$ rpki-client -vvf repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft File: 923816C042C964B6465A7BA06B2D44BDAF28D827.mft (raw, json) Hash identifier: BI8pqSUO5Ed0CWyoab5wpjzSfEiGkhxKHsvtlR5reig= Subject key identifier: 3E:55:EB:73:55:6F:64:AB:7B:8D:34:76:C2:B9:F4:76:0A:4A:D4:C6 Authority key identifier: 92:38:16:C0:42:C9:64:B6:46:5A:7B:A0:6B:2D:44:BD:AF:28:D8:27 Certificate issuer: /CN=923816C042C964B6465A7BA06B2D44BDAF28D827 Certificate serial: 4F0115A8A70168B331437334397CE2956CB3031D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer Subject info access: rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft Manifest number: 01EA Signing time: Tue 17 Jun 2025 17:50:37 +0000 Manifest this update: Tue 17 Jun 2025 17:45:37 +0000 Manifest next update: Fri 20 Jun 2025 20:44:37 +0000 Files and hashes: 1: 923816C042C964B6465A7BA06B2D44BDAF28D827.crl (hash: Hq5nYgN7uj7gHD3QQuo9NPTpffrzLUJKsekYALCwcdA=) 2: 3130332e3138392e35392e302f32342d3234203d3e20313439373538.roa (hash: nbEpopwiojWgYGehW+g9TqMlbT1/tFwqFVAFzwn9bm8=) 3: 3130332e3138392e35382e302f32332d3234203d3e20313439373538.roa (hash: UeRCOjo57wOeUyYDJJ1YZ67dLYbNF8SefWTH/DR2yv8=) 4: 3130332e3138392e35382e302f32342d3234203d3e20313439373538.roa (hash: w12N/uYx27kZZwmhbBAPGCXLuSyR2+QhhurllIrq3Bc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.crl rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 20:44:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:01:15:a8:a7:01:68:b3:31:43:73:34:39:7c:e2:95:6c:b3:03:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923816C042C964B6465A7BA06B2D44BDAF28D827 Validity Not Before: Jun 17 17:45:37 2025 GMT Not After : Jun 20 20:44:37 2025 GMT Subject: CN=3E55EB73556F64AB7B8D3476C2B9F4760A4AD4C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:85:e3:6c:fe:a6:e3:c7:95:8f:aa:14:ef:66: d9:8b:e4:fd:a2:bb:97:d3:86:42:1e:6e:2d:70:7e: 15:4c:96:91:05:8e:9d:f9:82:c4:1b:80:f9:19:e6: bf:d2:4e:8a:7f:28:db:0c:ff:ec:a8:6e:70:12:aa: 2d:e9:ca:12:77:f3:7b:39:e6:32:ab:fe:17:f3:e4: aa:d5:26:be:14:61:81:82:ee:4e:1b:be:3f:59:7c: fc:5a:e7:a5:de:f9:ed:ce:6f:1f:81:cc:53:cc:17: 18:7d:bf:bc:de:c9:bb:f4:36:27:56:c4:70:51:64: 1a:c7:df:fa:cf:99:97:9b:26:db:9f:58:f1:f2:37: 62:eb:6d:c3:3c:52:21:75:3b:13:42:5f:08:d6:d2: 9e:ab:94:c0:a5:ee:f3:90:f1:01:08:8e:3e:17:f8: 82:cc:09:b5:66:64:60:75:c3:f4:12:2b:3d:b9:47: 2f:17:25:ab:7d:b8:ab:55:61:a1:f0:22:a2:c7:88: 11:b6:e6:77:87:31:d8:6d:dd:cd:f8:11:ec:9d:94: d7:b0:f2:d1:94:c3:75:69:4f:83:d1:3c:ed:cf:b9: 9b:0e:4d:90:81:f5:87:3c:fd:f7:be:86:54:bf:e3: fc:85:76:7c:fe:5d:56:5d:00:09:ce:50:07:b7:ce: 7e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:55:EB:73:55:6F:64:AB:7B:8D:34:76:C2:B9:F4:76:0A:4A:D4:C6 X509v3 Authority Key Identifier: keyid:92:38:16:C0:42:C9:64:B6:46:5A:7B:A0:6B:2D:44:BD:AF:28:D8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:13:55:2b:38:81:bc:82:c7:04:89:8d:fd:78:0a:44:8b:41: 7e:49:ed:f8:e1:53:f3:64:ea:76:7f:d3:03:99:be:ad:ff:90: 8f:13:57:9a:46:06:e8:6b:c6:76:53:31:5b:9e:ec:38:28:3a: 3e:8d:5d:48:aa:b2:f4:2d:a6:2c:a6:c4:b5:87:67:b9:db:e4: fb:b2:a9:9c:a8:59:fe:b2:ec:4f:f1:ff:70:19:30:69:f0:24: 44:3d:57:29:25:ec:ad:56:ed:a0:3f:be:32:5d:2f:8d:1b:b6: 72:1a:c0:d2:53:a5:c8:75:e6:b2:f6:95:0b:fe:60:0b:d0:8b: 4e:b2:41:77:cb:1f:66:da:7b:c0:29:96:de:33:81:b9:ea:10: a1:55:b4:cc:83:5d:dd:7e:db:26:34:45:05:e2:d0:c7:ab:ce: 44:31:5f:ca:4c:e2:9b:ad:07:de:5a:b3:55:8e:ad:15:3f:97: 8c:48:fd:96:99:30:d3:39:ff:1c:c4:ad:01:56:c3:c8:2a:fc: cb:52:35:b8:5c:59:c4:f4:cd:64:d8:ec:81:83:13:37:67:84: 04:37:90:3f:81:87:ca:66:66:25:dd:e6:e5:4c:6b:34:99:dd: 86:01:25:a2:45:80:28:19:0d:47:02:68:15:5d:39:5a:e7:3e: 94:da:cc:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTwEVqKcBaLMxQ3M0OXzilWyzAx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0QkRB RjI4RDgyNzAeFw0yNTA2MTcxNzQ1MzdaFw0yNTA2MjAyMDQ0MzdaMDMxMTAvBgNV BAMTKDNFNTVFQjczNTU2RjY0QUI3QjhEMzQ3NkMyQjlGNDc2MEE0QUQ0QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMheNs/qbjx5WPqhTvZtmL5P2i u5fThkIebi1wfhVMlpEFjp35gsQbgPkZ5r/STop/KNsM/+yobnASqi3pyhJ383s5 5jKr/hfz5KrVJr4UYYGC7k4bvj9ZfPxa56Xe+e3Obx+BzFPMFxh9v7zeybv0NidW xHBRZBrH3/rPmZebJtufWPHyN2LrbcM8UiF1OxNCXwjW0p6rlMCl7vOQ8QEIjj4X +ILMCbVmZGB1w/QSKz25Ry8XJat9uKtVYaHwIqLHiBG25neHMdht3c34EeydlNew 8tGUw3VpT4PRPO3PuZsOTZCB9Yc8/fe+hlS/4/yFdnz+XVZdAAnOUAe3zn49AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPlXrc1VvZKt7jTR2wrn0dgpK1MYwHwYDVR0j BBgwFoAUkjgWwELJZLZGWnugay1Eva8o2CcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MzdkZmI4OC1mYjUwLTQ4ZDEtYjkwZC1lNTI1MTAyZjRmNWUvMC85MjM4MTZDMDQy Qzk2NEI2NDY1QTdCQTA2QjJENDRCREFGMjhEODI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0QkRBRjI4 RDgyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTM3ZGZiODgtZmI1MC00OGQxLWI5 MGQtZTUyNTEwMmY0ZjVlLzAvOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0 QkRBRjI4RDgyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFITVSs4gbyCxwSJjf14CkSLQX5J7fjhU/Nk 6nZ/0wOZvq3/kI8TV5pGBuhrxnZTMVue7DgoOj6NXUiqsvQtpiymxLWHZ7nb5Puy qZyoWf6y7E/x/3AZMGnwJEQ9Vykl7K1W7aA/vjJdL40btnIawNJTpch15rL2lQv+ YAvQi06yQXfLH2bae8Aplt4zgbnqEKFVtMyDXd1+2yY0RQXi0MerzkQxX8pM4put B95as1WOrRU/l4xI/ZaZMNM5/xzErQFWw8gq/MtSNbhcWcT0zWTY7IGDEzdnhAQ3 kD+Bh8pmZiXd5uVMazSZ3YYBJaJFgCgZDUcCaBVdOVrnPpTazNQ= -----END CERTIFICATE-----Generated at Thu Jun 19 02:36:20 2025 by rpki-client