$ rpki-client -vvf repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft File: 05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft (raw, json) Hash identifier: QMIKTma8yHcsUv0K4Gdsj8qGnJd27oCUE3dOV1qP6sg= Subject key identifier: 1A:5E:B4:52:7C:F3:03:B9:64:52:EC:BC:A5:BC:F6:EC:6E:C7:91:33 Authority key identifier: 05:67:1A:0A:CA:B2:6B:34:26:48:AF:FA:C0:C6:6E:CB:5A:49:3D:AB Certificate issuer: /CN=05671A0ACAB26B342648AFFAC0C66ECB5A493DAB Certificate serial: 3263F1E584DF425561F45CC7D36FCC9CACC034AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft Manifest number: B9 Signing time: Fri 06 Jun 2025 21:31:37 +0000 Manifest this update: Fri 06 Jun 2025 21:26:37 +0000 Manifest next update: Tue 10 Jun 2025 00:47:37 +0000 Files and hashes: 1: 05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl (hash: bLOxJLi3K+epiBzh7tKxVItvlrPozMq63//KDdWdwZQ=) 2: 323030313a6466333a393034303a3a2f34382d3438203d3e20313532343139.roa (hash: RA3iDpSCkWtT/yyfxgJEQ4woQglWjmr40o6UbmeiCAk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 22:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:63:f1:e5:84:df:42:55:61:f4:5c:c7:d3:6f:cc:9c:ac:c0:34:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05671A0ACAB26B342648AFFAC0C66ECB5A493DAB Validity Not Before: Jun 6 21:26:37 2025 GMT Not After : Jun 10 00:47:37 2025 GMT Subject: CN=1A5EB4527CF303B96452ECBCA5BCF6EC6EC79133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5d:1c:3e:bc:89:be:19:95:67:23:c6:e4:61: 59:ed:6c:d7:de:ca:33:31:6d:b6:f5:14:82:6b:6e: 2e:aa:e7:7c:42:0d:f7:65:70:c3:ee:34:e3:8f:25: 17:b2:16:da:ee:3b:1b:95:1b:25:8e:59:9e:12:eb: 24:5d:14:4e:fe:fd:18:39:06:aa:b1:10:6a:ae:20: d3:24:a5:4f:51:07:f9:83:a4:32:89:e6:ed:34:a5: 65:6d:12:0a:8a:e6:fe:9e:7c:17:71:48:2b:63:58: b4:8a:fa:2b:fe:40:4c:a1:9b:79:9c:63:60:95:9f: 67:90:e7:90:db:1b:f6:f9:ff:d0:2f:34:4a:61:2c: 11:4f:36:28:d0:a0:e1:ff:31:96:5b:94:55:e2:b4: 8f:a7:da:43:b2:22:9f:96:3b:29:6c:4e:6f:4b:29: de:24:6f:06:8a:5b:8b:be:5e:c2:38:5f:f5:2d:47: 33:77:03:f2:ea:df:71:b1:21:44:a6:60:cf:60:29: 4b:e0:91:ab:98:91:b1:02:89:a8:43:a7:e1:95:83: a9:12:c3:ea:bb:7c:ed:54:2b:9e:0b:11:3f:89:c0: 0c:d8:80:e7:48:da:4a:be:77:3f:31:c1:4c:9d:9e: 49:64:31:52:cd:f5:3d:f7:4f:b9:b5:df:63:15:9a: 84:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:5E:B4:52:7C:F3:03:B9:64:52:EC:BC:A5:BC:F6:EC:6E:C7:91:33 X509v3 Authority Key Identifier: keyid:05:67:1A:0A:CA:B2:6B:34:26:48:AF:FA:C0:C6:6E:CB:5A:49:3D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:f1:fa:76:da:4c:93:71:43:99:03:e8:3f:0e:42:28:f8:f4: bb:9d:5a:a9:60:8a:01:36:be:e1:70:92:91:3b:d8:84:bb:ef: 9e:4a:de:a5:ee:bb:d2:fe:55:88:f4:b4:38:3d:ed:eb:d0:df: 9f:bf:3d:48:a6:e9:7a:79:55:d1:62:b4:a9:25:5e:50:94:c6: 67:af:8d:51:34:0f:02:53:fe:ac:29:76:45:02:73:7d:28:f1: 5b:7d:32:f2:27:3d:60:c3:fa:be:9c:59:e9:3e:51:7f:b1:7f: bf:e7:0f:75:cc:11:15:b4:69:ef:4b:44:5d:f5:c0:4a:0f:7a: b2:6e:d1:bf:39:5c:82:fd:8f:1d:06:73:b4:8a:cd:ca:f0:fe: f5:fc:9b:f2:6d:c0:01:3b:bf:fb:69:bb:23:d0:d5:57:25:1d: 96:b2:00:49:27:0c:3a:7a:24:b2:0c:21:0a:cb:e3:2c:44:2a: a9:93:0a:1b:05:c9:b9:25:4a:5b:89:1b:51:21:bd:03:45:7d: fa:8f:85:c9:eb:fd:7f:94:62:f2:8c:1c:c5:14:ad:40:fa:ad: 73:b9:5b:cf:af:23:42:4e:34:8e:01:cb:0e:55:4e:1a:ac:35: 2d:13:45:5d:06:b0:29:f4:1f:06:ac:d0:96:3b:86:04:d6:0f: eb:c7:60:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMmPx5YTfQlVh9FzH02/MnKzANKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZFQ0I1 QTQ5M0RBQjAeFw0yNTA2MDYyMTI2MzdaFw0yNTA2MTAwMDQ3MzdaMDMxMTAvBgNV BAMTKDFBNUVCNDUyN0NGMzAzQjk2NDUyRUNCQ0E1QkNGNkVDNkVDNzkxMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4XRw+vIm+GZVnI8bkYVntbNfe yjMxbbb1FIJrbi6q53xCDfdlcMPuNOOPJReyFtruOxuVGyWOWZ4S6yRdFE7+/Rg5 BqqxEGquINMkpU9RB/mDpDKJ5u00pWVtEgqK5v6efBdxSCtjWLSK+iv+QEyhm3mc Y2CVn2eQ55DbG/b5/9AvNEphLBFPNijQoOH/MZZblFXitI+n2kOyIp+WOylsTm9L Kd4kbwaKW4u+XsI4X/UtRzN3A/Lq33GxIUSmYM9gKUvgkauYkbECiahDp+GVg6kS w+q7fO1UK54LET+JwAzYgOdI2kq+dz8xwUydnklkMVLN9T33T7m132MVmoTtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGl60UnzzA7lkUuy8pbz27G7HkTMwHwYDVR0j BBgwFoAUBWcaCsqyazQmSK/6wMZuy1pJPaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDgyM2JiMy01YTAxLTQ2NTgtYTc4My1mOGU4OWZhZGNmNDUvMS8wNTY3MUEwQUNB QjI2QjM0MjY0OEFGRkFDMEM2NkVDQjVBNDkzREFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZFQ0I1QTQ5 M0RBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4MjNiYjMtNWEwMS00NjU4LWE3 ODMtZjhlODlmYWRjZjQ1LzEvMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZF Q0I1QTQ5M0RBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIvx+nbaTJNxQ5kD6D8OQij49LudWqlgigE2 vuFwkpE72IS7755K3qXuu9L+VYj0tDg97evQ35+/PUim6Xp5VdFitKklXlCUxmev jVE0DwJT/qwpdkUCc30o8Vt9MvInPWDD+r6cWek+UX+xf7/nD3XMERW0ae9LRF31 wEoPerJu0b85XIL9jx0Gc7SKzcrw/vX8m/JtwAE7v/tpuyPQ1VclHZayAEknDDp6 JLIMIQrL4yxEKqmTChsFybklSluJG1EhvQNFffqPhcnr/X+UYvKMHMUUrUD6rXO5 W8+vI0JONI4Byw5VThqsNS0TRV0GsCn0Hwas0JY7hgTWD+vHYJQ= -----END CERTIFICATE-----Generated at Sat Jun 7 04:20:22 2025 by rpki-client