$ rpki-client -vvf repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft File: 5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft (raw, json) Hash identifier: x40RHS2gB6BYm0hIL4cdA+f9kuqZ3q6HvUrSvz0Ef5g= Subject key identifier: 95:62:F0:05:96:A0:B2:15:26:BE:8B:EE:2F:23:DD:43:85:9E:98:DC Authority key identifier: 51:97:E2:A7:8B:BA:1E:8C:9E:B8:08:E4:5A:99:DD:2B:E7:B4:12:97 Certificate issuer: /CN=5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297 Certificate serial: 395D51B8CE127A340CC3C3C4900B2E7EC4610471 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft Manifest number: 0182 Signing time: Mon 09 Jun 2025 19:41:25 +0000 Manifest this update: Mon 09 Jun 2025 19:36:25 +0000 Manifest next update: Fri 13 Jun 2025 01:51:25 +0000 Files and hashes: 1: 3130332e3132392e32322e302f32332d3234203d3e20313335343738.roa (hash: FwEnmWvpQPi3X//OQNwFe+4W6d+oidU+6VtbWJyAezc=) 2: 3130332e3132392e32302e302f32332d3234203d3e20313335343738.roa (hash: YByKLIatw2VYf9uIqdHXeYjHhsev8w+x71A+omd++qw=) 3: 5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl (hash: BZDFjEysGSlVVYu970kdqmd8j7UVjNtS9m5TGJzTVww=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 01:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:5d:51:b8:ce:12:7a:34:0c:c3:c3:c4:90:0b:2e:7e:c4:61:04:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297 Validity Not Before: Jun 9 19:36:25 2025 GMT Not After : Jun 13 01:51:25 2025 GMT Subject: CN=9562F00596A0B21526BE8BEE2F23DD43859E98DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7f:4f:29:73:f4:85:47:de:54:73:34:02:66: ee:df:30:da:0b:59:02:40:a5:ab:16:f1:20:55:44: 08:0f:5f:9a:bf:44:06:52:7f:13:24:02:71:0f:af: 72:41:87:e2:c0:4c:df:99:18:9c:89:17:19:f4:31: a9:9d:b0:fd:e4:51:d6:5f:d9:1c:eb:fa:de:20:63: 34:ba:57:78:fe:de:d5:95:c6:03:e8:a0:a5:28:f0: 84:89:a5:7f:25:44:b9:28:5e:3e:a6:cf:89:a5:6d: d3:34:16:53:73:8b:68:d2:3b:6d:53:45:a5:e5:93: 7c:cb:4d:cb:ea:b4:34:a0:39:f1:d8:24:97:74:1d: 78:44:12:aa:89:73:ea:10:75:09:ce:e9:06:a2:02: db:2f:d0:e4:ae:c8:28:3e:5a:a5:a8:98:27:09:01: 85:23:54:c1:2c:bc:8b:70:a1:94:d4:b8:aa:99:52: b9:14:4a:7a:81:15:4a:48:25:a1:45:e5:80:83:26: 0b:0f:60:3a:ab:3d:18:06:4b:92:2e:8d:45:3b:98: 8a:ff:2c:b9:b0:68:4a:88:5c:3e:34:bb:1a:88:a0: 33:c3:a3:33:5d:5e:24:1f:fe:e0:86:12:13:d7:4d: 2b:95:52:df:d3:03:10:b7:cf:59:46:68:02:66:20: 2d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:62:F0:05:96:A0:B2:15:26:BE:8B:EE:2F:23:DD:43:85:9E:98:DC X509v3 Authority Key Identifier: keyid:51:97:E2:A7:8B:BA:1E:8C:9E:B8:08:E4:5A:99:DD:2B:E7:B4:12:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:5b:46:cd:d6:9c:4d:7d:a1:af:4c:56:a5:37:54:73:a8:60: bc:51:c6:6a:e3:cd:34:a2:6d:ae:3e:5c:b5:8c:fb:a9:4b:38: da:dc:eb:ac:ee:c2:62:c3:74:a4:12:da:36:fc:0f:37:f4:0c: 08:50:e5:c6:d4:dd:c8:82:59:b2:c8:ca:c5:b6:70:70:08:ca: 5f:ed:2a:9d:76:dc:7a:10:ff:ff:22:86:75:36:45:47:70:1c: 91:cb:27:0b:dd:46:e8:3a:6d:5a:e9:73:19:48:e4:32:fc:c1: cf:00:7d:b3:1d:df:b2:ec:ad:59:61:b2:af:8f:19:79:e3:4b: e2:70:d6:ff:07:77:5c:aa:10:98:98:e5:11:39:e1:7f:be:a2: 8c:3c:73:2d:89:59:77:52:20:c9:89:ad:d3:f1:21:9f:50:dd: cb:ac:65:2f:f8:0d:bd:e9:7b:22:a8:6f:5c:dd:fb:82:4d:c3: fb:4f:e0:19:15:c8:b8:c9:fe:83:65:d6:74:0c:dd:10:db:80: d6:0e:2a:a4:0b:20:ce:22:53:03:f9:ed:ee:14:4d:6b:aa:c2: ae:36:87:37:b3:a4:5a:da:9b:70:ab:45:10:77:cb:59:48:35: e3:6b:ae:fe:b6:3e:3b:78:0c:48:8b:2a:ed:96:04:88:b6:2e: 00:31:2f:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOV1RuM4SejQMw8PEkAsufsRhBHEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE5N0UyQTc4QkJBMUU4QzlFQjgwOEU0NUE5OUREMkJF N0I0MTI5NzAeFw0yNTA2MDkxOTM2MjVaFw0yNTA2MTMwMTUxMjVaMDMxMTAvBgNV BAMTKDk1NjJGMDA1OTZBMEIyMTUyNkJFOEJFRTJGMjNERDQzODU5RTk4REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXf08pc/SFR95UczQCZu7fMNoL WQJApasW8SBVRAgPX5q/RAZSfxMkAnEPr3JBh+LATN+ZGJyJFxn0MamdsP3kUdZf 2Rzr+t4gYzS6V3j+3tWVxgPooKUo8ISJpX8lRLkoXj6mz4mlbdM0FlNzi2jSO21T RaXlk3zLTcvqtDSgOfHYJJd0HXhEEqqJc+oQdQnO6QaiAtsv0OSuyCg+WqWomCcJ AYUjVMEsvItwoZTUuKqZUrkUSnqBFUpIJaFF5YCDJgsPYDqrPRgGS5IujUU7mIr/ LLmwaEqIXD40uxqIoDPDozNdXiQf/uCGEhPXTSuVUt/TAxC3z1lGaAJmIC0JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlWLwBZagshUmvovuLyPdQ4WemNwwHwYDVR0j BBgwFoAUUZfip4u6HoyeuAjkWpndK+e0EpcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjU0MjgzOS0yODU4LTQ5ZjAtYWNkZi1mYTdkM2FiOWM1NTgvMC81MTk3RTJBNzhC QkExRThDOUVCODA4RTQ1QTk5REQyQkU3QjQxMjk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTE5N0UyQTc4QkJBMUU4QzlFQjgwOEU0NUE5OUREMkJFN0I0 MTI5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY1NDI4MzktMjg1OC00OWYwLWFj ZGYtZmE3ZDNhYjljNTU4LzAvNTE5N0UyQTc4QkJBMUU4QzlFQjgwOEU0NUE5OURE MkJFN0I0MTI5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI1bRs3WnE19oa9MVqU3VHOoYLxRxmrjzTSi ba4+XLWM+6lLONrc66zuwmLDdKQS2jb8Dzf0DAhQ5cbU3ciCWbLIysW2cHAIyl/t Kp123HoQ//8ihnU2RUdwHJHLJwvdRug6bVrpcxlI5DL8wc8AfbMd37LsrVlhsq+P GXnjS+Jw1v8Hd1yqEJiY5RE54X++oow8cy2JWXdSIMmJrdPxIZ9Q3cusZS/4Db3p eyKob1zd+4JNw/tP4BkVyLjJ/oNl1nQM3RDbgNYOKqQLIM4iUwP57e4UTWuqwq42 hzezpFram3CrRRB3y1lINeNrrv62Pjt4DEiLKu2WBIi2LgAxL9s= -----END CERTIFICATE-----Generated at Wed Jun 11 20:15:01 2025 by rpki-client