$ rpki-client -vvf repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft File: 5234A428BC63559E2511B3EFFB085B82B195A8ED.mft (raw, json) Hash identifier: /5wcsAJk+Rx2VK/gpzTY+i4881F1bjfs2fryHt5MYMM= Subject key identifier: 9F:72:A9:29:2B:56:13:44:95:00:57:37:0D:FB:CE:96:91:D4:D7:D9 Authority key identifier: 52:34:A4:28:BC:63:55:9E:25:11:B3:EF:FB:08:5B:82:B1:95:A8:ED Certificate issuer: /CN=5234A428BC63559E2511B3EFFB085B82B195A8ED Certificate serial: 103CB0758217590EB3FBFC33BE6570993007B98C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft Manifest number: 22 Signing time: Mon 02 Jun 2025 22:02:57 +0000 Manifest this update: Mon 02 Jun 2025 21:57:57 +0000 Manifest next update: Fri 06 Jun 2025 07:17:57 +0000 Files and hashes: 1: 3130332e31372e37362e302f32342d3234203d3e20313331373831.roa (hash: rB8zcfhigYxp6rZG5kgxX6r/oJS8xphHw/YAzK8Sodw=) 2: 3130332e31372e37372e302f32342d3234203d3e20313331373831.roa (hash: 4y750PE+WZPEuQKdgW2BVnFEcTQLxauJA4sENyjZR2o=) 3: 5234A428BC63559E2511B3EFFB085B82B195A8ED.crl (hash: WOZekZROFELzzrvkqxqmmSNZT3UodUzKH0Q1XaRbA1Y=) 4: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: 3jZR/32xfuAKeJQ/xf5TVwB85F6YIOYekaTwsoIa1SY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.crl rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 07:17:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:3c:b0:75:82:17:59:0e:b3:fb:fc:33:be:65:70:99:30:07:b9:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5234A428BC63559E2511B3EFFB085B82B195A8ED Validity Not Before: Jun 2 21:57:57 2025 GMT Not After : Jun 6 07:17:57 2025 GMT Subject: CN=9F72A9292B561344950057370DFBCE9691D4D7D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d9:5d:1a:43:5e:66:0f:ea:30:2d:de:0e:e6: 77:fc:cc:ca:bd:de:44:39:07:bb:45:c8:6d:5f:09: 45:34:ed:9c:cf:d4:e1:be:02:d0:a4:d2:3f:b1:d6: e8:1f:5c:8a:55:38:91:25:1a:99:e7:00:1e:81:80: 65:85:d1:c2:12:3a:e6:ad:d3:02:27:53:6e:05:79: 39:35:e0:c7:31:63:d5:6e:86:f3:8c:ea:16:cc:60: 4a:51:eb:10:c6:70:94:71:91:97:3b:ea:c6:16:4c: d3:92:70:0c:6e:b8:e0:13:a9:2c:bd:c2:c0:bf:f0: 00:bd:ec:b1:b0:d0:4a:9f:0e:5f:1a:70:ba:e6:03: da:05:41:cc:0e:ec:95:36:70:97:b1:f3:c0:71:02: 2c:2c:84:b4:21:ba:f5:01:2f:ae:f1:9f:34:a1:ca: f9:12:fb:57:7b:2e:ca:1e:be:44:68:d9:96:48:67: 0a:d6:af:14:b2:e7:15:d5:e4:47:1c:70:bf:75:1d: d8:76:69:09:7a:a5:22:ed:c1:c5:01:9b:cd:dc:e8: 06:08:bc:19:5f:d8:5b:eb:e0:a1:69:3d:05:5f:a9: 96:95:58:f0:61:d1:e9:28:a2:df:f6:8e:0c:c2:f7: 40:c6:22:d4:f9:85:5a:93:f2:96:32:1c:75:63:03: 51:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:72:A9:29:2B:56:13:44:95:00:57:37:0D:FB:CE:96:91:D4:D7:D9 X509v3 Authority Key Identifier: keyid:52:34:A4:28:BC:63:55:9E:25:11:B3:EF:FB:08:5B:82:B1:95:A8:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:0f:fa:28:38:e0:b2:c7:66:77:9b:5e:97:04:e2:9b:59:59: fb:e5:e0:fe:2e:70:4b:2b:55:8e:63:09:ef:bc:82:38:6e:10: 85:98:41:d7:00:a3:c3:af:68:eb:24:4d:b3:3e:aa:be:ae:db: d9:01:fd:f2:fb:c8:61:40:ce:a2:0f:00:66:52:4d:01:dd:b6: 99:89:7c:50:d5:d0:7a:9b:cc:70:bc:0f:7a:96:e8:cf:c8:fe: d2:52:fe:20:eb:98:49:b6:c2:97:88:b8:2b:07:fb:a9:42:f5: 86:08:42:25:3f:7b:c5:86:f7:d5:42:3b:57:39:cc:8a:08:cf: 7e:e8:ea:03:11:82:9e:c0:07:de:3b:09:5f:10:a6:c9:84:3e: 73:a4:cd:55:fb:3a:2b:52:16:1f:70:9c:6b:9b:4c:a8:64:87: bc:9f:78:56:7c:d5:f2:d1:ca:da:fc:f6:88:27:5e:1a:0c:93: 71:d4:8e:2c:98:7f:fb:c0:89:30:39:29:59:5d:95:d9:43:a0: f1:86:0d:2e:f6:94:c5:17:88:48:13:5d:cc:cf:cf:fe:ba:4f: 52:af:05:71:95:66:ed:7f:b6:89:e5:6e:88:17:b6:b4:b8:7b: 8e:e8:04:0c:9d:98:43:e6:d3:e5:b0:2f:76:9b:0e:39:92:24: de:b7:df:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEDywdYIXWQ6z+/wzvmVwmTAHuYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVCODJC MTk1QThFRDAeFw0yNTA2MDIyMTU3NTdaFw0yNTA2MDYwNzE3NTdaMDMxMTAvBgNV BAMTKDlGNzJBOTI5MkI1NjEzNDQ5NTAwNTczNzBERkJDRTk2OTFENEQ3RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq2V0aQ15mD+owLd4O5nf8zMq9 3kQ5B7tFyG1fCUU07ZzP1OG+AtCk0j+x1ugfXIpVOJElGpnnAB6BgGWF0cISOuat 0wInU24FeTk14McxY9VuhvOM6hbMYEpR6xDGcJRxkZc76sYWTNOScAxuuOATqSy9 wsC/8AC97LGw0EqfDl8acLrmA9oFQcwO7JU2cJex88BxAiwshLQhuvUBL67xnzSh yvkS+1d7LsoevkRo2ZZIZwrWrxSy5xXV5EcccL91Hdh2aQl6pSLtwcUBm83c6AYI vBlf2Fvr4KFpPQVfqZaVWPBh0ekoot/2jgzC90DGItT5hVqT8pYyHHVjA1GfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn3KpKStWE0SVAFc3DfvOlpHU19kwHwYDVR0j BBgwFoAUUjSkKLxjVZ4lEbPv+whbgrGVqO0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YTA3MTUxNC1lNGRlLTRhY2UtYTBkZi1mN2M0YWI4MDc0YTUvMC81MjM0QTQyOEJD NjM1NTlFMjUxMUIzRUZGQjA4NUI4MkIxOTVBOEVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVCODJCMTk1 QThFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmEwNzE1MTQtZTRkZS00YWNlLWEw ZGYtZjdjNGFiODA3NGE1LzAvNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVC ODJCMTk1QThFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKkP+ig44LLHZnebXpcE4ptZWfvl4P4ucEsr VY5jCe+8gjhuEIWYQdcAo8OvaOskTbM+qr6u29kB/fL7yGFAzqIPAGZSTQHdtpmJ fFDV0HqbzHC8D3qW6M/I/tJS/iDrmEm2wpeIuCsH+6lC9YYIQiU/e8WG99VCO1c5 zIoIz37o6gMRgp7AB947CV8QpsmEPnOkzVX7OitSFh9wnGubTKhkh7yfeFZ81fLR ytr89ognXhoMk3HUjiyYf/vAiTA5KVldldlDoPGGDS72lMUXiEgTXczPz/66T1Kv BXGVZu1/tonlbogXtrS4e47oBAydmEPm0+WwL3abDjmSJN633/4= -----END CERTIFICATE-----Generated at Tue Jun 3 23:34:27 2025 by rpki-client