$ rpki-client -vvf repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft File: D296B71263A794DB76A99329A0A6CD91F03F997C.mft (raw, json) Hash identifier: RuUKblMfseuC0m36kVZrQT7VsVFMLvXtoeXu23RMB98= Subject key identifier: 01:42:84:93:A3:9A:29:75:E8:C5:3E:E6:C1:F4:9A:49:7B:33:3F:47 Authority key identifier: D2:96:B7:12:63:A7:94:DB:76:A9:93:29:A0:A6:CD:91:F0:3F:99:7C Certificate issuer: /CN=D296B71263A794DB76A99329A0A6CD91F03F997C Certificate serial: 5C34B22B9C99A3AEDC178C27369F463EF7AC71B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft Manifest number: 04DA Signing time: Wed 04 Jun 2025 02:30:03 +0000 Manifest this update: Wed 04 Jun 2025 02:25:03 +0000 Manifest next update: Sat 07 Jun 2025 13:18:03 +0000 Files and hashes: 1: 3230332e3230372e35322e302f32322d3234203d3e203138333531.roa (hash: GkkNG9FcAuiztsaFs7LArOPHFVmugjMRyr9b42+liyc=) 2: D296B71263A794DB76A99329A0A6CD91F03F997C.crl (hash: yq8Wqic9VH6wFlV2DcmsjU6amOWp4sLgm0ARoO6v7d0=) 3: 3130332e3233312e3130382e302f32322d3234203d3e203138333531.roa (hash: H/9gUkMoKOxaM6bJMIhdfazqxPd02FQG7yEvZqg/6f4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.crl rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 13:18:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:34:b2:2b:9c:99:a3:ae:dc:17:8c:27:36:9f:46:3e:f7:ac:71:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D296B71263A794DB76A99329A0A6CD91F03F997C Validity Not Before: Jun 4 02:25:03 2025 GMT Not After : Jun 7 13:18:03 2025 GMT Subject: CN=01428493A39A2975E8C53EE6C1F49A497B333F47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:43:73:9f:23:c9:6a:5e:96:ca:b6:0c:8e:d2: 1d:0f:a3:11:b7:b5:3d:5b:25:30:0b:c2:ec:e7:b2: 27:cb:47:d4:a6:de:8e:00:22:45:3f:21:e1:75:f9: 3a:76:6b:20:59:11:a5:99:bf:2d:0b:68:e2:16:ba: 83:ab:76:5d:b7:e5:42:47:4f:d7:ba:17:50:72:f2: 78:9e:1c:74:fa:3a:bf:ab:9b:7f:4d:71:ad:11:8e: ce:3e:f9:26:03:74:41:0e:10:91:42:c8:53:3b:8f: c8:e1:9a:ef:c9:61:ba:c4:58:ab:5a:91:ca:ec:bc: 71:e0:75:ec:d2:59:f8:f4:f4:43:a7:8c:b7:8d:51: cd:c1:ca:fe:14:cd:6c:50:dc:c1:1d:3f:2c:c3:f0: cf:1e:64:4b:8e:c0:e3:d7:61:4b:78:bc:56:7f:f4: 69:04:2e:48:b6:5f:75:b4:27:2a:77:5c:46:f9:6a: eb:9e:ec:f1:43:e1:c6:ce:a3:a5:47:bf:80:7a:e7: 81:87:70:a4:ad:27:ad:31:1e:86:7b:58:b7:6d:7a: 16:e3:51:f1:2e:8b:a0:fc:a7:dd:34:2e:ac:62:45: fd:4d:21:11:4f:2a:34:99:84:e3:82:ac:e7:19:ce: 63:db:5a:92:7b:6d:66:40:b9:56:6e:ef:19:87:e7: c1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:42:84:93:A3:9A:29:75:E8:C5:3E:E6:C1:F4:9A:49:7B:33:3F:47 X509v3 Authority Key Identifier: keyid:D2:96:B7:12:63:A7:94:DB:76:A9:93:29:A0:A6:CD:91:F0:3F:99:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:11:7a:51:68:a7:e2:35:df:89:b5:c2:d1:d2:de:8b:22:0b: 1f:66:d7:f5:bb:99:21:ca:53:9f:78:c6:1c:31:a4:df:5b:4e: 4e:47:fb:1e:0a:01:2c:5f:d9:65:40:67:6b:f9:25:17:e1:cd: 96:54:7a:39:be:d1:21:aa:fb:da:9f:92:1b:e1:a6:37:ef:7d: ca:00:11:88:be:90:09:c0:b4:bb:16:48:be:1e:61:33:15:7e: 03:25:6e:f5:60:28:b7:5d:02:c6:fe:e4:a6:3e:17:1a:c6:bb: 46:67:be:3b:ca:b2:fe:4d:e7:3c:a4:ef:77:fe:8e:0d:e2:ec: 5f:f6:b0:50:4d:c0:b1:72:6d:c7:8c:36:65:1d:73:33:c8:76: 5f:53:af:ad:86:73:89:11:11:d1:4b:ab:50:59:91:5c:c0:0f: 74:dc:21:44:fb:e4:0b:2c:73:dc:ff:8d:2f:53:69:0d:25:0c: 49:45:76:90:10:da:61:a3:9b:85:65:8c:e4:40:2c:51:d9:a6: 12:c3:f5:8e:34:ac:1a:00:cd:e4:a3:08:d7:88:a6:af:0b:ce: 5b:85:59:a4:98:e4:d6:10:22:c3:64:68:d9:c0:63:b3:c5:0e: dd:a6:02:16:95:0a:1d:6e:c1:56:33:83:2c:9f:9f:76:24:f4: de:1d:b1:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXDSyK5yZo67cF4wnNp9GPvescbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNEOTFG MDNGOTk3QzAeFw0yNTA2MDQwMjI1MDNaFw0yNTA2MDcxMzE4MDNaMDMxMTAvBgNV BAMTKDAxNDI4NDkzQTM5QTI5NzVFOEM1M0VFNkMxRjQ5QTQ5N0IzMzNGNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwQ3OfI8lqXpbKtgyO0h0PoxG3 tT1bJTALwuznsifLR9Sm3o4AIkU/IeF1+Tp2ayBZEaWZvy0LaOIWuoOrdl235UJH T9e6F1By8nieHHT6Or+rm39Nca0Rjs4++SYDdEEOEJFCyFM7j8jhmu/JYbrEWKta kcrsvHHgdezSWfj09EOnjLeNUc3Byv4UzWxQ3MEdPyzD8M8eZEuOwOPXYUt4vFZ/ 9GkELki2X3W0Jyp3XEb5auue7PFD4cbOo6VHv4B654GHcKStJ60xHoZ7WLdtehbj UfEui6D8p900LqxiRf1NIRFPKjSZhOOCrOcZzmPbWpJ7bWZAuVZu7xmH58HzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAUKEk6OaKXXoxT7mwfSaSXszP0cwHwYDVR0j BBgwFoAU0pa3EmOnlNt2qZMpoKbNkfA/mXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2Y3NWU5OC0xNGVmLTQ0NTctOTRmMy1lNWI3M2E5MjJmYzUvMC9EMjk2QjcxMjYz QTc5NERCNzZBOTkzMjlBMEE2Q0Q5MUYwM0Y5OTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNEOTFGMDNG OTk3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNmNzVlOTgtMTRlZi00NDU3LTk0 ZjMtZTViNzNhOTIyZmM1LzAvRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNE OTFGMDNGOTk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAgRelFop+I134m1wtHS3osiCx9m1/W7mSHK U594xhwxpN9bTk5H+x4KASxf2WVAZ2v5JRfhzZZUejm+0SGq+9qfkhvhpjfvfcoA EYi+kAnAtLsWSL4eYTMVfgMlbvVgKLddAsb+5KY+FxrGu0ZnvjvKsv5N5zyk73f+ jg3i7F/2sFBNwLFybceMNmUdczPIdl9Tr62Gc4kREdFLq1BZkVzAD3TcIUT75Ass c9z/jS9TaQ0lDElFdpAQ2mGjm4VljORALFHZphLD9Y40rBoAzeSjCNeIpq8LzluF WaSY5NYQIsNkaNnAY7PFDt2mAhaVCh1uwVYzgyyfn3Yk9N4dsSg= -----END CERTIFICATE-----Generated at Thu Jun 5 18:30:43 2025 by rpki-client