$ rpki-client -vvf repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft File: D5265466AE0186702AF52D11170A29AC32F54EF5.mft (raw, json) Hash identifier: t/Ij79BKx5szD33kmLqp0Gosl9gC4SVkvSld2tvS3fE= Subject key identifier: 89:71:B7:20:B4:76:F9:61:A0:F3:EE:86:14:09:EF:24:17:73:F3:21 Authority key identifier: D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5 Certificate issuer: /CN=D5265466AE0186702AF52D11170A29AC32F54EF5 Certificate serial: 0A88C6516E18162AE399B830680A5C940EE2774F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft Manifest number: AF Signing time: Sat 28 Jun 2025 12:50:41 +0000 Manifest this update: Sat 28 Jun 2025 12:45:41 +0000 Manifest next update: Tue 01 Jul 2025 15:01:41 +0000 Files and hashes: 1: D5265466AE0186702AF52D11170A29AC32F54EF5.crl (hash: 4PfjZlTs0JaYTw98KKVUyzxUEFVDnSL7KQTzFaKrjyY=) 2: 3135372e31352e302e302f32332d3234203d3e20313532373639.roa (hash: wP7WlQEFbQk8vKWjoSw9Vlhgkk9UBNqB1fB0mYPDnk8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.crl rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 15:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:88:c6:51:6e:18:16:2a:e3:99:b8:30:68:0a:5c:94:0e:e2:77:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5265466AE0186702AF52D11170A29AC32F54EF5 Validity Not Before: Jun 28 12:45:41 2025 GMT Not After : Jul 1 15:01:41 2025 GMT Subject: CN=8971B720B476F961A0F3EE861409EF241773F321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7f:98:9d:24:b5:b8:e9:34:26:8e:d3:99:f0: eb:87:6e:2c:bb:31:58:58:0b:e0:13:a3:5a:2c:a0: a0:2b:7b:ee:7c:89:1c:cb:70:7d:b6:cf:8d:ec:00: 8b:bb:c9:cd:10:b2:db:4d:3e:28:01:c8:24:40:d9: 4b:ed:24:ff:66:7e:0f:a4:07:a8:21:b9:01:cd:7d: 08:0e:85:f6:de:13:dc:af:8e:af:08:70:7f:fd:c6: e7:2e:fd:66:c5:2b:b8:14:b7:fc:d4:7a:41:12:2f: 76:fb:91:75:00:a7:5b:2b:16:5f:c7:3d:5d:b3:e6: df:54:cc:dc:99:09:0a:b0:0f:ef:10:8e:d9:7d:3f: 97:09:26:f3:14:c1:92:75:67:01:cd:9f:c5:ed:e3: e1:a5:87:07:5d:20:db:fd:8b:80:f7:0c:66:8c:bf: 95:2a:6f:de:fb:1c:fa:ce:9a:48:47:8a:e0:61:8c: 2b:86:8c:2f:6a:ab:81:0c:db:9c:50:ba:e2:3c:02: cb:ee:a4:14:45:56:6f:74:5d:cf:cc:1d:61:2b:f9: 93:fb:d1:bd:c1:ae:d5:4f:bd:48:85:0d:48:70:85: 4c:0e:81:f0:43:be:c9:b5:2f:7a:e1:c2:4e:39:fe: 68:6f:ce:1d:41:e7:49:e0:27:20:b7:9c:a5:1b:ac: 3d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:71:B7:20:B4:76:F9:61:A0:F3:EE:86:14:09:EF:24:17:73:F3:21 X509v3 Authority Key Identifier: keyid:D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:74:07:2b:13:af:66:e8:54:db:8c:00:c5:36:43:aa:df:05: 6d:75:94:5f:ca:36:bd:6c:99:ee:b4:d0:56:a1:d2:b8:78:94: 0d:e0:b9:93:84:d9:7f:b6:1f:f4:03:01:92:26:63:d0:4b:42: f3:1b:50:98:1b:0d:97:e1:a6:9b:7d:42:37:78:c7:00:77:f6: 5e:19:53:df:07:aa:7d:9a:ae:76:28:b8:80:43:f8:bf:3a:40: 9f:85:f1:71:bc:65:da:91:19:c7:1e:dc:b9:0c:d2:21:33:5d: c3:cc:29:be:a4:ff:3a:8a:58:e5:d3:67:47:64:b3:71:d4:a5: 18:47:1c:2f:07:d1:a0:30:6b:7f:72:40:8d:80:8a:47:2d:d4: a2:2c:ec:d0:04:bf:b6:e6:0f:fd:37:db:cc:cf:cd:3e:61:ef: 4d:5f:76:4d:63:20:29:3a:eb:37:ad:cd:16:c7:be:d4:38:e4: 42:bf:63:9f:ac:40:33:c8:90:70:c6:a3:0f:a1:29:4e:6f:be: ad:6d:06:dc:ce:b0:67:d8:09:0a:7f:9e:c4:d8:6d:e8:fc:80: ea:23:4d:75:0d:8e:38:ca:fd:cc:8d:ab:e2:9b:0d:ff:1c:fe: 93:9f:ba:10:77:f8:6b:6d:d8:32:0d:2c:76:ad:5e:c0:cc:73: d9:67:83:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCojGUW4YFirjmbgwaApclA7id08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5QUMz MkY1NEVGNTAeFw0yNTA2MjgxMjQ1NDFaFw0yNTA3MDExNTAxNDFaMDMxMTAvBgNV BAMTKDg5NzFCNzIwQjQ3NkY5NjFBMEYzRUU4NjE0MDlFRjI0MTc3M0YzMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCff5idJLW46TQmjtOZ8OuHbiy7 MVhYC+ATo1osoKAre+58iRzLcH22z43sAIu7yc0QsttNPigByCRA2UvtJP9mfg+k B6ghuQHNfQgOhfbeE9yvjq8IcH/9xucu/WbFK7gUt/zUekESL3b7kXUAp1srFl/H PV2z5t9UzNyZCQqwD+8Qjtl9P5cJJvMUwZJ1ZwHNn8Xt4+GlhwddINv9i4D3DGaM v5Uqb977HPrOmkhHiuBhjCuGjC9qq4EM25xQuuI8AsvupBRFVm90Xc/MHWEr+ZP7 0b3BrtVPvUiFDUhwhUwOgfBDvsm1L3rhwk45/mhvzh1B50ngJyC3nKUbrD1LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiXG3ILR2+WGg8+6GFAnvJBdz8yEwHwYDVR0j BBgwFoAU1SZUZq4BhnAq9S0RFwoprDL1TvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDYxMzdhZS0yZWZiLTQzYzAtYmRiNy00M2Y1ZDkzOWNmMGMvMC9ENTI2NTQ2NkFF MDE4NjcwMkFGNTJEMTExNzBBMjlBQzMyRjU0RUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5QUMzMkY1 NEVGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQ2MTM3YWUtMmVmYi00M2MwLWJk YjctNDNmNWQ5MzljZjBjLzAvRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5 QUMzMkY1NEVGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANB0BysTr2boVNuMAMU2Q6rfBW11lF/KNr1s me600Fah0rh4lA3guZOE2X+2H/QDAZImY9BLQvMbUJgbDZfhppt9Qjd4xwB39l4Z U98Hqn2arnYouIBD+L86QJ+F8XG8ZdqRGcce3LkM0iEzXcPMKb6k/zqKWOXTZ0dk s3HUpRhHHC8H0aAwa39yQI2Aikct1KIs7NAEv7bmD/0328zPzT5h701fdk1jICk6 6zetzRbHvtQ45EK/Y5+sQDPIkHDGow+hKU5vvq1tBtzOsGfYCQp/nsTYbej8gOoj TXUNjjjK/cyNq+KbDf8c/pOfuhB3+Gtt2DINLHatXsDMc9lngwA= -----END CERTIFICATE-----Generated at Mon Jun 30 10:18:33 2025 by rpki-client