$ rpki-client -vvf repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft File: 754AE571E3432B20E78045BE7B2C99E39E0F1873.mft (raw, json) Hash identifier: R0hm4Hukc39dCfw4iAYpFkvvLdJUa92RbwvPTazGe0Y= Subject key identifier: C4:5B:71:61:56:2B:20:E5:8F:6A:F6:6D:A6:7D:DA:12:5F:04:AB:B8 Authority key identifier: 75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73 Certificate issuer: /CN=754AE571E3432B20E78045BE7B2C99E39E0F1873 Certificate serial: 0850A530BA0093F7613AF39111C11CD270CEA1A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft Manifest number: 01EE Signing time: Sat 07 Jun 2025 17:02:03 +0000 Manifest this update: Sat 07 Jun 2025 16:57:03 +0000 Manifest next update: Tue 10 Jun 2025 21:47:03 +0000 Files and hashes: 1: 754AE571E3432B20E78045BE7B2C99E39E0F1873.crl (hash: G9MH8yhlBpMyhGVxcYPyI7o5+wMdJP6kJfDHyTFklR8=) 2: 3130332e372e3232362e302f32342d3234203d3e203539313335.roa (hash: ULIbSqFPc52R9R1cvdi/vhMuEMKYuHRy3ZrMm+omXuQ=) 3: 3130332e372e3232372e302f32342d3234203d3e203539313335.roa (hash: hKOsZmZYjU+WD+18E9UM9iWVv7em54RfKZekQBf+kf4=) 4: 3130332e372e3232362e302f32332d3233203d3e203539313335.roa (hash: /qz+/FrTyvqN+lKfQMLM9vGRBCrWv6ZRIa9kSi7cy5M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.crl rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 21:47:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:50:a5:30:ba:00:93:f7:61:3a:f3:91:11:c1:1c:d2:70:ce:a1:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=754AE571E3432B20E78045BE7B2C99E39E0F1873 Validity Not Before: Jun 7 16:57:03 2025 GMT Not After : Jun 10 21:47:03 2025 GMT Subject: CN=C45B7161562B20E58F6AF66DA67DDA125F04ABB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7f:6c:b7:b9:79:ce:bb:18:2c:31:ff:db:4d: 3d:95:d4:0a:f1:d4:c0:1e:16:d8:fa:60:97:f6:79: 16:3a:f5:3c:1c:80:ee:2d:e0:b3:53:b4:62:3a:ea: f2:75:45:8c:50:fb:7e:69:a3:06:53:f6:5e:91:7a: 8a:33:cf:2c:9a:3d:49:62:02:b9:4a:e4:e2:d2:55: e9:a8:62:29:7e:41:59:bb:f8:89:24:e1:79:82:a5: 15:20:3c:04:83:30:3e:0d:48:53:34:c8:b7:aa:78: a9:73:ba:61:fb:0f:0d:ad:5b:50:42:2d:35:38:0d: 47:3a:c5:f7:c5:d6:64:da:ba:0f:c8:59:17:99:cb: f0:26:08:db:3d:cd:14:aa:0b:7b:21:9a:63:95:d4: 29:c4:7d:22:d3:63:9b:fa:c1:a0:b8:37:a8:9b:39: b1:42:58:f6:52:f7:bb:0e:39:4e:89:94:3c:fb:1b: 1e:93:65:f3:9c:d5:01:b5:20:8f:bc:23:94:e3:0d: ec:75:e1:17:4d:cb:f3:8d:08:f5:55:c7:a1:4f:f7: 08:2d:cf:b1:c1:b1:da:b9:ad:bf:03:48:bc:a1:70: 8a:90:d1:c0:4c:8e:4b:13:d9:f5:7f:bf:c3:74:d5: 5e:f4:7d:8b:3e:0e:f9:c6:eb:cf:e6:8e:b5:8b:d6: e1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5B:71:61:56:2B:20:E5:8F:6A:F6:6D:A6:7D:DA:12:5F:04:AB:B8 X509v3 Authority Key Identifier: keyid:75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:66:1e:60:45:60:68:cb:da:15:d1:19:87:fa:2b:21:5d:2f: 6f:06:9c:07:4a:f9:22:b2:fb:6d:3b:f0:12:7e:af:2a:b6:f5: 8d:a1:68:95:4b:dd:6e:c1:8d:2f:34:65:70:ff:6f:89:7c:79: b3:31:62:a0:c6:30:9a:c4:7a:c9:9b:17:55:38:5b:56:61:47: b9:da:50:a5:36:8e:ef:eb:35:3f:ee:bf:0b:58:3d:b3:51:f8: 0f:24:ed:45:d8:3e:ba:4e:bf:10:7d:6d:2f:f2:e4:a9:38:13: dd:51:08:84:a6:e7:bd:2d:58:9c:1a:2d:0d:eb:67:4a:77:b8: 6f:86:e6:e4:8e:da:ab:9a:fe:f7:39:59:b0:0b:bf:fd:c6:e9: 62:e4:ae:30:90:c1:25:11:45:ec:b0:35:1e:34:96:c3:fc:0e: 5d:3e:1c:a5:8d:b4:da:4d:14:02:30:53:3e:b2:75:fc:c2:5d: 24:ba:60:e6:17:80:b6:af:cd:b2:1c:60:00:40:ac:6f:62:ce: 1e:a6:af:5b:86:9f:d3:bc:d4:e6:77:2e:47:b9:c2:50:6a:2f: a3:03:11:51:f9:0f:53:66:8f:fd:22:40:13:de:af:dc:91:21: 64:dc:ee:35:8b:4a:44:4f:bf:3f:2c:2d:4b:96:da:98:d3:4e: e2:4b:d6:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCFClMLoAk/dhOvOREcEc0nDOoagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzU0QUU1NzFFMzQzMkIyMEU3ODA0NUJFN0IyQzk5RTM5 RTBGMTg3MzAeFw0yNTA2MDcxNjU3MDNaFw0yNTA2MTAyMTQ3MDNaMDMxMTAvBgNV BAMTKEM0NUI3MTYxNTYyQjIwRTU4RjZBRjY2REE2N0REQTEyNUYwNEFCQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaf2y3uXnOuxgsMf/bTT2V1Arx 1MAeFtj6YJf2eRY69TwcgO4t4LNTtGI66vJ1RYxQ+35powZT9l6ReoozzyyaPUli ArlK5OLSVemoYil+QVm7+Ikk4XmCpRUgPASDMD4NSFM0yLeqeKlzumH7Dw2tW1BC LTU4DUc6xffF1mTaug/IWReZy/AmCNs9zRSqC3shmmOV1CnEfSLTY5v6waC4N6ib ObFCWPZS97sOOU6JlDz7Gx6TZfOc1QG1II+8I5TjDex14RdNy/ONCPVVx6FP9wgt z7HBsdq5rb8DSLyhcIqQ0cBMjksT2fV/v8N01V70fYs+DvnG68/mjrWL1uHrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxFtxYVYrIOWPavZtpn3aEl8Eq7gwHwYDVR0j BBgwFoAUdUrlceNDKyDngEW+eyyZ454PGHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjM1OGRkYS0wZmYxLTRmNmEtYmI2Ni02MGY0Y2EwNGM0OTAvMC83NTRBRTU3MUUz NDMyQjIwRTc4MDQ1QkU3QjJDOTlFMzlFMEYxODczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzU0QUU1NzFFMzQzMkIyMEU3ODA0NUJFN0IyQzk5RTM5RTBG MTg3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNThkZGEtMGZmMS00ZjZhLWJi NjYtNjBmNGNhMDRjNDkwLzAvNzU0QUU1NzFFMzQzMkIyMEU3ODA0NUJFN0IyQzk5 RTM5RTBGMTg3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADxmHmBFYGjL2hXRGYf6KyFdL28GnAdK+SKy +2078BJ+ryq29Y2haJVL3W7BjS80ZXD/b4l8ebMxYqDGMJrEesmbF1U4W1ZhR7na UKU2ju/rNT/uvwtYPbNR+A8k7UXYPrpOvxB9bS/y5Kk4E91RCISm570tWJwaLQ3r Z0p3uG+G5uSO2qua/vc5WbALv/3G6WLkrjCQwSURReywNR40lsP8Dl0+HKWNtNpN FAIwUz6ydfzCXSS6YOYXgLavzbIcYABArG9izh6mr1uGn9O81OZ3Lke5wlBqL6MD EVH5D1Nmj/0iQBPer9yRIWTc7jWLSkRPvz8sLUuW2pjTTuJL1sg= -----END CERTIFICATE-----Generated at Sun Jun 8 15:58:13 2025 by rpki-client