$ rpki-client -vvf repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft File: 05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft (raw, json) Hash identifier: DwtnNNrfkQ8dUk2CRK1UQgT++uSWlXHtsiM5PTwyxQg= Subject key identifier: 81:DC:14:51:B0:6D:87:8A:CF:95:61:18:60:A8:03:AC:47:35:2C:A6 Authority key identifier: 05:67:1A:0A:CA:B2:6B:34:26:48:AF:FA:C0:C6:6E:CB:5A:49:3D:AB Certificate issuer: /CN=05671A0ACAB26B342648AFFAC0C66ECB5A493DAB Certificate serial: 3DA6F31CFCAF6665F2876EDBAB64EAFEECBF275B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft Manifest number: C3 Signing time: Sat 28 Jun 2025 17:41:38 +0000 Manifest this update: Sat 28 Jun 2025 17:36:38 +0000 Manifest next update: Wed 02 Jul 2025 03:03:38 +0000 Files and hashes: 1: 05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl (hash: JSq9NzNrSzVC8+7gOLHwOMSFhbApcedgQjRSgJHSkQc=) 2: 323030313a6466333a393034303a3a2f34382d3438203d3e20313532343139.roa (hash: RA3iDpSCkWtT/yyfxgJEQ4woQglWjmr40o6UbmeiCAk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 03:03:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:a6:f3:1c:fc:af:66:65:f2:87:6e:db:ab:64:ea:fe:ec:bf:27:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05671A0ACAB26B342648AFFAC0C66ECB5A493DAB Validity Not Before: Jun 28 17:36:38 2025 GMT Not After : Jul 2 03:03:38 2025 GMT Subject: CN=81DC1451B06D878ACF95611860A803AC47352CA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1c:78:67:1e:65:38:de:16:30:00:a0:d4:e5: cb:3b:de:58:e5:3b:d0:aa:56:dd:34:35:af:5e:31: a4:63:a6:67:77:92:03:75:85:0a:a9:f0:96:8f:01: ae:10:00:89:94:70:83:7f:1c:4c:e9:14:67:68:e8: 02:70:93:d4:65:a1:e9:4b:e8:3a:be:a1:51:26:9b: 82:70:38:ee:b4:c4:96:f5:1d:31:90:ed:0e:09:2a: e0:a2:6c:c4:b2:35:52:ad:b5:fe:12:26:fc:48:a4: b1:c6:db:6d:27:5f:43:47:c0:c5:fb:d2:55:42:5b: 58:58:af:ba:0a:07:fd:c8:c2:7e:92:bc:5f:e7:2d: 9c:50:19:6e:85:44:00:7e:b6:91:6f:8c:12:42:73: cb:77:24:fd:6e:6b:c9:f0:18:b3:8f:18:cb:0a:f2: 73:a8:f0:e5:60:a2:67:10:81:27:35:dd:81:50:b2: 76:6a:d9:03:9e:a7:70:2c:49:d5:7f:49:52:43:d2: d8:08:fc:9d:4c:83:31:10:69:b7:5b:0a:cb:19:3f: 7f:cf:54:62:f6:83:6e:19:ff:3c:96:89:0a:c3:b0: 9f:f4:57:50:2d:c6:6d:5a:d8:36:b9:fd:12:5f:ac: c1:2d:ce:b9:be:e4:e3:e1:a5:d0:40:fe:fb:bb:bd: df:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:DC:14:51:B0:6D:87:8A:CF:95:61:18:60:A8:03:AC:47:35:2C:A6 X509v3 Authority Key Identifier: keyid:05:67:1A:0A:CA:B2:6B:34:26:48:AF:FA:C0:C6:6E:CB:5A:49:3D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:0c:44:13:ee:23:21:00:df:1c:17:6d:63:6d:42:81:1d:57: d1:8d:75:9b:d6:8f:6d:84:53:a9:d9:42:5c:de:19:ff:6f:08: f1:55:3a:21:31:e3:e6:04:bc:da:62:29:bc:9a:44:3b:41:f7: d3:e3:0d:bb:3a:74:7d:43:36:8a:8d:71:f4:fb:bf:e7:eb:e2: 0e:a6:be:06:27:51:10:18:69:39:8c:db:84:a7:29:4c:c7:a7: 3d:38:72:dd:b2:56:d0:91:af:05:22:29:75:09:3d:36:b4:f2: 46:0e:04:f8:08:5f:e7:c1:bf:e2:ad:c8:f9:f8:a7:0b:74:a6: 93:d5:1d:5c:35:b0:c4:fe:c6:74:9f:d4:96:af:09:1a:b3:ee: 1b:a3:96:20:84:0d:b1:db:28:13:ed:e5:ec:33:4b:72:1b:0d: 21:a1:80:4a:f8:c9:f4:bc:66:8b:e7:33:d1:58:f2:36:16:74: 78:09:db:c3:c1:3b:03:4f:65:87:d2:7b:08:bc:fd:47:5e:0d: 36:76:88:ee:ec:25:db:f0:68:0e:b7:4c:2f:d6:93:c6:c7:73: 70:b6:c3:b9:0c:8a:fd:7e:bf:11:e6:67:57:81:58:0d:46:b8: c6:df:4b:c9:0f:45:b0:43:7f:94:2c:01:51:81:f9:54:62:ca: d3:22:fc:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPabzHPyvZmXyh27bq2Tq/uy/J1swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZFQ0I1 QTQ5M0RBQjAeFw0yNTA2MjgxNzM2MzhaFw0yNTA3MDIwMzAzMzhaMDMxMTAvBgNV BAMTKDgxREMxNDUxQjA2RDg3OEFDRjk1NjExODYwQTgwM0FDNDczNTJDQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzHHhnHmU43hYwAKDU5cs73ljl O9CqVt00Na9eMaRjpmd3kgN1hQqp8JaPAa4QAImUcIN/HEzpFGdo6AJwk9RloelL 6Dq+oVEmm4JwOO60xJb1HTGQ7Q4JKuCibMSyNVKttf4SJvxIpLHG220nX0NHwMX7 0lVCW1hYr7oKB/3Iwn6SvF/nLZxQGW6FRAB+tpFvjBJCc8t3JP1ua8nwGLOPGMsK 8nOo8OVgomcQgSc13YFQsnZq2QOep3AsSdV/SVJD0tgI/J1MgzEQabdbCssZP3/P VGL2g24Z/zyWiQrDsJ/0V1Atxm1a2Da5/RJfrMEtzrm+5OPhpdBA/vu7vd+fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgdwUUbBth4rPlWEYYKgDrEc1LKYwHwYDVR0j BBgwFoAUBWcaCsqyazQmSK/6wMZuy1pJPaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDgyM2JiMy01YTAxLTQ2NTgtYTc4My1mOGU4OWZhZGNmNDUvMS8wNTY3MUEwQUNB QjI2QjM0MjY0OEFGRkFDMEM2NkVDQjVBNDkzREFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZFQ0I1QTQ5 M0RBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4MjNiYjMtNWEwMS00NjU4LWE3 ODMtZjhlODlmYWRjZjQ1LzEvMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZF Q0I1QTQ5M0RBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANAMRBPuIyEA3xwXbWNtQoEdV9GNdZvWj22E U6nZQlzeGf9vCPFVOiEx4+YEvNpiKbyaRDtB99PjDbs6dH1DNoqNcfT7v+fr4g6m vgYnURAYaTmM24SnKUzHpz04ct2yVtCRrwUiKXUJPTa08kYOBPgIX+fBv+KtyPn4 pwt0ppPVHVw1sMT+xnSf1JavCRqz7hujliCEDbHbKBPt5ewzS3IbDSGhgEr4yfS8 ZovnM9FY8jYWdHgJ28PBOwNPZYfSewi8/UdeDTZ2iO7sJdvwaA63TC/Wk8bHc3C2 w7kMiv1+vxHmZ1eBWA1GuMbfS8kPRbBDf5QsAVGB+VRiytMi/AI= -----END CERTIFICATE-----Generated at Sun Jun 29 23:19:27 2025 by rpki-client