$ rpki-client -vvf repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft File: 4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft (raw, json) Hash identifier: IvSL76Kji1StfFpG7UJBuiAtbLIg5akrJPR9dryqAl4= Subject key identifier: 5A:EF:CC:7B:CD:CF:3F:8D:7B:C0:5B:7D:C3:A3:15:DE:38:A4:CE:57 Authority key identifier: 43:37:E9:FF:91:A0:CB:65:CE:1E:B8:FA:EB:61:08:F5:E3:7B:B6:57 Certificate issuer: /CN=4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657 Certificate serial: 07A3552DDA794B3F7EBDF7299494B290E52C3B2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft Manifest number: 02BA Signing time: Sun 29 Jun 2025 15:21:10 +0000 Manifest this update: Sun 29 Jun 2025 15:16:10 +0000 Manifest next update: Wed 02 Jul 2025 15:31:10 +0000 Files and hashes: 1: 4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.crl (hash: dEBOlMYRJ74J1MtABUx0b8MF/CCeu32jneqQNSqt/mk=) 2: 3130332e3137362e39362e302f32332d3233203d3e20313437313331.roa (hash: RvlNgfW0J+bVY7d2yjeoXrc2sRB1/6Dnvn34DHTz4kU=) 3: 3130332e3137362e39372e302f32342d3234203d3e20313437313331.roa (hash: gcQbwwcsgWLto/MeqdtpULkQCdJ/hBMpFsyWHdzWTU8=) 4: 3130332e3137362e39362e302f32342d3234203d3e20313437313331.roa (hash: omt0on/osncWzWrbGIk75aVtn8fXGKFlF84iedQ76S8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.crl rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:a3:55:2d:da:79:4b:3f:7e:bd:f7:29:94:94:b2:90:e5:2c:3b:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657 Validity Not Before: Jun 29 15:16:10 2025 GMT Not After : Jul 2 15:31:10 2025 GMT Subject: CN=5AEFCC7BCDCF3F8D7BC05B7DC3A315DE38A4CE57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:37:52:b2:d4:92:60:7d:62:c5:1e:6a:b6:da: 06:7d:b3:16:1b:27:35:32:7d:b3:53:8f:e4:c3:1a: 0c:75:67:d3:7a:bc:fe:65:0e:f1:95:ba:6b:fe:3f: 36:75:fa:36:2a:6d:90:88:dd:b9:1e:b3:d1:b8:e4: ef:0a:57:f9:3f:80:b0:9e:1e:6b:49:9d:2d:4d:25: 2a:25:df:8b:0e:c6:1f:7c:7a:ef:df:1f:6c:08:9f: 90:6f:90:da:bf:91:f8:91:69:99:10:3e:d1:84:a9: c9:0d:50:48:33:ab:3b:d5:31:de:06:e8:f6:eb:b1: 21:ec:1a:83:63:b2:63:ea:5e:61:ca:6c:4f:20:f3: 84:7a:92:73:ef:4c:f5:85:66:02:99:2d:2b:df:c5: 9b:d4:df:76:19:ce:ed:e9:f1:d4:e0:9e:4c:b6:00: 99:01:db:3d:c7:1e:e3:88:0c:76:ac:b3:aa:8c:9e: 0f:2d:97:95:42:e5:78:99:1e:86:0c:eb:36:41:ad: 84:31:03:d6:08:04:40:8f:a5:07:54:93:3c:c3:80: 97:23:72:08:9a:81:9c:d6:4d:1f:29:05:bf:0b:2e: ad:97:b6:f9:8b:23:cd:78:d6:4c:0e:90:ff:8c:22: 45:58:6b:1b:3b:90:27:f0:03:9a:14:e3:b0:b0:27: 10:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:EF:CC:7B:CD:CF:3F:8D:7B:C0:5B:7D:C3:A3:15:DE:38:A4:CE:57 X509v3 Authority Key Identifier: keyid:43:37:E9:FF:91:A0:CB:65:CE:1E:B8:FA:EB:61:08:F5:E3:7B:B6:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:5f:1a:2b:c3:ec:96:09:5f:8e:aa:f1:cd:fd:36:76:aa:0e: 80:b4:87:c6:28:aa:df:15:3f:bd:9e:1e:7e:21:f1:56:bf:5a: 6d:39:d6:8b:82:7c:f3:b0:df:df:eb:e4:56:5d:cc:98:99:9c: 62:96:c3:db:b5:98:9c:91:53:56:78:28:eb:7c:96:57:10:fc: d9:0d:28:4c:a1:67:f4:a7:5c:f5:c1:60:1e:43:f9:0c:c4:b6: 9c:84:c0:95:3d:22:b2:d8:7d:52:35:c1:b7:09:9f:06:de:ec: 4a:c2:e4:bb:58:cc:53:65:1b:25:65:88:8b:34:45:6b:a9:02: 95:4b:16:41:da:d5:61:30:73:10:13:46:cf:29:41:14:52:d5: 51:c4:48:a4:f1:5a:6e:8b:6c:14:62:b7:0f:e0:1f:4b:5c:3c: 54:20:48:64:b1:04:d0:91:1a:a4:40:ea:54:ae:56:72:20:81: 94:0e:9b:05:f1:2f:b1:1d:6c:cc:22:5e:0d:99:3f:9a:ef:40: c1:b4:ce:a7:f0:c1:be:65:ca:76:9c:17:b2:4d:44:42:e2:ec: 44:e8:8f:ad:b2:01:84:ff:e1:97:c4:07:7c:e6:2d:72:6a:d4: e1:13:c1:51:5f:50:ca:ce:6b:e3:28:ac:fc:f7:f3:83:5f:94: 5f:c1:89:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB6NVLdp5Sz9+vfcplJSykOUsOy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMzN0U5RkY5MUEwQ0I2NUNFMUVCOEZBRUI2MTA4RjVF MzdCQjY1NzAeFw0yNTA2MjkxNTE2MTBaFw0yNTA3MDIxNTMxMTBaMDMxMTAvBgNV BAMTKDVBRUZDQzdCQ0RDRjNGOEQ3QkMwNUI3REMzQTMxNURFMzhBNENFNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/N1Ky1JJgfWLFHmq22gZ9sxYb JzUyfbNTj+TDGgx1Z9N6vP5lDvGVumv+PzZ1+jYqbZCI3bkes9G45O8KV/k/gLCe HmtJnS1NJSol34sOxh98eu/fH2wIn5BvkNq/kfiRaZkQPtGEqckNUEgzqzvVMd4G 6PbrsSHsGoNjsmPqXmHKbE8g84R6knPvTPWFZgKZLSvfxZvU33YZzu3p8dTgnky2 AJkB2z3HHuOIDHass6qMng8tl5VC5XiZHoYM6zZBrYQxA9YIBECPpQdUkzzDgJcj cgiagZzWTR8pBb8LLq2XtvmLI8141kwOkP+MIkVYaxs7kCfwA5oU47CwJxDnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWu/Me83PP417wFt9w6MV3jikzlcwHwYDVR0j BBgwFoAUQzfp/5Ggy2XOHrj662EI9eN7tlcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzM0ZGMzZi0zMDhmLTRkZTEtYTM2NS03MDFiZDljZjEwMDQvMC80MzM3RTlGRjkx QTBDQjY1Q0UxRUI4RkFFQjYxMDhGNUUzN0JCNjU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDMzN0U5RkY5MUEwQ0I2NUNFMUVCOEZBRUI2MTA4RjVFMzdC QjY1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWMzNGRjM2YtMzA4Zi00ZGUxLWEz NjUtNzAxYmQ5Y2YxMDA0LzAvNDMzN0U5RkY5MUEwQ0I2NUNFMUVCOEZBRUI2MTA4 RjVFMzdCQjY1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJfGivD7JYJX46q8c39NnaqDoC0h8Yoqt8V P72eHn4h8Va/Wm051ouCfPOw39/r5FZdzJiZnGKWw9u1mJyRU1Z4KOt8llcQ/NkN KEyhZ/SnXPXBYB5D+QzEtpyEwJU9IrLYfVI1wbcJnwbe7ErC5LtYzFNlGyVliIs0 RWupApVLFkHa1WEwcxATRs8pQRRS1VHESKTxWm6LbBRitw/gH0tcPFQgSGSxBNCR GqRA6lSuVnIggZQOmwXxL7EdbMwiXg2ZP5rvQMG0zqfwwb5lynacF7JNRELi7ETo j62yAYT/4ZfEB3zmLXJq1OETwVFfUMrOa+MorPz384NflF/BiWA= -----END CERTIFICATE-----Generated at Sun Jun 29 21:23:15 2025 by rpki-client