$ rpki-client -vvf repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft File: 575614534DD1047EA1BA290176D96470FCBA1ECA.mft (raw, json) Hash identifier: 4qzqQYxXsgcRfa2TtiiK7vthuWPbK/ebvmtl0kKGlZk= Subject key identifier: 76:9B:9F:82:7C:2D:4E:1C:3D:13:FE:85:20:CB:2F:D9:BC:A0:2F:8F Authority key identifier: 57:56:14:53:4D:D1:04:7E:A1:BA:29:01:76:D9:64:70:FC:BA:1E:CA Certificate issuer: /CN=575614534DD1047EA1BA290176D96470FCBA1ECA Certificate serial: 60E1D89F326F91BCDEDAD7F40AA5A4D2AA3D39D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft Manifest number: 9C Signing time: Thu 05 Jun 2025 23:20:39 +0000 Manifest this update: Thu 05 Jun 2025 23:15:39 +0000 Manifest next update: Mon 09 Jun 2025 04:51:39 +0000 Files and hashes: 1: 3136302e32322e39302e302f32342d3234203d3e20313532383135.roa (hash: s193StwN0Z9fOKLEn3xGZ1WwxkYPgh/jBrrzDTrFlDA=) 2: 575614534DD1047EA1BA290176D96470FCBA1ECA.crl (hash: JiMRDlHkQUjcQEwZeuH4/QJcsKA1tvp4J+PpDMoRK28=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.crl rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 04:51:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:e1:d8:9f:32:6f:91:bc:de:da:d7:f4:0a:a5:a4:d2:aa:3d:39:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=575614534DD1047EA1BA290176D96470FCBA1ECA Validity Not Before: Jun 5 23:15:39 2025 GMT Not After : Jun 9 04:51:39 2025 GMT Subject: CN=769B9F827C2D4E1C3D13FE8520CB2FD9BCA02F8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:18:b1:22:0f:42:44:1d:bd:37:87:5c:a7:e7: 74:b5:4a:91:46:ff:ab:95:8b:03:2e:c4:1c:fc:36: 19:7a:4e:5d:ef:69:81:b1:bc:49:b8:75:f1:bd:d1: 6f:c9:09:cb:34:9f:23:da:20:f8:c0:f0:1a:82:50: ac:88:07:96:ea:ae:1c:42:a3:bd:f8:a5:0a:6e:66: 0e:10:37:cf:07:a0:5f:9d:bf:b2:dd:bb:38:15:0c: 27:b6:d2:6c:c2:d0:64:ca:72:38:8c:fc:c1:52:d0: 3b:c7:c4:38:c6:62:2e:da:58:07:92:e4:1a:ea:90: 84:14:d2:8c:51:f3:46:d7:60:bc:79:92:dc:ce:7f: 7e:8d:7b:b8:9d:39:f0:a8:e2:7c:ff:64:9f:19:b3: 8b:0a:ab:d2:35:87:bc:6a:1d:3f:59:78:ad:dc:69: 72:9a:43:89:dd:aa:16:e2:10:46:12:d2:ac:d2:4c: ea:30:d1:61:3e:5f:c4:e9:cc:46:0a:88:b1:22:f1: e5:4e:10:bd:06:26:de:31:b8:d4:6f:8d:73:a7:09: aa:f0:e1:34:a0:36:6c:12:20:27:5e:f6:40:12:fa: 44:64:e2:9d:98:ea:95:90:53:2e:03:2a:f1:91:76: 96:f6:b0:35:a4:1e:53:c5:3d:49:13:09:d0:7f:17: e2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:9B:9F:82:7C:2D:4E:1C:3D:13:FE:85:20:CB:2F:D9:BC:A0:2F:8F X509v3 Authority Key Identifier: keyid:57:56:14:53:4D:D1:04:7E:A1:BA:29:01:76:D9:64:70:FC:BA:1E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:4b:34:df:bf:e9:9b:6b:29:b0:c1:5b:bf:73:29:80:07:99: 28:ad:a5:23:61:5a:e9:6e:e2:4f:da:c0:94:9d:f1:fb:12:05: 5b:d7:4f:98:13:fb:38:5f:d6:96:a7:dc:01:e0:ae:25:9c:0a: b4:ed:31:61:ba:43:92:1e:97:95:e2:e7:e8:8f:c7:0a:bb:06: 27:cb:ae:62:f6:ce:37:07:80:1a:30:1c:f0:99:f7:46:89:1d: ce:9a:1f:5a:46:52:ba:81:72:c5:ab:06:ce:e8:cb:40:a5:12: 1e:e6:ad:32:a8:63:ab:ce:89:a7:44:6f:fa:c4:21:fa:e2:0d: 5e:37:77:54:7e:f0:f7:b3:13:77:97:89:f1:19:ca:03:f1:0c: 4c:35:16:c6:6c:68:e7:54:7a:35:1b:e7:bb:37:3e:df:96:a6: 77:b8:60:b1:b9:ba:0c:50:61:44:f8:07:9e:80:56:06:90:67: 1f:ff:63:38:f6:0c:01:5f:b5:62:2c:90:70:21:e7:78:bb:7b: 2e:31:6b:66:ef:e4:08:c1:a5:10:88:87:ef:a1:82:b6:e1:d8: 5c:e5:a4:90:4f:26:cd:ba:09:bd:14:0b:9a:dd:57:55:9e:6c: 1d:e0:be:13:dd:95:20:c9:8f:6f:95:17:4e:79:b9:dc:7f:cf: cc:bb:87:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYOHYnzJvkbze2tf0CqWk0qo9OdcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc1NjE0NTM0REQxMDQ3RUExQkEyOTAxNzZEOTY0NzBG Q0JBMUVDQTAeFw0yNTA2MDUyMzE1MzlaFw0yNTA2MDkwNDUxMzlaMDMxMTAvBgNV BAMTKDc2OUI5RjgyN0MyRDRFMUMzRDEzRkU4NTIwQ0IyRkQ5QkNBMDJGOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9GLEiD0JEHb03h1yn53S1SpFG /6uViwMuxBz8Nhl6Tl3vaYGxvEm4dfG90W/JCcs0nyPaIPjA8BqCUKyIB5bqrhxC o734pQpuZg4QN88HoF+dv7LduzgVDCe20mzC0GTKcjiM/MFS0DvHxDjGYi7aWAeS 5BrqkIQU0oxR80bXYLx5ktzOf36Ne7idOfCo4nz/ZJ8Zs4sKq9I1h7xqHT9ZeK3c aXKaQ4ndqhbiEEYS0qzSTOow0WE+X8TpzEYKiLEi8eVOEL0GJt4xuNRvjXOnCarw 4TSgNmwSICde9kAS+kRk4p2Y6pWQUy4DKvGRdpb2sDWkHlPFPUkTCdB/F+KNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdpufgnwtThw9E/6FIMsv2bygL48wHwYDVR0j BBgwFoAUV1YUU03RBH6huikBdtlkcPy6HsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTdmNzliMC1iOWUzLTRjM2QtYTExMy1iNmM2YTE4YWY0ZDEvMC81NzU2MTQ1MzRE RDEwNDdFQTFCQTI5MDE3NkQ5NjQ3MEZDQkExRUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTc1NjE0NTM0REQxMDQ3RUExQkEyOTAxNzZEOTY0NzBGQ0JB MUVDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE3Zjc5YjAtYjllMy00YzNkLWEx MTMtYjZjNmExOGFmNGQxLzAvNTc1NjE0NTM0REQxMDQ3RUExQkEyOTAxNzZEOTY0 NzBGQ0JBMUVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAApLNN+/6ZtrKbDBW79zKYAHmSitpSNhWulu 4k/awJSd8fsSBVvXT5gT+zhf1pan3AHgriWcCrTtMWG6Q5Iel5Xi5+iPxwq7BifL rmL2zjcHgBowHPCZ90aJHc6aH1pGUrqBcsWrBs7oy0ClEh7mrTKoY6vOiadEb/rE IfriDV43d1R+8PezE3eXifEZygPxDEw1FsZsaOdUejUb57s3Pt+Wpne4YLG5ugxQ YUT4B56AVgaQZx//Yzj2DAFftWIskHAh53i7ey4xa2bv5AjBpRCIh++hgrbh2Fzl pJBPJs26Cb0UC5rdV1WebB3gvhPdlSDJj2+VF055udx/z8y7h2M= -----END CERTIFICATE-----Generated at Fri Jun 6 19:09:31 2025 by rpki-client