$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft File: B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft (raw, json) Hash identifier: 5HTuS1Jw1HzAgFXsoP8OKIOQsUb19+qN3OxZOsf1On4= Subject key identifier: 47:02:15:5B:D1:AC:4E:DC:C9:1C:45:75:80:A9:04:1C:B6:90:C0:6E Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA Certificate serial: 721C91DF194C316A24ECE7110088D0420D8CD826 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft Manifest number: 05A5 Signing time: Sat 14 Jun 2025 04:50:03 +0000 Manifest this update: Sat 14 Jun 2025 04:45:03 +0000 Manifest next update: Tue 17 Jun 2025 09:18:03 +0000 Files and hashes: 1: B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl (hash: 9DD8pKyQo0Ik31VZFFAK9/iuUi2IVeA1ld3rUUKueeQ=) 2: AS24203.roa (hash: iUUx6/7Vijwx93IUbiSye/ssw8bJSAcdA6IGTt4AxyQ=) 3: AS139994.roa (hash: F7hIwzPI2Ea9gB0Xp4Xk6YhQEbDGp6jagSlzZiZywSc=) 4: AS17885.roa (hash: +GO2dMXskkTZVI0G/x5c/tJuemAtakjNsz3wmOidFEQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 09:18:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:1c:91:df:19:4c:31:6a:24:ec:e7:11:00:88:d0:42:0d:8c:d8:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA Validity Not Before: Jun 14 04:45:03 2025 GMT Not After : Jun 17 09:18:03 2025 GMT Subject: CN=4702155BD1AC4EDCC91C457580A9041CB690C06E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6b:35:45:9f:9c:33:6d:33:57:a9:a7:3c:e3: 5d:fc:1c:77:0b:50:9b:d5:62:01:a2:08:37:f8:00: 37:fa:0a:90:fd:57:a6:e2:50:e5:ea:51:59:98:d7: 77:3f:31:c1:56:ff:c4:42:4c:0e:1d:06:54:3e:9f: 2e:87:af:77:6c:be:ab:d9:80:4a:5f:fc:94:bc:44: 51:bc:df:70:41:21:4e:2e:10:9c:c7:08:da:58:e3: c8:92:21:c7:69:4a:a0:73:fc:82:b2:13:9b:4b:7f: 34:9c:2d:2d:1c:ef:90:af:eb:5b:2b:4b:e3:fe:ff: d3:50:17:d7:ad:bf:19:b0:c7:fd:d9:19:4d:05:40: 53:a8:5c:da:5f:f2:df:f6:1a:17:67:eb:d4:eb:33: 95:fc:72:29:e2:30:95:7d:13:24:6a:1a:cb:b3:a2: 4c:6c:3d:0b:1f:e9:6b:9b:cb:3d:3f:02:b1:3e:51: 17:82:8d:18:65:a1:9c:74:c1:f4:da:dd:42:6c:7d: a1:c5:6b:e7:88:3b:2c:2d:af:2d:7e:0d:22:14:14: 75:88:78:c5:86:23:fb:43:21:00:ed:21:55:41:c7: d3:c1:32:5a:aa:af:3e:ad:02:90:d1:dd:e6:02:49: 90:a9:5b:77:c5:13:5f:2a:5d:78:17:7a:7d:5f:35: 1d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:02:15:5B:D1:AC:4E:DC:C9:1C:45:75:80:A9:04:1C:B6:90:C0:6E X509v3 Authority Key Identifier: keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:b4:04:1f:d9:a2:46:f8:1d:6d:8f:7c:b3:c0:c4:4c:33:6b: 54:04:93:b0:fc:57:31:d3:12:1e:18:fd:55:1d:a8:db:57:6a: 73:cd:fe:28:1f:da:e2:00:ab:b5:77:96:ea:71:21:dc:00:99: 39:5b:a6:4b:fb:0a:20:66:19:0a:61:83:0a:2c:f2:f2:d8:dd: 8d:0a:c4:c6:58:4f:81:3f:52:3f:cc:15:77:5f:7c:2a:81:63: 84:fb:bf:9b:92:35:64:a5:f4:cc:f1:78:86:36:c2:57:5a:c3: 49:f2:2c:47:b9:f7:97:fc:df:78:86:d0:f8:d8:90:dd:1f:bc: e7:d2:aa:a5:00:20:f5:2e:cb:0f:61:14:90:1b:9c:3f:1a:aa: 22:b1:39:6a:8e:2e:96:93:a0:f8:85:5a:e2:80:5d:0a:86:ec: 1a:0c:d3:48:eb:89:16:88:ce:c7:bf:66:31:15:ef:d1:98:a6: c6:41:6a:14:52:1b:08:d0:5d:fc:3c:ff:62:29:f6:a4:e4:96: 00:fd:af:68:be:8b:e7:12:11:fa:be:18:ba:1a:b6:c1:6e:3c: a7:46:0e:ee:18:95:39:4c:6b:bd:20:f7:67:a6:5d:dd:c3:f9: e4:6e:54:b5:6d:ad:c2:89:30:46:44:38:b0:7e:42:a9:65:19: 7c:de:cd:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUchyR3xlMMWok7OcRAIjQQg2M2CYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIw OTU2ODdEQTAeFw0yNTA2MTQwNDQ1MDNaFw0yNTA2MTcwOTE4MDNaMDMxMTAvBgNV BAMTKDQ3MDIxNTVCRDFBQzRFRENDOTFDNDU3NTgwQTkwNDFDQjY5MEMwNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFazVFn5wzbTNXqac84138HHcL UJvVYgGiCDf4ADf6CpD9V6biUOXqUVmY13c/McFW/8RCTA4dBlQ+ny6Hr3dsvqvZ gEpf/JS8RFG833BBIU4uEJzHCNpY48iSIcdpSqBz/IKyE5tLfzScLS0c75Cv61sr S+P+/9NQF9etvxmwx/3ZGU0FQFOoXNpf8t/2Ghdn69TrM5X8ciniMJV9EyRqGsuz okxsPQsf6Wubyz0/ArE+UReCjRhloZx0wfTa3UJsfaHFa+eIOywtry1+DSIUFHWI eMWGI/tDIQDtIVVBx9PBMlqqrz6tApDR3eYCSZCpW3fFE18qXXgXen1fNR2dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURwIVW9GsTtzJHEV1gKkEHLaQwG4wHwYDVR0j BBgwFoAUtJOlzr8J4QvDXZrCIR2v0glWh9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMC9CNDkzQTVDRUJG MDlFMTBCQzM1RDlBQzIyMTFEQUZEMjA5NTY4N0RBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIwOTU2 ODdEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzAvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFG RDIwOTU2ODdEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAO0BB/Zokb4HW2PfLPAxEwza1QEk7D8VzHT Eh4Y/VUdqNtXanPN/igf2uIAq7V3lupxIdwAmTlbpkv7CiBmGQphgwos8vLY3Y0K xMZYT4E/Uj/MFXdffCqBY4T7v5uSNWSl9MzxeIY2wldaw0nyLEe595f833iG0PjY kN0fvOfSqqUAIPUuyw9hFJAbnD8aqiKxOWqOLpaToPiFWuKAXQqG7BoM00jriRaI zse/ZjEV79GYpsZBahRSGwjQXfw8/2Ip9qTklgD9r2i+i+cSEfq+GLoatsFuPKdG Du4YlTlMa70g92emXd3D+eRuVLVtrcKJMEZEOLB+QqllGXzezZc= -----END CERTIFICATE-----Generated at Sun Jun 15 17:18:17 2025 by rpki-client