$ rpki-client -vvf repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft File: 57D075B2873A1E1F844485DAAC774C656EB9A611.mft (raw, json) Hash identifier: SbLv1sFCP/c2XyVwVAmG32DcKooRsvkCmYXEB5cIXGw= Subject key identifier: F8:33:E6:75:3B:E6:92:09:01:C5:BE:A0:8E:E7:7F:E2:E4:1B:B4:A1 Authority key identifier: 57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11 Certificate issuer: /CN=57D075B2873A1E1F844485DAAC774C656EB9A611 Certificate serial: 1DC0F999EFB0D916843C34530FBF6535A2490BEF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft Manifest number: 0360 Signing time: Tue 06 May 2025 20:51:40 +0000 Manifest this update: Tue 06 May 2025 20:46:40 +0000 Manifest next update: Sat 10 May 2025 02:22:40 +0000 Files and hashes: 1: 3130332e39302e3235352e302f32342d3234203d3e20313338303836.roa (hash: CMIYNlZq2wW30QRZM8aVN94gnX6NjhrlvsnBm9PvN+0=) 2: 3130332e39302e3235322e302f32342d3234203d3e203338343936.roa (hash: N91VkEyIONXI8YjWF6UzPMS2HMBAziqn1kBl9mmK1M4=) 3: 3130332e39302e3235342e302f32342d3234203d3e203338343936.roa (hash: iMulVgKCxwqPFbAFOeAzE5yh4tPkiOrz17ayjx5bBCI=) 4: 57D075B2873A1E1F844485DAAC774C656EB9A611.crl (hash: hDq6pV9LyABICGn1zm+EGt2H2MjJb2OXIlsaIAGMKts=) 5: 3130332e39302e3235332e302f32342d3234203d3e203338343936.roa (hash: VfuZSouZTsq571ghIBuDI0RvCeUniEkqt+AyLLYswCI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 02:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:c0:f9:99:ef:b0:d9:16:84:3c:34:53:0f:bf:65:35:a2:49:0b:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57D075B2873A1E1F844485DAAC774C656EB9A611 Validity Not Before: May 6 20:46:40 2025 GMT Not After : May 10 02:22:40 2025 GMT Subject: CN=F833E6753BE6920901C5BEA08EE77FE2E41BB4A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a8:51:d4:3b:73:20:ed:0f:22:fb:37:ca:88: 88:f4:3e:23:94:fd:bc:30:69:3d:bf:18:97:0a:a5: d9:0b:84:46:63:c1:fa:02:b9:ad:28:db:24:2e:4f: c0:46:8d:dc:40:e4:fb:f3:e1:73:54:e7:69:68:04: 7b:75:3e:24:ae:a1:4a:c5:39:b4:ce:1b:36:22:3d: 92:78:b6:fa:44:d7:11:b8:3b:02:1b:4a:ae:30:f9: 84:45:07:28:6d:39:70:85:04:70:a1:7b:43:e0:c6: 57:d2:49:b7:9c:9b:1e:9f:e2:16:d9:79:9b:38:ea: 85:9b:96:09:d7:65:9a:79:8e:06:05:69:87:06:e3: e8:f9:ca:94:b3:3a:6e:dc:24:29:cf:d3:fe:e7:8d: a5:77:c9:c2:b9:31:d2:1b:10:84:af:99:b2:d4:12: 2b:96:2a:fc:dc:36:ea:ab:31:09:44:c4:19:38:a3: 7e:e5:ed:79:96:20:73:cd:b0:15:0d:8a:45:96:19: 16:66:76:55:60:c9:37:08:b7:b2:ab:86:2b:68:27: 6f:60:29:14:13:49:ac:2a:4d:93:d4:f0:55:bd:5a: 16:d0:c2:ca:21:62:09:1d:4b:38:c1:58:a4:16:2e: 2f:1e:e6:1c:c6:43:f9:12:29:2b:90:db:ae:b1:5b: 35:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:33:E6:75:3B:E6:92:09:01:C5:BE:A0:8E:E7:7F:E2:E4:1B:B4:A1 X509v3 Authority Key Identifier: keyid:57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:df:2b:59:8b:2d:95:19:9b:2c:24:79:6d:d6:cf:12:3c:25: 76:51:fb:f2:1b:9e:b0:45:65:9f:5c:c9:e4:f5:a9:48:93:6d: 1a:d6:9b:19:8a:e1:70:52:33:46:08:ec:7c:e1:40:34:3c:3f: c1:ea:b7:13:89:bb:7e:ed:01:ac:e6:75:13:df:0c:34:df:3a: ff:6d:c8:3b:a2:02:cf:2a:63:be:dd:0e:0a:9c:ca:ec:c7:c6: f5:6c:56:40:11:cf:06:9f:e9:f9:b3:ac:f1:36:a3:87:01:10: 3d:02:34:74:90:7c:ee:c8:a8:42:9e:28:ad:8c:ed:81:41:48: af:25:ae:7f:f5:9c:e5:c7:db:43:d7:2e:98:31:84:6e:82:97: e1:42:e1:af:b2:64:2e:9d:bb:6b:26:16:dd:1c:35:7f:5c:20: 34:5b:47:06:66:af:08:58:5c:c1:57:0a:e4:ea:42:39:b7:08: 82:cb:48:55:40:5d:c3:85:c0:b1:18:a4:bb:b9:07:25:f1:0e: 84:45:0a:f9:fe:8e:70:df:87:73:88:b9:c7:40:0f:66:17:59: 92:e1:e7:95:25:99:45:fc:d5:02:48:bd:98:10:b2:65:17:56: 2d:da:d4:e6:45:d6:45:b8:85:16:af:33:34:bb:26:4a:30:86: 68:bd:43:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHcD5me+w2RaEPDRTD79lNaJJC+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRDNjU2 RUI5QTYxMTAeFw0yNTA1MDYyMDQ2NDBaFw0yNTA1MTAwMjIyNDBaMDMxMTAvBgNV BAMTKEY4MzNFNjc1M0JFNjkyMDkwMUM1QkVBMDhFRTc3RkUyRTQxQkI0QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWqFHUO3Mg7Q8i+zfKiIj0PiOU /bwwaT2/GJcKpdkLhEZjwfoCua0o2yQuT8BGjdxA5Pvz4XNU52loBHt1PiSuoUrF ObTOGzYiPZJ4tvpE1xG4OwIbSq4w+YRFByhtOXCFBHChe0PgxlfSSbecmx6f4hbZ eZs46oWblgnXZZp5jgYFaYcG4+j5ypSzOm7cJCnP0/7njaV3ycK5MdIbEISvmbLU EiuWKvzcNuqrMQlExBk4o37l7XmWIHPNsBUNikWWGRZmdlVgyTcIt7KrhitoJ29g KRQTSawqTZPU8FW9WhbQwsohYgkdSzjBWKQWLi8e5hzGQ/kSKSuQ266xWzUrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+DPmdTvmkgkBxb6gjud/4uQbtKEwHwYDVR0j BBgwFoAUV9B1soc6Hh+ERIXarHdMZW65phEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Nzc0YjE4Yy1mMjYzLTRmZTEtOGRmOC0xZTdjNjhiZmJlZmMvMC81N0QwNzVCMjg3 M0ExRTFGODQ0NDg1REFBQzc3NEM2NTZFQjlBNjExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRDNjU2RUI5 QTYxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc3NGIxOGMtZjI2My00ZmUxLThk ZjgtMWU3YzY4YmZiZWZjLzAvNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRD NjU2RUI5QTYxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEDfK1mLLZUZmywkeW3WzxI8JXZR+/IbnrBF ZZ9cyeT1qUiTbRrWmxmK4XBSM0YI7HzhQDQ8P8HqtxOJu37tAazmdRPfDDTfOv9t yDuiAs8qY77dDgqcyuzHxvVsVkARzwaf6fmzrPE2o4cBED0CNHSQfO7IqEKeKK2M 7YFBSK8lrn/1nOXH20PXLpgxhG6Cl+FC4a+yZC6du2smFt0cNX9cIDRbRwZmrwhY XMFXCuTqQjm3CILLSFVAXcOFwLEYpLu5ByXxDoRFCvn+jnDfh3OIucdAD2YXWZLh 55UlmUX81QJIvZgQsmUXVi3a1OZF1kW4hRavMzS7Jkowhmi9Q/Y= -----END CERTIFICATE-----Generated at Thu May 8 01:04:38 2025 by rpki-client