$ rpki-client -vvf repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft File: F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft (raw, json) Hash identifier: vQuW2+1JW+vFR4IsPv049JjmI8+kcayR3ecZxrFFr3g= Subject key identifier: 25:3A:F1:00:71:BA:F8:00:2F:98:5D:AB:A8:7A:8F:2E:3A:1D:79:97 Authority key identifier: F5:43:62:AD:2B:6B:19:1C:B7:D3:7B:54:DC:D2:46:84:26:E8:BA:98 Certificate issuer: /CN=F54362AD2B6B191CB7D37B54DCD2468426E8BA98 Certificate serial: 06D85E6B8BED701F21D253FA1F968F887A9229B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft Manifest number: 04E5 Signing time: Fri 06 Jun 2025 03:00:00 +0000 Manifest this update: Fri 06 Jun 2025 02:55:00 +0000 Manifest next update: Mon 09 Jun 2025 08:47:00 +0000 Files and hashes: 1: 3130332e3134332e3137302e302f32332d3233203d3e20313339343030.roa (hash: s3woNilAqQ5e2dgXjfA4LkNTSDClHTfmkA54qmgHa2s=) 2: F54362AD2B6B191CB7D37B54DCD2468426E8BA98.crl (hash: e9cV4jKkG42QjTpZO7lVwAP+4pTskW1HED+sodoTYPg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.crl rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 08:47:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:d8:5e:6b:8b:ed:70:1f:21:d2:53:fa:1f:96:8f:88:7a:92:29:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F54362AD2B6B191CB7D37B54DCD2468426E8BA98 Validity Not Before: Jun 6 02:55:00 2025 GMT Not After : Jun 9 08:47:00 2025 GMT Subject: CN=253AF10071BAF8002F985DABA87A8F2E3A1D7997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0f:0f:2b:14:f5:b6:28:49:8d:11:ed:b7:9b: e2:51:5a:7a:5c:cf:fb:8c:43:57:db:90:b2:a9:98: da:7f:a1:30:b0:00:b1:de:ea:fa:8e:6f:da:ea:1f: 03:93:92:f2:25:cc:c0:9a:45:54:84:ca:0f:0c:9e: d4:3e:35:51:ee:14:a7:b7:c7:c4:fa:15:aa:83:bc: c8:d8:91:9e:b0:e8:6c:d2:59:2b:53:a0:e7:7c:63: 6b:27:3b:ad:37:73:84:b2:0c:22:07:d5:a1:3a:f6: d0:ec:e2:01:0b:ce:3c:78:73:22:85:02:8b:c9:ee: c3:59:c0:6e:13:61:0d:2f:9f:46:35:32:06:3a:72: d0:ad:44:0d:70:b2:0e:37:4e:6a:0a:7e:ba:4a:cf: 60:42:0a:04:74:e9:d2:e5:bc:29:bd:66:ba:27:b3: be:c7:1c:d7:21:fc:77:d1:09:8f:23:20:2c:6d:78: 56:b4:76:a9:ae:4b:d2:04:32:55:2a:d2:2a:17:ed: cf:34:65:d8:0f:06:61:0b:0a:53:93:63:75:a2:12: c7:8d:b4:b6:a9:4d:14:20:11:10:11:3f:f7:9a:8a: 46:ee:e7:07:84:84:16:ba:1c:d2:13:2e:26:f1:f9: 63:5d:00:63:b8:29:6c:6b:ce:2e:c1:73:24:d1:51: ec:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:3A:F1:00:71:BA:F8:00:2F:98:5D:AB:A8:7A:8F:2E:3A:1D:79:97 X509v3 Authority Key Identifier: keyid:F5:43:62:AD:2B:6B:19:1C:B7:D3:7B:54:DC:D2:46:84:26:E8:BA:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:9b:3b:af:4b:1c:3d:df:6a:c2:48:19:30:ec:a0:af:ee:57: 4b:08:98:1a:f1:32:24:bb:02:55:08:52:41:1b:5c:8e:0f:65: 97:f2:60:1c:ff:5e:b8:f8:dc:a9:d8:d0:36:1f:be:37:de:ed: ce:1e:6f:fd:82:86:86:c1:9d:27:fb:01:3b:67:44:9d:0d:c5: af:81:fc:62:3c:7c:19:99:16:06:69:26:61:af:98:85:dd:b3: 32:23:c7:8e:96:a5:71:72:0c:74:d8:1b:da:e7:23:81:66:36: 0d:66:6c:19:ac:e4:00:53:b7:51:36:7e:55:ad:22:a7:a7:2f: b0:46:c9:e6:4d:88:74:65:13:72:ae:ae:e9:ae:54:ff:a5:f0: ee:21:dc:94:8d:4e:e5:01:18:6c:09:30:8b:49:e7:23:8c:58: 9e:77:ab:b1:fd:0a:15:56:28:c0:d5:cc:77:34:39:61:8d:db: 76:6a:39:fc:61:54:3c:1b:9b:25:ea:70:20:6d:5c:a0:c6:80: 9d:e3:02:0d:54:6b:bd:6d:89:f2:3b:de:df:2d:01:9a:51:20: 2e:ef:a1:8b:b5:68:70:a7:ef:4f:cd:78:96:2a:82:28:f6:ae: 1c:51:d5:13:b6:67:eb:0d:4d:02:2a:cb:b7:dc:7b:2b:93:8f: 58:cf:1f:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBthea4vtcB8h0lP6H5aPiHqSKbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjU0MzYyQUQyQjZCMTkxQ0I3RDM3QjU0RENEMjQ2ODQy NkU4QkE5ODAeFw0yNTA2MDYwMjU1MDBaFw0yNTA2MDkwODQ3MDBaMDMxMTAvBgNV BAMTKDI1M0FGMTAwNzFCQUY4MDAyRjk4NURBQkE4N0E4RjJFM0ExRDc5OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQDw8rFPW2KEmNEe23m+JRWnpc z/uMQ1fbkLKpmNp/oTCwALHe6vqOb9rqHwOTkvIlzMCaRVSEyg8MntQ+NVHuFKe3 x8T6FaqDvMjYkZ6w6GzSWStToOd8Y2snO603c4SyDCIH1aE69tDs4gELzjx4cyKF AovJ7sNZwG4TYQ0vn0Y1MgY6ctCtRA1wsg43TmoKfrpKz2BCCgR06dLlvCm9Zron s77HHNch/HfRCY8jICxteFa0dqmuS9IEMlUq0ioX7c80ZdgPBmELClOTY3WiEseN tLapTRQgERARP/eaikbu5weEhBa6HNITLibx+WNdAGO4KWxrzi7BcyTRUey3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJTrxAHG6+AAvmF2rqHqPLjodeZcwHwYDVR0j BBgwFoAU9UNirStrGRy303tU3NJGhCboupgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzBiMzllMi02ODdiLTQ2MTQtODA5Zi03MzY3MmVhMjEyY2YvMC9GNTQzNjJBRDJC NkIxOTFDQjdEMzdCNTREQ0QyNDY4NDI2RThCQTk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjU0MzYyQUQyQjZCMTkxQ0I3RDM3QjU0RENEMjQ2ODQyNkU4 QkE5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWMwYjM5ZTItNjg3Yi00NjE0LTgw OWYtNzM2NzJlYTIxMmNmLzAvRjU0MzYyQUQyQjZCMTkxQ0I3RDM3QjU0RENEMjQ2 ODQyNkU4QkE5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACKbO69LHD3fasJIGTDsoK/uV0sImBrxMiS7 AlUIUkEbXI4PZZfyYBz/Xrj43KnY0DYfvjfe7c4eb/2ChobBnSf7ATtnRJ0Nxa+B /GI8fBmZFgZpJmGvmIXdszIjx46WpXFyDHTYG9rnI4FmNg1mbBms5ABTt1E2flWt IqenL7BGyeZNiHRlE3KurumuVP+l8O4h3JSNTuUBGGwJMItJ5yOMWJ53q7H9ChVW KMDVzHc0OWGN23ZqOfxhVDwbmyXqcCBtXKDGgJ3jAg1Ua71tifI73t8tAZpRIC7v oYu1aHCn70/NeJYqgij2rhxR1RO2Z+sNTQIqy7fceyuTj1jPH/g= -----END CERTIFICATE-----Generated at Sun Jun 8 05:08:35 2025 by rpki-client