$ rpki-client -vvf repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft File: D8D82E797873C8877988A42E5C473D1919238C2A.mft (raw, json) Hash identifier: fEgjBn7ml1TtIf3pCtEj8DHYzEMuQ+xuZbd0uEhU5S0= Subject key identifier: 5E:58:93:75:3B:DF:CC:60:00:B4:BC:01:16:72:8C:41:42:AC:F3:B4 Authority key identifier: D8:D8:2E:79:78:73:C8:87:79:88:A4:2E:5C:47:3D:19:19:23:8C:2A Certificate issuer: /CN=D8D82E797873C8877988A42E5C473D1919238C2A Certificate serial: 0A55B5D74C150446AA7D9CB775580351D84D26C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft Manifest number: E0 Signing time: Fri 06 Jun 2025 03:20:51 +0000 Manifest this update: Fri 06 Jun 2025 03:15:51 +0000 Manifest next update: Mon 09 Jun 2025 12:37:51 +0000 Files and hashes: 1: D8D82E797873C8877988A42E5C473D1919238C2A.crl (hash: YPBtOPiXBcdsyWraBq0G7zqyyTCd591IcFHu/oMn+mU=) 2: 3135372e31352e34322e302f32332d3234203d3e20313532333635.roa (hash: ySMjg/pkUv37Q0zTaOUXDRe+ryQNKPJrUvoPh4zMnMw=) 3: 3135372e31352e34332e302f32342d3234203d3e20313532333635.roa (hash: SdCO6LUwi+1N2Ies+pS/6sQhEMVEri8BAI23zsU+Qbk=) 4: 3135372e31352e34322e302f32342d3234203d3e20313532333635.roa (hash: ZWPXh7PZMzPsScuf7sWCpbvy4mjVpdrHvlCNoGfhEtg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.crl rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 01:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:55:b5:d7:4c:15:04:46:aa:7d:9c:b7:75:58:03:51:d8:4d:26:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8D82E797873C8877988A42E5C473D1919238C2A Validity Not Before: Jun 6 03:15:51 2025 GMT Not After : Jun 9 12:37:51 2025 GMT Subject: CN=5E5893753BDFCC6000B4BC0116728C4142ACF3B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e8:87:40:c9:1a:14:81:9c:cb:b6:3b:90:36: 8f:76:19:1f:14:e7:15:dd:d5:0d:68:d5:ff:63:f5: fe:ba:7c:7d:5e:0b:de:a2:ab:68:3b:86:5a:d8:d5: cf:4b:c5:08:3b:0b:66:f2:dc:6f:20:f0:b2:81:cc: 23:47:2b:b1:2a:27:78:0d:f2:5a:4d:48:a5:03:87: 46:b0:6f:ef:93:9a:41:58:75:b2:07:28:03:6c:fb: 54:14:b6:4c:13:2b:a3:39:31:d5:70:22:27:9b:a0: 94:22:a6:43:c3:1d:70:e3:61:b8:b2:b5:b5:3d:f4: a6:40:23:2a:9b:d9:25:dd:8a:3b:d3:55:56:11:4d: f1:97:a8:4a:60:b2:0c:f1:16:27:ac:02:0b:44:f9: a8:64:c6:1c:20:f8:17:d4:20:0f:82:a4:ed:f2:5d: a7:cb:6c:b4:ab:75:98:23:e4:f5:97:2d:98:98:97: cb:84:61:67:5f:76:2c:1c:aa:ff:ad:38:42:24:ed: b4:54:8c:59:dc:e5:4e:db:f8:22:72:fc:22:26:7e: fc:55:9a:4e:e8:18:80:63:96:aa:55:c2:2f:d0:c9: 7f:e5:2b:dd:24:b8:de:37:19:cf:4e:29:dd:0f:6a: 19:31:3c:a3:5b:e9:17:02:da:7a:a5:6c:76:24:ac: 28:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:58:93:75:3B:DF:CC:60:00:B4:BC:01:16:72:8C:41:42:AC:F3:B4 X509v3 Authority Key Identifier: keyid:D8:D8:2E:79:78:73:C8:87:79:88:A4:2E:5C:47:3D:19:19:23:8C:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:e5:a9:2f:e7:f9:a2:35:15:f7:f0:f9:a5:57:06:03:b3:30: 46:f2:89:74:5a:f7:34:1e:2f:8f:04:6d:c4:84:e5:66:75:ff: e8:68:64:f4:0a:dc:4f:46:ab:92:dc:4d:dd:9d:ac:16:5b:ba: 6a:0c:55:61:62:e2:cc:32:e4:c9:9a:90:c8:4e:63:b2:44:75: a7:e4:64:e8:26:4e:a6:a8:73:01:cd:70:37:53:c5:c1:35:aa: b4:fb:9b:02:25:6a:d8:54:6d:29:56:15:2c:f4:22:5a:b0:23: 87:f8:b4:2e:c1:8c:ff:84:9d:51:de:d4:68:3e:5d:34:f0:4e: 69:22:67:94:1d:0f:16:65:f1:fb:3c:57:92:fb:c4:8d:1a:7a: f5:b9:6f:23:61:05:0c:93:fc:0f:c2:7d:27:58:f1:a6:51:e4: 53:45:8a:a2:a1:6e:59:9f:53:af:de:c7:70:08:db:97:b8:72: 71:08:5f:f2:8d:35:41:20:38:ad:9c:99:15:bb:1f:a6:8a:52: a4:fa:57:4f:21:a1:e0:19:53:e6:10:2a:5e:b4:9e:f9:f2:5f: 59:b5:bc:df:d6:b0:cc:72:4c:cf:72:fd:cd:bb:21:96:b7:97: e4:bb:1a:ca:a3:aa:fc:71:a3:da:25:7d:15:70:52:1f:e1:b8: 50:c9:13:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUClW110wVBEaqfZy3dVgDUdhNJsQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhEODJFNzk3ODczQzg4Nzc5ODhBNDJFNUM0NzNEMTkx OTIzOEMyQTAeFw0yNTA2MDYwMzE1NTFaFw0yNTA2MDkxMjM3NTFaMDMxMTAvBgNV BAMTKDVFNTg5Mzc1M0JERkNDNjAwMEI0QkMwMTE2NzI4QzQxNDJBQ0YzQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC06IdAyRoUgZzLtjuQNo92GR8U 5xXd1Q1o1f9j9f66fH1eC96iq2g7hlrY1c9LxQg7C2by3G8g8LKBzCNHK7EqJ3gN 8lpNSKUDh0awb++TmkFYdbIHKANs+1QUtkwTK6M5MdVwIieboJQipkPDHXDjYbiy tbU99KZAIyqb2SXdijvTVVYRTfGXqEpgsgzxFiesAgtE+ahkxhwg+BfUIA+CpO3y XafLbLSrdZgj5PWXLZiYl8uEYWdfdiwcqv+tOEIk7bRUjFnc5U7b+CJy/CImfvxV mk7oGIBjlqpVwi/QyX/lK90kuN43Gc9OKd0PahkxPKNb6RcC2nqlbHYkrCiXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXliTdTvfzGAAtLwBFnKMQUKs87QwHwYDVR0j BBgwFoAU2NgueXhzyId5iKQuXEc9GRkjjCowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NWRlNzFhYy03ZjlmLTQ3ZDQtOTUzMy05ZGY4MmFmYzU5NzMvMC9EOEQ4MkU3OTc4 NzNDODg3Nzk4OEE0MkU1QzQ3M0QxOTE5MjM4QzJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDhEODJFNzk3ODczQzg4Nzc5ODhBNDJFNUM0NzNEMTkxOTIz OEMyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTVkZTcxYWMtN2Y5Zi00N2Q0LTk1 MzMtOWRmODJhZmM1OTczLzAvRDhEODJFNzk3ODczQzg4Nzc5ODhBNDJFNUM0NzNE MTkxOTIzOEMyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAELlqS/n+aI1Fffw+aVXBgOzMEbyiXRa9zQe L48EbcSE5WZ1/+hoZPQK3E9Gq5LcTd2drBZbumoMVWFi4swy5MmakMhOY7JEdafk ZOgmTqaocwHNcDdTxcE1qrT7mwIlathUbSlWFSz0IlqwI4f4tC7BjP+EnVHe1Gg+ XTTwTmkiZ5QdDxZl8fs8V5L7xI0aevW5byNhBQyT/A/CfSdY8aZR5FNFiqKhblmf U6/ex3AI25e4cnEIX/KNNUEgOK2cmRW7H6aKUqT6V08hoeAZU+YQKl60nvnyX1m1 vN/WsMxyTM9y/c27IZa3l+S7Gsqjqvxxo9olfRVwUh/huFDJE7s= -----END CERTIFICATE-----Generated at Fri Jun 6 05:11:16 2025 by rpki-client