$ rpki-client -vvf repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft File: D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft (raw, json) Hash identifier: Bgoz090s2EOUB5hs0P/sp4jN3SGwmqR26WpEZvcTCec= Subject key identifier: 75:29:50:B8:2C:F3:FC:DB:D5:73:AA:0B:19:4D:11:70:71:47:6E:14 Authority key identifier: D8:07:B5:A7:71:6C:B5:6D:03:6E:DE:4C:E9:94:63:2C:0D:3A:25:01 Certificate issuer: /CN=D807B5A7716CB56D036EDE4CE994632C0D3A2501 Certificate serial: 124B6442D102759AC05103D7BE66904EF69FF4E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft Manifest number: 0187 Signing time: Thu 05 Jun 2025 07:42:06 +0000 Manifest this update: Thu 05 Jun 2025 07:37:06 +0000 Manifest next update: Sun 08 Jun 2025 08:00:06 +0000 Files and hashes: 1: D807B5A7716CB56D036EDE4CE994632C0D3A2501.crl (hash: /nuiMwUrULAy3BEWAw+GnVROxT31DDL3YuzO2Cf+bec=) 2: 3130332e3139312e3230302e302f32342d3234203d3e20313432333636.roa (hash: 71RKMRkCzf+dsSgq8Q8+9kiI589hG8/JWQHbUqhmZBU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.crl rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 08:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:4b:64:42:d1:02:75:9a:c0:51:03:d7:be:66:90:4e:f6:9f:f4:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D807B5A7716CB56D036EDE4CE994632C0D3A2501 Validity Not Before: Jun 5 07:37:06 2025 GMT Not After : Jun 8 08:00:06 2025 GMT Subject: CN=752950B82CF3FCDBD573AA0B194D117071476E14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:77:3c:16:ab:6e:d0:12:85:93:b6:b7:69:6d: 4a:92:85:91:bc:f6:ac:e1:6d:cb:d6:8b:4d:95:16: 64:a0:6a:a9:ae:01:e0:98:f2:4c:82:8b:cf:6c:20: 13:a4:4e:ef:09:8d:ae:f0:fa:b4:43:15:e8:01:8b: 4c:4c:d7:35:32:3b:5f:e2:c4:fc:44:2a:28:ad:b0: 8a:77:2d:ef:93:f7:28:d8:67:f1:a6:6f:5f:88:4a: 8b:fd:ef:59:11:62:5d:57:df:56:4f:1b:27:c5:32: 49:86:90:83:f5:69:3a:3e:45:a0:7a:87:c1:c7:46: a7:33:bf:cd:e6:8d:8c:6f:30:81:fa:7d:d7:5c:86: e3:1f:da:d5:d6:43:86:78:67:58:65:8f:1a:a8:4c: 6b:8d:bb:56:f8:56:b7:2d:f5:a3:50:28:2c:1e:50: 54:d6:fb:97:d1:63:6c:44:cd:0d:03:8b:1e:82:f6: 39:52:61:90:4c:dc:2f:16:1b:bc:f7:e7:44:c7:d7: 10:49:37:fb:ff:c8:2e:08:a3:61:f1:98:66:a3:b6: fe:f2:2d:d7:21:4b:0c:23:69:17:d7:b8:b6:48:3d: e5:16:df:bd:2f:3e:9f:8d:74:94:34:0c:5b:a8:be: b9:00:6d:00:37:44:63:f4:bb:e8:ec:57:a5:96:5e: 08:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:29:50:B8:2C:F3:FC:DB:D5:73:AA:0B:19:4D:11:70:71:47:6E:14 X509v3 Authority Key Identifier: keyid:D8:07:B5:A7:71:6C:B5:6D:03:6E:DE:4C:E9:94:63:2C:0D:3A:25:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:65:5d:6b:1c:21:60:f2:e7:da:bf:bb:af:1d:f8:2c:aa:e2: 46:e8:a4:9a:0b:a1:8d:95:02:2e:56:73:d3:c0:d5:70:40:7b: 7c:37:74:5a:18:c4:61:cc:a5:ee:82:e9:46:55:c4:67:86:a7: 95:d6:3e:60:81:f0:4e:cb:9b:99:ee:7d:e7:f1:5f:05:c3:f1: 81:55:bd:f6:f1:84:e4:d5:df:6a:f1:e4:01:86:3b:b3:fb:e9: 64:de:8e:c2:8c:bc:0b:62:4c:08:37:89:02:81:fa:0f:d4:1c: c9:97:b1:f9:0e:0c:cd:e9:9d:fb:af:ce:92:b5:3e:81:e2:c2: 3e:be:a7:c2:21:1a:0c:aa:2a:06:f9:91:83:25:6e:b8:6d:60: 0b:f7:a6:31:9a:7f:17:38:a3:d8:ca:34:79:56:15:94:04:c5: 36:c6:10:c5:11:13:a6:10:a2:c4:1c:e2:d2:35:d6:d3:62:3f: 55:49:39:55:19:d0:5f:3c:c2:39:b0:df:87:0f:bd:3b:43:ae: ba:95:8c:67:60:5f:6b:3c:9b:6a:83:00:79:ff:eb:58:f9:c6: d6:3d:99:97:a5:aa:14:82:87:b4:55:59:7c:f8:60:b8:b3:3f: a5:4d:68:7a:68:c4:1f:69:78:7d:42:01:d9:fe:5b:ec:a0:c1: 45:0b:29:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEktkQtECdZrAUQPXvmaQTvaf9OEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDgwN0I1QTc3MTZDQjU2RDAzNkVERTRDRTk5NDYzMkMw RDNBMjUwMTAeFw0yNTA2MDUwNzM3MDZaFw0yNTA2MDgwODAwMDZaMDMxMTAvBgNV BAMTKDc1Mjk1MEI4MkNGM0ZDREJENTczQUEwQjE5NEQxMTcwNzE0NzZFMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1dzwWq27QEoWTtrdpbUqShZG8 9qzhbcvWi02VFmSgaqmuAeCY8kyCi89sIBOkTu8Jja7w+rRDFegBi0xM1zUyO1/i xPxEKiitsIp3Le+T9yjYZ/Gmb1+ISov971kRYl1X31ZPGyfFMkmGkIP1aTo+RaB6 h8HHRqczv83mjYxvMIH6fddchuMf2tXWQ4Z4Z1hljxqoTGuNu1b4Vrct9aNQKCwe UFTW+5fRY2xEzQ0Dix6C9jlSYZBM3C8WG7z350TH1xBJN/v/yC4Io2HxmGajtv7y LdchSwwjaRfXuLZIPeUW370vPp+NdJQ0DFuovrkAbQA3RGP0u+jsV6WWXghXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdSlQuCzz/NvVc6oLGU0RcHFHbhQwHwYDVR0j BBgwFoAU2Ae1p3FstW0Dbt5M6ZRjLA06JQEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDNlNzFmZS1hZDMzLTRkMTItODcyMC00MzE0M2ZmMDFkYmYvMC9EODA3QjVBNzcx NkNCNTZEMDM2RURFNENFOTk0NjMyQzBEM0EyNTAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDgwN0I1QTc3MTZDQjU2RDAzNkVERTRDRTk5NDYzMkMwRDNB MjUwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTAzZTcxZmUtYWQzMy00ZDEyLTg3 MjAtNDMxNDNmZjAxZGJmLzAvRDgwN0I1QTc3MTZDQjU2RDAzNkVERTRDRTk5NDYz MkMwRDNBMjUwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABtlXWscIWDy59q/u68d+Cyq4kbopJoLoY2V Ai5Wc9PA1XBAe3w3dFoYxGHMpe6C6UZVxGeGp5XWPmCB8E7Lm5nufefxXwXD8YFV vfbxhOTV32rx5AGGO7P76WTejsKMvAtiTAg3iQKB+g/UHMmXsfkODM3pnfuvzpK1 PoHiwj6+p8IhGgyqKgb5kYMlbrhtYAv3pjGafxc4o9jKNHlWFZQExTbGEMURE6YQ osQc4tI11tNiP1VJOVUZ0F88wjmw34cPvTtDrrqVjGdgX2s8m2qDAHn/61j5xtY9 mZelqhSCh7RVWXz4YLizP6VNaHpoxB9peH1CAdn+W+ygwUULKTE= -----END CERTIFICATE-----Generated at Thu Jun 5 18:14:20 2025 by rpki-client