$ rpki-client -vvf repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.mft File: C005531488F38475CA53CB4A7ABCEC0C32F75962.mft (raw, json) Hash identifier: ZnpfzuCG42WHc0UEBYY0YjxxT4woLT03+1pKQn1rx3Q= Subject key identifier: 06:E8:D4:E9:0E:73:DC:FF:34:15:B1:F9:11:91:40:94:F8:53:B6:3D Authority key identifier: C0:05:53:14:88:F3:84:75:CA:53:CB:4A:7A:BC:EC:0C:32:F7:59:62 Certificate issuer: /CN=C005531488F38475CA53CB4A7ABCEC0C32F75962 Certificate serial: 4EBCA608A7335E78DF097702530EE845E55F3DB6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C005531488F38475CA53CB4A7ABCEC0C32F75962.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.mft Manifest number: 04E4 Signing time: Sat 28 Jun 2025 07:30:34 +0000 Manifest this update: Sat 28 Jun 2025 07:25:34 +0000 Manifest next update: Tue 01 Jul 2025 18:55:34 +0000 Files and hashes: 1: C005531488F38475CA53CB4A7ABCEC0C32F75962.crl (hash: PZjALTo+gniRzWaJP7Y/yGIhvg6QXIt24pcWc2N2HPc=) 2: 323430353a396434303a3a2f33322d3438203d3e203538343935.roa (hash: 0gzYY7cjTPjY2yjhcF04nMrJdj9Xu6B9UNr2O7vO1co=) 3: 3130332e3134362e3138392e302f32342d3234203d3e203538343935.roa (hash: OsXuery+dqrXtWPBKclCMRfHJTDgT5E1V7vyLlK5GAQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.crl rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C005531488F38475CA53CB4A7ABCEC0C32F75962.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 18:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:bc:a6:08:a7:33:5e:78:df:09:77:02:53:0e:e8:45:e5:5f:3d:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C005531488F38475CA53CB4A7ABCEC0C32F75962 Validity Not Before: Jun 28 07:25:34 2025 GMT Not After : Jul 1 18:55:34 2025 GMT Subject: CN=06E8D4E90E73DCFF3415B1F911914094F853B63D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:13:ad:3f:7f:14:7e:18:17:98:a4:18:51:54: 82:7e:8e:92:8d:0c:7d:b8:36:08:bb:9e:a3:83:05: 6c:93:cb:4e:5c:4a:47:86:5d:19:9e:b3:70:19:98: 4b:91:ba:84:62:c8:32:48:bf:5d:d5:fd:47:f7:f8: 05:7d:2e:c4:13:be:c7:51:3a:68:b0:ef:a5:2b:84: b0:8f:42:b6:bc:af:57:5e:c0:72:be:d5:d1:74:c3: ed:e0:5b:29:f3:8e:73:56:67:9b:43:9c:54:50:2c: 1e:39:fd:8d:fe:5d:86:36:f0:5f:87:35:46:fb:2c: 34:bf:f4:7a:56:57:d4:0a:77:6d:d4:df:dc:a2:18: 40:76:3f:4e:ae:b8:22:cb:71:86:ec:b2:c3:9a:f9: 32:ab:58:91:77:d1:65:71:bf:65:2f:3c:29:19:f4: 33:5a:0a:b7:18:aa:f2:b5:72:7d:b2:e0:33:ee:3f: 27:da:0d:d2:4d:92:1a:ec:e1:97:f0:89:92:f5:d7: 13:94:0a:b6:16:ba:8c:96:8d:2d:72:03:55:30:f6: c7:14:fa:01:36:69:53:71:d0:bd:90:c5:61:cd:8c: 19:4d:7d:b6:b5:99:83:24:b5:a9:82:cf:8c:47:ca: 9e:7a:24:c2:99:f3:1f:d3:cd:33:e4:3b:6f:01:e2: 6b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E8:D4:E9:0E:73:DC:FF:34:15:B1:F9:11:91:40:94:F8:53:B6:3D X509v3 Authority Key Identifier: keyid:C0:05:53:14:88:F3:84:75:CA:53:CB:4A:7A:BC:EC:0C:32:F7:59:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C005531488F38475CA53CB4A7ABCEC0C32F75962.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:63:66:5d:12:70:51:d9:56:17:fd:0f:79:69:19:4d:3e:0d: dd:83:6a:46:b7:75:ae:0d:ed:71:8b:d8:0a:b7:04:7a:dd:1c: f5:cc:dc:53:13:75:a1:50:fe:78:d4:a2:c5:e9:73:e8:5f:d1: 44:71:28:20:d2:06:1c:86:e7:2b:a4:f6:24:5f:a6:41:d5:c1: 6c:1e:b6:0e:ec:18:73:64:bd:2c:96:19:db:0d:15:ca:42:8e: e0:24:ba:43:98:f7:92:da:ee:56:44:0e:10:c1:bd:bf:c6:15: 00:71:91:55:d1:e4:6b:b8:96:8c:2d:66:12:53:27:c5:0d:e2: 1b:e0:3d:fb:a1:cc:1e:1c:20:08:5d:70:66:7d:12:65:09:64: 0a:32:66:bd:53:a9:c1:96:40:5f:7b:33:97:54:75:57:11:f1: 15:9d:9c:ff:17:9c:6c:9b:74:8a:7f:9b:cd:84:37:c4:80:37: 54:97:cc:54:ce:c6:1c:d6:00:10:f4:54:f7:24:4b:74:ae:fa: 1c:a8:58:e9:99:0c:93:89:13:fe:28:07:25:71:6c:72:78:28: c1:ed:6b:df:07:16:c7:bb:09:2f:c1:92:69:c5:48:99:7e:01: 47:68:2f:b9:73:ea:27:d4:7e:fc:22:5b:86:d1:ff:26:c4:93: e9:d6:8c:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTrymCKczXnjfCXcCUw7oReVfPbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAwNTUzMTQ4OEYzODQ3NUNBNTNDQjRBN0FCQ0VDMEMz MkY3NTk2MjAeFw0yNTA2MjgwNzI1MzRaFw0yNTA3MDExODU1MzRaMDMxMTAvBgNV BAMTKDA2RThENEU5MEU3M0RDRkYzNDE1QjFGOTExOTE0MDk0Rjg1M0I2M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaE60/fxR+GBeYpBhRVIJ+jpKN DH24Ngi7nqODBWyTy05cSkeGXRmes3AZmEuRuoRiyDJIv13V/Uf3+AV9LsQTvsdR Omiw76UrhLCPQra8r1dewHK+1dF0w+3gWynzjnNWZ5tDnFRQLB45/Y3+XYY28F+H NUb7LDS/9HpWV9QKd23U39yiGEB2P06uuCLLcYbsssOa+TKrWJF30WVxv2UvPCkZ 9DNaCrcYqvK1cn2y4DPuPyfaDdJNkhrs4ZfwiZL11xOUCrYWuoyWjS1yA1Uw9scU +gE2aVNx0L2QxWHNjBlNfba1mYMktamCz4xHyp56JMKZ8x/TzTPkO28B4mvtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBujU6Q5z3P80FbH5EZFAlPhTtj0wHwYDVR0j BBgwFoAUwAVTFIjzhHXKU8tKerzsDDL3WWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDY0Y2JlZS1jNTEzLTQ2YzYtYTFkMC0zZWMwMWQ3YTY2MjYvMC9DMDA1NTMxNDg4 RjM4NDc1Q0E1M0NCNEE3QUJDRUMwQzMyRjc1OTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzAwNTUzMTQ4OEYzODQ3NUNBNTNDQjRBN0FCQ0VDMEMzMkY3 NTk2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ2NGNiZWUtYzUxMy00NmM2LWEx ZDAtM2VjMDFkN2E2NjI2LzAvQzAwNTUzMTQ4OEYzODQ3NUNBNTNDQjRBN0FCQ0VD MEMzMkY3NTk2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxjZl0ScFHZVhf9D3lpGU0+Dd2Daka3da4N 7XGL2Aq3BHrdHPXM3FMTdaFQ/njUosXpc+hf0URxKCDSBhyG5yuk9iRfpkHVwWwe tg7sGHNkvSyWGdsNFcpCjuAkukOY95La7lZEDhDBvb/GFQBxkVXR5Gu4lowtZhJT J8UN4hvgPfuhzB4cIAhdcGZ9EmUJZAoyZr1TqcGWQF97M5dUdVcR8RWdnP8XnGyb dIp/m82EN8SAN1SXzFTOxhzWABD0VPckS3Su+hyoWOmZDJOJE/4oByVxbHJ4KMHt a98HFse7CS/BkmnFSJl+AUdoL7lz6ifUfvwiW4bR/ybEk+nWjGM= -----END CERTIFICATE-----Generated at Mon Jun 30 10:25:25 2025 by rpki-client