$ rpki-client -vvf repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft File: 5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft (raw, json) Hash identifier: e6ba+AEmpsSi5h1KKi45uOGTB6TOsXL3S4mJrOy6ZUI= Subject key identifier: 24:D4:3B:B9:1E:F9:EA:F7:DD:BF:3D:75:1F:DC:BA:B7:A2:1F:DC:8F Authority key identifier: 55:62:ED:3E:2B:75:AA:4C:E3:61:65:EE:02:F7:69:6C:CB:80:45:E1 Certificate issuer: /CN=5562ED3E2B75AA4CE36165EE02F7696CCB8045E1 Certificate serial: 58FFDC43159AC85EC04C5F8269DAE32A3566FFB2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft Manifest number: 0324 Signing time: Thu 05 Jun 2025 06:52:02 +0000 Manifest this update: Thu 05 Jun 2025 06:47:02 +0000 Manifest next update: Sun 08 Jun 2025 16:48:02 +0000 Files and hashes: 1: 5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl (hash: z631IfiEUOVcafMdyreTpr4TqDFa/jeTrI/zDR7LpYo=) 2: 3130332e3137322e33342e302f32332d3234203d3e203538383231.roa (hash: FHzMEbRY0GUv7uZMGg/BZG/YZusPXZ52OHFP1+MW/+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 16:48:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:ff:dc:43:15:9a:c8:5e:c0:4c:5f:82:69:da:e3:2a:35:66:ff:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5562ED3E2B75AA4CE36165EE02F7696CCB8045E1 Validity Not Before: Jun 5 06:47:02 2025 GMT Not After : Jun 8 16:48:02 2025 GMT Subject: CN=24D43BB91EF9EAF7DDBF3D751FDCBAB7A21FDC8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7c:51:7f:c9:65:95:4a:01:ac:d7:b9:98:f9: 81:47:32:55:84:78:1f:25:7d:a6:3f:3f:2a:b9:b8: 61:95:1d:86:69:ef:82:67:16:ab:41:f8:d0:f4:e3: 9d:44:7b:ef:d0:dd:85:88:dd:c4:26:8a:32:7f:8b: a9:a5:3f:d5:6b:29:63:a6:59:08:15:40:d7:fc:22: 09:ee:e5:1d:69:f7:27:81:dd:ce:74:a6:e5:2c:ea: 38:e8:53:3d:25:f4:d8:9e:34:6d:3d:83:76:b0:5d: 99:ff:c0:48:18:11:f4:cc:34:10:16:e2:d4:69:61: b3:33:35:a1:1c:24:8b:cc:2f:a1:fe:de:b2:01:35: 10:58:2a:41:4d:72:78:95:2c:3b:5d:8d:c0:9d:95: 5a:b5:03:e2:18:51:1b:d0:44:74:22:e0:b9:01:a2: 64:d7:5f:66:98:76:66:1d:d1:36:b9:68:6a:5b:e0: a6:5a:1b:f6:ce:f1:39:db:31:18:40:a5:7a:1f:9f: 63:8a:25:e7:12:a5:03:b0:0d:d8:ac:c8:95:11:26: 3b:d1:7e:34:29:91:4e:4b:9d:84:14:39:71:dd:d2: 1a:aa:f0:f5:4f:b1:02:46:18:8f:09:18:0b:39:1b: c4:cd:53:b5:c7:99:95:56:26:3b:d6:94:82:77:e4: 9d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D4:3B:B9:1E:F9:EA:F7:DD:BF:3D:75:1F:DC:BA:B7:A2:1F:DC:8F X509v3 Authority Key Identifier: keyid:55:62:ED:3E:2B:75:AA:4C:E3:61:65:EE:02:F7:69:6C:CB:80:45:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:61:11:d6:a2:ec:2f:2c:e0:69:4d:af:55:61:43:cf:8c:d9: d7:65:7f:40:d3:a8:cd:82:88:3a:a1:8d:92:28:31:ac:28:87: c6:ba:7f:0b:e4:68:cc:ed:c8:77:7f:9b:30:30:1b:25:28:cc: de:f0:78:99:f4:8a:ed:48:a4:06:7e:6f:73:ec:1f:5e:71:bc: 32:6c:3b:c4:5e:c0:70:47:3a:dd:7f:65:65:56:0c:ce:87:3e: 56:60:c0:85:70:93:e4:1d:e7:20:60:82:a1:fb:e5:a9:d8:45: ae:37:70:5f:79:67:4e:b2:85:e0:9f:03:5c:06:b1:fe:79:6d: 27:fb:9e:0f:9b:16:9d:12:99:95:5e:9c:e1:2f:d3:be:17:b6: a8:22:3e:54:9a:c6:05:42:6f:a1:25:73:39:c3:ca:f1:70:cb: 7c:64:6e:a6:87:f5:1d:27:ba:ac:bd:92:24:c0:2a:ad:bf:61: 6c:a6:2b:27:a1:f9:ed:91:1c:03:4c:dc:0e:c6:57:22:f2:55: 1f:04:0f:e9:92:1e:ec:a1:eb:74:97:86:0b:3a:71:08:d1:bd: 53:cd:b5:d3:8b:bc:39:c3:d6:84:e1:73:17:ac:48:c7:da:7b: 6f:6d:29:b6:9e:1f:11:91:f3:b2:c9:d5:61:30:70:02:67:16: 4f:ad:e3:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWP/cQxWayF7ATF+CadrjKjVm/7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU2MkVEM0UyQjc1QUE0Q0UzNjE2NUVFMDJGNzY5NkND QjgwNDVFMTAeFw0yNTA2MDUwNjQ3MDJaFw0yNTA2MDgxNjQ4MDJaMDMxMTAvBgNV BAMTKDI0RDQzQkI5MUVGOUVBRjdEREJGM0Q3NTFGRENCQUI3QTIxRkRDOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+fFF/yWWVSgGs17mY+YFHMlWE eB8lfaY/Pyq5uGGVHYZp74JnFqtB+ND0451Ee+/Q3YWI3cQmijJ/i6mlP9VrKWOm WQgVQNf8Ignu5R1p9yeB3c50puUs6jjoUz0l9NieNG09g3awXZn/wEgYEfTMNBAW 4tRpYbMzNaEcJIvML6H+3rIBNRBYKkFNcniVLDtdjcCdlVq1A+IYURvQRHQi4LkB omTXX2aYdmYd0Ta5aGpb4KZaG/bO8TnbMRhApXofn2OKJecSpQOwDdisyJURJjvR fjQpkU5LnYQUOXHd0hqq8PVPsQJGGI8JGAs5G8TNU7XHmZVWJjvWlIJ35J3pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJNQ7uR756vfdvz11H9y6t6If3I8wHwYDVR0j BBgwFoAUVWLtPit1qkzjYWXuAvdpbMuAReEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l N2EzZTkwYS0wMzNhLTRjOGQtOTA3Ny0wZGFmODA1MGZhOGIvMC81NTYyRUQzRTJC NzVBQTRDRTM2MTY1RUUwMkY3Njk2Q0NCODA0NUUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU2MkVEM0UyQjc1QUE0Q0UzNjE2NUVFMDJGNzY5NkNDQjgw NDVFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTdhM2U5MGEtMDMzYS00YzhkLTkw NzctMGRhZjgwNTBmYThiLzAvNTU2MkVEM0UyQjc1QUE0Q0UzNjE2NUVFMDJGNzY5 NkNDQjgwNDVFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIBhEdai7C8s4GlNr1VhQ8+M2ddlf0DTqM2C iDqhjZIoMawoh8a6fwvkaMztyHd/mzAwGyUozN7weJn0iu1IpAZ+b3PsH15xvDJs O8RewHBHOt1/ZWVWDM6HPlZgwIVwk+Qd5yBggqH75anYRa43cF95Z06yheCfA1wG sf55bSf7ng+bFp0SmZVenOEv074XtqgiPlSaxgVCb6ElcznDyvFwy3xkbqaH9R0n uqy9kiTAKq2/YWymKyeh+e2RHANM3A7GVyLyVR8ED+mSHuyh63SXhgs6cQjRvVPN tdOLvDnD1oThcxesSMfae29tKbaeHxGR87LJ1WEwcAJnFk+t48c= -----END CERTIFICATE-----Generated at Sat Jun 7 16:28:36 2025 by rpki-client