$ rpki-client -vvf repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft File: 687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft (raw, json) Hash identifier: gc2E4rFEIe7Wy4Z1qmyKEH/Kxa0Uq7BYyuz01CV3S+s= Subject key identifier: B5:DF:62:59:FA:9D:B0:E4:ED:36:B6:90:72:2C:9F:68:2F:23:26:D3 Authority key identifier: 68:72:47:CE:80:E6:2A:D4:B4:0F:0B:99:15:A1:B6:F3:02:0F:68:4C Certificate issuer: /CN=687247CE80E62AD4B40F0B9915A1B6F3020F684C Certificate serial: 41FE0E06691370117FB8649E3F29C43F8D8A2F67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft Manifest number: 035C Signing time: Sat 07 Jun 2025 10:31:32 +0000 Manifest this update: Sat 07 Jun 2025 10:26:32 +0000 Manifest next update: Tue 10 Jun 2025 15:54:32 +0000 Files and hashes: 1: 687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl (hash: XTc+KIwt7Ydz3pUfzhxgkEA56OQ5JXkUihu+VzhaBPI=) 2: 3130332e3136352e3235342e302f32332d3234203d3e203137393935.roa (hash: DS0hCq0koHOBoxtvccNH1QeGGPeh5jNq/29MUNxhn+U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 15:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:fe:0e:06:69:13:70:11:7f:b8:64:9e:3f:29:c4:3f:8d:8a:2f:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=687247CE80E62AD4B40F0B9915A1B6F3020F684C Validity Not Before: Jun 7 10:26:32 2025 GMT Not After : Jun 10 15:54:32 2025 GMT Subject: CN=B5DF6259FA9DB0E4ED36B690722C9F682F2326D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a6:47:9e:10:0e:05:5b:bd:42:ba:48:dd:13: ac:f5:bd:7f:36:2b:1d:97:29:42:af:55:7f:0f:0d: f9:19:dd:bf:15:a5:9b:0c:ba:4a:85:0e:b8:5e:85: b6:1b:c8:de:97:8c:4c:70:3c:dc:bd:98:a8:d7:3c: 2d:4b:f9:f6:24:a0:79:72:64:21:13:fb:65:02:14: 88:d3:43:9f:9b:64:1b:31:11:c4:8d:f0:f5:e1:09: e6:40:39:ee:4a:51:ab:b4:d6:fb:aa:05:f7:51:22: c8:b5:5d:6f:ab:30:53:0e:c1:ec:6b:fd:5a:e4:9c: c1:9f:3e:b6:db:e6:18:ca:c6:c6:87:88:fd:76:c0: 76:e4:63:3f:cc:33:17:1e:84:1c:a5:25:9b:d5:16: c3:f9:45:56:ca:7c:72:d3:cd:2f:9e:9c:3a:c3:85: fc:09:a9:4a:a8:5a:60:9c:05:4e:dc:cb:0e:e0:2d: 73:4c:ab:d4:de:bb:8f:83:e6:b1:07:e7:3c:d9:a0: a3:a2:5e:d6:91:4e:ab:0e:07:ba:c8:40:14:3f:c1: 02:b7:c0:d2:c2:04:94:1b:07:e1:dd:86:f1:71:e7: ac:c0:40:b9:1f:76:1a:5b:e7:b6:a9:ee:8a:2d:44: 97:6f:3b:6b:14:99:15:08:e6:d2:37:34:9e:2a:d8: 7b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:DF:62:59:FA:9D:B0:E4:ED:36:B6:90:72:2C:9F:68:2F:23:26:D3 X509v3 Authority Key Identifier: keyid:68:72:47:CE:80:E6:2A:D4:B4:0F:0B:99:15:A1:B6:F3:02:0F:68:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:13:65:70:4c:3b:38:58:3c:34:de:1c:01:c0:29:2f:33:1b: 45:96:79:0f:d2:cc:43:4c:c6:a6:43:72:67:a0:db:10:d6:10: 5d:46:21:1a:eb:a0:c4:d6:59:a6:82:1f:40:22:ef:98:6a:b6: 94:24:15:72:26:05:c8:01:9d:17:f2:6c:dc:24:b0:5c:21:ba: 87:25:ca:96:5d:8d:b2:fc:80:ed:bc:ed:d2:62:a4:f8:e3:87: 31:8e:d2:a0:cf:4c:81:9b:8c:70:87:d2:1a:6a:f7:14:9e:9b: 2c:a8:78:36:c8:02:a2:e2:7a:55:b3:68:1c:33:a8:bd:53:88: 89:e9:2c:dd:5a:02:07:a7:21:a4:52:e9:d1:4b:ae:7e:54:d1: 92:d4:f4:a9:ab:23:3a:24:6f:45:f7:31:1e:6a:29:f8:dc:72: 9c:0c:5a:d2:be:29:e4:a6:67:a0:b7:a4:a3:8e:94:aa:9a:8c: 63:eb:cc:93:5b:0f:7c:d4:26:70:a3:8f:61:aa:f7:80:93:a4: 84:ee:85:7b:fa:6a:fd:3c:b3:d5:49:82:d9:05:15:1c:8d:c6: 13:78:98:b8:a5:cc:b6:a3:5d:f1:37:93:0e:03:02:65:e8:2f: ef:78:1f:5e:d3:f1:0e:b9:23:89:0d:67:b4:70:bb:c9:cc:db: 0a:87:0e:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQf4OBmkTcBF/uGSePynEP42KL2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2RjMw MjBGNjg0QzAeFw0yNTA2MDcxMDI2MzJaFw0yNTA2MTAxNTU0MzJaMDMxMTAvBgNV BAMTKEI1REY2MjU5RkE5REIwRTRFRDM2QjY5MDcyMkM5RjY4MkYyMzI2RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWpkeeEA4FW71CukjdE6z1vX82 Kx2XKUKvVX8PDfkZ3b8VpZsMukqFDrhehbYbyN6XjExwPNy9mKjXPC1L+fYkoHly ZCET+2UCFIjTQ5+bZBsxEcSN8PXhCeZAOe5KUau01vuqBfdRIsi1XW+rMFMOwexr /VrknMGfPrbb5hjKxsaHiP12wHbkYz/MMxcehBylJZvVFsP5RVbKfHLTzS+enDrD hfwJqUqoWmCcBU7cyw7gLXNMq9Teu4+D5rEH5zzZoKOiXtaRTqsOB7rIQBQ/wQK3 wNLCBJQbB+HdhvFx56zAQLkfdhpb57ap7ootRJdvO2sUmRUI5tI3NJ4q2HvpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtd9iWfqdsOTtNraQciyfaC8jJtMwHwYDVR0j BBgwFoAUaHJHzoDmKtS0DwuZFaG28wIPaEwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWU1NDY4Yy0wYWM3LTQ0YTktODgyMS0yODI1N2M1YTg2MDcvMC82ODcyNDdDRTgw RTYyQUQ0QjQwRjBCOTkxNUExQjZGMzAyMEY2ODRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2RjMwMjBG Njg0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzVlNTQ2OGMtMGFjNy00NGE5LTg4 MjEtMjgyNTdjNWE4NjA3LzAvNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2 RjMwMjBGNjg0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFwTZXBMOzhYPDTeHAHAKS8zG0WWeQ/SzENM xqZDcmeg2xDWEF1GIRrroMTWWaaCH0Ai75hqtpQkFXImBcgBnRfybNwksFwhuocl ypZdjbL8gO287dJipPjjhzGO0qDPTIGbjHCH0hpq9xSemyyoeDbIAqLielWzaBwz qL1TiInpLN1aAgenIaRS6dFLrn5U0ZLU9KmrIzokb0X3MR5qKfjccpwMWtK+KeSm Z6C3pKOOlKqajGPrzJNbD3zUJnCjj2Gq94CTpITuhXv6av08s9VJgtkFFRyNxhN4 mLilzLajXfE3kw4DAmXoL+94H17T8Q65I4kNZ7Rwu8nM2wqHDtM= -----END CERTIFICATE-----Generated at Sat Jun 7 19:16:46 2025 by rpki-client