$ rpki-client -vvf repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft File: 5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft (raw, json) Hash identifier: dm6BXpxRojaqrQslhZTQvM6Sor1JKKsXOvw653azpdI= Subject key identifier: 40:0A:28:13:12:1A:3A:B9:C8:B8:C4:F4:18:9B:DC:24:53:57:81:B9 Authority key identifier: 51:97:E2:A7:8B:BA:1E:8C:9E:B8:08:E4:5A:99:DD:2B:E7:B4:12:97 Certificate issuer: /CN=5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297 Certificate serial: 039457DEBEDC813490C08B460EA13C52F679D6BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft Manifest number: 0181 Signing time: Sat 07 Jun 2025 15:11:25 +0000 Manifest this update: Sat 07 Jun 2025 15:06:25 +0000 Manifest next update: Tue 10 Jun 2025 19:37:25 +0000 Files and hashes: 1: 3130332e3132392e32302e302f32332d3234203d3e20313335343738.roa (hash: YByKLIatw2VYf9uIqdHXeYjHhsev8w+x71A+omd++qw=) 2: 5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl (hash: n8UyZOUgjYpUkM9konbDgdacoJlxYeVh176b5pTgsEM=) 3: 3130332e3132392e32322e302f32332d3234203d3e20313335343738.roa (hash: FwEnmWvpQPi3X//OQNwFe+4W6d+oidU+6VtbWJyAezc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 19:37:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:94:57:de:be:dc:81:34:90:c0:8b:46:0e:a1:3c:52:f6:79:d6:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297 Validity Not Before: Jun 7 15:06:25 2025 GMT Not After : Jun 10 19:37:25 2025 GMT Subject: CN=400A2813121A3AB9C8B8C4F4189BDC24535781B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1a:71:3c:ab:d0:77:dd:e9:94:75:cd:e9:43: ba:a8:57:fa:b2:10:49:b0:1e:01:62:ba:13:81:e2: b5:72:e8:ab:01:6d:7b:c0:d8:be:d1:97:90:68:86: 22:ae:7c:e4:be:ad:92:ea:f8:40:ad:84:06:d2:9f: d8:9c:5d:d0:22:1c:09:ff:90:a0:64:2a:5f:bc:d9: f7:28:7b:ed:d4:cf:9c:15:57:13:77:2e:ec:fe:90: f4:a4:ca:b5:f4:7e:dc:ef:38:c2:8c:ad:de:62:94: b7:77:4e:49:e8:49:78:aa:82:ee:d6:c8:62:27:2f: bd:4c:22:48:b7:e9:04:ff:db:7b:6e:a5:12:1d:51: 47:1a:87:51:3c:98:d7:85:1f:66:26:db:47:7b:a4: 44:fc:32:6d:d6:e8:d6:33:67:dc:fb:63:8a:61:7d: 9b:a6:ed:2c:42:25:c6:99:d0:eb:2e:db:d4:80:e0: 11:19:f7:bd:7c:43:1b:a2:71:9a:66:f6:ae:6e:b7: 3b:b4:e1:4f:cf:5b:a2:a6:c0:c6:27:96:ba:fb:10: 24:90:c1:e3:d8:b3:da:b7:ec:50:66:d7:9b:d8:d5: 3d:cc:f4:98:73:34:ee:c3:bf:8f:d4:84:c5:6e:46: 3c:c0:e4:d8:f3:9b:2b:95:17:b5:6d:4d:6e:e5:3a: 70:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:0A:28:13:12:1A:3A:B9:C8:B8:C4:F4:18:9B:DC:24:53:57:81:B9 X509v3 Authority Key Identifier: keyid:51:97:E2:A7:8B:BA:1E:8C:9E:B8:08:E4:5A:99:DD:2B:E7:B4:12:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ed:0d:b3:45:a0:31:59:c4:9d:aa:c9:8d:78:a0:97:79:9b: 50:c4:10:d3:87:7f:9f:7d:1a:71:36:3a:e4:e3:f5:94:12:72: 24:fa:35:0a:6b:78:85:c9:23:8a:93:f9:cf:4c:cf:41:92:e2: 90:af:43:6e:9d:aa:0f:13:ec:2d:60:6d:3f:ee:04:bb:b9:46: 78:3e:85:c4:82:27:43:08:8f:81:f0:79:7b:1c:86:60:ed:e6: f6:77:f2:8e:6f:d7:80:47:8b:9a:bc:74:5e:1a:94:00:d3:79: 08:0c:9d:8d:da:1a:83:9f:85:65:e5:af:c3:2e:04:25:54:52: 8a:2d:c4:9b:65:43:d4:17:42:0c:28:ac:e6:01:24:52:48:4d: ce:a1:2c:b1:03:9d:eb:6a:ec:d7:10:af:d0:1a:ff:0a:9a:bc: e8:7a:aa:4a:e7:5d:2c:e0:d8:e4:05:52:0b:30:49:c1:3c:e2: 1b:d5:53:5a:44:c2:b1:cf:fb:19:7b:98:9b:3f:23:dc:91:12: f2:44:aa:6f:25:b1:28:de:bd:78:bb:e2:19:b1:ca:a7:4e:a1: 9a:69:42:af:81:07:93:f1:b5:26:cd:c8:1e:37:f9:eb:a0:1a: 2b:a8:5f:ee:33:23:a5:65:ac:73:3b:f7:f2:41:d5:0d:84:aa: e7:7d:42:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA5RX3r7cgTSQwItGDqE8UvZ51r0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE5N0UyQTc4QkJBMUU4QzlFQjgwOEU0NUE5OUREMkJF N0I0MTI5NzAeFw0yNTA2MDcxNTA2MjVaFw0yNTA2MTAxOTM3MjVaMDMxMTAvBgNV BAMTKDQwMEEyODEzMTIxQTNBQjlDOEI4QzRGNDE4OUJEQzI0NTM1NzgxQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhGnE8q9B33emUdc3pQ7qoV/qy EEmwHgFiuhOB4rVy6KsBbXvA2L7Rl5BohiKufOS+rZLq+ECthAbSn9icXdAiHAn/ kKBkKl+82fcoe+3Uz5wVVxN3Luz+kPSkyrX0ftzvOMKMrd5ilLd3TknoSXiqgu7W yGInL71MIki36QT/23tupRIdUUcah1E8mNeFH2Ym20d7pET8Mm3W6NYzZ9z7Y4ph fZum7SxCJcaZ0Osu29SA4BEZ9718QxuicZpm9q5utzu04U/PW6KmwMYnlrr7ECSQ wePYs9q37FBm15vY1T3M9JhzNO7Dv4/UhMVuRjzA5NjzmyuVF7VtTW7lOnCTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQAooExIaOrnIuMT0GJvcJFNXgbkwHwYDVR0j BBgwFoAUUZfip4u6HoyeuAjkWpndK+e0EpcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjU0MjgzOS0yODU4LTQ5ZjAtYWNkZi1mYTdkM2FiOWM1NTgvMC81MTk3RTJBNzhC QkExRThDOUVCODA4RTQ1QTk5REQyQkU3QjQxMjk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTE5N0UyQTc4QkJBMUU4QzlFQjgwOEU0NUE5OUREMkJFN0I0 MTI5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY1NDI4MzktMjg1OC00OWYwLWFj ZGYtZmE3ZDNhYjljNTU4LzAvNTE5N0UyQTc4QkJBMUU4QzlFQjgwOEU0NUE5OURE MkJFN0I0MTI5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3tDbNFoDFZxJ2qyY14oJd5m1DEENOHf599 GnE2OuTj9ZQSciT6NQpreIXJI4qT+c9Mz0GS4pCvQ26dqg8T7C1gbT/uBLu5Rng+ hcSCJ0MIj4HweXschmDt5vZ38o5v14BHi5q8dF4alADTeQgMnY3aGoOfhWXlr8Mu BCVUUootxJtlQ9QXQgworOYBJFJITc6hLLEDnetq7NcQr9Aa/wqavOh6qkrnXSzg 2OQFUgswScE84hvVU1pEwrHP+xl7mJs/I9yREvJEqm8lsSjevXi74hmxyqdOoZpp Qq+BB5PxtSbNyB43+eugGiuoX+4zI6VlrHM79/JB1Q2Equd9QvE= -----END CERTIFICATE-----Generated at Mon Jun 9 14:29:58 2025 by rpki-client