$ rpki-client -vvf repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft File: 5DFC46925E2D4B3FB044F284111222A8B4C78392.mft (raw, json) Hash identifier: BqVXUIC+lTRALD3Kfy01p+CAWzWOdRrH7j01ll1R0S8= Subject key identifier: CD:B5:23:1A:6D:D8:55:5C:B0:20:14:B8:29:40:B1:BF:D6:77:56:F2 Authority key identifier: 5D:FC:46:92:5E:2D:4B:3F:B0:44:F2:84:11:12:22:A8:B4:C7:83:92 Certificate issuer: /CN=5DFC46925E2D4B3FB044F284111222A8B4C78392 Certificate serial: 6926F3BAA9DE667525EDE8E3DC3DE4824ECCF4C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft Manifest number: 017F Signing time: Mon 02 Jun 2025 22:01:58 +0000 Manifest this update: Mon 02 Jun 2025 21:56:58 +0000 Manifest next update: Fri 06 Jun 2025 08:02:58 +0000 Files and hashes: 1: 3130332e32322e39382e302f32342d3234203d3e20313530323433.roa (hash: RBUkVebuQcs/eoD+DsobzhNFA6Y0GlvHxLIjvG85Lgo=) 2: 5DFC46925E2D4B3FB044F284111222A8B4C78392.crl (hash: 5qgGzlUpueUAwp5VJdOADSYlKHclnV1k5+/O77baDG0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.crl rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 08:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:26:f3:ba:a9:de:66:75:25:ed:e8:e3:dc:3d:e4:82:4e:cc:f4:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DFC46925E2D4B3FB044F284111222A8B4C78392 Validity Not Before: Jun 2 21:56:58 2025 GMT Not After : Jun 6 08:02:58 2025 GMT Subject: CN=CDB5231A6DD8555CB02014B82940B1BFD67756F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ff:03:8a:4d:26:09:1f:07:a6:9e:2f:8c:37: 72:e0:60:0b:5b:e4:00:8d:82:8a:ba:b2:97:87:3d: 24:8d:64:76:19:77:3a:68:2b:80:6c:11:8d:61:86: 73:89:8a:c9:3d:04:ae:2e:81:b7:23:44:a6:34:08: ff:8e:a8:f8:22:90:f7:93:7d:eb:7e:a9:ab:2c:2e: 15:4e:ea:08:67:b0:83:bf:6a:45:98:8b:80:11:f4: 3e:0e:bb:15:60:9c:60:07:93:2a:26:e7:5c:80:59: c5:11:ae:3b:b5:04:6e:7b:17:38:0c:7d:07:58:1b: 8b:10:07:d1:e5:ab:bd:02:3f:da:90:b1:e9:9a:72: 97:72:ab:1b:3b:0f:04:9b:87:ed:76:17:ff:f8:aa: 21:d3:10:90:aa:f1:5b:07:32:0e:a9:c0:f2:cc:97: ec:63:b7:af:75:8e:85:c8:81:62:f8:cf:e1:67:6b: 12:0f:7b:7a:6c:40:97:0d:26:43:e4:c9:6b:08:dd: 8c:c8:93:43:15:52:11:1f:bc:60:07:10:55:45:f2: e4:6c:cd:fb:2d:6b:96:52:64:44:f1:3c:e8:f8:7f: 1e:e7:cc:90:67:3a:49:82:55:40:79:bc:7b:60:2b: b4:21:65:c8:16:41:40:5e:48:49:fc:45:47:b4:8f: 84:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B5:23:1A:6D:D8:55:5C:B0:20:14:B8:29:40:B1:BF:D6:77:56:F2 X509v3 Authority Key Identifier: keyid:5D:FC:46:92:5E:2D:4B:3F:B0:44:F2:84:11:12:22:A8:B4:C7:83:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:6f:a2:1e:a4:34:62:6c:39:4c:6b:54:47:d2:f2:f6:6e:6c: 6e:ca:35:dc:cb:f7:6c:e5:d4:70:b7:85:2b:6f:02:32:1f:3d: 4d:d4:b7:8d:51:02:f6:c2:ea:e6:ca:61:0a:42:1e:ac:ed:5d: b2:36:72:9d:9d:7a:52:a1:bb:7a:27:4f:b5:90:9c:7c:46:24: b9:ca:24:b7:57:65:4c:cb:3f:19:dc:c7:b9:40:6c:f9:a2:f5: c6:11:d5:51:7b:92:7d:5f:a8:d9:26:53:32:e7:a6:4a:fe:0e: 18:d3:52:c4:17:33:29:35:89:ce:94:d0:32:cd:37:c1:68:e6: 40:e5:19:84:ef:63:93:c9:9d:28:20:07:51:bf:d4:d9:e1:7e: 4d:ea:58:69:ba:8d:99:c7:53:50:1b:d2:09:1c:84:da:97:18: e6:87:35:c3:d6:1b:7c:2f:20:db:cc:62:c2:63:57:aa:9e:20: e9:cd:63:b7:68:f6:c7:73:db:8e:22:cf:13:7a:03:db:e9:48: 56:d6:a4:14:a6:83:95:df:83:42:b1:df:f8:7d:f3:4e:b6:31: e1:dd:ab:aa:ab:87:35:aa:5d:22:1c:75:cb:14:1b:d9:7a:96: c3:05:e5:05:c9:c2:1b:b3:b9:20:d4:54:8a:16:97:b1:88:7b: 93:f4:d4:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaSbzuqneZnUl7ejj3D3kgk7M9McwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIyQThC NEM3ODM5MjAeFw0yNTA2MDIyMTU2NThaFw0yNTA2MDYwODAyNThaMDMxMTAvBgNV BAMTKENEQjUyMzFBNkREODU1NUNCMDIwMTRCODI5NDBCMUJGRDY3NzU2RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy/wOKTSYJHwemni+MN3LgYAtb 5ACNgoq6speHPSSNZHYZdzpoK4BsEY1hhnOJisk9BK4ugbcjRKY0CP+OqPgikPeT fet+qassLhVO6ghnsIO/akWYi4AR9D4OuxVgnGAHkyom51yAWcURrju1BG57FzgM fQdYG4sQB9Hlq70CP9qQsemacpdyqxs7DwSbh+12F//4qiHTEJCq8VsHMg6pwPLM l+xjt691joXIgWL4z+FnaxIPe3psQJcNJkPkyWsI3YzIk0MVUhEfvGAHEFVF8uRs zfsta5ZSZETxPOj4fx7nzJBnOkmCVUB5vHtgK7QhZcgWQUBeSEn8RUe0j4QLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzbUjGm3YVVywIBS4KUCxv9Z3VvIwHwYDVR0j BBgwFoAUXfxGkl4tSz+wRPKEERIiqLTHg5IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzAxYjI3Ny1jODBjLTQ1ZDUtODA4OS1hOWVmYTM0MDU0MmEvMC81REZDNDY5MjVF MkQ0QjNGQjA0NEYyODQxMTEyMjJBOEI0Qzc4MzkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIyQThCNEM3 ODM5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDcwMWIyNzctYzgwYy00NWQ1LTgw ODktYTllZmEzNDA1NDJhLzAvNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIy QThCNEM3ODM5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJvoh6kNGJsOUxrVEfS8vZubG7KNdzL92zl 1HC3hStvAjIfPU3Ut41RAvbC6ubKYQpCHqztXbI2cp2delKhu3onT7WQnHxGJLnK JLdXZUzLPxncx7lAbPmi9cYR1VF7kn1fqNkmUzLnpkr+DhjTUsQXMyk1ic6U0DLN N8Fo5kDlGYTvY5PJnSggB1G/1Nnhfk3qWGm6jZnHU1Ab0gkchNqXGOaHNcPWG3wv INvMYsJjV6qeIOnNY7do9sdz244izxN6A9vpSFbWpBSmg5Xfg0Kx3/h98062MeHd q6qrhzWqXSIcdcsUG9l6lsMF5QXJwhuzuSDUVIoWl7GIe5P01PQ= -----END CERTIFICATE-----Generated at Tue Jun 3 23:16:49 2025 by rpki-client