$ rpki-client -vvf repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft File: 57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft (raw, json) Hash identifier: ZuaKKTlNbMmnvm2uW1DC2PUt5mrQ6wYJN3bAqmYEYWM= Subject key identifier: 33:DB:D9:6E:6C:75:3D:6F:33:24:D3:83:D9:B1:B0:4A:31:59:03:A0 Authority key identifier: 57:D4:B8:26:9A:DD:A4:60:E8:F7:92:5D:0A:A1:26:EC:D6:F6:0E:24 Certificate issuer: /CN=57D4B8269ADDA460E8F7925D0AA126ECD6F60E24 Certificate serial: 375079180D718B0B7B18F329C22A0E6F9EA21EB0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft Manifest number: 0433 Signing time: Sat 28 Jun 2025 20:40:01 +0000 Manifest this update: Sat 28 Jun 2025 20:35:01 +0000 Manifest next update: Wed 02 Jul 2025 02:10:01 +0000 Files and hashes: 1: 57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.crl (hash: 9zs/Rv4ToOQPhx3resXzvXT2YVGowzLDaHNNwdcIn1c=) 2: 3130332e34312e3138382e302f32322d3234203d3e203538333937.roa (hash: jW50ms0aH4HgWEQwGNSR71uxpw5ILP6vOExz3k18KwI=) 3: 3131372e35332e34342e302f32322d3234203d3e203538333937.roa (hash: Kxj5n3XmBYqwY5xNhQm1hyvdBhggzR17lr3rokbc1x4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.crl rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 02:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:50:79:18:0d:71:8b:0b:7b:18:f3:29:c2:2a:0e:6f:9e:a2:1e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57D4B8269ADDA460E8F7925D0AA126ECD6F60E24 Validity Not Before: Jun 28 20:35:01 2025 GMT Not After : Jul 2 02:10:01 2025 GMT Subject: CN=33DBD96E6C753D6F3324D383D9B1B04A315903A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ec:29:8e:00:c0:9a:1c:aa:12:5f:93:9b:6e: 42:cc:45:be:de:14:c2:ad:1b:e6:f0:e6:f8:3b:6e: cb:b9:cc:3d:e6:97:de:b8:f8:e5:18:0e:74:6a:df: dc:17:7d:de:36:06:39:92:9f:14:61:5d:d3:13:a0: 7b:42:c3:c8:32:3c:10:0f:b3:43:53:96:74:d3:5d: 53:2b:e6:d1:45:a8:d4:5c:26:ca:ac:3e:41:f4:20: 47:02:ca:ab:21:38:9d:47:d2:96:83:d7:22:16:d7: 23:66:d9:ce:05:67:60:f4:2f:30:db:e7:08:a5:5e: ee:c9:64:c0:cf:3a:b1:b2:45:2a:ee:32:8e:32:e0: 0b:6a:8c:0f:83:58:1d:d1:28:62:2a:cf:f1:db:66: f5:68:2a:e6:dc:bc:e5:44:bd:f6:44:66:31:9f:10: b5:69:fb:61:db:83:47:09:46:ab:08:cf:f5:2d:0a: 3c:bf:2d:bb:f6:0d:5e:68:23:c5:96:16:a9:be:06: 1c:17:0d:85:1f:1b:bc:a6:38:00:f2:ca:8b:b3:34: ae:99:3d:cf:a6:79:6f:d5:b9:52:08:64:3a:ef:4b: 3e:4a:ab:67:05:84:e0:64:de:7f:ab:d0:f6:ea:36: 7d:60:40:3f:a5:81:af:fd:f4:fa:12:dc:04:19:b9: a2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:DB:D9:6E:6C:75:3D:6F:33:24:D3:83:D9:B1:B0:4A:31:59:03:A0 X509v3 Authority Key Identifier: keyid:57:D4:B8:26:9A:DD:A4:60:E8:F7:92:5D:0A:A1:26:EC:D6:F6:0E:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:68:a0:e6:2a:12:08:47:e7:fa:d7:e2:51:f9:07:48:48:7f: 37:3c:50:c2:2a:59:71:0f:1d:4d:42:2d:41:85:f5:d9:58:6d: 96:4f:d3:ed:6f:ab:c0:40:51:e1:85:4b:53:41:9c:43:55:c3: 0f:ca:6f:6c:32:64:f4:ca:70:cd:6e:ea:34:30:13:ef:4a:4f: 06:41:79:2b:ed:34:0c:6e:1a:29:20:fa:30:73:df:e4:5a:24: 43:9d:26:2a:c0:34:55:c4:ca:1e:16:e6:3f:72:2f:40:62:58: 07:30:b5:43:56:8e:3c:38:9f:5c:40:8b:7d:af:bc:21:1c:81: ef:c1:2c:25:f1:39:04:05:7f:29:42:c9:3a:26:18:14:65:6c: 44:ef:87:f7:27:b1:9c:7d:c3:22:41:01:ab:be:14:b0:ba:89: 04:ef:7e:49:1a:3a:c2:30:ca:bb:70:25:8c:b4:71:e6:35:fb: 79:3d:66:9e:a6:bb:a9:30:d9:40:98:5c:e8:1b:34:ae:c2:46: 85:82:2a:61:e2:3f:a8:51:ee:e0:61:8c:45:80:d6:72:ad:64: 6d:ab:1d:a7:9a:93:12:f1:16:76:bc:c3:63:cb:35:e9:81:16: aa:08:6d:c8:94:e3:7c:10:67:99:af:3b:a2:07:fb:aa:f1:84: 03:50:98:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN1B5GA1xiwt7GPMpwioOb56iHrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdENEI4MjY5QUREQTQ2MEU4Rjc5MjVEMEFBMTI2RUNE NkY2MEUyNDAeFw0yNTA2MjgyMDM1MDFaFw0yNTA3MDIwMjEwMDFaMDMxMTAvBgNV BAMTKDMzREJEOTZFNkM3NTNENkYzMzI0RDM4M0Q5QjFCMDRBMzE1OTAzQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw7CmOAMCaHKoSX5ObbkLMRb7e FMKtG+bw5vg7bsu5zD3ml964+OUYDnRq39wXfd42BjmSnxRhXdMToHtCw8gyPBAP s0NTlnTTXVMr5tFFqNRcJsqsPkH0IEcCyqshOJ1H0paD1yIW1yNm2c4FZ2D0LzDb 5wilXu7JZMDPOrGyRSruMo4y4AtqjA+DWB3RKGIqz/HbZvVoKubcvOVEvfZEZjGf ELVp+2Hbg0cJRqsIz/UtCjy/Lbv2DV5oI8WWFqm+BhwXDYUfG7ymOADyyouzNK6Z Pc+meW/VuVIIZDrvSz5Kq2cFhOBk3n+r0PbqNn1gQD+lga/99PoS3AQZuaJPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM9vZbmx1PW8zJNOD2bGwSjFZA6AwHwYDVR0j BBgwFoAUV9S4JprdpGDo95JdCqEm7Nb2DiQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjQ5OWM1Ni1hMjQ2LTRkMTgtYmU4Ni1mNDYxZDhmNTU5YzgvMC81N0Q0QjgyNjlB RERBNDYwRThGNzkyNUQwQUExMjZFQ0Q2RjYwRTI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTdENEI4MjY5QUREQTQ2MEU4Rjc5MjVEMEFBMTI2RUNENkY2 MEUyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Y0OTljNTYtYTI0Ni00ZDE4LWJl ODYtZjQ2MWQ4ZjU1OWM4LzAvNTdENEI4MjY5QUREQTQ2MEU4Rjc5MjVEMEFBMTI2 RUNENkY2MEUyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAChooOYqEghH5/rX4lH5B0hIfzc8UMIqWXEP HU1CLUGF9dlYbZZP0+1vq8BAUeGFS1NBnENVww/Kb2wyZPTKcM1u6jQwE+9KTwZB eSvtNAxuGikg+jBz3+RaJEOdJirANFXEyh4W5j9yL0BiWAcwtUNWjjw4n1xAi32v vCEcge/BLCXxOQQFfylCyTomGBRlbETvh/cnsZx9wyJBAau+FLC6iQTvfkkaOsIw yrtwJYy0ceY1+3k9Zp6mu6kw2UCYXOgbNK7CRoWCKmHiP6hR7uBhjEWA1nKtZG2r HaeakxLxFna8w2PLNemBFqoIbciU43wQZ5mvO6IH+6rxhANQmMo= -----END CERTIFICATE-----Generated at Sun Jun 29 19:44:32 2025 by rpki-client