$ rpki-client -vvf repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft File: 556F35148B9935659C1FE70B505B1D8D79838EFA.mft (raw, json) Hash identifier: dRGpTq+u0MuUg1Yp7pFZOd8PtxwkfsU2R1mCax99bz0= Subject key identifier: 2D:9D:8B:0E:82:BB:BE:DB:CB:6C:C1:08:10:B1:12:B2:BC:35:A7:7C Authority key identifier: 55:6F:35:14:8B:99:35:65:9C:1F:E7:0B:50:5B:1D:8D:79:83:8E:FA Certificate issuer: /CN=556F35148B9935659C1FE70B505B1D8D79838EFA Certificate serial: 04A711A7743E751417E9DDC767CA08349115690A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556F35148B9935659C1FE70B505B1D8D79838EFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft Manifest number: 0190 Signing time: Sat 07 Jun 2025 19:11:31 +0000 Manifest this update: Sat 07 Jun 2025 19:06:31 +0000 Manifest next update: Tue 10 Jun 2025 19:41:31 +0000 Files and hashes: 1: 556F35148B9935659C1FE70B505B1D8D79838EFA.crl (hash: L9QDE9AnSIEjtN1VnW/+s347LwQQCn42idM4FiAsaBw=) 2: 3130332e3130312e3139332e302f32342d3234203d3e20313530343638.roa (hash: 1bjKbvUqG5BCn/NVvztyzNwID5OVDvMyI+PwBlSda/M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.crl rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556F35148B9935659C1FE70B505B1D8D79838EFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 19:41:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:a7:11:a7:74:3e:75:14:17:e9:dd:c7:67:ca:08:34:91:15:69:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=556F35148B9935659C1FE70B505B1D8D79838EFA Validity Not Before: Jun 7 19:06:31 2025 GMT Not After : Jun 10 19:41:31 2025 GMT Subject: CN=2D9D8B0E82BBBEDBCB6CC10810B112B2BC35A77C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c4:e4:e2:d8:d3:1a:21:97:76:67:04:0d:e4: 3f:d3:1c:dc:78:b5:ef:9e:43:2d:3c:0d:7e:84:d3: f2:ad:84:99:e0:07:40:9c:f9:b8:53:8d:1c:38:81: 3a:d2:8b:c4:6f:46:2f:49:3d:6c:bb:90:62:43:56: 84:54:31:26:c0:5a:14:92:05:32:08:3e:c0:f2:bd: cc:0e:d7:19:d1:1a:98:94:76:7a:65:11:4d:bf:a5: d6:7f:14:1b:ab:53:65:87:31:3f:a0:84:a5:ba:d6: 5e:5b:b1:02:f5:8d:fe:24:3d:f3:94:7f:e5:83:30: a6:2b:7d:a9:ec:dd:75:7a:be:b8:de:d5:11:52:e0: f6:f7:04:40:0f:56:4d:3e:d1:69:75:79:85:68:4b: ac:a5:1a:16:97:ad:03:f3:32:60:84:c0:13:d2:e6: d9:af:af:ef:e5:9b:aa:fd:96:dc:71:f3:a3:0d:1c: 6f:a3:78:a2:50:ec:ef:86:66:9c:97:58:06:b1:29: 97:f1:da:6e:e3:50:ec:ae:94:5e:4e:31:5e:7a:8a: 24:ee:15:36:67:a5:e0:06:e6:ef:8c:b8:cc:08:b7: bc:c9:be:06:c1:95:8d:a6:5e:77:c8:bf:0b:3f:42: d3:bb:48:c8:bb:fb:00:c6:0b:63:b0:10:a0:e8:56: 9c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:9D:8B:0E:82:BB:BE:DB:CB:6C:C1:08:10:B1:12:B2:BC:35:A7:7C X509v3 Authority Key Identifier: keyid:55:6F:35:14:8B:99:35:65:9C:1F:E7:0B:50:5B:1D:8D:79:83:8E:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556F35148B9935659C1FE70B505B1D8D79838EFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:5f:bd:fe:a3:ab:69:7d:b9:e8:7e:0e:fe:44:d4:96:a9:00: fe:ab:50:73:b6:36:c1:d2:d8:f9:b0:aa:6e:0e:d6:c7:e7:28: 36:5e:b2:e2:25:c7:75:f2:82:15:71:7c:f5:d7:bf:ed:47:cc: 7c:33:c9:36:9d:49:1e:ef:f5:10:01:e7:d1:d6:29:d2:00:21: ba:0c:f3:e5:95:70:ab:be:88:bb:56:32:40:a1:ad:77:42:6a: d0:ac:67:2f:a2:02:ad:8e:a1:77:af:c7:e1:d1:ba:89:28:ec: 4e:5f:5d:b6:5a:9c:94:78:a4:d5:34:46:60:14:17:51:99:5a: a7:aa:c2:80:46:fa:93:4b:d4:a3:8a:3f:f2:c2:6a:f9:f2:86: b0:c1:d6:a3:90:02:e2:47:1b:73:92:48:e5:ea:b4:32:4e:89: 55:c3:2e:cf:7a:df:5a:89:ce:a8:0e:7c:ce:61:fc:af:bd:3f: 98:e1:a4:1e:7e:82:93:6c:06:1f:10:e2:1f:f3:61:05:88:57: ba:1f:95:88:d9:35:44:6a:1a:91:20:d2:a8:b0:6f:18:8d:7f: 28:0b:f0:16:99:6a:11:6c:52:d1:19:5c:34:82:e8:f6:1a:c0: 2e:2e:0f:16:7e:98:0c:5e:a3:92:76:4e:0d:bb:d7:55:24:94: e1:88:d3:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBKcRp3Q+dRQX6d3HZ8oINJEVaQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU2RjM1MTQ4Qjk5MzU2NTlDMUZFNzBCNTA1QjFEOEQ3 OTgzOEVGQTAeFw0yNTA2MDcxOTA2MzFaFw0yNTA2MTAxOTQxMzFaMDMxMTAvBgNV BAMTKDJEOUQ4QjBFODJCQkJFREJDQjZDQzEwODEwQjExMkIyQkMzNUE3N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDixOTi2NMaIZd2ZwQN5D/THNx4 te+eQy08DX6E0/KthJngB0Cc+bhTjRw4gTrSi8RvRi9JPWy7kGJDVoRUMSbAWhSS BTIIPsDyvcwO1xnRGpiUdnplEU2/pdZ/FBurU2WHMT+ghKW61l5bsQL1jf4kPfOU f+WDMKYrfans3XV6vrje1RFS4Pb3BEAPVk0+0Wl1eYVoS6ylGhaXrQPzMmCEwBPS 5tmvr+/lm6r9ltxx86MNHG+jeKJQ7O+GZpyXWAaxKZfx2m7jUOyulF5OMV56iiTu FTZnpeAG5u+MuMwIt7zJvgbBlY2mXnfIvws/QtO7SMi7+wDGC2OwEKDoVpw5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULZ2LDoK7vtvLbMEIELESsrw1p3wwHwYDVR0j BBgwFoAUVW81FIuZNWWcH+cLUFsdjXmDjvowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YzQyNDgwYS04ZTBmLTQ3N2EtYmQ0YS1hYTgwODk5MjdiYTgvMC81NTZGMzUxNDhC OTkzNTY1OUMxRkU3MEI1MDVCMUQ4RDc5ODM4RUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU2RjM1MTQ4Qjk5MzU2NTlDMUZFNzBCNTA1QjFEOEQ3OTgz OEVGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmM0MjQ4MGEtOGUwZi00NzdhLWJk NGEtYWE4MDg5OTI3YmE4LzAvNTU2RjM1MTQ4Qjk5MzU2NTlDMUZFNzBCNTA1QjFE OEQ3OTgzOEVGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKhfvf6jq2l9ueh+Dv5E1JapAP6rUHO2NsHS 2Pmwqm4O1sfnKDZesuIlx3XyghVxfPXXv+1HzHwzyTadSR7v9RAB59HWKdIAIboM 8+WVcKu+iLtWMkChrXdCatCsZy+iAq2OoXevx+HRuoko7E5fXbZanJR4pNU0RmAU F1GZWqeqwoBG+pNL1KOKP/LCavnyhrDB1qOQAuJHG3OSSOXqtDJOiVXDLs9631qJ zqgOfM5h/K+9P5jhpB5+gpNsBh8Q4h/zYQWIV7oflYjZNURqGpEg0qiwbxiNfygL 8BaZahFsUtEZXDSC6PYawC4uDxZ+mAxeo5J2Tg2711UklOGI010= -----END CERTIFICATE-----Generated at Mon Jun 9 05:38:02 2025 by rpki-client