$ rpki-client -vvf repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft File: 289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft (raw, json) Hash identifier: +r3YQw3bVVIf+Q21KqXekwyJJpl4h0nFCo2hdghae94= Subject key identifier: 98:84:6C:D1:77:44:70:9B:4F:DB:25:AB:F5:65:00:31:58:7B:8E:7C Authority key identifier: 28:91:51:EF:8A:E8:A7:9D:8F:42:66:83:D1:52:5A:D8:2F:AB:3D:5C Certificate issuer: /CN=289151EF8AE8A79D8F426683D1525AD82FAB3D5C Certificate serial: 3255E318A1906B78E89A06C9DD0B4B9EE4AC2834 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft Manifest number: 014A Signing time: Sun 15 Jun 2025 13:31:40 +0000 Manifest this update: Sun 15 Jun 2025 13:26:40 +0000 Manifest next update: Wed 18 Jun 2025 22:05:40 +0000 Files and hashes: 1: 323030313a6466313a633263303a3a2f34382d3438203d3e20313439393039.roa (hash: 6LOGBCF5zTr7iAtxuc25TGgWiHmJgXAtcLTxMujO3no=) 2: 3130332e3139312e35382e302f32332d3234203d3e20313439393039.roa (hash: uLA8drzoTGDdLRLknWkZIaOJdJxpC+UKHzjWLF3FpOA=) 3: 289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl (hash: 1388MIbu5xUwhthjlrYKMXYzX/L0lTV0RVKCe1M4v5A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:55:e3:18:a1:90:6b:78:e8:9a:06:c9:dd:0b:4b:9e:e4:ac:28:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=289151EF8AE8A79D8F426683D1525AD82FAB3D5C Validity Not Before: Jun 15 13:26:40 2025 GMT Not After : Jun 18 22:05:40 2025 GMT Subject: CN=98846CD17744709B4FDB25ABF5650031587B8E7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:09:28:60:36:bf:a1:fc:59:13:72:1b:af:5f: 04:51:75:9e:22:69:f4:c1:9b:84:9b:96:65:a4:b0: ec:f9:e7:a8:7f:38:86:a7:6d:15:98:c8:86:f8:13: 30:da:4f:5e:e7:1f:19:e0:b1:e4:7b:11:c2:52:38: 27:cd:ca:c0:30:9e:44:79:8e:9c:b9:2f:55:66:4e: fb:b8:3f:18:04:5e:6a:31:02:fe:90:6e:07:e6:36: c6:36:41:c1:ff:5e:1f:5e:8d:b2:bd:e4:5f:55:4e: 31:51:03:63:30:08:78:9c:f2:06:84:31:8b:98:16: 28:1a:c1:a9:ae:96:d0:e2:34:91:c5:de:48:46:da: 69:b3:57:08:a9:44:d7:1a:6a:45:75:08:16:c0:f5: a8:61:70:fd:fd:8d:61:8b:64:35:fb:1b:89:28:1b: 25:42:21:d1:48:aa:24:d6:96:c3:ea:71:cb:10:a5: ce:dc:00:09:8c:34:68:6f:a5:30:4a:dd:ea:5b:f8: 1b:e5:95:18:c1:88:b2:9e:ac:fa:e7:ee:ce:af:75: 99:40:1a:15:a1:e1:e3:7f:e2:0a:b9:8d:4f:68:5f: 4f:e5:7b:2f:97:7f:99:f6:d2:e8:1f:86:10:c7:4f: 47:a3:26:82:a2:49:38:85:ab:6c:b8:c4:8d:40:51: c3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:84:6C:D1:77:44:70:9B:4F:DB:25:AB:F5:65:00:31:58:7B:8E:7C X509v3 Authority Key Identifier: keyid:28:91:51:EF:8A:E8:A7:9D:8F:42:66:83:D1:52:5A:D8:2F:AB:3D:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:5d:5a:c8:75:55:a0:12:e7:e7:c4:36:f1:e4:91:28:6a:20: d4:36:0e:4d:40:6c:a5:3e:e6:48:b7:45:34:dc:16:d1:b5:1a: 63:eb:7c:34:24:3b:ed:c0:04:76:97:52:c5:23:d6:fe:f9:ed: 55:f7:6b:93:3e:ee:73:ea:4c:85:e6:29:97:6b:1d:ff:26:0d: fa:b1:36:c9:f8:83:ed:3c:f5:86:cd:74:d8:9a:6a:69:0d:2e: 2c:fb:cb:75:30:c8:fc:a5:f0:14:ca:85:97:1a:8a:2f:61:95: 85:96:c5:e7:67:5e:0c:ea:50:d9:a8:71:5b:97:7b:a3:65:96: 0f:9b:54:87:ce:de:fc:4f:af:19:ff:35:f6:cf:f1:ea:0d:4d: 87:56:04:fd:66:07:c6:7a:44:84:9d:60:3c:51:a7:a2:a2:7b: bd:52:f1:24:ca:35:4a:5a:6c:fc:17:6f:e6:47:99:ff:c2:6a: 85:35:13:b8:26:17:72:b4:84:fa:f6:58:66:7d:c0:8a:e5:19: 9b:cf:f6:24:cb:0b:65:32:18:22:db:93:fa:d7:28:dc:c3:79: ca:2f:a3:93:33:02:d6:ae:bc:ff:5e:b9:63:c6:bd:59:32:6f: 28:c7:9b:1e:d7:af:0e:1c:9a:a5:11:f0:93:35:37:1f:6b:ed: c3:96:74:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMlXjGKGQa3jomgbJ3QtLnuSsKDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5MTUxRUY4QUU4QTc5RDhGNDI2NjgzRDE1MjVBRDgy RkFCM0Q1QzAeFw0yNTA2MTUxMzI2NDBaFw0yNTA2MTgyMjA1NDBaMDMxMTAvBgNV BAMTKDk4ODQ2Q0QxNzc0NDcwOUI0RkRCMjVBQkY1NjUwMDMxNTg3QjhFN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2CShgNr+h/FkTchuvXwRRdZ4i afTBm4SblmWksOz556h/OIanbRWYyIb4EzDaT17nHxngseR7EcJSOCfNysAwnkR5 jpy5L1VmTvu4PxgEXmoxAv6QbgfmNsY2QcH/Xh9ejbK95F9VTjFRA2MwCHic8gaE MYuYFigawamultDiNJHF3khG2mmzVwipRNcaakV1CBbA9ahhcP39jWGLZDX7G4ko GyVCIdFIqiTWlsPqccsQpc7cAAmMNGhvpTBK3epb+BvllRjBiLKerPrn7s6vdZlA GhWh4eN/4gq5jU9oX0/ley+Xf5n20ugfhhDHT0ejJoKiSTiFq2y4xI1AUcPNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmIRs0XdEcJtP2yWr9WUAMVh7jnwwHwYDVR0j BBgwFoAUKJFR74rop52PQmaD0VJa2C+rPVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YmJlNjgxNS0zMTBlLTQyMDYtYTUwMC02YmI5ZDMyNjNhYmYvMC8yODkxNTFFRjhB RThBNzlEOEY0MjY2ODNEMTUyNUFEODJGQUIzRDVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg5MTUxRUY4QUU4QTc5RDhGNDI2NjgzRDE1MjVBRDgyRkFC M0Q1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmJiZTY4MTUtMzEwZS00MjA2LWE1 MDAtNmJiOWQzMjYzYWJmLzAvMjg5MTUxRUY4QUU4QTc5RDhGNDI2NjgzRDE1MjVB RDgyRkFCM0Q1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAExdWsh1VaAS5+fENvHkkShqINQ2Dk1AbKU+ 5ki3RTTcFtG1GmPrfDQkO+3ABHaXUsUj1v757VX3a5M+7nPqTIXmKZdrHf8mDfqx Nsn4g+089YbNdNiaamkNLiz7y3UwyPyl8BTKhZcaii9hlYWWxednXgzqUNmocVuX e6Nllg+bVIfO3vxPrxn/NfbP8eoNTYdWBP1mB8Z6RISdYDxRp6Kie71S8STKNUpa bPwXb+ZHmf/CaoU1E7gmF3K0hPr2WGZ9wIrlGZvP9iTLC2UyGCLbk/rXKNzDecov o5MzAtauvP9euWPGvVkybyjHmx7Xrw4cmqUR8JM1Nx9r7cOWdDM= -----END CERTIFICATE-----Generated at Sun Jun 15 15:26:26 2025 by rpki-client