$ rpki-client -vvf repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft File: B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft (raw, json) Hash identifier: 5oAgj7FaIYJoD1PoGLCf47vR49vQVQiNjFdWDcmrhZo= Subject key identifier: C7:CE:82:74:2B:FC:22:5D:E7:37:4C:3B:C1:CD:92:DF:60:1D:0C:D2 Authority key identifier: B5:CE:42:E3:87:51:41:D1:0E:D7:AD:1D:D1:8D:ED:DC:C4:E1:07:1E Certificate issuer: /CN=B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E Certificate serial: 3C1E53F7C221EF769E5E31B1FC11B825CB7F4CFA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft Manifest number: 04E2 Signing time: Sun 15 Jun 2025 01:22:07 +0000 Manifest this update: Sun 15 Jun 2025 01:17:07 +0000 Manifest next update: Wed 18 Jun 2025 05:59:07 +0000 Files and hashes: 1: B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl (hash: eHjXLAVEeBk3/YmwO57h6onql3Joo4FC9dH8aD0wxtQ=) 2: 3130332e38372e3230312e302f32342d3234203d3e203538333639.roa (hash: +T3Pt96JdYaCjZwslFQEnLh95PR6Wr1CkWYzNuxLhQk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 05:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:1e:53:f7:c2:21:ef:76:9e:5e:31:b1:fc:11:b8:25:cb:7f:4c:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E Validity Not Before: Jun 15 01:17:07 2025 GMT Not After : Jun 18 05:59:07 2025 GMT Subject: CN=C7CE82742BFC225DE7374C3BC1CD92DF601D0CD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:44:f1:4d:36:5f:1b:12:a8:ee:11:7f:15:91: 4f:20:49:b7:0b:3d:7b:1c:9f:a4:6e:8c:9d:a5:7e: b9:f1:d7:eb:83:ad:8e:ac:36:ac:0b:69:e1:39:fd: 23:79:b5:4c:53:96:e2:91:b3:8c:33:25:fe:26:51: 55:a0:48:fb:36:db:e9:91:14:9a:92:97:86:11:99: bb:e0:71:32:0a:c3:e9:54:3b:6d:b7:10:5a:81:95: 78:85:43:54:6e:54:ee:b0:0e:ae:8c:8a:76:93:a9: ab:07:35:e1:98:af:22:aa:17:60:52:0e:a7:21:4a: 24:9b:24:48:13:36:da:a4:81:70:8a:87:3d:82:ed: 2a:17:9d:54:70:69:43:82:98:5a:06:e6:31:7a:d0: c2:fb:6f:3a:d9:94:36:84:e1:45:f4:4a:9e:e7:15: 57:df:5a:9b:b3:2c:a4:f9:26:46:94:f4:d2:06:ee: d6:11:d7:59:e5:0d:4d:ea:95:01:db:5e:80:11:b8: d5:4d:73:c3:54:46:2c:9c:70:fc:5d:d2:e6:ae:42: b7:ae:a8:8b:ea:d0:55:06:e6:2a:f1:a7:9b:88:3c: d1:5a:91:8d:71:4e:a0:be:f9:b8:91:65:4f:d6:f8: 53:3d:c2:fb:70:b8:7b:35:c4:91:84:1e:19:f6:01: 5d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:CE:82:74:2B:FC:22:5D:E7:37:4C:3B:C1:CD:92:DF:60:1D:0C:D2 X509v3 Authority Key Identifier: keyid:B5:CE:42:E3:87:51:41:D1:0E:D7:AD:1D:D1:8D:ED:DC:C4:E1:07:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:35:d2:ea:fe:be:14:c1:b6:57:95:e0:d0:c2:8e:fb:40:75: cc:1f:49:18:97:c0:cb:2a:84:ff:9a:20:1c:4b:6e:f8:ae:f2: d7:78:7b:d3:09:32:2d:58:3c:32:42:a1:0e:cf:d8:03:e1:78: 12:f5:6b:03:f2:c7:53:78:d6:31:7a:ec:1f:ee:53:b4:c5:01: 86:6a:b6:21:74:97:f7:a6:79:c6:4e:2b:33:ef:e5:ed:b3:f2: b0:4a:d8:62:a1:ca:2c:87:53:7e:83:cb:e1:c3:6a:b8:c2:57: b9:7a:75:43:d1:8b:4f:c1:62:32:f9:62:2b:22:5a:bd:6f:96: 7d:a7:48:01:07:5f:ef:3b:d9:97:23:4e:89:c4:c4:44:9e:45: 82:15:e9:61:72:b0:02:5f:80:19:90:c4:54:95:21:75:6c:75: 06:97:81:bb:56:41:b0:34:03:69:3c:49:82:73:75:ff:03:3d: 1b:3d:cb:a6:45:12:24:19:17:62:27:fd:1f:0f:67:0e:f0:60: 00:e2:95:c1:fc:3b:66:8b:a4:3b:a3:88:3f:75:be:9c:ea:67: 28:40:75:7b:41:d9:18:8f:cf:00:3a:e7:b2:fc:83:9c:49:e4: 3d:09:9e:d8:03:58:a1:c5:e1:ef:10:c5:49:ce:09:77:6b:b2: 87:8e:f7:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPB5T98Ih73aeXjGx/BG4Jct/TPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVDRTQyRTM4NzUxNDFEMTBFRDdBRDFERDE4REVEREND NEUxMDcxRTAeFw0yNTA2MTUwMTE3MDdaFw0yNTA2MTgwNTU5MDdaMDMxMTAvBgNV BAMTKEM3Q0U4Mjc0MkJGQzIyNURFNzM3NEMzQkMxQ0Q5MkRGNjAxRDBDRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+RPFNNl8bEqjuEX8VkU8gSbcL PXscn6RujJ2lfrnx1+uDrY6sNqwLaeE5/SN5tUxTluKRs4wzJf4mUVWgSPs22+mR FJqSl4YRmbvgcTIKw+lUO223EFqBlXiFQ1RuVO6wDq6MinaTqasHNeGYryKqF2BS DqchSiSbJEgTNtqkgXCKhz2C7SoXnVRwaUOCmFoG5jF60ML7bzrZlDaE4UX0Sp7n FVffWpuzLKT5JkaU9NIG7tYR11nlDU3qlQHbXoARuNVNc8NURiyccPxd0uauQreu qIvq0FUG5irxp5uIPNFakY1xTqC++biRZU/W+FM9wvtwuHs1xJGEHhn2AV0tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx86CdCv8Il3nN0w7wc2S32AdDNIwHwYDVR0j BBgwFoAUtc5C44dRQdEO160d0Y3t3MThBx4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NGFjYzBkOC1iMGM0LTQ3MzctOWY0NC0yOWZmMzI0MWM3OWIvMC9CNUNFNDJFMzg3 NTE0MUQxMEVEN0FEMUREMThERUREQ0M0RTEwNzFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjVDRTQyRTM4NzUxNDFEMTBFRDdBRDFERDE4REVERENDNEUx MDcxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzRhY2MwZDgtYjBjNC00NzM3LTlm NDQtMjlmZjMyNDFjNzliLzAvQjVDRTQyRTM4NzUxNDFEMTBFRDdBRDFERDE4REVE RENDNEUxMDcxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA010ur+vhTBtleV4NDCjvtAdcwfSRiXwMsq hP+aIBxLbviu8td4e9MJMi1YPDJCoQ7P2APheBL1awPyx1N41jF67B/uU7TFAYZq tiF0l/emecZOKzPv5e2z8rBK2GKhyiyHU36Dy+HDarjCV7l6dUPRi0/BYjL5Yisi Wr1vln2nSAEHX+872ZcjTonExESeRYIV6WFysAJfgBmQxFSVIXVsdQaXgbtWQbA0 A2k8SYJzdf8DPRs9y6ZFEiQZF2In/R8PZw7wYADilcH8O2aLpDujiD91vpzqZyhA dXtB2RiPzwA657L8g5xJ5D0JntgDWKHF4e8QxUnOCXdrsoeO9+o= -----END CERTIFICATE-----Generated at Sun Jun 15 22:58:15 2025 by rpki-client