$ rpki-client -vvf repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft File: D1553F19BBD3B70719E720005FDB3145CC910A1F.mft (raw, json) Hash identifier: F7y2VkFf9hmhKnc6PNHRNgxZsX9DUc/vXjIEd6dnoRI= Subject key identifier: 0B:85:F5:6C:CD:61:5B:1D:69:62:42:BA:0F:94:2E:C2:FB:8F:AB:29 Authority key identifier: D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F Certificate issuer: /CN=D1553F19BBD3B70719E720005FDB3145CC910A1F Certificate serial: 78A4C87DF298AC7387DE4445822A7F5D35E39B8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft Manifest number: 0210 Signing time: Thu 05 Jun 2025 15:40:36 +0000 Manifest this update: Thu 05 Jun 2025 15:35:36 +0000 Manifest next update: Sun 08 Jun 2025 21:30:36 +0000 Files and hashes: 1: 3130332e3138332e35382e302f32332d3233203d3e20313439343039.roa (hash: wDDHmfXbcVqw0smbG6As8acn9RHt973MQSaDFYdjQNM=) 2: D1553F19BBD3B70719E720005FDB3145CC910A1F.crl (hash: U9vzVTkV0cMU5C+2HuaHedWbISLsgjqQDF16NGlpxSA=) 3: 3130332e3138332e35392e302f32342d3234203d3e20313439343039.roa (hash: vMllDWXQKOFp/LXz2039GVQEOHmucr5NlyL4beN8AaE=) 4: 3130332e3138332e35382e302f32342d3234203d3e20313439343039.roa (hash: VbrMhF5/NgCAVgxme528zhOBb1Z3HAdEz6QJSucgsYY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 21:30:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:a4:c8:7d:f2:98:ac:73:87:de:44:45:82:2a:7f:5d:35:e3:9b:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1553F19BBD3B70719E720005FDB3145CC910A1F Validity Not Before: Jun 5 15:35:36 2025 GMT Not After : Jun 8 21:30:36 2025 GMT Subject: CN=0B85F56CCD615B1D696242BA0F942EC2FB8FAB29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fb:3e:93:be:69:59:46:06:82:37:ee:60:3a: 4e:bd:a5:39:b9:f5:d8:1f:c7:50:b2:68:54:96:ab: 49:16:d9:e0:f4:3c:cb:25:8b:da:b4:03:ab:53:62: a9:a7:a5:66:8f:51:84:45:10:d2:b7:7c:6f:a3:9d: 8a:73:c0:d2:eb:05:0d:12:cd:76:83:dc:68:fd:09: 10:02:38:a5:37:d5:07:ac:b7:b1:d3:bb:ae:ed:09: dd:f0:be:c4:58:91:a2:38:09:e5:89:3e:68:a1:87: fd:09:1a:83:48:e4:aa:81:9b:14:7b:ff:fa:b0:c5: c6:05:b1:0d:f8:c2:61:1f:de:0e:a1:de:7d:c4:8f: 6d:5d:46:b1:08:f9:c7:b0:67:d4:2e:80:25:a3:d7: 40:af:d0:89:88:6b:4c:34:2d:c0:42:24:8b:d3:1e: aa:61:a9:4d:46:60:38:d7:b6:56:f8:42:b5:d5:a1: 9a:c5:e9:6a:45:54:f7:78:bd:30:51:59:77:2c:eb: 9b:e2:54:e5:ce:84:27:a1:9f:38:4c:ff:87:13:7d: e8:64:bb:71:6c:75:61:f4:88:16:d2:56:d7:06:09: ec:78:20:53:87:f7:6f:ec:82:a9:ad:80:1e:db:6b: 2f:a2:93:aa:35:d2:b4:a6:09:8c:9a:0e:2b:1e:13: 2d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:85:F5:6C:CD:61:5B:1D:69:62:42:BA:0F:94:2E:C2:FB:8F:AB:29 X509v3 Authority Key Identifier: keyid:D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:ac:71:01:f4:32:48:a3:bc:b6:5f:a5:6f:97:2e:d3:8b:a3: 37:8e:ef:70:8f:9a:4e:61:49:24:a6:03:19:06:00:df:18:19: 18:eb:b5:4f:d3:cc:a8:b2:0d:93:1a:ea:72:5e:d2:c5:6e:61: aa:8c:56:84:d6:74:e4:a8:c4:89:dd:2c:be:ad:d3:b4:c3:dc: 18:2b:67:42:e5:6f:a5:fb:35:20:ed:69:dd:c5:74:5e:f4:3a: 84:2a:eb:da:92:b6:e6:75:85:67:eb:99:11:ce:20:6a:47:58: d6:e1:07:77:d6:b7:56:7c:b8:75:c3:09:6b:c4:ab:a6:45:bb: 6b:9e:28:da:dc:6f:8c:7e:eb:8e:b1:3e:1c:ec:33:28:f8:19: 9e:e5:5a:d5:9a:e2:09:d1:13:02:c8:5c:5d:9b:ea:2e:89:ac: 9d:96:c8:97:7a:e8:11:69:31:88:17:a9:16:c0:af:6f:99:95: 79:e6:72:6e:a5:e7:68:62:66:f9:06:46:3a:9c:bf:50:19:6c: d3:e2:1f:67:b0:14:73:01:9c:5a:be:15:17:51:d3:bb:2c:85: d6:e6:d8:92:bb:27:05:d9:44:1c:25:58:c1:90:be:30:b4:ea: 0d:51:aa:8d:a8:4c:93:00:39:9f:26:47:da:08:d6:9b:2f:d1: 48:84:65:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeKTIffKYrHOH3kRFgip/XTXjm4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMxNDVD QzkxMEExRjAeFw0yNTA2MDUxNTM1MzZaFw0yNTA2MDgyMTMwMzZaMDMxMTAvBgNV BAMTKDBCODVGNTZDQ0Q2MTVCMUQ2OTYyNDJCQTBGOTQyRUMyRkI4RkFCMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG+z6TvmlZRgaCN+5gOk69pTm5 9dgfx1CyaFSWq0kW2eD0PMsli9q0A6tTYqmnpWaPUYRFENK3fG+jnYpzwNLrBQ0S zXaD3Gj9CRACOKU31Qest7HTu67tCd3wvsRYkaI4CeWJPmihh/0JGoNI5KqBmxR7 //qwxcYFsQ34wmEf3g6h3n3Ej21dRrEI+cewZ9QugCWj10Cv0ImIa0w0LcBCJIvT HqphqU1GYDjXtlb4QrXVoZrF6WpFVPd4vTBRWXcs65viVOXOhCehnzhM/4cTfehk u3FsdWH0iBbSVtcGCex4IFOH92/sgqmtgB7bay+ik6o10rSmCYyaDiseEy1DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC4X1bM1hWx1pYkK6D5QuwvuPqykwHwYDVR0j BBgwFoAU0VU/GbvTtwcZ5yAAX9sxRcyRCh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTliNjA0Zi0xNTc4LTRhMGItOGY3YS01OGQ5ZjEzYzk3NjkvMC9EMTU1M0YxOUJC RDNCNzA3MTlFNzIwMDA1RkRCMzE0NUNDOTEwQTFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMxNDVDQzkx MEExRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTk5YjYwNGYtMTU3OC00YTBiLThm N2EtNThkOWYxM2M5NzY5LzAvRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMx NDVDQzkxMEExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWscQH0MkijvLZfpW+XLtOLozeO73CPmk5h SSSmAxkGAN8YGRjrtU/TzKiyDZMa6nJe0sVuYaqMVoTWdOSoxIndLL6t07TD3Bgr Z0Llb6X7NSDtad3FdF70OoQq69qStuZ1hWfrmRHOIGpHWNbhB3fWt1Z8uHXDCWvE q6ZFu2ueKNrcb4x+646xPhzsMyj4GZ7lWtWa4gnREwLIXF2b6i6JrJ2WyJd66BFp MYgXqRbAr2+ZlXnmcm6l52hiZvkGRjqcv1AZbNPiH2ewFHMBnFq+FRdR07sshdbm 2JK7JwXZRBwlWMGQvjC06g1Rqo2oTJMAOZ8mR9oI1psv0UiEZXQ= -----END CERTIFICATE-----Generated at Fri Jun 6 16:54:36 2025 by rpki-client