$ rpki-client -vvf repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft File: 5234A428BC63559E2511B3EFFB085B82B195A8ED.mft (raw, json) Hash identifier: 4jEZkWcOktlkvsU9ZPhM598xSNk2Gf6xIYz9hQCFB9c= Subject key identifier: C9:4A:7C:48:53:7C:7B:B9:0C:D2:25:2C:51:C1:CC:3B:56:FF:FA:26 Authority key identifier: 52:34:A4:28:BC:63:55:9E:25:11:B3:EF:FB:08:5B:82:B1:95:A8:ED Certificate issuer: /CN=5234A428BC63559E2511B3EFFB085B82B195A8ED Certificate serial: 45E45652D162A6A4049A4FCC191304527D39C30D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft Manifest number: 2E Signing time: Mon 30 Jun 2025 03:12:02 +0000 Manifest this update: Mon 30 Jun 2025 03:07:02 +0000 Manifest next update: Thu 03 Jul 2025 11:55:02 +0000 Files and hashes: 1: 5234A428BC63559E2511B3EFFB085B82B195A8ED.crl (hash: 9gYXeUehMhwfh+ftzHnPPAPh0lg73CFG3Kg+aPXRHCU=) 2: 3130332e31372e37372e302f32342d3234203d3e20313331373831.roa (hash: 4y750PE+WZPEuQKdgW2BVnFEcTQLxauJA4sENyjZR2o=) 3: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: 3jZR/32xfuAKeJQ/xf5TVwB85F6YIOYekaTwsoIa1SY=) 4: 3130332e31372e37362e302f32342d3234203d3e20313331373831.roa (hash: rB8zcfhigYxp6rZG5kgxX6r/oJS8xphHw/YAzK8Sodw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.crl rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 11:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:e4:56:52:d1:62:a6:a4:04:9a:4f:cc:19:13:04:52:7d:39:c3:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5234A428BC63559E2511B3EFFB085B82B195A8ED Validity Not Before: Jun 30 03:07:02 2025 GMT Not After : Jul 3 11:55:02 2025 GMT Subject: CN=C94A7C48537C7BB90CD2252C51C1CC3B56FFFA26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1e:9f:d6:8c:c8:d9:6c:f5:2d:ce:97:96:55: 07:e5:48:d4:3c:99:7d:1b:5c:f1:9f:d9:e4:70:5a: d0:d9:a6:e3:71:57:b9:89:cc:48:67:c5:ee:1a:c7: c9:5a:e3:54:37:b2:03:8d:90:04:bf:5b:c4:b6:4f: 5e:e5:3c:da:d1:6e:9c:c3:98:c9:17:48:e9:95:36: 61:e9:ee:d5:bb:d6:22:22:0a:94:c8:ac:89:fe:27: d5:d2:a4:d6:a1:ab:86:8d:bc:65:10:8a:8e:48:77: 7c:de:7a:8f:fa:d1:78:c6:71:7a:2d:e5:25:4a:ca: b1:50:e8:fe:a0:2b:42:3d:db:62:28:be:7e:19:6a: fc:7f:98:b3:e4:e0:5e:9c:40:58:0b:71:cc:95:bf: ab:6c:94:76:72:17:03:c6:ff:e6:c5:11:ed:00:5a: 72:ff:ef:85:9e:fb:1c:ee:4b:3d:0a:2a:77:8c:00: 10:ac:87:87:bc:dd:4c:84:5a:c6:66:47:39:8b:67: a3:ac:42:64:e4:24:70:98:98:8a:28:63:c1:e3:3a: c2:94:ab:91:7a:d4:53:81:2d:7c:be:69:69:0e:e2: 31:65:8f:f5:70:4e:44:fe:5e:cc:7a:ef:76:58:be: 43:4f:5b:e0:7c:53:f5:ed:2d:ed:d3:bc:d9:31:ea: 1c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:4A:7C:48:53:7C:7B:B9:0C:D2:25:2C:51:C1:CC:3B:56:FF:FA:26 X509v3 Authority Key Identifier: keyid:52:34:A4:28:BC:63:55:9E:25:11:B3:EF:FB:08:5B:82:B1:95:A8:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:dd:72:59:f6:50:48:88:8e:d2:c9:bc:6a:af:5f:77:1c:0b: f9:29:76:69:2e:ee:15:ca:ea:83:b0:1c:7d:c9:ca:fd:b3:ee: d8:ae:d0:b0:9a:f1:96:df:87:87:cc:4a:5f:da:b4:e3:6f:1e: 10:4a:95:54:fc:14:d1:4d:cc:3c:58:5d:eb:fc:ee:e9:44:81: 1c:1d:8c:05:ac:75:8b:4a:5c:1d:21:80:c5:9c:bc:60:65:a6: 6a:70:b9:eb:e6:f7:8d:8e:5f:9a:c6:6b:a0:2e:6c:a7:62:4c: 8c:a1:24:d3:39:14:d7:7f:89:7e:10:f5:52:18:c8:67:0e:05: bc:f7:fe:da:31:94:37:73:f1:de:c1:f4:b4:71:91:11:f2:48: 72:08:7f:72:32:25:18:6c:34:44:bf:02:fc:fd:5d:87:b3:78: 4c:54:f2:8a:6b:26:dd:97:b0:6c:f5:a4:64:59:80:92:7b:da: 4d:d1:30:80:f3:f8:74:69:2d:79:23:c7:5e:53:1e:c2:d6:87: e3:25:b1:e6:46:5e:9b:4a:cd:89:9d:ea:dc:ec:81:69:a5:81: 24:77:84:d8:4d:a6:bc:38:67:12:1c:e4:36:9e:cf:c3:3e:d2: 0e:d9:af:d4:f8:ac:95:0d:46:7d:5d:81:f3:d6:5e:18:8c:a2: a6:e2:bb:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUReRWUtFipqQEmk/MGRMEUn05ww0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVCODJC MTk1QThFRDAeFw0yNTA2MzAwMzA3MDJaFw0yNTA3MDMxMTU1MDJaMDMxMTAvBgNV BAMTKEM5NEE3QzQ4NTM3QzdCQjkwQ0QyMjUyQzUxQzFDQzNCNTZGRkZBMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPHp/WjMjZbPUtzpeWVQflSNQ8 mX0bXPGf2eRwWtDZpuNxV7mJzEhnxe4ax8la41Q3sgONkAS/W8S2T17lPNrRbpzD mMkXSOmVNmHp7tW71iIiCpTIrIn+J9XSpNahq4aNvGUQio5Id3zeeo/60XjGcXot 5SVKyrFQ6P6gK0I922Iovn4Zavx/mLPk4F6cQFgLccyVv6tslHZyFwPG/+bFEe0A WnL/74We+xzuSz0KKneMABCsh4e83UyEWsZmRzmLZ6OsQmTkJHCYmIooY8HjOsKU q5F61FOBLXy+aWkO4jFlj/VwTkT+Xsx673ZYvkNPW+B8U/XtLe3TvNkx6hzDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyUp8SFN8e7kM0iUsUcHMO1b/+iYwHwYDVR0j BBgwFoAUUjSkKLxjVZ4lEbPv+whbgrGVqO0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YTA3MTUxNC1lNGRlLTRhY2UtYTBkZi1mN2M0YWI4MDc0YTUvMC81MjM0QTQyOEJD NjM1NTlFMjUxMUIzRUZGQjA4NUI4MkIxOTVBOEVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVCODJCMTk1 QThFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmEwNzE1MTQtZTRkZS00YWNlLWEw ZGYtZjdjNGFiODA3NGE1LzAvNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVC ODJCMTk1QThFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/dcln2UEiIjtLJvGqvX3ccC/kpdmku7hXK 6oOwHH3Jyv2z7tiu0LCa8Zbfh4fMSl/atONvHhBKlVT8FNFNzDxYXev87ulEgRwd jAWsdYtKXB0hgMWcvGBlpmpwuevm942OX5rGa6AubKdiTIyhJNM5FNd/iX4Q9VIY yGcOBbz3/toxlDdz8d7B9LRxkRHySHIIf3IyJRhsNES/Avz9XYezeExU8oprJt2X sGz1pGRZgJJ72k3RMIDz+HRpLXkjx15THsLWh+MlseZGXptKzYmd6tzsgWmlgSR3 hNhNprw4ZxIc5Daez8M+0g7Zr9T4rJUNRn1dgfPWXhiMoqbiu0E= -----END CERTIFICATE-----Generated at Tue Jul 1 08:28:11 2025 by rpki-client