$ rpki-client -vvf repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft File: D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft (raw, json) Hash identifier: o7wnAmpfbDsT3JHoj+kSOxMXcRXxau7EZA72YaV1coI= Subject key identifier: BA:E8:7C:4A:91:36:0D:01:1C:53:91:C1:96:4E:07:13:9B:D9:22:4F Authority key identifier: D5:67:7E:FA:13:70:87:11:CD:AF:B6:7D:9C:4C:8F:5F:FF:A9:A2:71 Certificate issuer: /CN=D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271 Certificate serial: 5CE5929D30FB725AE66158A36CF2542DDEE36E32 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft Manifest number: 02F9 Signing time: Sat 28 Jun 2025 23:00:34 +0000 Manifest this update: Sat 28 Jun 2025 22:55:34 +0000 Manifest next update: Wed 02 Jul 2025 08:39:34 +0000 Files and hashes: 1: D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.crl (hash: GJ/LwqK0Tq7Q9zk7woP3Oycs1ymUhkQHdPHm91to0Qo=) 2: 3130332e3134372e38342e302f32332d3234203d3e20313339393535.roa (hash: 8pVdONx+0B7HzvlmWjfUUOE8jWcjWCCvoVvW/VBNAgQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.crl rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:e5:92:9d:30:fb:72:5a:e6:61:58:a3:6c:f2:54:2d:de:e3:6e:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271 Validity Not Before: Jun 28 22:55:34 2025 GMT Not After : Jul 2 08:39:34 2025 GMT Subject: CN=BAE87C4A91360D011C5391C1964E07139BD9224F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9d:5c:c6:07:80:ce:1b:46:9c:cc:e2:b4:ae: 24:1d:4a:a5:03:d9:78:b2:20:98:06:e8:dc:64:bf: d2:40:cc:22:b7:99:79:d9:45:a1:e0:9f:b6:d1:26: 07:46:8d:0d:aa:d8:40:70:33:b8:92:91:35:a5:1e: ac:92:f3:88:d6:95:e5:86:44:a1:e5:c7:e8:df:ed: 8f:de:b1:96:09:fe:10:2a:3c:21:10:83:41:e2:a1: 5e:db:21:f3:e5:57:9a:25:2c:b9:20:48:8d:1e:1e: 9d:bd:0b:6a:62:18:69:62:6c:32:42:fe:4c:eb:5b: 28:4d:36:82:32:d8:3d:c0:e4:58:44:70:0d:b6:c7: 56:08:84:bc:42:1c:eb:07:20:a2:71:23:84:a3:24: 9c:b9:9c:d0:1d:17:8f:a2:49:96:8a:8d:10:79:28: db:12:e3:82:1a:ca:a2:f5:a5:90:a6:08:9a:6a:66: 72:68:64:f2:a7:78:b6:bf:3b:90:77:38:e0:7e:7c: 0f:7c:bb:a9:0d:6c:d0:ca:53:1c:74:39:6b:a4:d9: b4:cd:17:f1:26:34:62:6b:13:1e:f7:b1:34:87:31: 71:78:8f:a4:39:75:c5:d0:c7:b4:bd:71:56:15:34: ab:c7:06:c5:df:ec:ef:5e:e7:88:c4:d1:44:35:94: 88:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E8:7C:4A:91:36:0D:01:1C:53:91:C1:96:4E:07:13:9B:D9:22:4F X509v3 Authority Key Identifier: keyid:D5:67:7E:FA:13:70:87:11:CD:AF:B6:7D:9C:4C:8F:5F:FF:A9:A2:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c79659a9-5505-494b-a03c-6ebacfadf931/0/D5677EFA13708711CDAFB67D9C4C8F5FFFA9A271.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:31:a0:20:4a:79:b5:df:5b:79:32:ad:3e:f1:ae:64:f9:63: 95:d9:a3:dd:02:1c:36:0d:fc:7b:c5:c9:70:b3:ff:de:73:7c: 4d:28:84:59:05:1b:52:70:01:e4:4d:e4:42:0b:16:b4:af:51: 51:d4:a5:ea:a2:bc:4d:26:18:49:21:d1:a0:44:ba:3e:b7:f8: 80:39:a9:cf:fe:5d:b4:09:2c:7f:7d:64:e6:37:56:c4:c6:28: 29:19:22:29:41:e9:44:c8:31:6c:e8:73:3f:3f:fc:52:a3:64: 91:df:54:2d:14:3f:3e:f9:66:82:70:93:8f:a1:8f:38:58:67: 24:95:a2:87:42:79:49:4f:d0:ce:68:56:26:3e:1d:a7:ac:d2: 49:93:58:d7:c6:2a:da:11:65:1a:79:2f:d4:1f:69:d5:b1:5e: ec:76:15:31:75:73:f2:0b:90:ad:17:5e:d1:b8:81:e8:f9:77: 73:50:32:e3:f0:b9:d2:bb:01:14:90:a8:05:3d:f9:58:5f:17: 5b:a4:55:de:75:41:35:e9:9a:fd:a0:7d:73:02:cc:bc:32:5b: aa:f5:58:92:db:da:01:03:75:92:e4:aa:0a:dd:1f:f5:6c:a9: a6:ae:f9:7a:b1:68:40:88:24:12:9e:22:0e:62:02:63:c6:4d: e6:29:b8:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXOWSnTD7clrmYVijbPJULd7jbjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU2NzdFRkExMzcwODcxMUNEQUZCNjdEOUM0QzhGNUZG RkE5QTI3MTAeFw0yNTA2MjgyMjU1MzRaFw0yNTA3MDIwODM5MzRaMDMxMTAvBgNV BAMTKEJBRTg3QzRBOTEzNjBEMDExQzUzOTFDMTk2NEUwNzEzOUJEOTIyNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJnVzGB4DOG0aczOK0riQdSqUD 2XiyIJgG6Nxkv9JAzCK3mXnZRaHgn7bRJgdGjQ2q2EBwM7iSkTWlHqyS84jWleWG RKHlx+jf7Y/esZYJ/hAqPCEQg0HioV7bIfPlV5olLLkgSI0eHp29C2piGGlibDJC /kzrWyhNNoIy2D3A5FhEcA22x1YIhLxCHOsHIKJxI4SjJJy5nNAdF4+iSZaKjRB5 KNsS44IayqL1pZCmCJpqZnJoZPKneLa/O5B3OOB+fA98u6kNbNDKUxx0OWuk2bTN F/EmNGJrEx73sTSHMXF4j6Q5dcXQx7S9cVYVNKvHBsXf7O9e54jE0UQ1lIjhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuuh8SpE2DQEcU5HBlk4HE5vZIk8wHwYDVR0j BBgwFoAU1Wd++hNwhxHNr7Z9nEyPX/+ponEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Nzk2NTlhOS01NTA1LTQ5NGItYTAzYy02ZWJhY2ZhZGY5MzEvMC9ENTY3N0VGQTEz NzA4NzExQ0RBRkI2N0Q5QzRDOEY1RkZGQTlBMjcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU2NzdFRkExMzcwODcxMUNEQUZCNjdEOUM0QzhGNUZGRkE5 QTI3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc5NjU5YTktNTUwNS00OTRiLWEw M2MtNmViYWNmYWRmOTMxLzAvRDU2NzdFRkExMzcwODcxMUNEQUZCNjdEOUM0QzhG NUZGRkE5QTI3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH8xoCBKebXfW3kyrT7xrmT5Y5XZo90CHDYN /HvFyXCz/95zfE0ohFkFG1JwAeRN5EILFrSvUVHUpeqivE0mGEkh0aBEuj63+IA5 qc/+XbQJLH99ZOY3VsTGKCkZIilB6UTIMWzocz8//FKjZJHfVC0UPz75ZoJwk4+h jzhYZySVoodCeUlP0M5oViY+Haes0kmTWNfGKtoRZRp5L9QfadWxXux2FTF1c/IL kK0XXtG4gej5d3NQMuPwudK7ARSQqAU9+VhfF1ukVd51QTXpmv2gfXMCzLwyW6r1 WJLb2gEDdZLkqgrdH/Vsqaau+XqxaECIJBKeIg5iAmPGTeYpuD0= -----END CERTIFICATE-----Generated at Mon Jun 30 00:39:27 2025 by rpki-client