$ rpki-client -vvf repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft File: D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft (raw, json) Hash identifier: 70rcM546ZX5/RdDrJX2J3uFs8kcJzNbb8vuSi2ZtXgQ= Subject key identifier: 15:C7:16:64:F8:EC:D9:E7:7F:F9:14:60:64:62:16:71:7E:CC:28:85 Authority key identifier: D5:67:7E:FA:13:70:87:11:CD:AF:B6:7D:9C:4C:8F:5F:FF:A9:A2:71 Certificate issuer: /CN=D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271 Certificate serial: 7D77ADC616BFC81956D94739005269EC48D89AEF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft Manifest number: 02EF Signing time: Fri 06 Jun 2025 14:10:34 +0000 Manifest this update: Fri 06 Jun 2025 14:05:34 +0000 Manifest next update: Mon 09 Jun 2025 18:45:34 +0000 Files and hashes: 1: D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.crl (hash: VlVcAlgs04yVk0VoP/m2fchezZ0lVlLPuo/42qFiS4Q=) 2: 3130332e3134372e38342e302f32332d3234203d3e20313339393535.roa (hash: 8pVdONx+0B7HzvlmWjfUUOE8jWcjWCCvoVvW/VBNAgQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.crl rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 18:45:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:77:ad:c6:16:bf:c8:19:56:d9:47:39:00:52:69:ec:48:d8:9a:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271 Validity Not Before: Jun 6 14:05:34 2025 GMT Not After : Jun 9 18:45:34 2025 GMT Subject: CN=15C71664F8ECD9E77FF91460646216717ECC2885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d2:93:16:f2:70:eb:52:1a:83:bc:b2:c8:6c: 37:36:84:d0:32:a4:bc:57:b6:a4:16:b3:64:53:a2: a8:9b:cd:53:ef:9f:07:ca:de:66:11:f0:1c:2c:c3: a4:b1:55:f4:4e:6c:c6:82:8a:e9:73:ce:a2:d8:0f: 61:0a:a6:dc:98:3a:6a:65:14:ce:d2:ab:66:c4:ae: ae:02:03:93:3b:47:96:18:fd:f1:a2:66:90:d6:97: d9:c0:03:f9:9e:24:c6:16:b8:48:4a:f3:01:db:31: 9f:de:5e:69:06:5e:3e:49:12:a2:74:cc:51:b3:f8: 00:6c:ca:1d:d2:28:47:e0:3f:c7:c1:ec:24:d4:6b: 71:19:c1:24:41:56:37:6e:2a:ca:ca:27:97:ba:21: fd:53:6a:09:b2:99:98:7e:bf:89:df:f7:0e:a8:30: ad:3d:97:d6:d6:1e:b1:2b:ce:ce:ea:b1:86:bb:20: 32:7c:93:70:be:8c:19:12:f0:1f:0f:1a:0a:bd:b2: 3c:73:49:28:37:ec:6f:b0:10:1b:46:9b:4b:60:45: 8b:99:73:c3:2f:b2:1d:b6:53:44:fd:a5:1c:9f:0f: 80:06:af:94:19:f9:81:9a:4f:3f:43:72:34:02:38: db:7e:b3:52:d6:28:09:c2:26:e5:61:bb:48:6f:93: 36:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C7:16:64:F8:EC:D9:E7:7F:F9:14:60:64:62:16:71:7E:CC:28:85 X509v3 Authority Key Identifier: keyid:D5:67:7E:FA:13:70:87:11:CD:AF:B6:7D:9C:4C:8F:5F:FF:A9:A2:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:2e:fe:29:96:f2:bf:a3:3c:70:f7:40:8d:63:71:f0:88:dd: c6:25:95:51:05:35:77:ce:a7:fe:1c:12:05:bb:87:2b:d9:06: b2:bc:81:d7:fc:8d:3e:67:05:64:43:65:5a:b4:ee:87:28:37: d6:c3:97:0e:bc:ff:51:8e:2e:05:c3:d7:f9:1b:52:b1:39:80: d1:59:b8:98:59:85:01:8e:b8:1d:fd:71:b4:59:da:39:04:af: bd:c9:2c:9f:71:60:0b:4e:b8:0f:8b:d9:9c:b6:3f:d6:35:b6: f7:16:c5:54:89:aa:d5:aa:d9:5f:c4:56:a7:22:0b:44:17:de: 90:2a:75:6e:eb:15:d0:30:63:b0:89:41:56:74:02:ea:e4:f0: 30:62:a3:73:9a:c6:85:3b:81:9a:26:99:76:9a:01:5a:ae:09: 5c:f3:18:9f:c2:80:54:d8:94:b1:73:9d:48:30:5b:38:d5:42: 9b:42:83:41:a2:33:f3:62:04:3b:1f:fd:06:19:8e:9e:20:89: 5d:ed:21:49:7d:12:74:aa:ea:e7:0e:4f:50:7c:a6:f5:81:17: ab:f3:ad:15:da:e2:6c:4a:c2:ad:db:20:35:1f:cf:d4:7e:74: 97:7f:2d:f1:79:0f:3b:5f:89:8b:80:4f:dc:39:ab:45:ca:28: 9d:63:8a:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfXetxha/yBlW2Uc5AFJp7EjYmu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU2NzdFRkExMzcwODcxMUNEQUZCNjdEOUM0QzhGNUZG RkE5QTI3MTAeFw0yNTA2MDYxNDA1MzRaFw0yNTA2MDkxODQ1MzRaMDMxMTAvBgNV BAMTKDE1QzcxNjY0RjhFQ0Q5RTc3RkY5MTQ2MDY0NjIxNjcxN0VDQzI4ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo0pMW8nDrUhqDvLLIbDc2hNAy pLxXtqQWs2RToqibzVPvnwfK3mYR8Bwsw6SxVfRObMaCiulzzqLYD2EKptyYOmpl FM7Sq2bErq4CA5M7R5YY/fGiZpDWl9nAA/meJMYWuEhK8wHbMZ/eXmkGXj5JEqJ0 zFGz+ABsyh3SKEfgP8fB7CTUa3EZwSRBVjduKsrKJ5e6If1TagmymZh+v4nf9w6o MK09l9bWHrErzs7qsYa7IDJ8k3C+jBkS8B8PGgq9sjxzSSg37G+wEBtGm0tgRYuZ c8Mvsh22U0T9pRyfD4AGr5QZ+YGaTz9DcjQCONt+s1LWKAnCJuVhu0hvkzbbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFccWZPjs2ed/+RRgZGIWcX7MKIUwHwYDVR0j BBgwFoAU1Wd++hNwhxHNr7Z9nEyPX/+ponEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Nzk2NTlhOS01NTA1LTQ5NGItYTAzYy02ZWJhY2ZhZGY5MzEvMC9ENTY3N0VGQTEz NzA4NzExQ0RBRkI2N0Q5QzRDOEY1RkZGQTlBMjcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU2NzdFRkExMzcwODcxMUNEQUZCNjdEOUM0QzhGNUZGRkE5 QTI3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc5NjU5YTktNTUwNS00OTRiLWEw M2MtNmViYWNmYWRmOTMxLzAvRDU2NzdFRkExMzcwODcxMUNEQUZCNjdEOUM0QzhG NUZGRkE5QTI3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEwu/imW8r+jPHD3QI1jcfCI3cYllVEFNXfO p/4cEgW7hyvZBrK8gdf8jT5nBWRDZVq07ocoN9bDlw68/1GOLgXD1/kbUrE5gNFZ uJhZhQGOuB39cbRZ2jkEr73JLJ9xYAtOuA+L2Zy2P9Y1tvcWxVSJqtWq2V/EVqci C0QX3pAqdW7rFdAwY7CJQVZ0Aurk8DBio3OaxoU7gZommXaaAVquCVzzGJ/CgFTY lLFznUgwWzjVQptCg0GiM/NiBDsf/QYZjp4giV3tIUl9EnSq6ucOT1B8pvWBF6vz rRXa4mxKwq3bIDUfz9R+dJd/LfF5DztfiYuAT9w5q0XKKJ1jim4= -----END CERTIFICATE-----Generated at Sat Jun 7 22:11:10 2025 by rpki-client