$ rpki-client -vvf repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft File: 571E2EFA23FEA611810611410635E23A090F4550.mft (raw, json) Hash identifier: MmTklJjKRQPm/vso4F6htmmBOLPgeqRCRDkKmFEhMbw= Subject key identifier: C0:C7:C1:C1:39:D9:AA:F1:0F:34:C2:02:79:35:CD:58:2E:5B:D2:22 Authority key identifier: 57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50 Certificate issuer: /CN=571E2EFA23FEA611810611410635E23A090F4550 Certificate serial: 7B7C9726BBB976ECE6D00FD5D141F69C2D7CFAD6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft Manifest number: 04E5 Signing time: Sat 10 May 2025 15:52:12 +0000 Manifest this update: Sat 10 May 2025 15:47:12 +0000 Manifest next update: Tue 13 May 2025 22:21:12 +0000 Files and hashes: 1: 3130332e3135352e36352e302f32342d3234203d3e20313431363231.roa (hash: IECBJhlM+g19o+MdDoNK+OZHnRGTyJlSW5v/c2J36Jg=) 2: 3130332e3135352e36342e302f32332d3233203d3e20313432333831.roa (hash: YxNi6/uAllHxRs/TmMjIhKw+j/AevGbXCAwCtWlO7/Y=) 3: 571E2EFA23FEA611810611410635E23A090F4550.crl (hash: M3lBWch8hmL2AAUtZ5YPgIfZtXuPrJfvC/NABIirHLQ=) 4: 3130332e3135352e36342e302f32342d3234203d3e20313432333831.roa (hash: oMW/juSzl+5S8B2tH+GiR7KV/7mKnJINuimdyFIaiWU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 22:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:7c:97:26:bb:b9:76:ec:e6:d0:0f:d5:d1:41:f6:9c:2d:7c:fa:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=571E2EFA23FEA611810611410635E23A090F4550 Validity Not Before: May 10 15:47:12 2025 GMT Not After : May 13 22:21:12 2025 GMT Subject: CN=C0C7C1C139D9AAF10F34C2027935CD582E5BD222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:72:ad:8a:9e:67:80:16:5c:13:d5:f4:1d:0b: 0d:85:b6:e9:71:55:50:5b:3b:e2:b4:59:08:32:ff: 27:60:7d:d0:57:6b:53:58:90:31:f1:ec:21:e8:39: c2:18:e8:10:c2:71:11:6c:75:8b:96:c0:22:ce:0b: 1b:13:02:a7:b0:3a:a3:fa:69:83:0e:47:b1:4c:ae: 8d:bc:a3:46:e9:06:43:26:aa:6d:a6:11:11:7a:8b: 7f:c5:37:68:25:29:55:b9:1d:1e:49:23:b7:00:18: c5:24:6e:c4:fc:fb:79:2c:f4:76:e2:a3:88:a2:b3: 86:31:8b:5e:a3:95:5c:90:22:c6:db:3a:e5:2f:db: 36:b6:4d:b0:47:95:18:41:58:13:e4:31:23:d4:90: 9a:43:48:b8:17:15:32:9a:69:0d:68:b4:92:59:2e: 47:63:1a:3d:c0:14:88:23:d7:e3:ed:96:eb:6d:2e: b8:10:c7:7c:07:cc:c7:87:b4:aa:ac:30:38:3c:a8: 81:99:8c:f5:fc:cf:81:91:b3:3e:74:2d:7b:d8:a7: 64:fb:ea:8b:bf:95:00:a1:35:6f:77:f0:fb:13:fa: 91:94:b1:4f:30:5c:05:8a:9e:07:09:68:f2:6c:02: 84:a0:04:2e:c1:04:31:ab:06:5b:1e:0a:94:66:33: 93:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:C7:C1:C1:39:D9:AA:F1:0F:34:C2:02:79:35:CD:58:2E:5B:D2:22 X509v3 Authority Key Identifier: keyid:57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:c4:28:5d:6e:a3:88:c1:7b:15:03:d2:de:20:21:3c:b0:72: 38:2e:c6:f8:2a:b4:f1:5e:81:61:e0:32:d7:00:34:56:d3:bf: 0f:c4:60:06:33:db:f5:f1:a3:f7:c6:5e:0a:71:5b:50:0c:cb: 7e:41:4f:1a:ab:fa:f5:b2:6e:32:aa:8b:4f:06:91:ca:29:5e: c1:95:93:8b:c1:16:31:b3:5e:6b:b2:b1:3c:5a:41:cb:b6:0e: 1a:62:3c:15:ac:e3:51:4a:fa:5f:23:1e:23:6b:55:f4:b0:b9: d5:df:af:eb:e3:5d:9d:2c:dd:c5:9f:1a:ce:8b:14:af:35:0a: 89:c0:93:52:1f:ca:85:72:4e:71:11:6a:f0:cb:d1:51:9d:14: 9c:f9:3e:ff:03:72:05:40:f9:c1:47:55:c1:72:89:c0:fb:14: 99:52:e0:5b:c6:c3:f6:96:25:18:5b:a9:d0:ec:67:83:33:77: 6f:cf:a9:d7:d8:ec:25:ca:8a:b3:c3:14:05:14:56:3f:74:bf: 94:c8:aa:b1:9d:d0:b2:94:ac:b4:2c:32:df:2a:79:1a:f5:bb: 05:e4:dd:88:72:ba:ce:89:09:a7:f0:a0:b1:77:cb:3f:b4:9b: ca:c1:ff:76:44:e1:95:fc:7d:73:51:3e:59:9a:53:cf:b0:e2: 4d:3e:b0:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe3yXJru5duzm0A/V0UH2nC18+tYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTcxRTJFRkEyM0ZFQTYxMTgxMDYxMTQxMDYzNUUyM0Ew OTBGNDU1MDAeFw0yNTA1MTAxNTQ3MTJaFw0yNTA1MTMyMjIxMTJaMDMxMTAvBgNV BAMTKEMwQzdDMUMxMzlEOUFBRjEwRjM0QzIwMjc5MzVDRDU4MkU1QkQyMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdcq2KnmeAFlwT1fQdCw2Ftulx VVBbO+K0WQgy/ydgfdBXa1NYkDHx7CHoOcIY6BDCcRFsdYuWwCLOCxsTAqewOqP6 aYMOR7FMro28o0bpBkMmqm2mERF6i3/FN2glKVW5HR5JI7cAGMUkbsT8+3ks9Hbi o4iis4Yxi16jlVyQIsbbOuUv2za2TbBHlRhBWBPkMSPUkJpDSLgXFTKaaQ1otJJZ LkdjGj3AFIgj1+PtluttLrgQx3wHzMeHtKqsMDg8qIGZjPX8z4GRsz50LXvYp2T7 6ou/lQChNW938PsT+pGUsU8wXAWKngcJaPJsAoSgBC7BBDGrBlseCpRmM5NtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwMfBwTnZqvEPNMICeTXNWC5b0iIwHwYDVR0j BBgwFoAUVx4u+iP+phGBBhFBBjXiOgkPRVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTY0YWJmYi0xOTYyLTQ0YTktODM3Ni1jYmZiMWVmY2RhYmEvMC81NzFFMkVGQTIz RkVBNjExODEwNjExNDEwNjM1RTIzQTA5MEY0NTUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTcxRTJFRkEyM0ZFQTYxMTgxMDYxMTQxMDYzNUUyM0EwOTBG NDU1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU2NGFiZmItMTk2Mi00NGE5LTgz NzYtY2JmYjFlZmNkYWJhLzAvNTcxRTJFRkEyM0ZFQTYxMTgxMDYxMTQxMDYzNUUy M0EwOTBGNDU1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjEKF1uo4jBexUD0t4gITywcjguxvgqtPFe gWHgMtcANFbTvw/EYAYz2/Xxo/fGXgpxW1AMy35BTxqr+vWybjKqi08GkcopXsGV k4vBFjGzXmuysTxaQcu2DhpiPBWs41FK+l8jHiNrVfSwudXfr+vjXZ0s3cWfGs6L FK81ConAk1IfyoVyTnERavDL0VGdFJz5Pv8DcgVA+cFHVcFyicD7FJlS4FvGw/aW JRhbqdDsZ4Mzd2/PqdfY7CXKirPDFAUUVj90v5TIqrGd0LKUrLQsMt8qeRr1uwXk 3Yhyus6JCafwoLF3yz+0m8rB/3ZE4ZX8fXNRPlmaU8+w4k0+sC4= -----END CERTIFICATE-----Generated at Mon May 12 05:23:45 2025 by rpki-client