$ rpki-client -vvf repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft File: 575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft (raw, json) Hash identifier: Hfk7B1r9E8Y0EXYtZzDy5xPyjb3lwJZNBzbjI/lHhr0= Subject key identifier: 0E:6B:F4:6F:00:0A:74:6F:2B:02:FA:75:C2:EC:C0:6D:C4:E0:81:25 Authority key identifier: 57:5C:39:86:5D:3A:E2:3D:CC:C3:22:AD:08:D1:42:4F:D4:0F:B8:C2 Certificate issuer: /CN=575C39865D3AE23DCCC322AD08D1424FD40FB8C2 Certificate serial: 23B7B3D5DDF8B45A88684745BBF3457C3E3604F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft Manifest number: 0103 Signing time: Tue 03 Jun 2025 14:53:00 +0000 Manifest this update: Tue 03 Jun 2025 14:48:00 +0000 Manifest next update: Fri 06 Jun 2025 23:32:00 +0000 Files and hashes: 1: 575C39865D3AE23DCCC322AD08D1424FD40FB8C2.crl (hash: GplwnKCEwL/NB6u0iUzrLwb4EwWm6nkrF3WuGXzCExk=) 2: 3130332e3235302e3132392e302f32342d3234203d3e20313531353536.roa (hash: /A9HXd13I0+DkmsbISwlDHjrM6YvxlLYkQQcEaMVLGM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.crl rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:b7:b3:d5:dd:f8:b4:5a:88:68:47:45:bb:f3:45:7c:3e:36:04:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=575C39865D3AE23DCCC322AD08D1424FD40FB8C2 Validity Not Before: Jun 3 14:48:00 2025 GMT Not After : Jun 6 23:32:00 2025 GMT Subject: CN=0E6BF46F000A746F2B02FA75C2ECC06DC4E08125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ec:f5:7b:47:47:94:dc:92:cd:d7:0e:e8:35: a5:e3:dd:d9:fd:74:85:a5:e1:de:eb:5c:ce:c1:60: 01:92:02:d2:d5:28:24:cf:4b:e2:12:d8:d9:76:40: 6d:7d:3e:48:14:e6:bb:5a:58:9d:78:aa:ea:d0:e0: eb:2c:be:5a:05:dd:60:5a:29:a4:db:81:bd:e7:d5: 80:b9:83:08:82:74:51:b9:02:49:e8:71:bf:8b:56: 03:08:8f:68:e8:16:54:85:23:91:45:1c:60:49:63: 14:f2:2b:d9:d0:f7:cc:5e:17:55:71:23:b1:38:60: dc:93:c8:03:13:75:44:03:54:ff:00:90:6e:17:1e: 70:f4:bf:2a:a5:0b:41:c9:bd:95:4d:28:16:3d:6c: 38:4d:d9:bb:1b:72:bd:04:3d:d3:48:81:b8:fe:fd: f0:b5:d8:95:06:87:94:68:02:63:18:df:ee:ff:a8: a2:d7:1b:37:49:f2:53:2d:0b:71:10:84:81:6f:fa: ec:c8:da:c5:6a:d7:7b:ee:18:c0:b6:9c:72:b7:da: a4:43:bd:fd:60:4d:9e:fa:df:c4:c3:84:32:95:b4: b4:66:6d:cd:9f:54:19:e4:e9:02:2c:10:85:f0:cb: c2:d0:22:ed:b4:d2:8a:93:d7:39:96:02:93:37:b1: 13:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:6B:F4:6F:00:0A:74:6F:2B:02:FA:75:C2:EC:C0:6D:C4:E0:81:25 X509v3 Authority Key Identifier: keyid:57:5C:39:86:5D:3A:E2:3D:CC:C3:22:AD:08:D1:42:4F:D4:0F:B8:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:64:c2:5b:e8:d5:78:87:0b:70:d6:e8:84:1c:4b:54:f9:cd: e8:bf:f9:99:cf:4f:05:36:b9:01:b7:e1:94:02:b8:fe:ff:98: dd:d8:bc:ad:e3:6d:a7:49:8d:72:88:82:10:41:5b:f6:3b:e0: 3a:63:58:71:a4:65:fc:07:36:49:ee:a1:3b:e0:3a:41:91:17: 67:6a:2a:bb:c3:90:90:f2:20:a1:71:8b:b1:3d:99:0d:74:62: ec:a5:db:7d:59:be:80:78:0d:b3:47:58:7f:5c:02:e2:df:6e: 72:45:9c:18:2d:4d:8b:9f:ee:e1:da:c6:b0:e9:13:9d:f0:ac: 77:32:74:e1:ae:0d:9e:b1:cf:ae:4e:c8:e1:2e:65:f3:0e:f4: 15:60:cb:cb:f6:27:d1:a9:5b:9e:bc:fa:9e:8a:9d:43:35:86: 7e:da:c6:1a:27:22:e0:79:7d:ce:d3:52:fe:27:78:17:a2:bb: 11:71:c2:76:b3:3f:77:09:45:e9:0a:d2:9b:d3:08:b4:a1:8b: e0:a6:fe:78:51:62:d9:a0:fb:b0:9a:d7:63:54:64:f3:e3:c3: b1:1b:b5:c6:e1:8e:37:bb:a8:8d:4e:0a:b1:4e:01:54:cc:ec: c4:f9:51:f0:72:1b:da:d3:1a:9e:eb:cd:40:7e:28:43:7a:1d: 3a:76:6c:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI7ez1d34tFqIaEdFu/NFfD42BPEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc1QzM5ODY1RDNBRTIzRENDQzMyMkFEMDhEMTQyNEZE NDBGQjhDMjAeFw0yNTA2MDMxNDQ4MDBaFw0yNTA2MDYyMzMyMDBaMDMxMTAvBgNV BAMTKDBFNkJGNDZGMDAwQTc0NkYyQjAyRkE3NUMyRUNDMDZEQzRFMDgxMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS7PV7R0eU3JLN1w7oNaXj3dn9 dIWl4d7rXM7BYAGSAtLVKCTPS+IS2Nl2QG19PkgU5rtaWJ14qurQ4OssvloF3WBa KaTbgb3n1YC5gwiCdFG5Aknocb+LVgMIj2joFlSFI5FFHGBJYxTyK9nQ98xeF1Vx I7E4YNyTyAMTdUQDVP8AkG4XHnD0vyqlC0HJvZVNKBY9bDhN2bsbcr0EPdNIgbj+ /fC12JUGh5RoAmMY3+7/qKLXGzdJ8lMtC3EQhIFv+uzI2sVq13vuGMC2nHK32qRD vf1gTZ7638TDhDKVtLRmbc2fVBnk6QIsEIXwy8LQIu200oqT1zmWApM3sRPlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDmv0bwAKdG8rAvp1wuzAbcTggSUwHwYDVR0j BBgwFoAUV1w5hl064j3MwyKtCNFCT9QPuMIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTFkOWFiYy00OTg3LTRkYmMtOTc2ZC0zZjMyYjI5MTcxNWQvMC81NzVDMzk4NjVE M0FFMjNEQ0NDMzIyQUQwOEQxNDI0RkQ0MEZCOEMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTc1QzM5ODY1RDNBRTIzRENDQzMyMkFEMDhEMTQyNEZENDBG QjhDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODExZDlhYmMtNDk4Ny00ZGJjLTk3 NmQtM2YzMmIyOTE3MTVkLzAvNTc1QzM5ODY1RDNBRTIzRENDQzMyMkFEMDhEMTQy NEZENDBGQjhDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAClkwlvo1XiHC3DW6IQcS1T5zei/+ZnPTwU2 uQG34ZQCuP7/mN3YvK3jbadJjXKIghBBW/Y74DpjWHGkZfwHNknuoTvgOkGRF2dq KrvDkJDyIKFxi7E9mQ10Yuyl231ZvoB4DbNHWH9cAuLfbnJFnBgtTYuf7uHaxrDp E53wrHcydOGuDZ6xz65OyOEuZfMO9BVgy8v2J9GpW568+p6KnUM1hn7axhonIuB5 fc7TUv4neBeiuxFxwnazP3cJRekK0pvTCLShi+Cm/nhRYtmg+7Ca12NUZPPjw7Eb tcbhjje7qI1OCrFOAVTM7MT5UfByG9rTGp7rzUB+KEN6HTp2bPw= -----END CERTIFICATE-----Generated at Tue Jun 3 23:10:15 2025 by rpki-client