$ rpki-client -vvf repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft File: C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft (raw, json) Hash identifier: YJj3rFl73huZ2mWtzMZaZAekABwnU54qXa/qoFGfETE= Subject key identifier: 6C:57:E1:09:97:8C:C9:06:D5:60:22:A8:06:FB:9E:43:BF:21:1C:20 Authority key identifier: C2:5D:50:56:A6:9C:E0:D0:68:5B:AD:8E:48:F3:3A:4A:62:A5:C5:82 Certificate issuer: /CN=C25D5056A69CE0D0685BAD8E48F33A4A62A5C582 Certificate serial: 2AF570F5CD11E25ECD96F9471966D0BA06FF33C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft Manifest number: 04D4 Signing time: Sun 11 May 2025 01:21:08 +0000 Manifest this update: Sun 11 May 2025 01:16:08 +0000 Manifest next update: Wed 14 May 2025 02:16:08 +0000 Files and hashes: 1: 323430363a376263303a3a2f33322d3332203d3e20313431303737.roa (hash: xp7zh/qogSH8rCdWcuMKx0JZToEc8G2jBx1ZEnG9a9g=) 2: 3130332e3135362e31362e302f32332d3234203d3e20313431303737.roa (hash: xpg71b3kpnQSGJPj2sU9VopRbKel8YsV3A2Q00O2D1E=) 3: C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl (hash: LZCcwmxIF0p7XxOryMqd6G+ByBMBO0F7vRQnpie7Z3U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 02:16:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:f5:70:f5:cd:11:e2:5e:cd:96:f9:47:19:66:d0:ba:06:ff:33:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C25D5056A69CE0D0685BAD8E48F33A4A62A5C582 Validity Not Before: May 11 01:16:08 2025 GMT Not After : May 14 02:16:08 2025 GMT Subject: CN=6C57E109978CC906D56022A806FB9E43BF211C20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fd:83:03:81:82:ca:a4:f3:41:79:60:53:9e: 52:47:92:05:d5:ad:3a:71:c7:d5:6f:ad:d1:73:3d: bb:d7:65:f4:77:dd:2b:56:fd:4e:e1:e5:09:e6:b4: 18:34:69:3b:72:25:17:62:ff:f6:4e:46:ac:3c:98: f6:22:00:45:40:ca:8b:4a:66:37:80:fc:b0:da:ee: 9c:76:e1:48:e7:30:c6:9e:97:85:9c:2e:4c:a9:6a: 58:e8:02:e5:0c:49:d9:4e:08:c0:13:94:e6:4c:48: 86:2e:97:df:bf:38:54:ba:71:65:8a:3a:9c:16:54: 0e:58:fd:d8:d0:bb:68:c4:86:ce:2f:5d:4d:4b:45: 26:e5:3c:00:a0:a9:3f:93:22:71:77:56:f7:0b:96: 9e:9f:19:31:dd:f9:6f:18:3a:03:6d:e1:e6:b0:0f: 07:e1:1a:0c:0d:e7:8e:48:5e:5e:32:43:31:ba:d4: ec:ca:f5:ba:26:57:0d:30:57:e3:99:ba:44:b6:e6: ab:d3:7a:ac:5d:84:6b:93:f0:66:7f:22:19:3e:92: eb:a9:c6:26:03:be:38:dd:64:06:8f:fc:a8:50:be: 79:cf:38:da:e0:a8:bc:4e:2e:3e:3e:2f:98:9d:5d: df:c3:9f:a7:c9:7f:8f:e7:7b:37:4c:68:99:16:1e: 4e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:57:E1:09:97:8C:C9:06:D5:60:22:A8:06:FB:9E:43:BF:21:1C:20 X509v3 Authority Key Identifier: keyid:C2:5D:50:56:A6:9C:E0:D0:68:5B:AD:8E:48:F3:3A:4A:62:A5:C5:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ba:d4:3e:b7:02:a8:b2:5e:92:c2:33:f2:2b:a5:a1:25:2e: 22:94:fa:45:ed:5e:f1:37:c1:24:f2:c3:1f:d9:b3:35:4a:02: dc:a0:d0:09:54:b4:41:a1:c4:e8:2e:bb:45:e1:6e:61:67:2e: 8c:28:11:42:bd:55:a2:5f:c4:29:50:76:40:9c:16:71:e7:ee: 6d:86:88:e4:cb:22:c4:ec:6f:da:10:22:3e:b8:20:74:9a:aa: bb:a2:2e:06:0d:b6:d9:67:d0:f0:07:44:60:45:ac:0c:bc:20: 96:71:30:ab:b5:3f:8c:f7:80:8c:b3:b4:43:e0:e7:84:fe:ab: 53:33:61:64:88:c4:c7:16:2d:71:b4:90:42:c7:4e:8d:bb:f1: 16:56:e3:c4:9a:ff:df:5a:76:4f:40:ef:57:58:fb:3a:ee:b2: 72:6c:cf:f2:77:4a:06:ff:b8:1f:a8:cc:6a:c3:b7:87:79:78: 87:df:04:f7:f6:61:6f:32:03:19:de:6a:f2:55:c2:a8:65:4f: a6:ba:45:90:0e:fd:05:e6:5a:1d:61:c6:0b:2a:6f:24:8e:90: e7:3e:17:b7:53:35:5c:f1:ff:2a:79:24:d2:6d:fe:99:08:2d: 5c:ae:37:f1:4a:ab:58:45:e5:00:34:8d:03:48:fc:bc:1a:80: 18:9b:30:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKvVw9c0R4l7NlvlHGWbQugb/M8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNBNEE2 MkE1QzU4MjAeFw0yNTA1MTEwMTE2MDhaFw0yNTA1MTQwMjE2MDhaMDMxMTAvBgNV BAMTKDZDNTdFMTA5OTc4Q0M5MDZENTYwMjJBODA2RkI5RTQzQkYyMTFDMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk/YMDgYLKpPNBeWBTnlJHkgXV rTpxx9VvrdFzPbvXZfR33StW/U7h5QnmtBg0aTtyJRdi//ZORqw8mPYiAEVAyotK ZjeA/LDa7px24UjnMMael4WcLkypaljoAuUMSdlOCMATlOZMSIYul9+/OFS6cWWK OpwWVA5Y/djQu2jEhs4vXU1LRSblPACgqT+TInF3VvcLlp6fGTHd+W8YOgNt4eaw DwfhGgwN545IXl4yQzG61OzK9bomVw0wV+OZukS25qvTeqxdhGuT8GZ/Ihk+kuup xiYDvjjdZAaP/KhQvnnPONrgqLxOLj4+L5idXd/Dn6fJf4/nezdMaJkWHk7DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbFfhCZeMyQbVYCKoBvueQ78hHCAwHwYDVR0j BBgwFoAUwl1QVqac4NBoW62OSPM6SmKlxYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OTY0MDFlMy05ZjYyLTRiM2MtYmZmYi03ODMzNTVhZTY3NzAvMC9DMjVENTA1NkE2 OUNFMEQwNjg1QkFEOEU0OEYzM0E0QTYyQTVDNTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNBNEE2MkE1 QzU4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjk2NDAxZTMtOWY2Mi00YjNjLWJm ZmItNzgzMzU1YWU2NzcwLzAvQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNB NEE2MkE1QzU4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADy61D63AqiyXpLCM/IrpaElLiKU+kXtXvE3 wSTywx/ZszVKAtyg0AlUtEGhxOguu0XhbmFnLowoEUK9VaJfxClQdkCcFnHn7m2G iOTLIsTsb9oQIj64IHSaqruiLgYNttln0PAHRGBFrAy8IJZxMKu1P4z3gIyztEPg 54T+q1MzYWSIxMcWLXG0kELHTo278RZW48Sa/99adk9A71dY+zrusnJsz/J3Sgb/ uB+ozGrDt4d5eIffBPf2YW8yAxneavJVwqhlT6a6RZAO/QXmWh1hxgsqbySOkOc+ F7dTNVzx/yp5JNJt/pkILVyuN/FKq1hF5QA0jQNI/LwagBibMNk= -----END CERTIFICATE-----Generated at Mon May 12 07:23:45 2025 by rpki-client