$ rpki-client -vvf repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft File: 5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft (raw, json) Hash identifier: KEWaLwJYhjQKM0zICscZHFCOjmWhQhS0BILaXg5LsyI= Subject key identifier: 9B:D7:73:68:A5:C0:7B:80:B9:D8:3E:03:DE:15:41:18:1E:0F:94:BA Authority key identifier: 57:87:AD:66:59:EA:8A:5E:40:18:87:6F:5F:9D:BD:9A:AA:F9:CA:1D Certificate issuer: /CN=5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D Certificate serial: 6FBE34BBA25D798DDC79D138407B0C3ED635AB6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft Manifest number: 01B7 Signing time: Thu 05 Jun 2025 15:31:47 +0000 Manifest this update: Thu 05 Jun 2025 15:26:47 +0000 Manifest next update: Mon 09 Jun 2025 01:03:47 +0000 Files and hashes: 1: 3130332e3130322e3235302e302f32342d3234203d3e20313336383632.roa (hash: SJWCctw3wDy04eyr8uGtaxTxeDcgqn25/ejSSAcBCus=) 2: 5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl (hash: p9fwHRYeyW6wQD9lb9zBPCK2lzD2AZXU2+wUFDKdj8M=) 3: 323030313a6466323a663130303a3a2f34382d3438203d3e20313336383632.roa (hash: ECBhF+e4+If0A3tMP/p9517WUpUqU+SxVkyIhiuFLnc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 21:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:be:34:bb:a2:5d:79:8d:dc:79:d1:38:40:7b:0c:3e:d6:35:ab:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D Validity Not Before: Jun 5 15:26:47 2025 GMT Not After : Jun 9 01:03:47 2025 GMT Subject: CN=9BD77368A5C07B80B9D83E03DE1541181E0F94BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:75:8d:a9:0b:55:af:ec:5b:ff:cf:26:2a:6d: 84:82:ab:75:07:63:b2:31:b8:f8:03:bc:be:73:6b: 77:75:f9:61:e8:c3:80:28:1e:f8:2e:84:6e:cd:be: e2:d7:38:1e:37:4c:36:fd:1d:73:50:56:b9:2b:8e: 43:f2:22:1e:bf:e4:88:63:f9:63:45:f0:49:b0:10: 10:05:c6:65:e8:f4:1c:ca:95:b0:ca:e9:92:9d:0b: 5e:05:f8:45:4d:2f:89:9d:3f:17:db:b4:4f:9d:b8: 56:71:0d:96:b5:6d:ac:03:46:8e:5d:bd:ef:46:ce: af:7e:98:44:94:b2:8e:84:f5:4e:b0:bb:12:ba:85: 53:43:1c:ad:9a:76:5e:c8:3b:ff:3f:7f:d5:12:8f: bb:ec:59:82:7c:bd:8d:1d:ec:21:51:4b:9b:f9:a4: cb:fd:9c:b6:85:ea:c6:bb:72:85:21:c2:97:ce:56: 50:04:62:5a:80:00:e6:a9:59:3e:17:fb:d4:a0:44: a4:51:a5:00:db:2e:e9:a6:6f:82:9d:b9:24:d6:e6: 03:49:8e:7c:5b:c1:e1:d1:06:93:2e:66:d2:ce:2a: 34:40:c7:b2:d7:d5:a0:68:3c:5d:bf:f2:37:f3:d2: 27:f2:3c:b6:92:8b:87:44:23:34:55:9d:83:99:84: f9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D7:73:68:A5:C0:7B:80:B9:D8:3E:03:DE:15:41:18:1E:0F:94:BA X509v3 Authority Key Identifier: keyid:57:87:AD:66:59:EA:8A:5E:40:18:87:6F:5F:9D:BD:9A:AA:F9:CA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:9a:d8:fb:47:59:57:86:39:39:5d:87:c1:d7:a6:7b:76:65: 42:ea:d7:86:48:49:63:b2:86:32:7a:95:38:57:90:87:cf:4b: 06:31:25:d8:7a:ee:c9:06:85:a7:72:87:ad:39:91:a3:c8:b4: 3a:c2:8a:da:9c:c9:89:e8:2f:d4:4e:60:86:c7:b4:2a:20:9c: 0f:24:e1:4b:fa:1b:88:3a:f5:1b:97:a4:14:92:51:4b:11:7f: 41:67:73:60:11:1b:c5:c2:af:7c:55:6d:0b:8c:b9:5f:3f:f6: c2:9f:c5:fd:96:b8:92:2d:4d:98:84:fb:7c:e1:36:59:1e:6c: 6f:b6:94:06:0f:c2:2a:4b:ff:43:7e:fc:ee:dd:d9:0a:81:53: f2:62:00:ec:36:85:d1:16:b8:dc:ab:f7:65:87:9c:e8:e9:2c: c0:b0:cd:74:18:94:bf:71:d3:ef:d7:a7:3d:e6:2c:38:76:a7: f2:10:a7:c9:d8:aa:1c:b1:2f:6f:56:59:eb:cc:bb:fc:f8:1d: d0:30:13:67:ce:dc:a2:b3:cb:76:7b:52:8e:eb:72:8a:66:63: 55:32:e4:3c:c6:ab:d5:7e:b8:0a:76:2e:0a:f4:c7:06:e1:db: 91:92:19:10:52:74:51:90:32:ff:55:23:b5:ba:36:3c:57:05: 27:3c:53:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb740u6JdeY3cedE4QHsMPtY1q20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJEOUFB QUY5Q0ExRDAeFw0yNTA2MDUxNTI2NDdaFw0yNTA2MDkwMTAzNDdaMDMxMTAvBgNV BAMTKDlCRDc3MzY4QTVDMDdCODBCOUQ4M0UwM0RFMTU0MTE4MUUwRjk0QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpdY2pC1Wv7Fv/zyYqbYSCq3UH Y7IxuPgDvL5za3d1+WHow4AoHvguhG7NvuLXOB43TDb9HXNQVrkrjkPyIh6/5Ihj +WNF8EmwEBAFxmXo9BzKlbDK6ZKdC14F+EVNL4mdPxfbtE+duFZxDZa1bawDRo5d ve9Gzq9+mESUso6E9U6wuxK6hVNDHK2adl7IO/8/f9USj7vsWYJ8vY0d7CFRS5v5 pMv9nLaF6sa7coUhwpfOVlAEYlqAAOapWT4X+9SgRKRRpQDbLummb4KduSTW5gNJ jnxbweHRBpMuZtLOKjRAx7LX1aBoPF2/8jfz0ifyPLaSi4dEIzRVnYOZhPnzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm9dzaKXAe4C52D4D3hVBGB4PlLowHwYDVR0j BBgwFoAUV4etZlnqil5AGIdvX529mqr5yh0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWI4ZTc3NC0xNjgzLTQ1NmQtYmJjMC0zNDMyMjVmMTdmNGMvMC81Nzg3QUQ2NjU5 RUE4QTVFNDAxODg3NkY1RjlEQkQ5QUFBRjlDQTFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJEOUFBQUY5 Q0ExRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTViOGU3NzQtMTY4My00NTZkLWJi YzAtMzQzMjI1ZjE3ZjRjLzAvNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJE OUFBQUY5Q0ExRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6a2PtHWVeGOTldh8HXpnt2ZULq14ZISWOy hjJ6lThXkIfPSwYxJdh67skGhadyh605kaPItDrCitqcyYnoL9ROYIbHtCognA8k 4Uv6G4g69RuXpBSSUUsRf0Fnc2ARG8XCr3xVbQuMuV8/9sKfxf2WuJItTZiE+3zh NlkebG+2lAYPwipL/0N+/O7d2QqBU/JiAOw2hdEWuNyr92WHnOjpLMCwzXQYlL9x 0+/Xpz3mLDh2p/IQp8nYqhyxL29WWevMu/z4HdAwE2fO3KKzy3Z7Uo7rcopmY1Uy 5DzGq9V+uAp2Lgr0xwbh25GSGRBSdFGQMv9VI7W6NjxXBSc8U1M= -----END CERTIFICATE-----Generated at Thu Jun 5 18:25:15 2025 by rpki-client