$ rpki-client -vvf repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft File: 5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft (raw, json) Hash identifier: tdj4y43KGOQNzWc9aYU8aOK8VhEJ5Owot+KXZ+feBrA= Subject key identifier: F1:21:3D:83:2F:A1:5F:67:6B:60:21:49:EF:28:42:81:88:B9:D8:0D Authority key identifier: 55:62:ED:3E:2B:75:AA:4C:E3:61:65:EE:02:F7:69:6C:CB:80:45:E1 Certificate issuer: /CN=5562ED3E2B75AA4CE36165EE02F7696CCB8045E1 Certificate serial: 11A42E57D5E61D35889F10F78647DBECB2844F7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft Manifest number: 032E Signing time: Sat 28 Jun 2025 09:31:58 +0000 Manifest this update: Sat 28 Jun 2025 09:26:58 +0000 Manifest next update: Tue 01 Jul 2025 10:50:58 +0000 Files and hashes: 1: 5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl (hash: vKvL5CaPkgtBOxYi8G5yQyDUM4FXwGq2NDBy15h+8aA=) 2: 3130332e3137322e33342e302f32332d3234203d3e203538383231.roa (hash: FHzMEbRY0GUv7uZMGg/BZG/YZusPXZ52OHFP1+MW/+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 10:50:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:a4:2e:57:d5:e6:1d:35:88:9f:10:f7:86:47:db:ec:b2:84:4f:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5562ED3E2B75AA4CE36165EE02F7696CCB8045E1 Validity Not Before: Jun 28 09:26:58 2025 GMT Not After : Jul 1 10:50:58 2025 GMT Subject: CN=F1213D832FA15F676B602149EF28428188B9D80D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:91:a4:58:86:84:0b:39:55:04:e1:6f:61:42: d3:dd:65:e0:6e:bd:b5:c6:39:13:d3:71:5b:9f:eb: 27:65:74:bc:71:d5:24:2e:a3:b3:2d:44:75:99:8c: 2c:50:7c:ce:4d:a9:62:88:e1:85:78:f4:fb:3c:bb: 8c:9c:09:d9:05:5e:e8:b1:cc:6b:e4:3e:26:72:1c: c4:6f:c7:5a:6b:ab:f8:0f:dd:8d:93:66:23:09:aa: 94:a7:6c:bf:6f:6f:a5:3b:12:41:11:93:0d:80:48: 47:3a:07:ca:f2:7a:8b:44:1d:e9:f7:a5:ff:fa:60: ea:cd:8d:41:27:fe:bd:03:8b:ac:25:52:de:2c:dc: 07:1b:a9:f6:8c:e9:56:51:c5:c6:b9:0b:c0:02:4d: 29:f0:3e:81:99:39:17:ce:d4:61:94:d3:e0:1f:7d: bc:c8:b8:d4:b8:cc:50:89:66:c3:b0:e3:81:45:76: ff:cf:0e:18:6c:6e:bf:81:c2:b9:be:de:6d:fc:ef: fd:6c:c5:8b:b9:d5:df:ba:4f:f4:93:dd:32:6b:19: df:15:25:85:dc:84:36:b0:05:7f:a7:0d:e8:22:f7: a1:0b:d3:a1:0a:bf:57:90:9b:da:ef:db:3b:5b:63: d6:76:55:94:4a:f0:c3:c9:32:2c:d9:a2:df:4a:55: c6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:21:3D:83:2F:A1:5F:67:6B:60:21:49:EF:28:42:81:88:B9:D8:0D X509v3 Authority Key Identifier: keyid:55:62:ED:3E:2B:75:AA:4C:E3:61:65:EE:02:F7:69:6C:CB:80:45:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:f4:9d:80:c4:d8:63:7b:ef:ef:55:81:c6:67:5b:60:8c:56: da:fd:56:13:d6:fd:a4:4f:06:5d:06:e8:07:90:08:51:f1:04: 92:7f:85:b9:57:d3:d6:9c:36:35:87:db:3b:5d:67:e2:5e:c7: 65:13:68:c3:34:48:a9:21:86:47:b5:be:66:47:11:e0:11:88: 66:1f:f1:b1:65:c1:01:39:88:89:22:a5:b2:28:19:82:b8:34: 1c:56:bb:00:8b:af:13:0d:24:d3:dd:c5:b3:ed:43:b4:6f:3e: ea:b4:eb:a0:0f:87:ef:65:96:49:4d:af:96:b6:64:8a:c8:ac: c8:11:2c:3a:a2:cc:7a:6a:6a:9f:4f:38:dd:62:9d:f7:a2:9c: f3:6a:16:1e:2d:b7:e2:71:4e:a8:4a:cf:09:09:5c:42:81:22: 1a:5f:a1:4e:90:40:6b:01:ce:ff:fb:04:13:f0:b1:78:9c:ec: ec:a8:95:17:0b:f4:9c:a9:43:1a:5e:07:93:af:92:c6:d9:10: 0b:e1:0e:dc:79:01:64:e4:19:f9:36:2e:61:80:03:5e:00:e2: c4:f9:1c:1f:ad:82:21:d8:f5:6b:2f:b6:c8:8a:ba:8a:17:e4: 46:fe:13:fe:0e:54:98:6d:7c:45:6e:13:f5:1e:38:50:d5:6f: 4c:d8:79:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEaQuV9XmHTWInxD3hkfb7LKET3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU2MkVEM0UyQjc1QUE0Q0UzNjE2NUVFMDJGNzY5NkND QjgwNDVFMTAeFw0yNTA2MjgwOTI2NThaFw0yNTA3MDExMDUwNThaMDMxMTAvBgNV BAMTKEYxMjEzRDgzMkZBMTVGNjc2QjYwMjE0OUVGMjg0MjgxODhCOUQ4MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrkaRYhoQLOVUE4W9hQtPdZeBu vbXGORPTcVuf6ydldLxx1SQuo7MtRHWZjCxQfM5NqWKI4YV49Ps8u4ycCdkFXuix zGvkPiZyHMRvx1prq/gP3Y2TZiMJqpSnbL9vb6U7EkERkw2ASEc6B8ryeotEHen3 pf/6YOrNjUEn/r0Di6wlUt4s3AcbqfaM6VZRxca5C8ACTSnwPoGZORfO1GGU0+Af fbzIuNS4zFCJZsOw44FFdv/PDhhsbr+Bwrm+3m387/1sxYu51d+6T/ST3TJrGd8V JYXchDawBX+nDegi96EL06EKv1eQm9rv2ztbY9Z2VZRK8MPJMizZot9KVcbjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8SE9gy+hX2drYCFJ7yhCgYi52A0wHwYDVR0j BBgwFoAUVWLtPit1qkzjYWXuAvdpbMuAReEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l N2EzZTkwYS0wMzNhLTRjOGQtOTA3Ny0wZGFmODA1MGZhOGIvMC81NTYyRUQzRTJC NzVBQTRDRTM2MTY1RUUwMkY3Njk2Q0NCODA0NUUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU2MkVEM0UyQjc1QUE0Q0UzNjE2NUVFMDJGNzY5NkNDQjgw NDVFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTdhM2U5MGEtMDMzYS00YzhkLTkw NzctMGRhZjgwNTBmYThiLzAvNTU2MkVEM0UyQjc1QUE0Q0UzNjE2NUVFMDJGNzY5 NkNDQjgwNDVFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADD0nYDE2GN77+9VgcZnW2CMVtr9VhPW/aRP Bl0G6AeQCFHxBJJ/hblX09acNjWH2ztdZ+Jex2UTaMM0SKkhhke1vmZHEeARiGYf 8bFlwQE5iIkipbIoGYK4NBxWuwCLrxMNJNPdxbPtQ7RvPuq066APh+9llklNr5a2 ZIrIrMgRLDqizHpqap9PON1infeinPNqFh4tt+JxTqhKzwkJXEKBIhpfoU6QQGsB zv/7BBPwsXic7OyolRcL9JypQxpeB5OvksbZEAvhDtx5AWTkGfk2LmGAA14A4sT5 HB+tgiHY9WsvtsiKuooX5Eb+E/4OVJhtfEVuE/UeOFDVb0zYeSs= -----END CERTIFICATE-----Generated at Sun Jun 29 18:09:06 2025 by rpki-client