$ rpki-client -vvf repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft File: 528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft (raw, json) Hash identifier: AMgZ6NNIlvKlk/n3C71XEda9hsjsN1JiVpggVe+dPNE= Subject key identifier: FE:74:AF:E6:09:16:BB:A5:EC:CC:E8:50:08:8D:4F:6D:4B:D0:C0:C9 Authority key identifier: 52:80:98:CF:FE:13:30:AD:3E:55:7B:CF:EC:2D:8B:46:92:F5:12:48 Certificate issuer: /CN=528098CFFE1330AD3E557BCFEC2D8B4692F51248 Certificate serial: 1637E96F57C488A659EC40A8A8E183513C0F82EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft Manifest number: C1 Signing time: Thu 05 Jun 2025 15:52:19 +0000 Manifest this update: Thu 05 Jun 2025 15:47:19 +0000 Manifest next update: Sun 08 Jun 2025 21:56:19 +0000 Files and hashes: 1: 528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl (hash: wuAN1oO9fAJVxjP/K0xZb/a+WURTsTvDOagq/Kywx48=) 2: 3135372e36362e35342e302f32342d3234203d3e20313431383932.roa (hash: Vo1kQIs1zoW5Jt8je7QhcYagX5zelAQNRLkr+gdh4UU=) 3: 3135372e36362e35352e302f32342d3234203d3e20313431383932.roa (hash: ZjoBkq4ow6fgfJmZ56kyF4NOmaewGLQwe65kbb2QNVY=) 4: 3135372e36362e35342e302f32332d3233203d3e20313431383932.roa (hash: O7he/ueLgA87HCSPJrqHHNBVHo9ekwFufTVOjMl9MdM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 21:56:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:37:e9:6f:57:c4:88:a6:59:ec:40:a8:a8:e1:83:51:3c:0f:82:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528098CFFE1330AD3E557BCFEC2D8B4692F51248 Validity Not Before: Jun 5 15:47:19 2025 GMT Not After : Jun 8 21:56:19 2025 GMT Subject: CN=FE74AFE60916BBA5ECCCE850088D4F6D4BD0C0C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:84:3a:25:45:39:df:22:eb:98:cd:61:b3:23: f1:9d:6c:30:d2:33:e9:d8:47:77:3d:e6:59:12:52: 22:eb:fc:7d:1d:20:98:00:0a:0c:32:59:36:41:5e: 6a:fe:a5:b1:bf:a3:a5:49:0d:e5:3a:61:bc:b2:27: 85:21:6c:41:e9:30:c5:d6:b9:34:7b:f3:6e:89:ee: c9:fd:e9:c5:13:1b:83:97:d3:ce:9f:43:b5:9e:7d: 60:ae:c5:63:27:81:8e:e3:a4:aa:67:2e:a5:22:e2: a2:0f:0a:09:b9:e5:bb:58:7b:d3:f0:97:e8:05:8f: e4:9a:8b:20:ae:09:07:a2:9d:9a:e6:1d:b7:ac:cd: aa:a9:67:34:33:bd:ea:52:55:c9:f4:be:99:f8:67: ba:94:7c:df:84:cf:93:16:88:05:ed:9e:ba:19:23: d2:8c:ac:54:89:14:5d:6f:1e:f2:ba:7c:ae:76:8d: 83:5a:43:ad:66:2c:31:37:1c:32:e9:31:48:59:6d: ab:f2:ca:83:7c:89:89:e6:65:e8:cc:4a:fe:06:17: df:13:07:a8:94:e7:09:a9:33:6f:a9:ab:24:66:0c: 9e:1a:b1:1e:57:7e:b1:46:95:dd:2f:21:fe:58:03: c9:69:bc:47:b5:30:1f:d7:ce:47:68:2a:c7:56:45: 57:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:74:AF:E6:09:16:BB:A5:EC:CC:E8:50:08:8D:4F:6D:4B:D0:C0:C9 X509v3 Authority Key Identifier: keyid:52:80:98:CF:FE:13:30:AD:3E:55:7B:CF:EC:2D:8B:46:92:F5:12:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:52:2b:f8:fb:34:fb:9e:ed:bc:bc:a0:59:b3:a2:3e:4c:40: 69:66:f0:21:6b:29:09:5d:38:bc:9a:2d:83:e7:0c:c8:d5:e1: af:29:33:f6:23:84:7d:e5:f2:61:54:50:9d:3a:7c:dd:c6:9b: a6:6d:68:7a:37:33:f3:ba:45:f4:01:14:ee:20:e2:d3:b7:c3: 0a:8b:e8:76:91:bc:83:ef:04:b4:e3:bd:7c:c6:d1:de:5e:b9: d7:55:d7:05:24:67:2d:b6:83:21:70:c3:1b:31:2a:5c:b1:19: 01:5d:0f:55:4c:a7:c2:78:c0:93:b5:21:a8:cd:12:22:f6:d2: 8a:79:a2:76:a1:8b:06:55:db:72:41:c8:f3:6a:c0:71:f6:b7: 4e:b8:ee:cf:79:c8:67:3a:27:24:85:72:87:84:e4:df:02:19: f6:4f:ea:04:dd:4e:59:ed:48:fc:7e:d4:c1:fe:71:2f:7b:be: fb:93:10:84:ec:ca:d1:d8:3f:85:bb:d9:a4:3e:bc:d1:d1:a9: ba:e2:d4:2e:d1:a0:7a:ed:3b:32:a4:22:3f:de:0a:38:9a:af: cd:8c:05:7f:ad:c4:e3:ea:78:ab:f5:bd:5c:c6:fd:ee:e8:5d: c2:89:00:ff:32:11:ff:22:8b:c9:f6:ca:09:f3:b3:c6:14:fb: c5:06:48:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFjfpb1fEiKZZ7ECoqOGDUTwPgu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhCNDY5 MkY1MTI0ODAeFw0yNTA2MDUxNTQ3MTlaFw0yNTA2MDgyMTU2MTlaMDMxMTAvBgNV BAMTKEZFNzRBRkU2MDkxNkJCQTVFQ0NDRTg1MDA4OEQ0RjZENEJEMEMwQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmhDolRTnfIuuYzWGzI/GdbDDS M+nYR3c95lkSUiLr/H0dIJgACgwyWTZBXmr+pbG/o6VJDeU6YbyyJ4UhbEHpMMXW uTR7826J7sn96cUTG4OX086fQ7WefWCuxWMngY7jpKpnLqUi4qIPCgm55btYe9Pw l+gFj+SaiyCuCQeinZrmHbeszaqpZzQzvepSVcn0vpn4Z7qUfN+Ez5MWiAXtnroZ I9KMrFSJFF1vHvK6fK52jYNaQ61mLDE3HDLpMUhZbavyyoN8iYnmZejMSv4GF98T B6iU5wmpM2+pqyRmDJ4asR5XfrFGld0vIf5YA8lpvEe1MB/XzkdoKsdWRVfJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/nSv5gkWu6XszOhQCI1PbUvQwMkwHwYDVR0j BBgwFoAUUoCYz/4TMK0+VXvP7C2LRpL1EkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OGRjMDg0OS04M2ZiLTRjYzgtOGMyMS1iZTZjYTdhMmVkODMvMC81MjgwOThDRkZF MTMzMEFEM0U1NTdCQ0ZFQzJEOEI0NjkyRjUxMjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhCNDY5MkY1 MTI0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjhkYzA4NDktODNmYi00Y2M4LThj MjEtYmU2Y2E3YTJlZDgzLzAvNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhC NDY5MkY1MTI0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEVSK/j7NPue7by8oFmzoj5MQGlm8CFrKQld OLyaLYPnDMjV4a8pM/YjhH3l8mFUUJ06fN3Gm6ZtaHo3M/O6RfQBFO4g4tO3wwqL 6HaRvIPvBLTjvXzG0d5euddV1wUkZy22gyFwwxsxKlyxGQFdD1VMp8J4wJO1IajN EiL20op5onahiwZV23JByPNqwHH2t0647s95yGc6JySFcoeE5N8CGfZP6gTdTlnt SPx+1MH+cS97vvuTEITsytHYP4W72aQ+vNHRqbri1C7RoHrtOzKkIj/eCjiar82M BX+txOPqeKv1vVzG/e7oXcKJAP8yEf8ii8n2ygnzs8YU+8UGSPg= -----END CERTIFICATE-----Generated at Sat Jun 7 02:15:36 2025 by rpki-client