$ rpki-client -vvf repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft File: 523EE8D6F461B8FD4106F482C46C1029B1013145.mft (raw, json) Hash identifier: 9oKzn4LTNyvigX1R6sPnhz5dbSMSVbe9F/P76Zw+kXg= Subject key identifier: 3D:D8:49:98:CE:03:04:EE:69:FF:86:9B:60:CD:D7:0C:BA:94:31:68 Authority key identifier: 52:3E:E8:D6:F4:61:B8:FD:41:06:F4:82:C4:6C:10:29:B1:01:31:45 Certificate issuer: /CN=523EE8D6F461B8FD4106F482C46C1029B1013145 Certificate serial: 1A7452C0A15E9F5CE114BB861A54019EE44AD46B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft Manifest number: 92 Signing time: Tue 03 Jun 2025 00:50:52 +0000 Manifest this update: Tue 03 Jun 2025 00:45:52 +0000 Manifest next update: Fri 06 Jun 2025 12:13:52 +0000 Files and hashes: 1: 3130332e31392e38302e302f32332d3234203d3e20313332363339.roa (hash: rEiPJnrdrYYlFEBaRzbUD9BJkoKBn51ZZoCL2QKX2fk=) 2: 3130332e3132392e3233302e302f32342d3234203d3e20313332363339.roa (hash: h0Ikm5xLILqHiZgjn6vJMZ/MDEgRmvD05eIzOebsCJ4=) 3: 3130332e31392e38312e302f32342d3234203d3e20313332363339.roa (hash: qpoFl5JoTzbSM2hPO0hoJAUaowyf53VlGJf2OUjDyLM=) 4: 3130332e31392e38302e302f32342d3234203d3e20313332363339.roa (hash: DE4nHNca8ayWoDl52eSSRth/7jHheEal78ri52HzLS8=) 5: 3130332e3132392e3233312e302f32342d3234203d3e20313332363339.roa (hash: AGtr53jIPwrIQP7ijk4+cdUWZ6tDTIQGMkK4BbIW1E8=) 6: 523EE8D6F461B8FD4106F482C46C1029B1013145.crl (hash: V9doGdfP8BQySmBh3lxwUB0TOZYriLGhm5cRhZ1vI3s=) 7: 3130332e3132392e3233302e302f32332d3234203d3e20313332363339.roa (hash: NGJ06HPZPnasggQ7SzYoKC32u86oginffTyP/A+SYes=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.crl rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 12:13:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:74:52:c0:a1:5e:9f:5c:e1:14:bb:86:1a:54:01:9e:e4:4a:d4:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=523EE8D6F461B8FD4106F482C46C1029B1013145 Validity Not Before: Jun 3 00:45:52 2025 GMT Not After : Jun 6 12:13:52 2025 GMT Subject: CN=3DD84998CE0304EE69FF869B60CDD70CBA943168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:47:37:13:98:bc:d2:d8:3d:87:84:fe:4f:3b: fe:f8:c1:81:a2:97:f5:5e:5e:e6:89:de:61:dd:80: 53:b8:cf:89:a8:3e:ba:62:cd:1b:92:7b:10:8c:ef: eb:14:a1:87:c4:79:ab:71:e2:7c:e9:bd:8b:a4:88: d6:cf:56:be:6e:cf:bf:db:a9:23:0b:5e:9e:0d:94: a5:70:fb:00:58:25:37:7b:b9:46:d3:f5:06:fb:b5: df:f4:d5:37:26:c4:80:a5:6b:82:d7:7e:c5:8a:92: dc:ad:29:f0:5c:81:08:fa:e3:e2:80:2d:ad:1d:92: 46:46:d3:f9:a0:e7:d2:05:fd:9c:e3:54:73:e1:a0: 29:10:3e:4e:4c:25:81:e4:6c:88:b8:3d:e5:cc:c0: d2:fa:6a:66:67:4a:57:74:28:c6:2f:2c:15:de:d0: e2:a8:a6:b3:fc:f7:1c:ba:1a:40:fc:bc:3c:01:4d: b2:ff:26:23:55:98:0e:7f:2b:9b:06:da:ec:6a:cd: c6:1c:ca:c3:43:29:22:86:a7:1a:c1:ad:73:9d:88: a4:9c:6b:1e:45:f5:41:40:7f:60:9e:97:2a:36:8b: 2b:9b:d4:76:8d:c9:dd:67:52:64:e9:b6:f9:2d:9c: 9e:29:4b:e6:1e:68:0d:e7:79:23:05:80:2b:5c:58: 7c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D8:49:98:CE:03:04:EE:69:FF:86:9B:60:CD:D7:0C:BA:94:31:68 X509v3 Authority Key Identifier: keyid:52:3E:E8:D6:F4:61:B8:FD:41:06:F4:82:C4:6C:10:29:B1:01:31:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:e6:57:02:22:48:ae:43:47:95:78:3b:c5:0b:a0:0e:9e:db: 9f:3e:21:7c:eb:8f:e0:6c:ff:db:cc:3f:f2:f5:05:ec:f7:10: 7d:5c:a1:aa:89:1f:f8:f7:11:4d:32:c1:8a:b9:4e:0e:b2:85: ef:d2:9e:2b:3f:1c:8d:88:22:5b:82:a9:f8:90:bc:15:c6:6a: b4:81:67:79:a1:21:bb:69:cc:fc:ee:53:27:3b:15:b8:46:a0: 69:b8:49:b4:78:da:23:8a:4c:7f:03:29:b8:01:8c:21:a8:f5: 91:08:64:d5:cb:dc:64:bf:15:22:ad:9b:57:40:75:c4:73:2c: 42:39:ae:b5:e3:9c:94:d6:ca:d6:1d:75:c0:b9:8d:f9:c3:3e: ac:99:19:52:ff:bf:e9:d5:48:e5:38:ef:f9:5b:32:f9:1f:48: 14:e4:4f:c5:33:8c:b9:4d:9a:0c:33:94:e4:b7:67:de:f0:05: fd:df:40:64:af:eb:3d:67:f9:03:aa:b7:6d:99:3f:54:d1:f4: 03:05:45:de:2f:f9:1c:10:34:69:7b:e0:9a:a5:fa:74:60:dc: 7c:75:fa:28:33:4c:20:8e:35:46:e9:e9:cb:44:b4:77:76:d7: a4:90:b1:ac:38:99:4e:03:4c:5e:b0:db:3a:42:89:57:96:b9: c3:02:77:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGnRSwKFen1zhFLuGGlQBnuRK1GswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIzRUU4RDZGNDYxQjhGRDQxMDZGNDgyQzQ2QzEwMjlC MTAxMzE0NTAeFw0yNTA2MDMwMDQ1NTJaFw0yNTA2MDYxMjEzNTJaMDMxMTAvBgNV BAMTKDNERDg0OTk4Q0UwMzA0RUU2OUZGODY5QjYwQ0RENzBDQkE5NDMxNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDERzcTmLzS2D2HhP5PO/74wYGi l/VeXuaJ3mHdgFO4z4moPrpizRuSexCM7+sUoYfEeatx4nzpvYukiNbPVr5uz7/b qSMLXp4NlKVw+wBYJTd7uUbT9Qb7td/01TcmxICla4LXfsWKktytKfBcgQj64+KA La0dkkZG0/mg59IF/ZzjVHPhoCkQPk5MJYHkbIi4PeXMwNL6amZnSld0KMYvLBXe 0OKoprP89xy6GkD8vDwBTbL/JiNVmA5/K5sG2uxqzcYcysNDKSKGpxrBrXOdiKSc ax5F9UFAf2Celyo2iyub1HaNyd1nUmTptvktnJ4pS+YeaA3neSMFgCtcWHyRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPdhJmM4DBO5p/4abYM3XDLqUMWgwHwYDVR0j BBgwFoAUUj7o1vRhuP1BBvSCxGwQKbEBMUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWE0Mjc0Mi04OWQyLTQ5YmItOGEzZS0yOTRjMzY4OTcxZjUvMC81MjNFRThENkY0 NjFCOEZENDEwNkY0ODJDNDZDMTAyOUIxMDEzMTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTIzRUU4RDZGNDYxQjhGRDQxMDZGNDgyQzQ2QzEwMjlCMTAx MzE0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFhNDI3NDItODlkMi00OWJiLThh M2UtMjk0YzM2ODk3MWY1LzAvNTIzRUU4RDZGNDYxQjhGRDQxMDZGNDgyQzQ2QzEw MjlCMTAxMzE0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIvmVwIiSK5DR5V4O8ULoA6e258+IXzrj+Bs /9vMP/L1Bez3EH1coaqJH/j3EU0ywYq5Tg6yhe/Snis/HI2IIluCqfiQvBXGarSB Z3mhIbtpzPzuUyc7FbhGoGm4SbR42iOKTH8DKbgBjCGo9ZEIZNXL3GS/FSKtm1dA dcRzLEI5rrXjnJTWytYddcC5jfnDPqyZGVL/v+nVSOU47/lbMvkfSBTkT8UzjLlN mgwzlOS3Z97wBf3fQGSv6z1n+QOqt22ZP1TR9AMFRd4v+RwQNGl74Jql+nRg3Hx1 +igzTCCONUbp6ctEtHd216SQsaw4mU4DTF6w2zpCiVeWucMCd3c= -----END CERTIFICATE-----Generated at Tue Jun 3 23:33:13 2025 by rpki-client