$ rpki-client -vvf repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft File: 5DF7F909917C4DA09D7486E2B70323E7972B7675.mft (raw, json) Hash identifier: p7bYnQ92uTvEZgpcMKii0KiRE37iazdyKBoHrdY6UNs= Subject key identifier: 90:99:FE:C8:55:1B:5E:2B:78:72:88:A4:9A:59:E5:31:DC:63:65:F4 Authority key identifier: 5D:F7:F9:09:91:7C:4D:A0:9D:74:86:E2:B7:03:23:E7:97:2B:76:75 Certificate issuer: /CN=5DF7F909917C4DA09D7486E2B70323E7972B7675 Certificate serial: 0E542E29590392CDEFC721D43D83CDC844B8AF46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DF7F909917C4DA09D7486E2B70323E7972B7675.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft Manifest number: 01F1 Signing time: Wed 04 Jun 2025 02:22:15 +0000 Manifest this update: Wed 04 Jun 2025 02:17:15 +0000 Manifest next update: Sat 07 Jun 2025 12:05:15 +0000 Files and hashes: 1: 3130332e3138362e3136372e302f32342d3234203d3e20313439373033.roa (hash: uTV9a8fdyT6ZmJ8NRNVsn4KQvmLK6xkJNJmzdYWe1pQ=) 2: 5DF7F909917C4DA09D7486E2B70323E7972B7675.crl (hash: yED6YYQYVY47uNZpbM3QgINsa0TrSFmtmPUt/Ip+NEk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.crl rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DF7F909917C4DA09D7486E2B70323E7972B7675.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 12:05:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:54:2e:29:59:03:92:cd:ef:c7:21:d4:3d:83:cd:c8:44:b8:af:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DF7F909917C4DA09D7486E2B70323E7972B7675 Validity Not Before: Jun 4 02:17:15 2025 GMT Not After : Jun 7 12:05:15 2025 GMT Subject: CN=9099FEC8551B5E2B787288A49A59E531DC6365F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:68:6f:d5:19:2b:0f:27:6d:55:2f:99:62:84: 4b:8b:a4:2c:52:4c:fb:03:01:c1:93:0d:0d:ec:42: 70:ab:f9:45:53:16:20:60:43:8e:ec:48:67:9c:55: 1e:00:dc:04:be:f5:d0:d6:16:a0:fc:37:1b:92:b0: c9:dc:27:7e:23:37:b1:58:80:9e:8a:10:04:04:9c: b3:20:9f:2b:fd:08:3b:f3:9a:6c:62:f9:ef:dc:92: fa:c9:e3:f5:27:07:5b:2e:ca:27:f5:ef:80:77:aa: 84:ae:74:6c:ea:b6:20:32:c8:8c:2d:13:80:f4:8b: d9:42:df:c7:ca:ce:10:cc:68:1c:db:ae:a6:fd:8d: 04:4b:8f:43:27:4e:23:75:ab:e4:f2:16:7d:40:a5: 66:90:ee:d8:cf:83:63:17:4f:eb:37:61:48:3c:44: d6:9f:25:39:e9:8e:38:b4:63:d9:9c:b2:a3:99:90: 7f:fb:3e:20:26:a4:26:42:c4:04:1f:c1:78:bb:1e: 10:33:21:a7:a1:7d:90:e5:75:b0:d9:16:b8:37:d6: ce:7a:b9:b1:98:c3:cd:c6:0c:b5:a2:da:ce:17:63: b1:23:19:be:6f:42:ed:04:d6:9e:1a:b2:cd:0c:89: f2:1b:cd:f9:b8:5a:ab:1d:d7:e0:94:dc:cf:03:a8: 99:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:99:FE:C8:55:1B:5E:2B:78:72:88:A4:9A:59:E5:31:DC:63:65:F4 X509v3 Authority Key Identifier: keyid:5D:F7:F9:09:91:7C:4D:A0:9D:74:86:E2:B7:03:23:E7:97:2B:76:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DF7F909917C4DA09D7486E2B70323E7972B7675.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7b64c3e-b13d-427a-b982-4394073e5cf5/0/5DF7F909917C4DA09D7486E2B70323E7972B7675.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:9c:7d:ab:3c:45:c8:c2:b6:f1:12:12:ef:eb:da:12:6f:9c: a9:da:7a:e6:c9:01:f1:85:13:4e:88:3e:48:93:da:e3:87:c6: d4:cc:bd:f2:cb:c3:61:fe:96:a6:00:d4:52:0b:c5:c3:2c:80: 24:34:08:0e:c3:e6:1f:9f:62:c1:28:6a:f9:9b:18:55:bb:5d: 99:50:01:ae:17:76:f0:bf:a3:a3:34:50:98:08:70:ff:8f:15: b9:3e:e7:5d:6d:91:08:41:39:10:66:91:23:8e:f9:c4:a5:5f: 88:54:fd:dc:01:63:df:53:17:d1:60:2b:66:b4:2e:5b:df:7e: 6e:9e:d9:f7:d7:bc:2d:8d:d7:37:47:af:cd:73:a2:d4:2a:ab: c2:db:fe:2b:1e:26:f8:45:1c:50:8f:c2:41:26:3f:54:bd:1c: 96:86:8c:89:8c:63:aa:f6:45:4c:cd:5a:41:67:2e:c7:74:f9: ce:ce:af:c4:2f:4c:6a:6f:62:f7:8b:a8:8f:d7:a9:c7:2b:39: 27:3f:1a:9d:11:b2:9f:cd:73:e3:20:d1:a7:94:92:86:2a:09: 9c:29:b1:b4:ca:47:27:0a:a6:2c:c2:53:06:c8:a3:5d:2f:f6: 81:af:29:64:66:33:27:45:c6:72:d6:93:43:db:88:2c:72:04: 5d:b1:c4:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDlQuKVkDks3vxyHUPYPNyES4r0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGN0Y5MDk5MTdDNERBMDlENzQ4NkUyQjcwMzIzRTc5 NzJCNzY3NTAeFw0yNTA2MDQwMjE3MTVaFw0yNTA2MDcxMjA1MTVaMDMxMTAvBgNV BAMTKDkwOTlGRUM4NTUxQjVFMkI3ODcyODhBNDlBNTlFNTMxREM2MzY1RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1aG/VGSsPJ21VL5lihEuLpCxS TPsDAcGTDQ3sQnCr+UVTFiBgQ47sSGecVR4A3AS+9dDWFqD8NxuSsMncJ34jN7FY gJ6KEAQEnLMgnyv9CDvzmmxi+e/ckvrJ4/UnB1suyif174B3qoSudGzqtiAyyIwt E4D0i9lC38fKzhDMaBzbrqb9jQRLj0MnTiN1q+TyFn1ApWaQ7tjPg2MXT+s3YUg8 RNafJTnpjji0Y9mcsqOZkH/7PiAmpCZCxAQfwXi7HhAzIaehfZDldbDZFrg31s56 ubGYw83GDLWi2s4XY7EjGb5vQu0E1p4ass0MifIbzfm4Wqsd1+CU3M8DqJmHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkJn+yFUbXit4coikmlnlMdxjZfQwHwYDVR0j BBgwFoAUXff5CZF8TaCddIbitwMj55crdnUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2I2NGMzZS1iMTNkLTQyN2EtYjk4Mi00Mzk0MDczZTVjZjUvMC81REY3RjkwOTkx N0M0REEwOUQ3NDg2RTJCNzAzMjNFNzk3MkI3Njc1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNURGN0Y5MDk5MTdDNERBMDlENzQ4NkUyQjcwMzIzRTc5NzJC NzY3NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdiNjRjM2UtYjEzZC00MjdhLWI5 ODItNDM5NDA3M2U1Y2Y1LzAvNURGN0Y5MDk5MTdDNERBMDlENzQ4NkUyQjcwMzIz RTc5NzJCNzY3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALecfas8RcjCtvESEu/r2hJvnKnaeubJAfGF E06IPkiT2uOHxtTMvfLLw2H+lqYA1FILxcMsgCQ0CA7D5h+fYsEoavmbGFW7XZlQ Aa4XdvC/o6M0UJgIcP+PFbk+511tkQhBORBmkSOO+cSlX4hU/dwBY99TF9FgK2a0 Llvffm6e2ffXvC2N1zdHr81zotQqq8Lb/iseJvhFHFCPwkEmP1S9HJaGjImMY6r2 RUzNWkFnLsd0+c7Or8QvTGpvYveLqI/XqccrOSc/Gp0Rsp/Nc+Mg0aeUkoYqCZwp sbTKRycKpizCUwbIo10v9oGvKWRmMydFxnLWk0PbiCxyBF2xxOk= -----END CERTIFICATE-----Generated at Thu Jun 5 18:11:30 2025 by rpki-client