$ rpki-client -vvf repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft File: 428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft (raw, json) Hash identifier: IqP//+5Ci5EQ/C98HtnZbUaWwGhYLb7SPsLzyMveZGU= Subject key identifier: AE:0B:24:60:F5:1B:86:DB:35:F2:34:88:B5:C1:63:E3:2F:C7:81:EC Authority key identifier: 42:81:73:DF:58:B0:C1:6D:8F:B9:2F:81:F3:42:D6:01:7F:B0:CE:CA Certificate issuer: /CN=428173DF58B0C16D8FB92F81F342D6017FB0CECA Certificate serial: 68339B6AA13A62D7E3E3225E7F1A74CD3B576E48 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428173DF58B0C16D8FB92F81F342D6017FB0CECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft Manifest number: 01AF Signing time: Mon 02 Jun 2025 01:21:19 +0000 Manifest this update: Mon 02 Jun 2025 01:16:19 +0000 Manifest next update: Thu 05 Jun 2025 12:27:19 +0000 Files and hashes: 1: 3130332e3139312e33392e302f32342d3234203d3e20313439393233.roa (hash: yfirY/IdmmUBXQP+agxLPC5R2mzKmb/7B1nbgYo1Od4=) 2: 428173DF58B0C16D8FB92F81F342D6017FB0CECA.crl (hash: cmZgabwFAw+Ih83pGWUbIoC0MREs1uNZsFnLb3RM60s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.crl rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428173DF58B0C16D8FB92F81F342D6017FB0CECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 12:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:33:9b:6a:a1:3a:62:d7:e3:e3:22:5e:7f:1a:74:cd:3b:57:6e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=428173DF58B0C16D8FB92F81F342D6017FB0CECA Validity Not Before: Jun 2 01:16:19 2025 GMT Not After : Jun 5 12:27:19 2025 GMT Subject: CN=AE0B2460F51B86DB35F23488B5C163E32FC781EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:11:8f:66:f8:51:c9:3b:d6:53:1b:1d:7f:0d: e3:8b:5f:24:1e:e2:ef:5a:26:46:c9:eb:04:ad:34: e0:29:ac:12:28:fa:08:35:8b:23:92:46:1d:af:e7: b9:5b:55:1d:a9:5d:db:02:0e:3c:60:38:78:a7:13: da:f9:2a:8f:70:79:73:bc:cc:02:a0:64:ef:ce:e9: f3:ac:23:4f:1d:5c:75:e2:26:05:46:5c:4b:9f:16: 02:73:de:07:da:2c:86:a7:7d:0d:fb:a9:0c:2e:56: bb:80:1e:1a:e8:e8:dd:bd:58:9c:55:03:56:39:34: 3d:a3:12:ae:86:e0:06:b1:a7:5b:e0:1e:8b:e4:55: fd:1c:aa:99:95:d4:2d:d1:e4:fc:6f:8f:fe:4a:3a: f0:a2:26:df:3f:9b:97:ff:d5:c7:0b:e9:53:4d:04: 0e:d4:fb:7b:31:94:fa:22:44:bd:7e:5f:a5:80:24: 09:ba:0d:61:ca:77:39:b0:18:52:40:c0:4c:d3:1d: 63:c3:89:11:73:d7:ba:b3:fe:f0:62:1a:5e:51:be: b8:81:5d:78:27:98:d5:d8:77:65:f0:09:2d:04:91: e3:f4:42:a5:d0:15:46:bd:c8:64:44:c5:5c:15:1b: 7b:72:4a:03:7f:a6:fe:7b:3b:0b:71:13:00:00:23: 95:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:0B:24:60:F5:1B:86:DB:35:F2:34:88:B5:C1:63:E3:2F:C7:81:EC X509v3 Authority Key Identifier: keyid:42:81:73:DF:58:B0:C1:6D:8F:B9:2F:81:F3:42:D6:01:7F:B0:CE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/428173DF58B0C16D8FB92F81F342D6017FB0CECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:ad:2a:c1:23:f8:96:73:9e:4e:e9:cf:60:4b:76:96:3a:b7: ee:01:55:6d:3a:dc:23:02:b8:4d:1f:ab:6b:14:22:15:0c:fa: 2e:b4:04:9a:35:42:26:d2:d4:6f:92:db:92:91:a2:c2:86:07: 0f:b5:91:ee:8e:3a:bd:77:e9:5b:99:a0:cc:01:7f:12:17:e5: a7:29:e3:47:43:ad:b8:78:03:ff:d2:35:11:f4:3e:17:b3:fa: 1b:45:20:16:75:35:cd:f7:6d:91:ae:5a:56:cb:70:af:c6:17: 91:2b:5c:02:7c:c2:6e:29:04:39:dd:02:09:4f:60:f5:16:93: 68:05:3b:9d:9f:1c:2c:1f:88:d3:92:09:ca:19:84:c5:c8:16: 4d:41:9b:8a:29:35:67:e7:7e:24:b2:20:72:f3:6b:59:70:f4: e6:09:23:6d:a9:e6:cc:d1:26:40:77:c6:3e:72:7d:06:fb:a4: c1:22:4c:0b:70:a9:bf:79:86:d1:b5:fb:ef:f5:bd:a5:0d:22: 40:a3:25:cb:64:be:1f:c6:dc:53:50:8a:0d:4f:2c:e2:b4:b2: bc:6a:45:f4:fc:7f:6c:51:f4:09:f3:70:da:9f:87:80:4c:d0: 9a:2b:d9:62:00:af:db:4e:9b:3f:57:11:ed:83:70:f3:e9:39: fc:59:66:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaDObaqE6Ytfj4yJefxp0zTtXbkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI4MTczREY1OEIwQzE2RDhGQjkyRjgxRjM0MkQ2MDE3 RkIwQ0VDQTAeFw0yNTA2MDIwMTE2MTlaFw0yNTA2MDUxMjI3MTlaMDMxMTAvBgNV BAMTKEFFMEIyNDYwRjUxQjg2REIzNUYyMzQ4OEI1QzE2M0UzMkZDNzgxRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDEY9m+FHJO9ZTGx1/DeOLXyQe 4u9aJkbJ6wStNOAprBIo+gg1iyOSRh2v57lbVR2pXdsCDjxgOHinE9r5Ko9weXO8 zAKgZO/O6fOsI08dXHXiJgVGXEufFgJz3gfaLIanfQ37qQwuVruAHhro6N29WJxV A1Y5ND2jEq6G4Aaxp1vgHovkVf0cqpmV1C3R5Pxvj/5KOvCiJt8/m5f/1ccL6VNN BA7U+3sxlPoiRL1+X6WAJAm6DWHKdzmwGFJAwEzTHWPDiRFz17qz/vBiGl5RvriB XXgnmNXYd2XwCS0EkeP0QqXQFUa9yGRExVwVG3tySgN/pv57OwtxEwAAI5WFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrgskYPUbhts18jSItcFj4y/HgewwHwYDVR0j BBgwFoAUQoFz31iwwW2PuS+B80LWAX+wzsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWY4NDI3OC1lMDZkLTQxMTktYmE0NC01YzMyOTY4YThiYmQvMC80MjgxNzNERjU4 QjBDMTZEOEZCOTJGODFGMzQyRDYwMTdGQjBDRUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDI4MTczREY1OEIwQzE2RDhGQjkyRjgxRjM0MkQ2MDE3RkIw Q0VDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjVmODQyNzgtZTA2ZC00MTE5LWJh NDQtNWMzMjk2OGE4YmJkLzAvNDI4MTczREY1OEIwQzE2RDhGQjkyRjgxRjM0MkQ2 MDE3RkIwQ0VDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADOtKsEj+JZznk7pz2BLdpY6t+4BVW063CMC uE0fq2sUIhUM+i60BJo1QibS1G+S25KRosKGBw+1ke6OOr136VuZoMwBfxIX5acp 40dDrbh4A//SNRH0Phez+htFIBZ1Nc33bZGuWlbLcK/GF5ErXAJ8wm4pBDndAglP YPUWk2gFO52fHCwfiNOSCcoZhMXIFk1Bm4opNWfnfiSyIHLza1lw9OYJI22p5szR JkB3xj5yfQb7pMEiTAtwqb95htG1++/1vaUNIkCjJctkvh/G3FNQig1PLOK0srxq RfT8f2xR9AnzcNqfh4BM0Jor2WIAr9tOmz9XEe2DcPPpOfxZZkI= -----END CERTIFICATE-----Generated at Tue Jun 3 23:55:47 2025 by rpki-client