$ rpki-client -vvf repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft File: 067116F928280AE09336BC39D005AAC13695F63C.mft (raw, json) Hash identifier: IJgb+YMLw6IwdsbUPmlGY/vwYV0+ER3BtdAv6SWa/f0= Subject key identifier: 20:50:2A:21:D7:30:56:BD:80:85:4F:2A:5D:22:FD:D4:B6:DB:31:33 Authority key identifier: 06:71:16:F9:28:28:0A:E0:93:36:BC:39:D0:05:AA:C1:36:95:F6:3C Certificate issuer: /CN=067116F928280AE09336BC39D005AAC13695F63C Certificate serial: 4A3B79A61C34F241B5E67602765A2807F3C15629 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft Manifest number: 01A5 Signing time: Fri 06 Jun 2025 00:31:42 +0000 Manifest this update: Fri 06 Jun 2025 00:26:42 +0000 Manifest next update: Mon 09 Jun 2025 10:57:42 +0000 Files and hashes: 1: 067116F928280AE09336BC39D005AAC13695F63C.crl (hash: s3nwMJOe7u/I2ifYtS6znIjChIb2+AE9LWnON4ZhhUk=) 2: 3130332e38322e3234362e302f32342d3234203d3e20313432333730.roa (hash: dVyAgZUXuyz+nY8sTdVsk2xuXCyUeskNn+BZ9x4ZcyI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.crl rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 10:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:3b:79:a6:1c:34:f2:41:b5:e6:76:02:76:5a:28:07:f3:c1:56:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=067116F928280AE09336BC39D005AAC13695F63C Validity Not Before: Jun 6 00:26:42 2025 GMT Not After : Jun 9 10:57:42 2025 GMT Subject: CN=20502A21D73056BD80854F2A5D22FDD4B6DB3133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:8e:b7:10:1c:6a:e9:4f:68:fb:e9:70:2c:c6: 08:d6:a5:a4:88:72:37:7b:6f:9e:cd:a0:66:6a:ea: b6:ae:29:58:90:58:ef:b0:be:15:58:ae:c6:f7:ae: 51:d4:ab:e3:5c:07:e6:c7:94:2b:ac:42:9b:e9:69: 6d:2d:a9:22:d8:b2:84:64:98:83:84:1d:d4:d7:f9: 96:20:bd:28:e9:47:7e:3f:9e:5e:71:69:17:d5:b8: d8:49:b8:ff:5c:65:0d:1d:2f:d1:f8:fe:07:2e:fb: 38:a0:fb:14:57:c5:b5:6c:a4:1c:9b:5d:cf:c2:ef: dd:1f:bf:de:da:36:20:6f:d2:c3:39:16:ba:86:3e: 06:1e:13:c5:a6:c7:ed:65:0c:c3:ca:7b:19:05:d4: db:69:d9:29:51:d4:d0:9c:00:af:c3:dd:39:57:5c: 7e:ae:45:58:80:dd:58:60:aa:cd:e9:92:31:b4:3b: 84:a1:10:d1:95:c0:9c:e0:2d:80:8e:1d:47:ff:20: 08:6a:98:5a:c8:06:1f:04:df:e0:72:e2:63:f8:3c: 2e:a2:5d:ea:d5:fc:c8:aa:dd:3b:33:7e:ef:6c:2f: 14:d4:01:49:2e:aa:17:f2:ce:49:52:49:96:3b:99: e3:b6:77:05:ac:a4:07:79:7d:ce:94:b0:57:71:af: 69:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:50:2A:21:D7:30:56:BD:80:85:4F:2A:5D:22:FD:D4:B6:DB:31:33 X509v3 Authority Key Identifier: keyid:06:71:16:F9:28:28:0A:E0:93:36:BC:39:D0:05:AA:C1:36:95:F6:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/067116F928280AE09336BC39D005AAC13695F63C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bce0fe5a-e468-49d9-931b-ab4b924a45c2/0/067116F928280AE09336BC39D005AAC13695F63C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:e0:b6:7b:0c:82:9f:1a:88:e7:81:2e:1f:b4:d7:03:87:ab: 6f:fe:8f:32:cd:65:8a:2e:7c:dc:b3:d3:b6:25:79:e9:62:6b: 59:f3:bc:19:5b:c7:87:83:9a:74:fc:70:76:17:92:48:13:20: 96:4b:24:a6:8f:e3:a2:49:6c:e0:f7:51:98:9e:b9:95:47:16: 82:b4:e5:91:85:a0:16:33:83:d2:1d:a8:61:23:a7:eb:88:f7: 13:46:aa:05:ba:c3:12:33:67:98:7e:72:b8:41:1c:f0:86:62: 0d:b8:24:40:e6:7b:56:9f:c5:a3:24:b4:a7:17:40:b1:75:83: 26:5b:aa:b5:20:7e:6d:7d:33:a6:5c:5e:30:b9:67:5a:09:17: 4a:bb:76:65:a2:d7:38:91:37:2a:81:62:dd:9b:b5:98:ea:08: f6:b1:37:c3:6e:e7:e4:b9:6e:5d:be:a5:a2:05:7d:a9:19:c5: 30:c2:1a:02:ca:44:67:57:b6:88:20:48:a9:63:76:5a:8e:95: de:a2:37:81:f0:d8:51:33:04:01:53:20:2a:d0:99:b2:60:1c: e7:2c:d2:85:4e:b7:4e:2f:c6:fb:1b:4e:ab:66:f0:52:60:58: b3:14:e7:74:95:c0:d3:9b:21:93:e0:e5:87:34:20:57:b8:08: 92:63:81:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSjt5phw08kG15nYCdlooB/PBVikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY3MTE2RjkyODI4MEFFMDkzMzZCQzM5RDAwNUFBQzEz Njk1RjYzQzAeFw0yNTA2MDYwMDI2NDJaFw0yNTA2MDkxMDU3NDJaMDMxMTAvBgNV BAMTKDIwNTAyQTIxRDczMDU2QkQ4MDg1NEYyQTVEMjJGREQ0QjZEQjMxMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnjrcQHGrpT2j76XAsxgjWpaSI cjd7b57NoGZq6rauKViQWO+wvhVYrsb3rlHUq+NcB+bHlCusQpvpaW0tqSLYsoRk mIOEHdTX+ZYgvSjpR34/nl5xaRfVuNhJuP9cZQ0dL9H4/gcu+zig+xRXxbVspByb Xc/C790fv97aNiBv0sM5FrqGPgYeE8Wmx+1lDMPKexkF1Ntp2SlR1NCcAK/D3TlX XH6uRViA3Vhgqs3pkjG0O4ShENGVwJzgLYCOHUf/IAhqmFrIBh8E3+By4mP4PC6i XerV/Miq3Tszfu9sLxTUAUkuqhfyzklSSZY7meO2dwWspAd5fc6UsFdxr2nJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIFAqIdcwVr2AhU8qXSL91LbbMTMwHwYDVR0j BBgwFoAUBnEW+SgoCuCTNrw50AWqwTaV9jwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Y2UwZmU1YS1lNDY4LTQ5ZDktOTMxYi1hYjRiOTI0YTQ1YzIvMC8wNjcxMTZGOTI4 MjgwQUUwOTMzNkJDMzlEMDA1QUFDMTM2OTVGNjNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY3MTE2RjkyODI4MEFFMDkzMzZCQzM5RDAwNUFBQzEzNjk1 RjYzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmNlMGZlNWEtZTQ2OC00OWQ5LTkz MWItYWI0YjkyNGE0NWMyLzAvMDY3MTE2RjkyODI4MEFFMDkzMzZCQzM5RDAwNUFB QzEzNjk1RjYzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAbgtnsMgp8aiOeBLh+01wOHq2/+jzLNZYou fNyz07Yleelia1nzvBlbx4eDmnT8cHYXkkgTIJZLJKaP46JJbOD3UZieuZVHFoK0 5ZGFoBYzg9IdqGEjp+uI9xNGqgW6wxIzZ5h+crhBHPCGYg24JEDme1afxaMktKcX QLF1gyZbqrUgfm19M6ZcXjC5Z1oJF0q7dmWi1ziRNyqBYt2btZjqCPaxN8Nu5+S5 bl2+paIFfakZxTDCGgLKRGdXtoggSKljdlqOld6iN4Hw2FEzBAFTICrQmbJgHOcs 0oVOt04vxvsbTqtm8FJgWLMU53SVwNObIZPg5Yc0IFe4CJJjgXE= -----END CERTIFICATE-----Generated at Fri Jun 6 16:34:39 2025 by rpki-client