$ rpki-client -vvf repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft File: A575236C1BE8E700EF4D54FB243030C7256654C6.mft (raw, json) Hash identifier: 1TkdASe45TKCPiNOZTfyqyi5uOolZQYxWFd4BNP5F0A= Subject key identifier: FD:6C:07:99:C9:0F:FE:F8:5A:73:C9:D8:9A:47:A3:86:F0:42:66:44 Authority key identifier: A5:75:23:6C:1B:E8:E7:00:EF:4D:54:FB:24:30:30:C7:25:66:54:C6 Certificate issuer: /CN=A575236C1BE8E700EF4D54FB243030C7256654C6 Certificate serial: 5C34A95453231AB9793EB5EB21AD6C4A7DB82F46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft Manifest number: CD Signing time: Thu 03 Jul 2025 05:11:14 +0000 Manifest this update: Thu 03 Jul 2025 05:06:14 +0000 Manifest next update: Sun 06 Jul 2025 16:00:14 +0000 Files and hashes: 1: 3130332e3137352e3230342e302f32342d3234203d3e20313437313139.roa (hash: FwokdY5Winm64kPdNPud+dd5Ep75CI564UTa5xn81h0=) 2: A575236C1BE8E700EF4D54FB243030C7256654C6.crl (hash: IaFYFpNMYXLTkxiR42kGE0RE3BUtSghEPqK4L0BjAAg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.crl rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 08:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:34:a9:54:53:23:1a:b9:79:3e:b5:eb:21:ad:6c:4a:7d:b8:2f:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A575236C1BE8E700EF4D54FB243030C7256654C6 Validity Not Before: Jul 3 05:06:14 2025 GMT Not After : Jul 6 16:00:14 2025 GMT Subject: CN=FD6C0799C90FFEF85A73C9D89A47A386F0426644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a4:bf:70:e8:c3:94:5b:f4:71:e8:84:ed:cb: 02:83:f6:81:b9:6b:19:7d:0b:81:de:02:2e:d0:28: 90:54:b4:05:ec:36:b7:41:70:7d:98:2b:d9:9e:02: d3:46:4c:36:90:11:84:5f:d6:b3:39:ea:68:7f:1a: 3f:49:ce:dc:11:f8:06:20:ac:9b:a1:1a:15:dd:6d: e4:bc:06:dc:8d:6c:54:15:e9:db:01:12:e0:23:9b: 7c:53:8f:43:ac:3a:0c:c3:78:c0:25:26:2e:f1:d2: 57:91:87:85:e8:53:ab:47:27:17:fd:65:88:03:15: 90:e6:85:91:ad:c7:61:0d:90:24:2d:db:71:46:e9: 2f:d5:6d:7f:16:b2:7e:83:f1:f7:c2:42:40:6f:22: ab:c3:10:bd:0a:d2:27:d4:0c:61:30:b6:9f:07:99: 26:25:e7:12:49:ca:8f:11:13:cf:02:fe:42:9f:d2: 25:40:51:e5:84:ca:f3:6a:b8:a8:76:b0:07:c7:b6: aa:e5:16:7d:fd:41:60:cd:c7:63:79:e3:a6:e0:27: 0b:91:9b:cb:a8:9f:7d:72:04:f5:d2:6e:58:39:96: 5b:c3:07:c9:71:9a:1e:86:b4:44:6e:75:c8:82:b1: 09:3f:17:cd:12:93:f5:61:f2:50:e4:d3:47:88:3c: d8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:6C:07:99:C9:0F:FE:F8:5A:73:C9:D8:9A:47:A3:86:F0:42:66:44 X509v3 Authority Key Identifier: keyid:A5:75:23:6C:1B:E8:E7:00:EF:4D:54:FB:24:30:30:C7:25:66:54:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:d1:b8:27:ee:8b:35:dd:f0:54:42:7e:33:01:2d:e3:f3:21: 24:81:58:76:d9:5d:a5:20:be:48:ef:42:cd:c3:ab:26:df:3a: 2d:23:b8:fb:1c:46:4d:ed:42:d9:ca:65:e6:40:58:9b:09:49: ec:83:20:52:b1:e8:44:71:04:47:83:4c:07:0f:f2:b4:a1:c4: 1f:52:2a:09:f5:29:92:e3:62:63:99:e4:75:0b:e8:60:bb:8c: 2b:14:b4:8b:f1:92:cc:c2:02:0c:5e:2e:d2:e7:f7:4e:b7:58: 38:57:ed:24:80:19:f2:55:3b:99:0e:19:da:12:79:51:57:e6: 87:7a:a3:6d:c6:bb:86:8c:26:ce:68:b9:af:38:54:94:23:f9: 3e:fd:19:a6:54:7b:2a:fe:f6:0b:93:04:10:e1:9f:20:db:65: 59:c2:90:c2:85:01:c4:95:9f:1d:77:c2:91:28:28:d0:82:0a: ff:63:07:65:f9:ca:90:97:13:5d:eb:55:fa:35:10:3f:9a:f1: ca:66:1b:10:04:02:14:a2:e6:c7:61:94:7f:94:91:5a:20:6f: bc:d3:ae:56:bf:d0:52:f1:33:57:d8:dc:13:99:37:57:f2:93: dc:67:39:81:93:4a:1f:f9:42:9d:fa:a9:68:c6:f0:a9:85:e8: e2:2f:6a:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXDSpVFMjGrl5PrXrIa1sSn24L0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU3NTIzNkMxQkU4RTcwMEVGNEQ1NEZCMjQzMDMwQzcy NTY2NTRDNjAeFw0yNTA3MDMwNTA2MTRaFw0yNTA3MDYxNjAwMTRaMDMxMTAvBgNV BAMTKEZENkMwNzk5QzkwRkZFRjg1QTczQzlEODlBNDdBMzg2RjA0MjY2NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSpL9w6MOUW/Rx6ITtywKD9oG5 axl9C4HeAi7QKJBUtAXsNrdBcH2YK9meAtNGTDaQEYRf1rM56mh/Gj9JztwR+AYg rJuhGhXdbeS8BtyNbFQV6dsBEuAjm3xTj0OsOgzDeMAlJi7x0leRh4XoU6tHJxf9 ZYgDFZDmhZGtx2ENkCQt23FG6S/VbX8Wsn6D8ffCQkBvIqvDEL0K0ifUDGEwtp8H mSYl5xJJyo8RE88C/kKf0iVAUeWEyvNquKh2sAfHtqrlFn39QWDNx2N546bgJwuR m8uon31yBPXSblg5llvDB8lxmh6GtERudciCsQk/F80Sk/Vh8lDk00eIPNjRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/WwHmckP/vhac8nYmkejhvBCZkQwHwYDVR0j BBgwFoAUpXUjbBvo5wDvTVT7JDAwxyVmVMYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDY5YzNlMy03YjU5LTQ0OTAtODRjZi1mZWYxNTg1YWM3NWIvMC9BNTc1MjM2QzFC RThFNzAwRUY0RDU0RkIyNDMwMzBDNzI1NjY1NEM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTU3NTIzNkMxQkU4RTcwMEVGNEQ1NEZCMjQzMDMwQzcyNTY2 NTRDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQ2OWMzZTMtN2I1OS00NDkwLTg0 Y2YtZmVmMTU4NWFjNzViLzAvQTU3NTIzNkMxQkU4RTcwMEVGNEQ1NEZCMjQzMDMw QzcyNTY2NTRDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKrRuCfuizXd8FRCfjMBLePzISSBWHbZXaUg vkjvQs3DqybfOi0juPscRk3tQtnKZeZAWJsJSeyDIFKx6ERxBEeDTAcP8rShxB9S Kgn1KZLjYmOZ5HUL6GC7jCsUtIvxkszCAgxeLtLn9063WDhX7SSAGfJVO5kOGdoS eVFX5od6o23Gu4aMJs5oua84VJQj+T79GaZUeyr+9guTBBDhnyDbZVnCkMKFAcSV nx13wpEoKNCCCv9jB2X5ypCXE13rVfo1ED+a8cpmGxAEAhSi5sdhlH+UkVogb7zT rla/0FLxM1fY3BOZN1fyk9xnOYGTSh/5Qp36qWjG8KmF6OIvalU= -----END CERTIFICATE-----Generated at Thu Jul 3 10:03:06 2025 by rpki-client