$ rpki-client -vvf repo-rpki.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/542851974B72056B3D43792A5ED83E94DA8583CF.mft File: 542851974B72056B3D43792A5ED83E94DA8583CF.mft (raw, json) Hash identifier: rgtd2b/1ClTe9HLMBBp8RFs1VXaYn6v+imDWJoqVFLA= Subject key identifier: 2F:BA:11:A3:7F:08:3E:2D:EA:2D:33:29:4C:24:FA:D3:01:DA:F0:7F Authority key identifier: 54:28:51:97:4B:72:05:6B:3D:43:79:2A:5E:D8:3E:94:DA:85:83:CF Certificate issuer: /CN=542851974B72056B3D43792A5ED83E94DA8583CF Certificate serial: 19E38CBBD676492C0BE5DE7DA1BDF6C9E0F953CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/542851974B72056B3D43792A5ED83E94DA8583CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/542851974B72056B3D43792A5ED83E94DA8583CF.mft Manifest number: 010D Signing time: Fri 06 Jun 2025 08:50:44 +0000 Manifest this update: Fri 06 Jun 2025 08:45:44 +0000 Manifest next update: Mon 09 Jun 2025 11:41:44 +0000 Files and hashes: 1: 542851974B72056B3D43792A5ED83E94DA8583CF.crl (hash: zR5bdKAEaIFtUZx91qLDPN/ZNISPNKGddkJ4fDqfm9w=) 2: 3130332e3137372e36302e302f32342d3234203d3e20313437313432.roa (hash: ppbrVEcBgfohP7PzWmA4cMeDdxEOvWIR45yY7aB8pfc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/542851974B72056B3D43792A5ED83E94DA8583CF.crl rsync://repo-rpki.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/542851974B72056B3D43792A5ED83E94DA8583CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/542851974B72056B3D43792A5ED83E94DA8583CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 11:41:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:e3:8c:bb:d6:76:49:2c:0b:e5:de:7d:a1:bd:f6:c9:e0:f9:53:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=542851974B72056B3D43792A5ED83E94DA8583CF Validity Not Before: Jun 6 08:45:44 2025 GMT Not After : Jun 9 11:41:44 2025 GMT Subject: CN=2FBA11A37F083E2DEA2D33294C24FAD301DAF07F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e7:92:ed:d9:7c:34:26:e7:1b:b1:7b:6c:cf: 56:29:8c:5a:71:d4:d1:4d:16:e2:2a:b5:e4:6e:7e: 1e:70:fc:fa:e3:be:ba:43:e8:22:98:92:ee:9a:45: ab:66:3c:78:12:c9:d1:55:70:e8:09:47:aa:89:09: a4:ed:9b:e6:54:27:56:6e:0f:95:94:0f:f9:df:d3: fc:88:21:53:a9:2c:3b:ec:cc:9f:a3:ca:6c:55:37: 67:c3:7e:f7:b1:7b:96:49:c1:35:d8:00:95:85:06: 71:0b:b4:22:25:c5:2e:87:fa:21:51:ab:34:31:6d: a5:f6:51:dc:27:df:ea:7d:2b:53:8d:fe:34:47:91: 11:c1:d2:84:f8:31:78:02:3d:f4:0e:e0:11:f7:4f: 5d:08:6d:cd:1f:f2:82:10:4b:56:28:be:82:ae:b9: 13:91:0a:70:5e:54:d0:e4:d8:cf:06:17:d8:2c:de: 2a:f1:f1:0f:96:c4:ff:4e:65:ab:da:32:f5:b3:a6: 97:b6:52:7a:fc:5a:f2:a9:3d:b7:78:46:b8:de:68: fd:4c:0f:a4:5b:39:72:60:78:90:7c:7e:80:ff:c1: 9b:42:9f:c9:79:98:6a:c7:31:56:b2:a7:bd:9b:10: d4:e9:2a:f0:ff:1c:9f:70:a7:a1:1e:bd:98:61:22: e6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:BA:11:A3:7F:08:3E:2D:EA:2D:33:29:4C:24:FA:D3:01:DA:F0:7F X509v3 Authority Key Identifier: keyid:54:28:51:97:4B:72:05:6B:3D:43:79:2A:5E:D8:3E:94:DA:85:83:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/542851974B72056B3D43792A5ED83E94DA8583CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/542851974B72056B3D43792A5ED83E94DA8583CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/542851974B72056B3D43792A5ED83E94DA8583CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:31:08:2c:62:2f:03:70:7c:58:e0:99:62:6d:ea:14:7f:65: 9a:9d:c6:70:be:52:38:d1:f0:ff:90:55:38:6d:62:ad:da:49: e3:f4:00:ec:7b:43:4c:1b:f9:a7:6f:91:0b:be:a0:75:df:96: 76:d4:e8:69:02:05:71:6d:b5:ed:dc:60:ff:fe:da:e3:b0:3d: 28:ca:6e:03:ce:4f:82:77:d7:6f:c9:b2:1e:7c:48:b0:7d:fa: 78:a0:2e:bc:d2:62:e1:25:be:17:27:62:1a:5c:ad:85:21:71: 9b:df:8c:6a:35:d8:c0:e7:df:d8:22:d8:46:04:b1:f4:66:41: b1:01:d2:6f:fd:46:a2:42:05:98:86:89:bf:ca:64:0d:60:8f: 69:be:47:3b:2d:4e:4d:cb:e6:c4:23:69:d9:49:bd:99:f3:48: d3:26:ee:49:51:77:53:a6:62:b9:44:be:3d:d3:4d:0c:ad:cf: ec:68:c9:f4:92:1d:62:51:0b:2c:9f:54:7d:b3:3e:08:88:62: a0:93:8d:00:be:36:38:fd:a6:cb:45:99:24:f9:29:c5:18:a9: d5:32:b8:78:a9:68:6a:f5:87:29:8f:a1:62:3f:c8:62:32:e4: 96:6d:40:9b:75:46:43:01:5b:3d:ff:d4:9c:a4:35:7f:bb:50: f4:3f:ec:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGeOMu9Z2SSwL5d59ob32yeD5U88wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQyODUxOTc0QjcyMDU2QjNENDM3OTJBNUVEODNFOTRE QTg1ODNDRjAeFw0yNTA2MDYwODQ1NDRaFw0yNTA2MDkxMTQxNDRaMDMxMTAvBgNV BAMTKDJGQkExMUEzN0YwODNFMkRFQTJEMzMyOTRDMjRGQUQzMDFEQUYwN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/55Lt2Xw0JucbsXtsz1YpjFpx 1NFNFuIqteRufh5w/PrjvrpD6CKYku6aRatmPHgSydFVcOgJR6qJCaTtm+ZUJ1Zu D5WUD/nf0/yIIVOpLDvszJ+jymxVN2fDfvexe5ZJwTXYAJWFBnELtCIlxS6H+iFR qzQxbaX2Udwn3+p9K1ON/jRHkRHB0oT4MXgCPfQO4BH3T10Ibc0f8oIQS1YovoKu uRORCnBeVNDk2M8GF9gs3irx8Q+WxP9OZavaMvWzppe2Unr8WvKpPbd4RrjeaP1M D6RbOXJgeJB8foD/wZtCn8l5mGrHMVayp72bENTpKvD/HJ9wp6EevZhhIua/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL7oRo38IPi3qLTMpTCT60wHa8H8wHwYDVR0j BBgwFoAUVChRl0tyBWs9Q3kqXtg+lNqFg88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzM1ZTE1Zi1kNDQ5LTQ2ZDgtYmUwZS04NWUzODliZWRjNWUvMC81NDI4NTE5NzRC NzIwNTZCM0Q0Mzc5MkE1RUQ4M0U5NERBODU4M0NGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTQyODUxOTc0QjcyMDU2QjNENDM3OTJBNUVEODNFOTREQTg1 ODNDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjczNWUxNWYtZDQ0OS00NmQ4LWJl MGUtODVlMzg5YmVkYzVlLzAvNTQyODUxOTc0QjcyMDU2QjNENDM3OTJBNUVEODNF OTREQTg1ODNDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQxCCxiLwNwfFjgmWJt6hR/ZZqdxnC+UjjR 8P+QVThtYq3aSeP0AOx7Q0wb+advkQu+oHXflnbU6GkCBXFtte3cYP/+2uOwPSjK bgPOT4J312/Jsh58SLB9+nigLrzSYuElvhcnYhpcrYUhcZvfjGo12MDn39gi2EYE sfRmQbEB0m/9RqJCBZiGib/KZA1gj2m+RzstTk3L5sQjadlJvZnzSNMm7klRd1Om YrlEvj3TTQytz+xoyfSSHWJRCyyfVH2zPgiIYqCTjQC+Njj9pstFmST5KcUYqdUy uHipaGr1hymPoWI/yGIy5JZtQJt1RkMBWz3/1JykNX+7UPQ/7Ao= -----END CERTIFICATE-----Generated at Sun Jun 8 02:43:00 2025 by rpki-client