$ rpki-client -vvf repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft File: A575236C1BE8E700EF4D54FB243030C7256654C6.mft (raw, json) Hash identifier: cYl9AvTMFpXHzbZ5wOIlyE3guu8CBcIzs+Ii45QeIrU= Subject key identifier: A3:F9:CC:A8:0E:66:9F:0C:2B:0E:27:E0:08:8F:FF:CC:D4:AF:E3:F0 Authority key identifier: A5:75:23:6C:1B:E8:E7:00:EF:4D:54:FB:24:30:30:C7:25:66:54:C6 Certificate issuer: /CN=A575236C1BE8E700EF4D54FB243030C7256654C6 Certificate serial: 435D10D78F13162C7E2154F5A80F38D947304CCC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft Manifest number: C1 Signing time: Sat 07 Jun 2025 14:11:16 +0000 Manifest this update: Sat 07 Jun 2025 14:06:16 +0000 Manifest next update: Wed 11 Jun 2025 00:35:16 +0000 Files and hashes: 1: 3130332e3137352e3230342e302f32342d3234203d3e20313437313139.roa (hash: FwokdY5Winm64kPdNPud+dd5Ep75CI564UTa5xn81h0=) 2: A575236C1BE8E700EF4D54FB243030C7256654C6.crl (hash: xa26/r/iUzYDrWJ0YOnmT+xwZFg6Ludi1WOiOy1BpJ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.crl rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 00:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:5d:10:d7:8f:13:16:2c:7e:21:54:f5:a8:0f:38:d9:47:30:4c:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A575236C1BE8E700EF4D54FB243030C7256654C6 Validity Not Before: Jun 7 14:06:16 2025 GMT Not After : Jun 11 00:35:16 2025 GMT Subject: CN=A3F9CCA80E669F0C2B0E27E0088FFFCCD4AFE3F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f4:83:78:c5:81:c3:65:4a:a4:fa:95:d0:21: 54:3f:d1:c1:2d:4e:a6:e3:d0:e7:4b:e6:29:3e:0e: 9f:16:04:d5:31:c6:91:e1:91:06:17:8c:85:a3:fa: 74:30:f3:39:a6:19:d9:11:e6:47:c6:74:66:ab:6b: 1f:c4:c5:a2:58:95:2d:fb:60:fb:b7:58:cf:f5:ba: c5:d4:d9:89:9e:f8:ef:c2:b7:3d:3b:1f:23:45:04: 5e:01:48:28:41:50:5e:a0:e5:01:62:3f:1b:ab:6c: ce:60:59:0f:0f:63:06:e5:b9:82:4f:36:71:f6:34: e1:92:a9:56:f3:ef:a7:64:d8:94:18:5c:27:f9:c0: 47:9b:82:e3:69:a1:e3:7f:31:30:0e:e0:7a:e2:3c: f8:ad:6d:c1:60:77:3f:6d:37:03:f8:5c:47:84:05: 3b:68:35:7e:28:92:16:1a:ae:cd:c9:b3:ca:19:77: 43:b1:f6:e5:d8:82:1c:f3:20:d0:d2:6f:fe:b7:18: de:32:ca:50:fd:04:97:12:72:6d:0a:65:6d:78:a2: 4e:bb:29:8e:c7:98:25:d1:83:ca:f4:d7:87:08:9a: 3b:55:10:98:c5:64:dd:16:e1:05:39:06:f6:63:b3: b6:56:0b:73:a9:d3:b4:9c:ea:58:60:61:7d:e3:08: 6a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F9:CC:A8:0E:66:9F:0C:2B:0E:27:E0:08:8F:FF:CC:D4:AF:E3:F0 X509v3 Authority Key Identifier: keyid:A5:75:23:6C:1B:E8:E7:00:EF:4D:54:FB:24:30:30:C7:25:66:54:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:7d:63:ee:71:aa:6d:f4:6a:99:c4:85:29:99:39:34:c9:83: 39:13:76:b9:b9:1a:be:39:d0:1b:9f:d8:34:94:0e:93:43:2c: 6e:ea:a5:a6:4e:3e:43:a9:4a:8c:47:fb:37:c9:cf:41:4f:25: 0d:a5:75:68:3b:bd:73:e8:d0:95:75:9e:8a:f0:d7:f0:d4:e4: 1b:f3:94:f4:59:37:66:46:a5:64:a0:2a:b4:ca:e6:6d:a2:14: 5e:4c:c5:8a:4a:18:e8:53:71:e7:48:38:86:66:d1:5c:12:6f: 05:0c:24:c0:46:d0:51:f4:0e:e5:ec:d5:69:b5:5b:d4:14:64: f0:b4:72:a1:61:c2:fe:c6:71:dd:e3:cf:1a:39:14:58:51:d4: ae:2f:7d:0a:b8:ac:45:91:14:0a:85:ad:bd:c5:7e:e7:a4:60: 9a:3e:89:d1:d8:29:86:17:0f:11:04:c0:1d:07:44:33:22:01: f0:2e:5a:8c:d1:1f:ef:f6:83:21:0f:50:28:b5:ef:63:8d:b8: e5:b9:99:f2:7d:9d:b7:29:1a:d0:9e:04:c8:28:67:94:16:55: 79:5f:09:c6:83:86:3b:53:38:1d:e8:cb:63:75:86:17:d7:e2: 47:e9:fd:fd:3e:f5:6a:21:8c:d1:12:bb:45:26:e0:c5:87:61: 00:53:54:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ10Q148TFix+IVT1qA842UcwTMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU3NTIzNkMxQkU4RTcwMEVGNEQ1NEZCMjQzMDMwQzcy NTY2NTRDNjAeFw0yNTA2MDcxNDA2MTZaFw0yNTA2MTEwMDM1MTZaMDMxMTAvBgNV BAMTKEEzRjlDQ0E4MEU2NjlGMEMyQjBFMjdFMDA4OEZGRkNDRDRBRkUzRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG9IN4xYHDZUqk+pXQIVQ/0cEt Tqbj0OdL5ik+Dp8WBNUxxpHhkQYXjIWj+nQw8zmmGdkR5kfGdGarax/ExaJYlS37 YPu3WM/1usXU2Yme+O/Ctz07HyNFBF4BSChBUF6g5QFiPxurbM5gWQ8PYwbluYJP NnH2NOGSqVbz76dk2JQYXCf5wEebguNpoeN/MTAO4HriPPitbcFgdz9tNwP4XEeE BTtoNX4okhYars3Js8oZd0Ox9uXYghzzINDSb/63GN4yylD9BJcScm0KZW14ok67 KY7HmCXRg8r014cImjtVEJjFZN0W4QU5BvZjs7ZWC3Op07Sc6lhgYX3jCGoRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo/nMqA5mnwwrDifgCI//zNSv4/AwHwYDVR0j BBgwFoAUpXUjbBvo5wDvTVT7JDAwxyVmVMYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDY5YzNlMy03YjU5LTQ0OTAtODRjZi1mZWYxNTg1YWM3NWIvMC9BNTc1MjM2QzFC RThFNzAwRUY0RDU0RkIyNDMwMzBDNzI1NjY1NEM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTU3NTIzNkMxQkU4RTcwMEVGNEQ1NEZCMjQzMDMwQzcyNTY2 NTRDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQ2OWMzZTMtN2I1OS00NDkwLTg0 Y2YtZmVmMTU4NWFjNzViLzAvQTU3NTIzNkMxQkU4RTcwMEVGNEQ1NEZCMjQzMDMw QzcyNTY2NTRDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALF9Y+5xqm30apnEhSmZOTTJgzkTdrm5Gr45 0Buf2DSUDpNDLG7qpaZOPkOpSoxH+zfJz0FPJQ2ldWg7vXPo0JV1norw1/DU5Bvz lPRZN2ZGpWSgKrTK5m2iFF5MxYpKGOhTcedIOIZm0VwSbwUMJMBG0FH0DuXs1Wm1 W9QUZPC0cqFhwv7Gcd3jzxo5FFhR1K4vfQq4rEWRFAqFrb3FfuekYJo+idHYKYYX DxEEwB0HRDMiAfAuWozRH+/2gyEPUCi172ONuOW5mfJ9nbcpGtCeBMgoZ5QWVXlf CcaDhjtTOB3oy2N1hhfX4kfp/f0+9WohjNESu0Um4MWHYQBTVHA= -----END CERTIFICATE-----Generated at Sun Jun 8 19:55:18 2025 by rpki-client