$ rpki-client -vvf repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft File: 285218D0288125F1010B5469F03888B08A661969.mft (raw, json) Hash identifier: sC8OeZO5wjM4T2InvCmmjeYTJkciqvpzv4VlX+n3/gQ= Subject key identifier: E6:29:1A:C2:CB:6A:FA:A3:0D:96:A7:63:B0:A2:2D:74:CE:FF:A6:30 Authority key identifier: 28:52:18:D0:28:81:25:F1:01:0B:54:69:F0:38:88:B0:8A:66:19:69 Certificate issuer: /CN=285218D0288125F1010B5469F03888B08A661969 Certificate serial: 5BC68516F35A249AADCA1E30BD3978F44B0E6437 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft Manifest number: 04D6 Signing time: Mon 02 Jun 2025 01:02:28 +0000 Manifest this update: Mon 02 Jun 2025 00:57:28 +0000 Manifest next update: Thu 05 Jun 2025 03:44:28 +0000 Files and hashes: 1: 285218D0288125F1010B5469F03888B08A661969.crl (hash: DqmFMYvTm+96QnQME3w00S7qKW8Qy50Y4zFMupU62s0=) 2: 3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa (hash: 3WvRyWguaKJ79IiRQCYW4ffkb6kXppTp2QGnBBoTwmo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.crl rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 03:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:c6:85:16:f3:5a:24:9a:ad:ca:1e:30:bd:39:78:f4:4b:0e:64:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=285218D0288125F1010B5469F03888B08A661969 Validity Not Before: Jun 2 00:57:28 2025 GMT Not After : Jun 5 03:44:28 2025 GMT Subject: CN=E6291AC2CB6AFAA30D96A763B0A22D74CEFFA630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:43:de:cb:b6:7c:5b:07:f0:13:27:b4:87:7c: 90:63:12:93:92:5a:09:07:24:08:44:19:60:b1:ff: 73:1a:c8:e0:5e:9b:90:94:84:fa:f0:db:46:56:e4: 81:6e:fd:01:05:9b:66:15:69:23:3f:c8:08:95:20: 7b:df:1a:57:23:5c:ca:f8:3d:01:3f:15:25:57:80: f6:19:02:43:e8:48:6a:39:a2:78:d2:53:bd:d9:62: c8:e5:c7:21:52:22:dc:35:f2:72:ea:fd:5c:46:5a: 14:2b:84:89:82:4b:12:ac:ae:de:6e:46:96:b1:14: c1:14:11:e7:74:da:59:a1:c0:ec:fb:10:5b:f6:28: 7c:d4:da:de:69:b3:c1:7d:eb:d5:80:0c:a1:d7:b6: 4a:7e:27:a2:17:59:7a:3a:77:83:b3:88:29:5e:55: 80:c6:05:7a:21:d1:34:15:11:c0:48:e1:16:03:f1: 2d:d4:b6:58:2d:05:e1:24:58:ec:29:fa:47:c2:9a: f6:28:b5:da:22:76:46:d0:33:e2:45:d1:f4:23:5a: a4:8f:10:72:5c:1d:41:bf:9c:d7:02:e9:a1:3e:ad: 1a:8b:cd:0e:1a:4c:42:ff:33:31:e9:19:f4:af:7b: 44:0d:6a:fa:bc:25:c8:fd:71:b5:ec:67:fb:a2:48: 2d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:29:1A:C2:CB:6A:FA:A3:0D:96:A7:63:B0:A2:2D:74:CE:FF:A6:30 X509v3 Authority Key Identifier: keyid:28:52:18:D0:28:81:25:F1:01:0B:54:69:F0:38:88:B0:8A:66:19:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:87:40:4c:e0:7b:d7:de:44:7b:10:4d:c0:8f:dc:b2:46:81: f1:9e:ad:a4:c8:ba:9f:34:d0:d6:7f:76:a5:c4:26:af:44:72: 27:6d:67:8f:2a:3f:a7:ad:b3:e1:ec:2f:a6:39:fc:39:14:a8: e1:89:e0:83:84:f7:6d:81:c3:2b:0a:91:90:23:65:c0:77:52: 6e:67:98:07:56:02:65:16:f7:ee:69:fe:89:16:fd:31:70:ac: 8b:f8:2e:7d:25:55:98:96:41:ea:d3:d8:87:0c:fd:4a:98:66: 66:7f:26:d3:f1:6d:76:cb:a3:93:69:09:92:45:d2:a1:17:e0: ca:92:60:de:90:29:cb:82:01:27:b5:75:74:b6:2a:75:3c:c1: db:45:95:86:ce:51:ce:9d:06:3a:d3:e4:1c:3e:64:a9:d6:03: 44:5d:89:2d:fc:72:bd:d6:68:b0:29:c4:8d:dc:e5:52:38:5e: 88:3a:c6:04:bf:51:40:f4:d2:6f:60:72:87:61:5f:60:b2:a2: cc:ea:75:c8:2c:22:9f:75:77:41:50:ae:ac:85:35:c4:a7:f0: 3d:ac:f1:e8:4f:aa:61:89:f0:56:d4:ac:46:3f:99:09:25:4f: aa:87:fe:7f:79:7d:7e:5d:78:f5:6b:6c:ae:04:8d:f1:21:bd: f1:d4:8d:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW8aFFvNaJJqtyh4wvTl49EsOZDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4QjA4 QTY2MTk2OTAeFw0yNTA2MDIwMDU3MjhaFw0yNTA2MDUwMzQ0MjhaMDMxMTAvBgNV BAMTKEU2MjkxQUMyQ0I2QUZBQTMwRDk2QTc2M0IwQTIyRDc0Q0VGRkE2MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtQ97LtnxbB/ATJ7SHfJBjEpOS WgkHJAhEGWCx/3MayOBem5CUhPrw20ZW5IFu/QEFm2YVaSM/yAiVIHvfGlcjXMr4 PQE/FSVXgPYZAkPoSGo5onjSU73ZYsjlxyFSItw18nLq/VxGWhQrhImCSxKsrt5u RpaxFMEUEed02lmhwOz7EFv2KHzU2t5ps8F969WADKHXtkp+J6IXWXo6d4OziCle VYDGBXoh0TQVEcBI4RYD8S3UtlgtBeEkWOwp+kfCmvYotdoidkbQM+JF0fQjWqSP EHJcHUG/nNcC6aE+rRqLzQ4aTEL/MzHpGfSve0QNavq8Jcj9cbXsZ/uiSC0lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5ikawstq+qMNlqdjsKItdM7/pjAwHwYDVR0j BBgwFoAUKFIY0CiBJfEBC1Rp8DiIsIpmGWkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5MTFiOS0xZDJmLTRiYjQtOWQ3NS05YWEzYzM1MTAwZTgvMC8yODUyMThEMDI4 ODEyNUYxMDEwQjU0NjlGMDM4ODhCMDhBNjYxOTY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4QjA4QTY2 MTk2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTExYjktMWQyZi00YmI0LTlk NzUtOWFhM2MzNTEwMGU4LzAvMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4 QjA4QTY2MTk2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJaHQEzge9feRHsQTcCP3LJGgfGeraTIup80 0NZ/dqXEJq9EcidtZ48qP6ets+HsL6Y5/DkUqOGJ4IOE922BwysKkZAjZcB3Um5n mAdWAmUW9+5p/okW/TFwrIv4Ln0lVZiWQerT2IcM/UqYZmZ/JtPxbXbLo5NpCZJF 0qEX4MqSYN6QKcuCASe1dXS2KnU8wdtFlYbOUc6dBjrT5Bw+ZKnWA0RdiS38cr3W aLApxI3c5VI4Xog6xgS/UUD00m9gcodhX2CyoszqdcgsIp91d0FQrqyFNcSn8D2s 8ehPqmGJ8FbUrEY/mQklT6qH/n95fX5dePVrbK4EjfEhvfHUjbc= -----END CERTIFICATE-----Generated at Tue Jun 3 23:10:59 2025 by rpki-client