b:d2:2e:c6:b4:15:2d:d6:d8:cb:6c:9c:55:ab: 9b:f4:4e:2b:76:5c:03:09:5f:d1:8d:4e:69:a4:34: 38:cb:e7:c0:1d:cc:29:b5:dc:93:f9:2c:15:33:39: aa:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:99:6F:FF:9C:00:FB:9D:9F:D0:47:CE:FC:55:5C:5E:93:70:81:42 X509v3 Authority Key Identifier: keyid:57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:c2:8b:25:35:05:78:33:70:9c:20:0f:73:8d:68:e0:b5:73: 38:37:c2:56:8c:8c:2d:d6:32:ce:17:49:46:8e:ee:5f:59:c1: 25:2b:68:a8:c3:51:00:3b:83:b0:ad:52:50:45:25:80:71:bf: d1:10:66:11:d5:ca:48:03:2c:dc:ba:5e:bc:12:72:62:ff:17: 64:bc:02:f8:41:42:46:fe:ab:0b:b2:d4:1b:75:75:1b:fb:4b: c5:97:85:d0:95:c4:7e:59:5b:6f:b0:ba:e5:95:3f:0e:96:ef: 08:c1:ee:59:b1:85:6c:a3:5d:ff:cb:04:ea:f1:69:78:8b:d8: cf:5e:bc:97:1f:55:4b:45:28:67:8c:b1:ef:49:7b:50:18:23: 2f:13:5f:ec:f8:ba:0c:ea:d0:26:19:a1:b4:d6:e0:b5:9e:ee: df:86:4e:d2:8a:60:04:94:c0:8a:03:56:9e:b8:93:df:09:af: 00:f6:b9:7c:36:d1:22:03:fd:e6:59:ae:e0:d3:66:59:58:53: df:d6:e7:d5:e4:e1:0c:1b:49:79:f2:01:25:ca:00:34:f2:1a: 7a:b7:73:b2:9a:0d:17:d8:18:6d:b0:bb:53:15:a7:73:10:8c: 93:54:35:ff:09:ed:2a:4e:1b:18:e0:b6:69:9f:fd:1d:f7:08: 04:b7:dd:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNrnTnpVQu9VY6vpHVHUEAZctIs4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTcxRTJFRkEyM0ZFQTYxMTgxMDYxMTQxMDYzNUUyM0Ew OTBGNDU1MDAeFw0yNTA2MDYwNTM3MTBaFw0yNTA2MDkwNzQ2MTBaMDMxMTAvBgNV BAMTKDM4OTk2RkZGOUMwMEZCOUQ5RkQwNDdDRUZDNTU1QzVFOTM3MDgxNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMwlVR5WeOgOkq0OtGAvgKZHE4 8mKOs4vVBcixoaHhENtB/4lRk5Y1ovb0Fk9xcUWkx7+hQWd++shnF8ve9Y5YlYz8 npkHxeq4zYj2W4P+ML7SVg5PKUmAQ/yEeZgnIqPmVQzp/eGXOUjPLpAjNaAyzSXA 4YTOcq3syJziffTX81fqfUzY2YEIuZ+zTkcjC9aA0gljl7Q2gK2vy+dYCnKDOe2r kbF4S3Jlwx85vtKQqWpvE32tWumdWZgQ2z1l2PkSBdM87JrjHsvyb16E3PDNqf6b 0i7GtBUt1tjLbJxVq5v0Tit2XAMJX9GNTmmkNDjL58AdzCm13JP5LBUzOarVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOJlv/5wA+52f0EfO/FVcXpNwgUIwHwYDVR0j BBgwFoAUVx4u+iP+phGBBhFBBjXiOgkPRVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTY0YWJmYi0xOTYyLTQ0YTktODM3Ni1jYmZiMWVmY2RhYmEvMC81NzFFMkVGQTIz RkVBNjExODEwNjExNDEwNjM1RTIzQTA5MEY0NTUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTcxRTJFRkEyM0ZFQTYxMTgxMDYxMTQxMDYzNUUyM0EwOTBG NDU1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU2NGFiZmItMTk2Mi00NGE5LTgz NzYtY2JmYjFlZmNkYWJhLzAvNTcxRTJFRkEyM0ZFQTYxMTgxMDYxMTQxMDYzNUUy M0EwOTBGNDU1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ3CiyU1BXgzcJwgD3ONaOC1czg3wlaMjC3W Ms4XSUaO7l9ZwSUraKjDUQA7g7CtUlBFJYBxv9EQZhHVykgDLNy6XrwScmL/F2S8 AvhBQkb+qwuy1Bt1dRv7S8WXhdCVxH5ZW2+wuuWVPw6W7wjB7lmxhWyjXf/LBOrx aXiL2M9evJcfVUtFKGeMse9Je1AYIy8TX+z4ugzq0CYZobTW4LWe7t+GTtKKYASU wIoDVp64k98JrwD2uXw20SID/eZZruDTZllYU9/W59Xk4QwbSXnyASXKADTyGnq3 c7KaDRfYGG2wu1MVp3MQjJNUNf8J7SpOGxjgtmmf/R33CAS33cA= -----END CERTIFICATE-----Generated at Sun Jun 8 06:41:13 2025 by rpki-client