$ rpki-client -vvf repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.mft File: B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.mft (raw, json) Hash identifier: UwEwa2wEOjlZoHTgjhEa8Wv0ZtQSqsVpWDPZUM10dJs= Subject key identifier: 87:AE:D8:A0:29:AC:C5:7C:C1:85:41:F4:66:0E:38:26:69:DF:8F:EA Authority key identifier: B6:05:D7:1F:EB:5A:1D:BE:56:76:CF:AC:B3:94:AB:BA:37:C8:3A:86 Certificate issuer: /CN=B605D71FEB5A1DBE5676CFACB394ABBA37C83A86 Certificate serial: 39632DFCF2A214207E75E5BC4FDF3E3141945E3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.mft Manifest number: 04CC Signing time: Mon 28 Apr 2025 22:32:00 +0000 Manifest this update: Mon 28 Apr 2025 22:27:00 +0000 Manifest next update: Fri 02 May 2025 00:27:00 +0000 Files and hashes: 1: 3130332e3132342e3139382e302f32342d3234203d3e20313338303936.roa (hash: Rs2LdPlJkRtY48YBQsSB1PkyaTPuQCoT8BnR3pXDUfE=) 2: 3130332e3132342e3139392e302f32342d3234203d3e20313338303936.roa (hash: Vnxacb9Ryj3SY137JUksTvso7E68k0q/uP2DhHBSCls=) 3: 3130332e3132342e3139372e302f32342d3234203d3e20313338303936.roa (hash: 7FAJxsuBrko15cCX6rd5HfkQZUmVq0x0cSMeG2DacCw=) 4: 323430333a653434303a3a2f33322d3332203d3e20313338303936.roa (hash: UjLhith7bY1e6MNaMaA8cP+v0+Avg21heUdRvJmZjew=) 5: 3130332e3132342e3139362e302f32342d3234203d3e20313338303936.roa (hash: eyOS6EI1iQWOhBljWWV1tcTrVXzx7wFJroUL904PusY=) 6: B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.crl (hash: VFKz+UBW6O5hPk4aZKFfzRsV2nOo+7xE8/WjI8PO7NA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.crl rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:63:2d:fc:f2:a2:14:20:7e:75:e5:bc:4f:df:3e:31:41:94:5e:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B605D71FEB5A1DBE5676CFACB394ABBA37C83A86 Validity Not Before: Apr 28 22:27:00 2025 GMT Not After : May 2 00:27:00 2025 GMT Subject: CN=87AED8A029ACC57CC18541F4660E382669DF8FEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5d:09:aa:83:b0:ea:86:a2:f7:36:78:b9:b3: 19:2e:ca:82:77:43:e5:e9:bf:7f:bc:40:f3:10:7e: 3f:1e:b0:67:7f:be:c1:66:e3:bf:8a:e3:a9:cd:16: d7:91:ae:f3:06:37:68:0a:34:40:a5:3e:01:52:77: 0b:cc:13:e2:40:f0:77:58:be:c8:6d:3f:c7:36:eb: 3e:e5:dc:df:50:4f:8c:77:b3:f7:cb:63:06:2e:e0: 7d:0e:68:21:9d:fb:c1:51:b5:8d:15:0c:7f:1a:de: e3:32:a6:2d:a7:03:d1:e4:27:e0:ef:b3:6d:fe:91: e4:f2:58:2e:e4:c7:e8:b5:da:49:58:12:fd:25:50: 55:8f:e0:27:94:9f:d5:f2:51:cb:1d:63:8e:dd:55: d1:03:65:cc:3c:a5:0a:42:e5:70:6c:50:cf:9c:e5: 4b:50:4e:97:c5:1a:de:71:36:f8:5a:52:a1:4c:ce: f9:57:17:0b:40:e2:c4:cb:0b:48:b5:2f:1c:75:4f: 28:89:b9:3e:38:54:9b:47:58:f2:df:cf:93:32:48: 31:e2:dc:5b:71:c3:71:ec:2f:fe:40:ae:fd:2f:46: 0c:92:5b:68:89:45:3d:59:f8:ec:ec:f8:c8:d9:70: 05:80:35:ed:5a:d1:5a:86:77:9c:a1:04:f5:11:e2: 49:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:AE:D8:A0:29:AC:C5:7C:C1:85:41:F4:66:0E:38:26:69:DF:8F:EA X509v3 Authority Key Identifier: keyid:B6:05:D7:1F:EB:5A:1D:BE:56:76:CF:AC:B3:94:AB:BA:37:C8:3A:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:a4:0b:ac:47:2b:50:09:dc:10:93:fe:ae:66:44:d5:b3:2f: a6:20:d1:8a:a0:4d:f9:e0:08:c3:a5:d9:cf:18:07:1f:32:43: 4a:70:c2:b8:37:93:34:a9:5e:4b:ff:2d:fc:f9:c1:9d:7c:22: 3a:07:ca:59:24:76:dd:b5:62:06:a1:31:b2:bd:67:fa:6b:48: e7:86:29:90:33:56:a4:33:7d:5f:2f:19:30:e6:47:d9:5f:f1: b3:d9:71:7e:3e:f7:35:a6:87:95:84:0b:d5:74:04:04:b1:2c: 35:30:e6:e0:6d:5d:18:39:6c:63:ef:bc:8f:6f:23:ed:ed:7e: 2b:d2:61:66:8f:01:f6:04:41:99:56:b2:31:52:aa:9d:71:8d: ab:89:e2:6f:3f:04:95:d4:6f:0f:33:44:5f:2f:db:5b:ec:b1: b0:38:73:35:07:2a:fd:fd:57:9d:df:3a:68:a1:11:48:d6:ab: 38:1d:f0:71:27:16:9d:2e:53:e8:78:42:fe:c4:28:69:06:9c: 78:41:0c:b3:61:53:e8:b1:3b:af:b9:61:aa:15:ab:ae:ef:01: ec:60:43:1c:ff:69:62:d1:81:45:3e:0d:d5:22:6f:cb:44:b6: f1:e7:35:57:9b:b1:ca:f0:26:5c:cd:8b:94:67:91:4d:0c:4d: 67:4f:fc:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOWMt/PKiFCB+deW8T98+MUGUXjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYwNUQ3MUZFQjVBMURCRTU2NzZDRkFDQjM5NEFCQkEz N0M4M0E4NjAeFw0yNTA0MjgyMjI3MDBaFw0yNTA1MDIwMDI3MDBaMDMxMTAvBgNV BAMTKDg3QUVEOEEwMjlBQ0M1N0NDMTg1NDFGNDY2MEUzODI2NjlERjhGRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBXQmqg7DqhqL3Nni5sxkuyoJ3 Q+Xpv3+8QPMQfj8esGd/vsFm47+K46nNFteRrvMGN2gKNEClPgFSdwvME+JA8HdY vshtP8c26z7l3N9QT4x3s/fLYwYu4H0OaCGd+8FRtY0VDH8a3uMypi2nA9HkJ+Dv s23+keTyWC7kx+i12klYEv0lUFWP4CeUn9XyUcsdY47dVdEDZcw8pQpC5XBsUM+c 5UtQTpfFGt5xNvhaUqFMzvlXFwtA4sTLC0i1Lxx1TyiJuT44VJtHWPLfz5MySDHi 3Ftxw3HsL/5Arv0vRgySW2iJRT1Z+Ozs+MjZcAWANe1a0VqGd5yhBPUR4kkbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh67YoCmsxXzBhUH0Zg44Jmnfj+owHwYDVR0j BBgwFoAUtgXXH+taHb5Wds+ss5SrujfIOoYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NWRmZjliMy05MDQxLTRkZDYtYjdhYi0wMjA2MGQ2NWQwOWEvMC9CNjA1RDcxRkVC NUExREJFNTY3NkNGQUNCMzk0QUJCQTM3QzgzQTg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjYwNUQ3MUZFQjVBMURCRTU2NzZDRkFDQjM5NEFCQkEzN0M4 M0E4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDVkZmY5YjMtOTA0MS00ZGQ2LWI3 YWItMDIwNjBkNjVkMDlhLzAvQjYwNUQ3MUZFQjVBMURCRTU2NzZDRkFDQjM5NEFC QkEzN0M4M0E4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADOkC6xHK1AJ3BCT/q5mRNWzL6Yg0YqgTfng CMOl2c8YBx8yQ0pwwrg3kzSpXkv/Lfz5wZ18IjoHylkkdt21YgahMbK9Z/prSOeG KZAzVqQzfV8vGTDmR9lf8bPZcX4+9zWmh5WEC9V0BASxLDUw5uBtXRg5bGPvvI9v I+3tfivSYWaPAfYEQZlWsjFSqp1xjauJ4m8/BJXUbw8zRF8v21vssbA4czUHKv39 V53fOmihEUjWqzgd8HEnFp0uU+h4Qv7EKGkGnHhBDLNhU+ixO6+5YaoVq67vAexg Qxz/aWLRgUU+DdUib8tEtvHnNVebscrwJlzNi5RnkU0MTWdP/Es= -----END CERTIFICATE-----Generated at Wed Apr 30 00:07:29 2025 by rpki-client