$ rpki-client -vvf repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft File: 065943D1744CF4841A6D3D50944D2A4DB537A128.mft (raw, json) Hash identifier: qTGUx4OGXbpTsKKaIGSWmj5BCwLSWM0PG2o5wQL1BhU= Subject key identifier: A8:E4:5D:85:4D:BB:5A:7C:15:9F:0D:4B:61:5E:AA:65:55:89:01:BF Authority key identifier: 06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28 Certificate issuer: /CN=065943D1744CF4841A6D3D50944D2A4DB537A128 Certificate serial: 53E6DF578C59AFF52CF765D9DFD3C4A594DA56EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer Subject info access: rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft Manifest number: D3 Signing time: Thu 05 Jun 2025 07:21:50 +0000 Manifest this update: Thu 05 Jun 2025 07:16:50 +0000 Manifest next update: Sun 08 Jun 2025 08:37:50 +0000 Files and hashes: 1: 065943D1744CF4841A6D3D50944D2A4DB537A128.crl (hash: crhce5AKJEtG3Q4gnTDZexsa1eqfcMoHKySC0dPebtY=) 2: 3135372e31352e37372e302f32342d3234203d3e20313338313331.roa (hash: JkcKtcV//LYqaw+9zrmVkPhDbatpI5ildpclS3nEbmQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.crl rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 08:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:e6:df:57:8c:59:af:f5:2c:f7:65:d9:df:d3:c4:a5:94:da:56:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=065943D1744CF4841A6D3D50944D2A4DB537A128 Validity Not Before: Jun 5 07:16:50 2025 GMT Not After : Jun 8 08:37:50 2025 GMT Subject: CN=A8E45D854DBB5A7C159F0D4B615EAA65558901BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ae:09:60:ea:16:6d:61:22:99:08:c1:f4:c4: 81:98:63:0f:e4:7a:f3:93:bb:d3:d2:b4:77:2d:85: fb:86:f7:89:54:f9:e0:32:51:c8:74:39:db:04:80: c1:ed:48:fd:51:a7:9f:c8:ff:f5:ba:96:7d:a5:3e: 97:e7:84:32:a1:09:3f:c6:01:45:f5:d8:85:96:b6: f1:71:76:24:c3:8a:77:a5:62:81:1d:07:b7:78:8f: de:0a:bc:82:f5:67:b8:fe:99:13:89:ba:47:01:56: a3:f7:0a:5e:20:4f:26:63:66:cf:a3:fb:13:a4:aa: cf:d9:91:6c:f8:01:34:d2:0c:c1:88:eb:ea:c5:a0: 55:83:e1:dc:2a:d7:da:e2:9a:d6:3b:9d:cd:45:15: 34:5b:9b:24:13:75:a7:0c:27:6d:a5:88:07:e0:99: 72:ee:ae:f8:a6:e3:38:00:49:8c:5f:d3:71:40:d0: 06:e8:e5:9f:9b:a4:92:e9:0b:47:85:b7:cc:9d:44: 18:0f:ac:00:30:40:b3:36:61:7f:67:a5:8d:a5:6c: 56:ca:56:41:cf:ea:58:89:a9:84:bb:4c:e2:f9:b8: b6:26:e9:80:a4:5c:55:57:a2:99:05:81:fa:21:a3: 27:8d:a3:8f:61:0a:86:ad:4c:94:c0:3c:33:30:08: 66:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E4:5D:85:4D:BB:5A:7C:15:9F:0D:4B:61:5E:AA:65:55:89:01:BF X509v3 Authority Key Identifier: keyid:06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:99:9b:95:ff:48:95:b1:20:8e:29:e6:4a:fd:3c:c5:3c:f9: 91:34:6f:11:2e:c9:27:41:d9:84:a3:f7:e4:dd:c2:88:d9:d8: 4a:ab:2e:f1:99:8b:ac:89:d4:fb:f8:1d:9d:4a:03:aa:2e:32: 8b:5d:63:3f:06:3e:d0:f2:da:ae:5a:3c:94:35:cf:f2:74:23: 8f:30:e2:46:87:80:14:15:ed:51:f0:88:92:83:e5:fc:fb:8c: a9:af:12:6c:c8:29:f5:a6:c1:bb:99:41:d0:ad:e7:a7:4d:ce: e2:cb:48:a4:03:0c:6a:8b:25:2e:eb:55:1f:a0:ec:a8:09:8e: 7b:1e:56:43:9e:f6:86:b2:1c:eb:f0:4c:75:67:df:c2:01:68: c0:fa:11:f3:d3:07:92:6d:88:14:7b:79:a2:66:c3:ba:12:f3: b6:46:26:e8:9f:e4:b8:5c:0a:2c:58:d8:83:14:8c:9e:20:d3: 05:6d:e0:6e:6e:67:de:25:5d:32:cd:4d:5f:03:0b:71:fa:f8: 99:06:d9:33:91:f2:25:1d:9c:58:36:52:f1:5c:0e:c1:10:f5: a8:08:66:16:ef:47:91:24:17:b3:42:11:0d:07:54:73:a7:fd: 2f:fd:90:9f:f8:3d:be:1e:f6:11:bb:a6:d0:94:95:5b:7c:cc: ce:ea:2a:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU+bfV4xZr/Us92XZ39PEpZTaVuowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY1OTQzRDE3NDRDRjQ4NDFBNkQzRDUwOTQ0RDJBNERC NTM3QTEyODAeFw0yNTA2MDUwNzE2NTBaFw0yNTA2MDgwODM3NTBaMDMxMTAvBgNV BAMTKEE4RTQ1RDg1NERCQjVBN0MxNTlGMEQ0QjYxNUVBQTY1NTU4OTAxQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqrglg6hZtYSKZCMH0xIGYYw/k evOTu9PStHcthfuG94lU+eAyUch0OdsEgMHtSP1Rp5/I//W6ln2lPpfnhDKhCT/G AUX12IWWtvFxdiTDinelYoEdB7d4j94KvIL1Z7j+mROJukcBVqP3Cl4gTyZjZs+j +xOkqs/ZkWz4ATTSDMGI6+rFoFWD4dwq19rimtY7nc1FFTRbmyQTdacMJ22liAfg mXLurvim4zgASYxf03FA0Abo5Z+bpJLpC0eFt8ydRBgPrAAwQLM2YX9npY2lbFbK VkHP6liJqYS7TOL5uLYm6YCkXFVXopkFgfohoyeNo49hCoatTJTAPDMwCGahAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqORdhU27WnwVnw1LYV6qZVWJAb8wHwYDVR0j BBgwFoAUBllD0XRM9IQabT1QlE0qTbU3oSgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTdlMTFkYy1mZjcxLTRlZDctYTY5NS04MzQ5MjJlMGUzNjEvMC8wNjU5NDNEMTc0 NENGNDg0MUE2RDNENTA5NDREMkE0REI1MzdBMTI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDY1OTQzRDE3NDRDRjQ4NDFBNkQzRDUwOTQ0RDJBNERCNTM3 QTEyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU3ZTExZGMtZmY3MS00ZWQ3LWE2 OTUtODM0OTIyZTBlMzYxLzAvMDY1OTQzRDE3NDRDRjQ4NDFBNkQzRDUwOTQ0RDJB NERCNTM3QTEyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACSZm5X/SJWxII4p5kr9PMU8+ZE0bxEuySdB 2YSj9+TdwojZ2EqrLvGZi6yJ1Pv4HZ1KA6ouMotdYz8GPtDy2q5aPJQ1z/J0I48w 4kaHgBQV7VHwiJKD5fz7jKmvEmzIKfWmwbuZQdCt56dNzuLLSKQDDGqLJS7rVR+g 7KgJjnseVkOe9oayHOvwTHVn38IBaMD6EfPTB5JtiBR7eaJmw7oS87ZGJuif5Lhc CixY2IMUjJ4g0wVt4G5uZ94lXTLNTV8DC3H6+JkG2TOR8iUdnFg2UvFcDsEQ9agI ZhbvR5EkF7NCEQ0HVHOn/S/9kJ/4Pb4e9hG7ptCUlVt8zM7qKmg= -----END CERTIFICATE-----Generated at Fri Jun 6 06:47:13 2025 by rpki-client