$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft File: C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft (raw, json) Hash identifier: 2KY7ZBO5VVzhuUjXO6HIDjtLUXHAvWXI2wEmYTN2T0A= Subject key identifier: E0:EA:16:2C:C9:04:7A:FD:3C:4A:1E:3A:F9:6D:1B:86:5D:EA:C8:42 Authority key identifier: C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D Certificate issuer: /CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D Certificate serial: 2E54B9F7406A1011B4EA73DFDA15217FEAEA6016 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft Manifest number: 04EB Signing time: Mon 30 Jun 2025 10:31:33 +0000 Manifest this update: Mon 30 Jun 2025 10:26:33 +0000 Manifest next update: Thu 03 Jul 2025 11:17:33 +0000 Files and hashes: 1: C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl (hash: 7TxY1DSwg0D/cuyD2Vkg4FEZuKxdNPkh6BXytsOuX3k=) 2: 3130332e3131322e3232332e302f32342d3234203d3e20313337333338.roa (hash: h9EnCBlEcC94GebgUJlWGKNfIlqkrzmaOBhnTq8r/5A=) 3: 323030313a6466343a626430303a3a2f34382d3438203d3e20313337333338.roa (hash: X0XuQCteFt44X9z4G5hv/Tll9L9Acd6wBAIKaiqJSfU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 11:17:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:54:b9:f7:40:6a:10:11:b4:ea:73:df:da:15:21:7f:ea:ea:60:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D Validity Not Before: Jun 30 10:26:33 2025 GMT Not After : Jul 3 11:17:33 2025 GMT Subject: CN=E0EA162CC9047AFD3C4A1E3AF96D1B865DEAC842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:26:ac:7e:9d:9f:f7:2a:20:e7:b6:e6:72:9e: df:ee:b3:99:da:aa:4c:67:d8:eb:b4:ad:5c:6d:e0: 66:a2:b6:14:10:6c:4a:8e:b3:9f:1d:98:6f:1e:c0: 5e:47:6b:b4:ca:72:8c:e1:cd:15:16:89:5c:9d:38: fe:07:23:61:bf:df:be:81:ac:d0:ca:11:4b:bd:68: 6b:91:13:19:6b:4e:3d:01:2e:bc:78:74:11:96:74: ee:38:92:7a:d6:d5:a7:83:87:57:f2:8f:79:c0:14: dc:61:68:d8:fa:8a:16:0d:14:35:35:38:8b:14:36: ec:f7:3e:06:72:68:3f:d8:b1:bc:47:40:45:7b:88: 6c:44:cf:20:8d:ca:c0:f5:5a:18:0a:58:ab:ca:94: 92:95:56:d6:01:c8:a9:62:0b:21:24:cb:f1:ec:94: 8f:b2:f5:20:03:02:57:40:7b:ea:02:6b:df:a1:50: 99:4c:fc:f7:c8:96:fb:e4:29:0f:f9:62:19:e7:12: e6:d8:18:79:ee:a5:cd:77:ab:05:ef:c9:0d:78:e5: 5f:a2:00:aa:41:21:96:34:96:0a:83:cd:bf:55:23: b9:d8:2c:39:30:8f:34:d3:4e:85:e2:eb:11:62:98: 9b:8a:5a:ff:72:54:a4:15:79:c9:86:f0:99:97:f2: ce:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:EA:16:2C:C9:04:7A:FD:3C:4A:1E:3A:F9:6D:1B:86:5D:EA:C8:42 X509v3 Authority Key Identifier: keyid:C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:5c:4b:f1:4e:15:8e:a3:85:1e:20:6c:7a:27:17:fb:39:a8: b0:e9:fd:19:c2:a4:15:ac:bd:28:4b:9b:65:81:33:8c:a4:c8: 31:50:19:7a:91:99:a9:c6:14:d9:19:64:ab:e7:47:8d:c1:88: 09:3e:aa:14:a4:c5:da:50:e3:e7:e9:e0:50:85:d9:67:fd:f6: 1f:13:06:c8:7f:cc:93:ee:96:64:15:1d:2a:79:66:56:8d:ed: bd:73:49:c1:fa:71:85:c7:b8:c9:45:da:f4:17:57:9d:72:69: eb:f9:fe:f3:5b:31:14:f0:16:24:48:3e:51:ca:7c:e0:f1:46: 4f:e3:0c:32:f6:c2:4d:6c:11:09:87:c8:e2:3f:0e:dc:48:22: 5d:22:2a:f3:8d:5b:eb:b5:5f:e7:97:c2:f8:67:9a:ca:9d:98: 4e:5d:fc:b0:29:0a:50:1a:43:ee:b5:b6:fa:62:5a:7c:ea:45: 78:49:8d:89:fa:a7:0e:c0:17:26:a2:62:a9:93:cb:45:d0:4d: a9:8f:00:f7:37:b1:c5:2d:96:85:dc:d1:27:7a:83:b3:5b:bb: 5c:a2:f9:e9:e8:2f:a2:9d:c0:d2:9a:a8:79:35:93:94:a2:d6: 39:0a:04:69:20:0a:5e:7d:d4:f5:4f:38:36:9f:89:e0:95:1d: 84:03:4c:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULlS590BqEBG06nPf2hUhf+rqYBYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZG MzA2OTQ1RDAeFw0yNTA2MzAxMDI2MzNaFw0yNTA3MDMxMTE3MzNaMDMxMTAvBgNV BAMTKEUwRUExNjJDQzkwNDdBRkQzQzRBMUUzQUY5NkQxQjg2NURFQUM4NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcJqx+nZ/3KiDntuZynt/us5na qkxn2Ou0rVxt4GaithQQbEqOs58dmG8ewF5Ha7TKcozhzRUWiVydOP4HI2G/376B rNDKEUu9aGuRExlrTj0BLrx4dBGWdO44knrW1aeDh1fyj3nAFNxhaNj6ihYNFDU1 OIsUNuz3PgZyaD/YsbxHQEV7iGxEzyCNysD1WhgKWKvKlJKVVtYByKliCyEky/Hs lI+y9SADAldAe+oCa9+hUJlM/PfIlvvkKQ/5YhnnEubYGHnupc13qwXvyQ145V+i AKpBIZY0lgqDzb9VI7nYLDkwjzTTToXi6xFimJuKWv9yVKQVecmG8JmX8s5PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4OoWLMkEev08Sh46+W0bhl3qyEIwHwYDVR0j BBgwFoAUxQlgLoSS4e8veiuZpMa/T/MGlF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmQ2ZDBkZi1jMjFlLTQ5MWMtYjExNi00YTFkOWEyYzc0YmUvMC9DNTA5NjAyRTg0 OTJFMUVGMkY3QTJCOTlBNEM2QkY0RkYzMDY5NDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZGMzA2 OTQ1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJkNmQwZGYtYzIxZS00OTFjLWIx MTYtNGExZDlhMmM3NGJlLzAvQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJG NEZGMzA2OTQ1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZcS/FOFY6jhR4gbHonF/s5qLDp/RnCpBWs vShLm2WBM4ykyDFQGXqRmanGFNkZZKvnR43BiAk+qhSkxdpQ4+fp4FCF2Wf99h8T Bsh/zJPulmQVHSp5ZlaN7b1zScH6cYXHuMlF2vQXV51yaev5/vNbMRTwFiRIPlHK fODxRk/jDDL2wk1sEQmHyOI/DtxIIl0iKvONW+u1X+eXwvhnmsqdmE5d/LApClAa Q+61tvpiWnzqRXhJjYn6pw7AFyaiYqmTy0XQTamPAPc3scUtloXc0Sd6g7Nbu1yi +enoL6KdwNKaqHk1k5Si1jkKBGkgCl591PVPODafieCVHYQDTFc= -----END CERTIFICATE-----Generated at Mon Jun 30 21:51:18 2025 by rpki-client