$ rpki-client -vvf repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft File: 256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft (raw, json) Hash identifier: kqB3zA2a8PononbawsjEtTuCdLxvy8s+qhhhJCRcZ6Y= Subject key identifier: 40:AB:60:6E:F9:06:DD:B1:33:AA:0F:BE:F5:97:88:B9:19:D3:B3:66 Authority key identifier: 25:62:70:ED:1D:9E:D1:E4:3E:86:D6:02:DA:C6:3F:F5:2F:2B:D4:99 Certificate issuer: /CN=256270ED1D9ED1E43E86D602DAC63FF52F2BD499 Certificate serial: 4CF6E018FCDD278881BE6E8370949FA44711599F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft Manifest number: 0389 Signing time: Tue 03 Jun 2025 17:32:05 +0000 Manifest this update: Tue 03 Jun 2025 17:27:05 +0000 Manifest next update: Sat 07 Jun 2025 01:21:05 +0000 Files and hashes: 1: 3130332e3136312e37362e302f32342d3234203d3e20313431363131.roa (hash: ldJgg+ZEQ/CTigrskdBB9EMuAQkrfWy1yn/43sb7xSw=) 2: 256270ED1D9ED1E43E86D602DAC63FF52F2BD499.crl (hash: EilXeZs135K1ipHnJozefe2Mefr7b6q3/bNHjXC5Zdw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.crl rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:f6:e0:18:fc:dd:27:88:81:be:6e:83:70:94:9f:a4:47:11:59:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256270ED1D9ED1E43E86D602DAC63FF52F2BD499 Validity Not Before: Jun 3 17:27:05 2025 GMT Not After : Jun 7 01:21:05 2025 GMT Subject: CN=40AB606EF906DDB133AA0FBEF59788B919D3B366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:05:38:c1:fc:1c:ce:1f:25:db:cc:c3:4f:a6: dc:c8:bb:4f:43:74:69:d9:eb:9b:2d:e9:11:74:14: d9:ac:5f:b1:e2:48:f5:e0:0b:4c:68:d1:55:20:fa: 63:59:cc:e4:81:03:f6:da:68:b0:fe:93:f5:af:77: e3:8f:16:17:71:a7:d4:ba:82:0e:3a:a0:d8:31:51: 12:49:dd:50:4f:0e:12:19:fd:93:75:76:15:74:d2: 54:2e:e6:7f:44:02:f8:dd:4f:a0:67:a4:9c:6c:47: 49:37:f4:78:4f:0e:38:ad:28:9f:25:4c:d1:42:c8: df:1d:9f:ac:cc:31:b0:57:8f:c7:95:05:a6:bd:be: 32:38:43:95:43:75:16:9d:b5:1a:ed:ac:0d:53:73: ec:9d:7e:54:53:10:8c:e1:f1:00:32:b4:f2:f5:10: a6:92:b4:1f:60:6a:30:a4:49:f7:9b:b5:b1:9b:46: 22:fb:2a:7e:2f:80:e4:6a:65:40:e2:46:6d:0a:8e: 8c:4e:6f:09:6b:dc:c0:ce:f8:20:38:ea:09:2f:06: 89:08:6b:df:4a:a9:a9:c5:af:66:84:18:ee:ab:52: c6:db:52:ed:82:20:1d:50:5e:4b:3d:6f:9c:f7:36: 5a:ec:e5:f2:a3:00:e3:b6:18:b7:b0:8d:1f:14:78: 18:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:AB:60:6E:F9:06:DD:B1:33:AA:0F:BE:F5:97:88:B9:19:D3:B3:66 X509v3 Authority Key Identifier: keyid:25:62:70:ED:1D:9E:D1:E4:3E:86:D6:02:DA:C6:3F:F5:2F:2B:D4:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:89:70:7b:3e:39:87:aa:57:4b:0c:8a:32:6a:a0:3a:ed:d8: 96:79:bc:ef:df:4f:08:7c:3c:90:37:3a:55:8a:c3:0f:e3:eb: 62:b3:5e:f8:4a:16:92:ae:4b:68:b0:53:4d:ed:c6:95:1f:03: c4:06:1f:46:2a:b2:1c:1c:8c:72:14:24:85:94:91:55:c0:99: c9:3c:5f:60:42:fe:7f:17:f4:47:98:94:f9:fb:45:30:cb:d1: b7:7a:99:0f:d9:8a:5a:09:88:4c:81:7d:d1:01:1f:d6:a8:ec: 74:e5:3c:ce:97:41:e7:9a:17:62:9f:16:b4:76:9c:45:9e:07: 00:58:8d:58:84:8f:61:af:85:76:bd:c2:da:8e:93:71:8b:81: ea:d8:d0:59:9d:b9:3d:04:00:59:2b:e9:d1:42:12:0d:a8:ac: d4:e3:cb:66:03:2e:83:60:ca:f8:eb:ad:09:9a:84:94:4f:f7: 87:ee:4a:4b:08:df:ed:30:51:06:ed:22:7b:ab:5b:e7:dd:ed: b2:ee:c1:75:61:3f:21:43:38:14:d1:fa:e5:d7:92:15:09:35: 94:ed:3c:a8:e9:2a:bd:00:1b:17:47:48:8b:b5:72:4e:68:5c: 44:b6:d9:14:16:e0:15:c9:a1:fd:66:8c:a6:27:d6:d9:4c:80: cd:b8:ff:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTPbgGPzdJ4iBvm6DcJSfpEcRWZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU2MjcwRUQxRDlFRDFFNDNFODZENjAyREFDNjNGRjUy RjJCRDQ5OTAeFw0yNTA2MDMxNzI3MDVaFw0yNTA2MDcwMTIxMDVaMDMxMTAvBgNV BAMTKDQwQUI2MDZFRjkwNkREQjEzM0FBMEZCRUY1OTc4OEI5MTlEM0IzNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmBTjB/BzOHyXbzMNPptzIu09D dGnZ65st6RF0FNmsX7HiSPXgC0xo0VUg+mNZzOSBA/baaLD+k/Wvd+OPFhdxp9S6 gg46oNgxURJJ3VBPDhIZ/ZN1dhV00lQu5n9EAvjdT6BnpJxsR0k39HhPDjitKJ8l TNFCyN8dn6zMMbBXj8eVBaa9vjI4Q5VDdRadtRrtrA1Tc+ydflRTEIzh8QAytPL1 EKaStB9gajCkSfebtbGbRiL7Kn4vgORqZUDiRm0KjoxObwlr3MDO+CA46gkvBokI a99KqanFr2aEGO6rUsbbUu2CIB1QXks9b5z3Nlrs5fKjAOO2GLewjR8UeBhXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQKtgbvkG3bEzqg++9ZeIuRnTs2YwHwYDVR0j BBgwFoAUJWJw7R2e0eQ+htYC2sY/9S8r1JkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTJkZTgwNS1jODBlLTRiNWMtOTljNi1kNzNkOTcxNTRkYjUvMC8yNTYyNzBFRDFE OUVEMUU0M0U4NkQ2MDJEQUM2M0ZGNTJGMkJENDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU2MjcwRUQxRDlFRDFFNDNFODZENjAyREFDNjNGRjUyRjJC RDQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTkyZGU4MDUtYzgwZS00YjVjLTk5 YzYtZDczZDk3MTU0ZGI1LzAvMjU2MjcwRUQxRDlFRDFFNDNFODZENjAyREFDNjNG RjUyRjJCRDQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCJcHs+OYeqV0sMijJqoDrt2JZ5vO/fTwh8 PJA3OlWKww/j62KzXvhKFpKuS2iwU03txpUfA8QGH0YqshwcjHIUJIWUkVXAmck8 X2BC/n8X9EeYlPn7RTDL0bd6mQ/ZiloJiEyBfdEBH9ao7HTlPM6XQeeaF2KfFrR2 nEWeBwBYjViEj2GvhXa9wtqOk3GLgerY0FmduT0EAFkr6dFCEg2orNTjy2YDLoNg yvjrrQmahJRP94fuSksI3+0wUQbtInurW+fd7bLuwXVhPyFDOBTR+uXXkhUJNZTt PKjpKr0AGxdHSIu1ck5oXES22RQW4BXJof1mjKYn1tlMgM24/6Q= -----END CERTIFICATE-----Generated at Tue Jun 3 23:15:13 2025 by rpki-client