$ rpki-client -vvf repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft File: 571E2EFA23FEA611810611410635E23A090F4550.mft (raw, json) Hash identifier: 1JRYgRVKmlHsH8hOc8npi4kVU5q58g8XBRErx0QFIVU= Subject key identifier: F3:A7:A8:5A:D9:0F:76:CA:F4:D1:A6:C9:F1:62:1A:67:48:2C:83:5E Authority key identifier: 57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50 Certificate issuer: /CN=571E2EFA23FEA611810611410635E23A090F4550 Certificate serial: 6C166A73AC311B1F3967C1133B5DE7EF7AD09D8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft Manifest number: 04FC Signing time: Mon 30 Jun 2025 07:12:09 +0000 Manifest this update: Mon 30 Jun 2025 07:07:09 +0000 Manifest next update: Thu 03 Jul 2025 16:17:09 +0000 Files and hashes: 1: 3130332e3135352e36342e302f32342d3234203d3e20313432333831.roa (hash: oMW/juSzl+5S8B2tH+GiR7KV/7mKnJINuimdyFIaiWU=) 2: 571E2EFA23FEA611810611410635E23A090F4550.crl (hash: 66/08l3mQjl4MqXd+506nMUaS0Caplqa73hmOEwm07g=) 3: 3130332e3135352e36352e302f32342d3234203d3e20313431363231.roa (hash: CeAdG0+iQqX7R4GwVIJ8BeduoZGnHUGjqn0LAsOfmaQ=) 4: 3130332e3135352e36342e302f32332d3233203d3e20313432333831.roa (hash: YxNi6/uAllHxRs/TmMjIhKw+j/AevGbXCAwCtWlO7/Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 16:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:16:6a:73:ac:31:1b:1f:39:67:c1:13:3b:5d:e7:ef:7a:d0:9d:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=571E2EFA23FEA611810611410635E23A090F4550 Validity Not Before: Jun 30 07:07:09 2025 GMT Not After : Jul 3 16:17:09 2025 GMT Subject: CN=F3A7A85AD90F76CAF4D1A6C9F1621A67482C835E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:22:2a:1b:1d:3b:67:ee:ed:a9:03:b2:ce:e4: 43:64:89:95:ea:18:47:e5:25:83:5d:9f:4a:bf:fd: bf:60:a7:3f:84:c4:e6:1b:b1:41:f0:48:e3:c4:1c: 23:32:24:18:9c:17:58:52:c0:01:01:2c:8e:e9:cd: 0d:3d:f6:99:b7:21:20:c1:a1:af:42:2b:66:f0:10: 69:7c:6a:75:59:0b:d9:04:c1:59:45:d2:27:27:34: 27:5b:42:b3:cc:20:99:0a:24:41:9c:ae:80:fd:56: a0:23:26:05:98:89:c3:d7:eb:5b:08:a5:58:5d:77: b0:f8:b7:5b:47:21:9e:22:0b:d6:40:59:fe:7b:a7: f5:52:bf:44:d8:01:fa:fb:a5:6f:84:61:7d:a9:8e: ab:49:e5:01:e7:3c:41:f5:7b:66:11:98:92:f8:ca: 86:e4:8e:d1:80:95:d4:a0:e9:a7:fc:39:a8:d9:79: ab:34:dd:08:4a:4c:dd:f8:7f:cc:29:57:ef:f5:36: 12:c0:4e:3b:e7:38:37:e4:93:f0:04:05:dd:75:bf: 59:c1:fc:40:ef:e5:f0:dc:b1:a9:50:78:9f:6b:21: 9e:1d:08:49:63:f0:3b:65:42:fb:50:48:69:45:8d: ea:63:eb:b5:ab:09:d3:46:d5:d6:b2:89:f1:3c:33: 0a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A7:A8:5A:D9:0F:76:CA:F4:D1:A6:C9:F1:62:1A:67:48:2C:83:5E X509v3 Authority Key Identifier: keyid:57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:2a:01:60:8d:47:0d:a3:b9:38:7b:72:60:bd:f8:70:f3:aa: 6d:cd:a1:11:9a:72:6f:6f:10:e5:20:25:6f:a1:20:64:73:d1: e6:c1:77:bc:4c:6e:6f:8f:1b:14:bc:b9:9c:e1:70:af:21:41: 26:a1:50:42:f0:d2:1c:ef:ee:7d:ea:57:dc:ea:fb:dc:f8:e0: 23:eb:3a:81:c8:12:c6:5c:05:d9:4e:c3:6c:75:1b:e2:99:d6: 38:93:fe:d1:76:d6:11:89:d2:79:80:ad:b2:92:ce:70:c8:e1: ca:a0:ef:26:d1:70:97:62:f7:5f:cb:48:6d:a0:90:8e:39:7f: 00:c8:b4:53:b2:0a:29:4c:53:55:56:21:cc:8c:af:1e:68:f5: a9:00:a2:8b:45:6c:d9:df:81:55:5f:41:48:f5:24:d8:09:2b: 42:75:69:13:df:3e:11:6e:5b:90:f3:58:fc:32:83:df:3d:04: 3a:2d:2f:4e:f8:e9:d7:77:91:97:e5:82:23:ec:20:f8:85:70: 40:7e:bc:42:bc:69:1f:22:f2:56:11:46:50:b4:6d:e2:6d:9d: 15:64:9b:6c:2e:e4:72:20:7d:4c:19:34:1a:8e:aa:a5:bf:ca: 1b:6a:4c:99:83:2f:50:a3:55:bb:83:c7:40:79:1a:39:cf:80: e2:bd:df:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbBZqc6wxGx85Z8ETO13n73rQnY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTcxRTJFRkEyM0ZFQTYxMTgxMDYxMTQxMDYzNUUyM0Ew OTBGNDU1MDAeFw0yNTA2MzAwNzA3MDlaFw0yNTA3MDMxNjE3MDlaMDMxMTAvBgNV BAMTKEYzQTdBODVBRDkwRjc2Q0FGNEQxQTZDOUYxNjIxQTY3NDgyQzgzNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxIiobHTtn7u2pA7LO5ENkiZXq GEflJYNdn0q//b9gpz+ExOYbsUHwSOPEHCMyJBicF1hSwAEBLI7pzQ099pm3ISDB oa9CK2bwEGl8anVZC9kEwVlF0icnNCdbQrPMIJkKJEGcroD9VqAjJgWYicPX61sI pVhdd7D4t1tHIZ4iC9ZAWf57p/VSv0TYAfr7pW+EYX2pjqtJ5QHnPEH1e2YRmJL4 yobkjtGAldSg6af8OajZeas03QhKTN34f8wpV+/1NhLATjvnODfkk/AEBd11v1nB /EDv5fDcsalQeJ9rIZ4dCElj8DtlQvtQSGlFjepj67WrCdNG1dayifE8MwplAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU86eoWtkPdsr00abJ8WIaZ0gsg14wHwYDVR0j BBgwFoAUVx4u+iP+phGBBhFBBjXiOgkPRVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTY0YWJmYi0xOTYyLTQ0YTktODM3Ni1jYmZiMWVmY2RhYmEvMC81NzFFMkVGQTIz RkVBNjExODEwNjExNDEwNjM1RTIzQTA5MEY0NTUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTcxRTJFRkEyM0ZFQTYxMTgxMDYxMTQxMDYzNUUyM0EwOTBG NDU1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU2NGFiZmItMTk2Mi00NGE5LTgz NzYtY2JmYjFlZmNkYWJhLzAvNTcxRTJFRkEyM0ZFQTYxMTgxMDYxMTQxMDYzNUUy M0EwOTBGNDU1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACYqAWCNRw2juTh7cmC9+HDzqm3NoRGacm9v EOUgJW+hIGRz0ebBd7xMbm+PGxS8uZzhcK8hQSahUELw0hzv7n3qV9zq+9z44CPr OoHIEsZcBdlOw2x1G+KZ1jiT/tF21hGJ0nmArbKSznDI4cqg7ybRcJdi91/LSG2g kI45fwDItFOyCilMU1VWIcyMrx5o9akAootFbNnfgVVfQUj1JNgJK0J1aRPfPhFu W5DzWPwyg989BDotL0746dd3kZflgiPsIPiFcEB+vEK8aR8i8lYRRlC0beJtnRVk m2wu5HIgfUwZNBqOqqW/yhtqTJmDL1CjVbuDx0B5GjnPgOK9354= -----END CERTIFICATE-----Generated at Tue Jul 1 02:39:43 2025 by rpki-client