$ rpki-client -vvf repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft File: 597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft (raw, json) Hash identifier: leqdWWyJFvaUtV0wS3oRmqL4LP79TMFN0C2vNykFcsU= Subject key identifier: 53:20:6A:2C:34:67:F5:43:39:B9:E7:26:56:79:A2:78:5E:0F:92:6E Authority key identifier: 59:77:34:A2:61:58:D7:7A:6E:D0:22:22:DF:93:D1:CE:2B:D6:EA:03 Certificate issuer: /CN=597734A26158D77A6ED02222DF93D1CE2BD6EA03 Certificate serial: 53A10B03989540B064D1688CE810D9FDC2732A65 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft Manifest number: C0 Signing time: Mon 30 Jun 2025 03:50:55 +0000 Manifest this update: Mon 30 Jun 2025 03:45:55 +0000 Manifest next update: Thu 03 Jul 2025 08:38:55 +0000 Files and hashes: 1: 597734A26158D77A6ED02222DF93D1CE2BD6EA03.crl (hash: zpaYQZ4rt7RRLmvGe1e/PbMFjjVpj7LZOnoh7cCcKKw=) 2: 3130332e3137302e3139382e302f32342d3234203d3e20313530343634.roa (hash: 0bZb0428Qs9WgXKe/lQqf94hdv+XNfzIhYjEupAnHpI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.crl rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 08:38:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:a1:0b:03:98:95:40:b0:64:d1:68:8c:e8:10:d9:fd:c2:73:2a:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=597734A26158D77A6ED02222DF93D1CE2BD6EA03 Validity Not Before: Jun 30 03:45:55 2025 GMT Not After : Jul 3 08:38:55 2025 GMT Subject: CN=53206A2C3467F54339B9E7265679A2785E0F926E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8c:f9:81:4f:14:db:1a:72:b6:c7:6f:13:bc: 54:7c:2c:98:0e:3e:a3:47:80:52:45:22:cc:6c:fa: 4c:89:96:0a:51:a5:43:fc:68:6b:02:4b:f1:05:74: bf:10:5e:3d:36:76:d9:fb:bc:be:6c:d5:2f:ff:07: 5c:b9:77:f0:b0:4c:90:8b:69:2a:c4:bf:68:7c:e8: 82:d6:f5:da:ec:0c:02:f2:d5:db:ce:61:53:42:13: b0:6a:f3:0f:38:e8:2f:c6:54:46:f6:0f:f6:87:04: ec:4a:2d:a9:25:61:06:43:61:2b:d3:45:96:e6:01: 09:40:5f:95:d0:c8:a6:02:3e:8f:d2:d5:59:18:8a: da:6c:ff:10:aa:52:f9:a4:e7:cf:dd:a7:23:06:26: fb:81:a9:ac:61:d4:9e:11:c3:b9:b2:44:58:83:27: 07:6e:6f:48:9f:7d:5e:d1:8a:91:cb:16:99:03:84: e2:82:58:d2:1d:c1:ad:5f:82:90:1e:a8:29:15:ad: 13:dc:73:84:8c:3c:5b:b6:82:29:0f:69:4f:56:1b: ab:10:69:f8:be:04:9a:0e:06:13:fc:25:40:9f:79: e4:35:47:98:a7:c5:b4:38:1c:cf:4d:58:24:af:ee: 9b:1c:16:16:ca:d1:f4:f7:8d:0a:9d:9a:10:5f:4a: 16:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:20:6A:2C:34:67:F5:43:39:B9:E7:26:56:79:A2:78:5E:0F:92:6E X509v3 Authority Key Identifier: keyid:59:77:34:A2:61:58:D7:7A:6E:D0:22:22:DF:93:D1:CE:2B:D6:EA:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:9b:6e:22:e5:9e:9f:11:f1:a7:03:dd:98:99:c8:e5:17:1e: 34:e1:28:16:fd:34:fc:6c:92:79:9f:a7:9d:bd:43:76:aa:c9: aa:79:17:b6:94:35:33:c7:77:8d:30:52:33:34:4d:e9:1f:ae: 0b:47:3d:55:aa:5f:10:bb:28:0a:f2:d7:c7:4a:ad:7b:fe:16: 59:d1:60:6a:5f:6c:41:dd:ef:ba:4c:ab:1e:08:18:02:23:b8: 28:a3:05:28:bb:42:8b:cf:28:0d:ce:3d:0d:41:57:51:f8:69: 61:b6:94:ed:71:70:c8:cd:7f:70:94:19:c4:ef:4b:8c:57:ab: 22:88:6a:a3:14:ee:ef:f8:62:3a:54:aa:68:95:44:b1:63:8b: ba:e3:0f:bd:7c:41:66:6b:1f:0d:cd:6d:96:ae:57:d0:34:32: 47:fa:09:50:95:34:cf:81:ea:e0:ff:aa:68:f0:22:74:29:b8: f3:ef:b0:24:32:84:63:92:b3:41:e6:04:13:b5:3c:13:1a:08: 1c:cb:90:23:3c:50:2a:c1:c3:6f:2e:f3:70:5c:40:b8:17:56: 0f:ea:33:cd:15:f5:8f:f8:a4:46:a6:fa:5c:42:c8:3e:9c:df: 93:8a:f2:53:1e:5d:d4:95:7c:86:e7:a0:6b:8b:88:cd:31:44: 07:eb:02:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU6ELA5iVQLBk0WiM6BDZ/cJzKmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTk3NzM0QTI2MTU4RDc3QTZFRDAyMjIyREY5M0QxQ0Uy QkQ2RUEwMzAeFw0yNTA2MzAwMzQ1NTVaFw0yNTA3MDMwODM4NTVaMDMxMTAvBgNV BAMTKDUzMjA2QTJDMzQ2N0Y1NDMzOUI5RTcyNjU2NzlBMjc4NUUwRjkyNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCejPmBTxTbGnK2x28TvFR8LJgO PqNHgFJFIsxs+kyJlgpRpUP8aGsCS/EFdL8QXj02dtn7vL5s1S//B1y5d/CwTJCL aSrEv2h86ILW9drsDALy1dvOYVNCE7Bq8w846C/GVEb2D/aHBOxKLaklYQZDYSvT RZbmAQlAX5XQyKYCPo/S1VkYitps/xCqUvmk58/dpyMGJvuBqaxh1J4Rw7myRFiD Jwdub0iffV7RipHLFpkDhOKCWNIdwa1fgpAeqCkVrRPcc4SMPFu2gikPaU9WG6sQ afi+BJoOBhP8JUCfeeQ1R5inxbQ4HM9NWCSv7pscFhbK0fT3jQqdmhBfShZtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUyBqLDRn9UM5uecmVnmieF4Pkm4wHwYDVR0j BBgwFoAUWXc0omFY13pu0CIi35PRzivW6gMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGRhNTg4Mi1iODA0LTQxNTQtOTU5Yi02MzM2YjI0ZTE4YjIvMC81OTc3MzRBMjYx NThENzdBNkVEMDIyMjJERjkzRDFDRTJCRDZFQTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTk3NzM0QTI2MTU4RDc3QTZFRDAyMjIyREY5M0QxQ0UyQkQ2 RUEwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBkYTU4ODItYjgwNC00MTU0LTk1 OWItNjMzNmIyNGUxOGIyLzAvNTk3NzM0QTI2MTU4RDc3QTZFRDAyMjIyREY5M0Qx Q0UyQkQ2RUEwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF2bbiLlnp8R8acD3ZiZyOUXHjThKBb9NPxs knmfp529Q3aqyap5F7aUNTPHd40wUjM0TekfrgtHPVWqXxC7KAry18dKrXv+FlnR YGpfbEHd77pMqx4IGAIjuCijBSi7QovPKA3OPQ1BV1H4aWG2lO1xcMjNf3CUGcTv S4xXqyKIaqMU7u/4YjpUqmiVRLFji7rjD718QWZrHw3NbZauV9A0Mkf6CVCVNM+B 6uD/qmjwInQpuPPvsCQyhGOSs0HmBBO1PBMaCBzLkCM8UCrBw28u83BcQLgXVg/q M80V9Y/4pEam+lxCyD6c35OK8lMeXdSVfIbnoGuLiM0xRAfrAik= -----END CERTIFICATE-----Generated at Mon Jun 30 19:09:39 2025 by rpki-client