$ rpki-client -vvf repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft File: D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft (raw, json) Hash identifier: HU19+1OAdWh4hMFwyVUZOS1wYRCjS72s+6thRe2PYLc= Subject key identifier: A7:9F:16:12:45:32:20:7F:B1:F6:4C:72:85:8E:2D:E0:9E:F6:35:29 Authority key identifier: D1:75:BD:C5:A6:41:4C:EB:AB:47:2D:F9:15:9C:BD:32:BC:CF:91:EA Certificate issuer: /CN=D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA Certificate serial: 71145C673F1047FA84BCCEB62DC6E48F2019365F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft Manifest number: 0181 Signing time: Mon 02 Jun 2025 04:30:00 +0000 Manifest this update: Mon 02 Jun 2025 04:25:00 +0000 Manifest next update: Thu 05 Jun 2025 09:17:00 +0000 Files and hashes: 1: D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.crl (hash: CJn9pGIWjGzauWgTMLCijVdUmg0R8pSH9UZ7uF6ebPE=) 2: 3130332e3132362e3233382e302f32342d3234203d3e20313530353033.roa (hash: oxyDXrOoZ/zCFS3Gztc4WC6OS30QoAhbYVI4h5EBUSY=) 3: 323030313a6466313a646534303a3a2f34382d3438203d3e20313530353033.roa (hash: LHo1zMaie53AFYRQsAMBj1avC34kq9NJCGSH/LsdSnI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.crl rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 09:17:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:14:5c:67:3f:10:47:fa:84:bc:ce:b6:2d:c6:e4:8f:20:19:36:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA Validity Not Before: Jun 2 04:25:00 2025 GMT Not After : Jun 5 09:17:00 2025 GMT Subject: CN=A79F16124532207FB1F64C72858E2DE09EF63529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0f:fd:1a:bc:fb:f8:3f:cd:a3:5b:aa:14:38: 75:2c:cd:92:46:98:ea:d3:ec:13:2d:77:c4:a3:7b: 9f:47:a4:22:06:3b:c3:8b:69:2b:75:e8:cc:a6:ce: 6c:1f:67:36:8b:6f:7c:5d:0b:06:84:78:4d:18:97: 16:19:ee:ea:40:d3:8e:76:03:cd:ea:dc:2e:0d:58: 84:55:26:7a:7a:f5:e0:57:96:81:ec:bb:39:c3:8a: 98:40:26:63:85:72:a4:9f:1a:56:f5:84:30:f3:16: 0f:9d:e2:0e:c8:bd:0d:d9:e1:8b:67:95:9e:80:15: eb:93:2b:5e:eb:f6:63:a6:ae:cd:85:20:05:29:c1: bf:8e:fb:3a:36:e2:30:b6:18:77:ef:2b:ae:d4:72: 62:83:0c:cf:cf:ba:d4:61:2b:2c:7d:2a:88:d3:37: 4d:77:fb:dc:5f:ba:d6:eb:13:0c:ee:d7:ae:33:43: 74:5c:6c:3e:0c:18:73:e8:70:8c:19:56:3b:a0:01: bd:75:36:5b:b6:4d:77:4c:d1:c3:ff:8e:48:ec:46: 07:61:6b:7d:cc:5a:18:40:03:2e:75:8d:8e:38:0e: fe:a6:3b:10:66:e3:94:a9:96:a2:62:dc:8d:c1:99: 5a:36:f3:4f:19:34:f5:a0:b6:6c:e4:9e:72:43:55: c9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:9F:16:12:45:32:20:7F:B1:F6:4C:72:85:8E:2D:E0:9E:F6:35:29 X509v3 Authority Key Identifier: keyid:D1:75:BD:C5:A6:41:4C:EB:AB:47:2D:F9:15:9C:BD:32:BC:CF:91:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:2f:29:13:c0:6a:1a:cc:71:7c:1e:dc:3b:2b:ea:8f:20:62: 37:8d:58:e0:2d:a4:00:bc:a9:17:51:4c:0b:f1:c1:c2:d2:27: 2d:9b:08:b6:0c:4f:d1:f3:f5:45:37:80:e5:ed:5b:2f:f5:f5: ef:55:0d:81:0c:c9:46:3c:d1:16:40:19:e6:ff:52:6e:6c:26: 26:a2:6a:f9:64:ed:57:7b:58:77:9c:21:9f:4d:2c:9d:57:a7: bc:77:27:c3:d5:5a:b5:b9:00:d1:2b:56:fb:a1:1e:6c:6d:1a: 9e:c1:f5:4d:15:b4:bb:f1:a2:96:7f:c8:cf:f8:e3:68:98:bc: 0e:c7:f2:c6:9c:29:87:ef:57:da:07:3b:c6:24:51:41:f7:a3: af:12:5b:7b:7d:f6:f3:20:7d:bd:9f:10:1d:1d:bf:61:8e:be: f6:51:da:c2:12:29:97:86:41:7c:0c:31:ff:13:fb:53:5f:5d: c8:02:c0:1c:3c:ea:b5:fe:67:18:d6:ca:95:5c:d7:a0:26:b8: e7:d8:67:a0:c8:57:0b:ad:f7:44:3e:11:75:d6:6d:88:7c:c8: 58:bc:2b:00:52:59:75:35:9c:b0:d5:cc:44:1a:e0:84:47:0e: ee:e6:5b:a7:00:2c:5d:60:71:77:af:8f:5f:0b:f5:c5:3b:49: 38:32:86:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcRRcZz8QR/qEvM62LcbkjyAZNl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE3NUJEQzVBNjQxNENFQkFCNDcyREY5MTU5Q0JEMzJC Q0NGOTFFQTAeFw0yNTA2MDIwNDI1MDBaFw0yNTA2MDUwOTE3MDBaMDMxMTAvBgNV BAMTKEE3OUYxNjEyNDUzMjIwN0ZCMUY2NEM3Mjg1OEUyREUwOUVGNjM1MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgD/0avPv4P82jW6oUOHUszZJG mOrT7BMtd8Sje59HpCIGO8OLaSt16MymzmwfZzaLb3xdCwaEeE0YlxYZ7upA0452 A83q3C4NWIRVJnp69eBXloHsuznDiphAJmOFcqSfGlb1hDDzFg+d4g7IvQ3Z4Ytn lZ6AFeuTK17r9mOmrs2FIAUpwb+O+zo24jC2GHfvK67UcmKDDM/PutRhKyx9KojT N013+9xfutbrEwzu164zQ3RcbD4MGHPocIwZVjugAb11Nlu2TXdM0cP/jkjsRgdh a33MWhhAAy51jY44Dv6mOxBm45SplqJi3I3BmVo2808ZNPWgtmzknnJDVck/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp58WEkUyIH+x9kxyhY4t4J72NSkwHwYDVR0j BBgwFoAU0XW9xaZBTOurRy35FZy9MrzPkeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NjJkNGQ3NC02Mjk1LTQ0OTYtODIzYS0xZThhM2Q1YmJiNmMvMC9EMTc1QkRDNUE2 NDE0Q0VCQUI0NzJERjkxNTlDQkQzMkJDQ0Y5MUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDE3NUJEQzVBNjQxNENFQkFCNDcyREY5MTU5Q0JEMzJCQ0NG OTFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODYyZDRkNzQtNjI5NS00NDk2LTgy M2EtMWU4YTNkNWJiYjZjLzAvRDE3NUJEQzVBNjQxNENFQkFCNDcyREY5MTU5Q0JE MzJCQ0NGOTFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC4vKRPAahrMcXwe3Dsr6o8gYjeNWOAtpAC8 qRdRTAvxwcLSJy2bCLYMT9Hz9UU3gOXtWy/19e9VDYEMyUY80RZAGeb/Um5sJiai avlk7Vd7WHecIZ9NLJ1Xp7x3J8PVWrW5ANErVvuhHmxtGp7B9U0VtLvxopZ/yM/4 42iYvA7H8sacKYfvV9oHO8YkUUH3o68SW3t99vMgfb2fEB0dv2GOvvZR2sISKZeG QXwMMf8T+1NfXcgCwBw86rX+ZxjWypVc16AmuOfYZ6DIVwut90Q+EXXWbYh8yFi8 KwBSWXU1nLDVzEQa4IRHDu7mW6cALF1gcXevj18L9cU7STgyhts= -----END CERTIFICATE-----Generated at Tue Jun 3 23:34:20 2025 by rpki-client