$ rpki-client -vvf repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft File: 625D3D358DEFDD65359387A6A36775411462B4D4.mft (raw, json) Hash identifier: NJ+mQ1MtpHPXafblrDZA54lejeN5yEbly7IDl/WX1Eo= Subject key identifier: C5:F2:6F:87:E0:7A:84:87:DC:33:6A:84:FE:DE:95:12:0F:76:B3:8E Authority key identifier: 62:5D:3D:35:8D:EF:DD:65:35:93:87:A6:A3:67:75:41:14:62:B4:D4 Certificate issuer: /CN=625D3D358DEFDD65359387A6A36775411462B4D4 Certificate serial: 35F19C685D782EB2DC3132E9BD784B456A32E53D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/625D3D358DEFDD65359387A6A36775411462B4D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft Manifest number: 01F5 Signing time: Thu 08 May 2025 17:00:44 +0000 Manifest this update: Thu 08 May 2025 16:55:44 +0000 Manifest next update: Sun 11 May 2025 23:33:44 +0000 Files and hashes: 1: 625D3D358DEFDD65359387A6A36775411462B4D4.crl (hash: vPnIbwSkbhU034j+RW+k4xKnh2HYgZJLZxeeeLGfuak=) 2: 3130332e3138362e382e302f32332d3234203d3e20313339393737.roa (hash: 0fU+cgX2w2Seah8SyqIL5rp6DTz7LSKW3s4WYXiC+fA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.crl rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/625D3D358DEFDD65359387A6A36775411462B4D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 23:33:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:f1:9c:68:5d:78:2e:b2:dc:31:32:e9:bd:78:4b:45:6a:32:e5:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=625D3D358DEFDD65359387A6A36775411462B4D4 Validity Not Before: May 8 16:55:44 2025 GMT Not After : May 11 23:33:44 2025 GMT Subject: CN=C5F26F87E07A8487DC336A84FEDE95120F76B38E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:41:4f:c6:f1:37:1a:cc:a8:7d:69:a1:eb:e9: 28:5f:23:7d:e6:14:ba:ab:05:64:6f:0e:29:9e:5a: 6e:75:36:c7:01:05:8e:5d:8c:28:1e:c4:77:fa:c3: c0:ed:1d:80:57:d9:4e:a5:57:d1:41:31:71:74:e0: 2b:85:89:7d:5f:b3:9d:bd:d8:21:a4:a9:3e:14:c8: 83:1c:de:ca:67:20:52:d0:b1:93:2c:4e:9e:4e:e5: fb:b8:51:ae:2d:bf:7f:83:95:ee:63:72:d4:cf:8b: b0:13:d7:10:a4:17:9f:02:01:35:e7:16:dc:cd:0a: ee:d2:88:64:6a:00:30:8e:eb:9a:c4:93:71:9f:e1: 85:1c:78:16:58:80:d9:77:43:80:5e:e0:24:f3:d6: df:1f:cd:02:90:99:46:b6:7e:b0:cd:f6:af:91:2a: 05:3a:ca:ff:65:03:ae:81:7b:7c:d1:3c:6b:05:61: 63:02:bd:ad:f4:a2:3d:a9:53:50:d9:28:e8:e4:06: b2:76:35:5e:8f:8a:5d:79:71:bf:4e:53:a3:4b:9f: 2d:28:68:a8:97:3a:66:be:77:cb:ea:dc:2f:f0:d3: 40:2c:e8:09:41:fc:24:bc:0b:59:27:ff:b5:27:e1: 31:73:6e:d6:6e:ab:55:06:65:1a:69:de:f5:5a:57: cf:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F2:6F:87:E0:7A:84:87:DC:33:6A:84:FE:DE:95:12:0F:76:B3:8E X509v3 Authority Key Identifier: keyid:62:5D:3D:35:8D:EF:DD:65:35:93:87:A6:A3:67:75:41:14:62:B4:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/625D3D358DEFDD65359387A6A36775411462B4D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:a2:d0:26:6a:0a:f9:0b:94:19:0c:5a:e4:8b:17:da:f9:78: fc:98:70:1a:b4:a3:3f:6d:9a:8f:a7:70:66:2f:93:d4:0c:66: e5:78:73:c5:e3:c2:33:bc:73:7b:94:e1:24:40:38:b1:d0:04: bc:70:ff:09:df:f9:1f:a1:33:f7:92:0c:70:05:99:30:e5:d7: 69:bd:83:fa:ea:d6:b2:a4:a8:c8:e5:c6:7c:2f:fd:a8:53:23: c2:0f:c8:f0:76:2f:af:de:89:4a:fe:ed:2d:14:28:9d:43:c4: 90:c9:12:54:4b:41:3b:43:da:2b:8d:aa:81:f1:ea:05:82:b9: f6:e7:a1:0b:a3:05:48:16:7d:7d:16:d4:96:37:20:3d:05:10: 3f:28:67:39:67:9f:8c:30:0a:d1:76:68:a9:8a:4c:67:20:63: ea:1e:e5:63:79:03:b3:97:4b:c5:c9:fb:74:0c:16:71:fe:14: 5b:a2:c5:68:3f:d9:09:64:d1:30:1d:3b:b6:4f:23:f3:c4:88: 69:1b:59:21:e7:b3:d7:53:a4:92:38:ad:aa:75:ef:8b:72:6c: a7:18:5b:a7:aa:b9:67:50:3f:ec:20:a7:a7:fc:0e:57:e4:42: d5:ae:70:22:59:c2:49:73:39:cd:d9:de:36:a5:b2:21:f3:dd: d8:b7:96:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNfGcaF14LrLcMTLpvXhLRWoy5T0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI1RDNEMzU4REVGREQ2NTM1OTM4N0E2QTM2Nzc1NDEx NDYyQjRENDAeFw0yNTA1MDgxNjU1NDRaFw0yNTA1MTEyMzMzNDRaMDMxMTAvBgNV BAMTKEM1RjI2Rjg3RTA3QTg0ODdEQzMzNkE4NEZFREU5NTEyMEY3NkIzOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBQU/G8TcazKh9aaHr6ShfI33m FLqrBWRvDimeWm51NscBBY5djCgexHf6w8DtHYBX2U6lV9FBMXF04CuFiX1fs529 2CGkqT4UyIMc3spnIFLQsZMsTp5O5fu4Ua4tv3+Dle5jctTPi7AT1xCkF58CATXn FtzNCu7SiGRqADCO65rEk3Gf4YUceBZYgNl3Q4Be4CTz1t8fzQKQmUa2frDN9q+R KgU6yv9lA66Be3zRPGsFYWMCva30oj2pU1DZKOjkBrJ2NV6Pil15cb9OU6NLny0o aKiXOma+d8vq3C/w00As6AlB/CS8C1kn/7Un4TFzbtZuq1UGZRpp3vVaV88BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxfJvh+B6hIfcM2qE/t6VEg92s44wHwYDVR0j BBgwFoAUYl09NY3v3WU1k4emo2d1QRRitNQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZjNkNGRhOS0xODJmLTRhNzMtYTExMC00YzhiZmY4OTRmYmMvMC82MjVEM0QzNThE RUZERDY1MzU5Mzg3QTZBMzY3NzU0MTE0NjJCNEQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjI1RDNEMzU4REVGREQ2NTM1OTM4N0E2QTM2Nzc1NDExNDYy QjRENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWYzZDRkYTktMTgyZi00YTczLWEx MTAtNGM4YmZmODk0ZmJjLzAvNjI1RDNEMzU4REVGREQ2NTM1OTM4N0E2QTM2Nzc1 NDExNDYyQjRENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALii0CZqCvkLlBkMWuSLF9r5ePyYcBq0oz9t mo+ncGYvk9QMZuV4c8XjwjO8c3uU4SRAOLHQBLxw/wnf+R+hM/eSDHAFmTDl12m9 g/rq1rKkqMjlxnwv/ahTI8IPyPB2L6/eiUr+7S0UKJ1DxJDJElRLQTtD2iuNqoHx 6gWCufbnoQujBUgWfX0W1JY3ID0FED8oZzlnn4wwCtF2aKmKTGcgY+oe5WN5A7OX S8XJ+3QMFnH+FFuixWg/2Qlk0TAdO7ZPI/PEiGkbWSHns9dTpJI4rap174tybKcY W6equWdQP+wgp6f8DlfkQtWucCJZwklzOc3Z3jalsiHz3di3lto= -----END CERTIFICATE-----Generated at Fri May 9 03:33:40 2025 by rpki-client