$ rpki-client -vvf repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft File: 94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft (raw, json) Hash identifier: hCp06iAgV8HhPGrQh0C33Ra84viOfDRNZyNspEVhj+Y= Subject key identifier: 50:5C:3D:FD:F4:0C:A2:59:F8:09:20:A9:3A:7E:A4:7B:26:8F:C3:4F Authority key identifier: 94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83 Certificate issuer: /CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383 Certificate serial: 08F85CB44C8F5D0AC6D15BCAF17F5D3B5263E51A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft Manifest number: 0457 Signing time: Tue 17 Jun 2025 07:50:46 +0000 Manifest this update: Tue 17 Jun 2025 07:45:46 +0000 Manifest next update: Fri 20 Jun 2025 09:49:46 +0000 Files and hashes: 1: 3130332e3135342e3233302e302f32342d3234203d3e20313336313231.roa (hash: vn/jzJM/u7azecE9ydE9MylwAQT3zN9oIJjnMwqLrw4=) 2: 3130332e3135342e3233302e302f32332d3233203d3e20313336313231.roa (hash: 8Q6Ja4+FBCMVjxp75iktXQMgyvElquVgRng+jWYaUXc=) 3: 3130332e3135342e3233312e302f32342d3234203d3e20313336313231.roa (hash: aKnOKOXrf8WDLTz9lOnMLQ3rz67XYoyw6eEFmfbGG64=) 4: 323430363a356463303a3a2f33322d3332203d3e20313336313231.roa (hash: Bkimq3Y+FDCpoXrJVzQHrak+YkAyXPLShZBbOm7jcf0=) 5: 94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl (hash: JnulaRPTV4iWvH1lU1E0VYVwpDO2nWZxZG645dRAm4Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 09:49:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:f8:5c:b4:4c:8f:5d:0a:c6:d1:5b:ca:f1:7f:5d:3b:52:63:e5:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383 Validity Not Before: Jun 17 07:45:46 2025 GMT Not After : Jun 20 09:49:46 2025 GMT Subject: CN=505C3DFDF40CA259F80920A93A7EA47B268FC34F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:09:07:6d:06:a4:53:5f:f0:73:d4:b8:98:29: 41:1a:c2:89:d9:01:7e:af:6b:df:c8:85:08:4c:bf: db:36:47:cd:79:0c:51:1a:54:34:c5:0f:a6:9d:a2: c9:68:cf:53:1e:0d:31:d5:5f:0b:a4:6a:39:bc:63: 80:62:d8:99:0b:19:fc:2d:bd:b0:77:ce:29:cb:8b: ee:3a:11:55:71:04:1c:d1:29:d2:f8:a5:17:9e:65: 18:0b:fe:e6:27:c9:fe:02:9d:8b:70:f5:a2:65:51: 18:e6:a7:1e:6a:68:1f:8b:7d:d9:e7:45:25:24:d4: c2:f6:fa:4e:83:fd:68:00:2a:cb:bd:e8:dc:50:66: f0:bd:40:5f:fb:d2:48:11:0e:36:85:fa:e7:21:d9: 23:98:53:65:56:3c:06:50:65:16:06:0d:1d:4c:92: b9:41:c2:6e:53:c6:ae:fe:8f:61:f8:ef:96:e8:5c: b8:58:cc:b6:de:fa:17:9f:0c:db:1e:f2:b0:e4:88: b2:9a:56:53:c5:ad:de:c7:87:9d:80:28:03:0d:de: 60:a8:64:38:d1:e3:ad:9c:23:f4:bb:f1:0c:8b:00: e6:d7:ea:a3:d8:96:6c:ea:46:96:9b:c8:df:39:d4: 57:18:85:e9:b6:40:19:39:62:9c:ea:5c:6e:68:ea: ce:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:5C:3D:FD:F4:0C:A2:59:F8:09:20:A9:3A:7E:A4:7B:26:8F:C3:4F X509v3 Authority Key Identifier: keyid:94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:9a:32:62:83:d2:4b:8c:14:9f:ee:e2:78:2f:3c:c0:03:a6: 47:8e:11:ec:31:29:34:b8:c0:ee:1e:bc:9d:50:29:a2:e8:c8: 47:9c:9e:24:e6:28:e8:de:9d:3d:ee:e0:03:1e:3d:a6:3f:6d: 00:b3:33:b5:ac:e3:6f:16:a2:14:63:d3:7f:13:92:03:c0:19: 1b:62:3a:83:0e:ef:b2:b4:0a:6a:6b:24:2a:ef:f4:18:35:dc: 85:bd:02:2d:a5:c0:6d:eb:00:69:ba:a3:41:3c:e4:92:61:9d: 98:5e:18:f0:db:00:e2:51:4b:b7:c9:15:a7:70:56:92:48:6f: 90:15:5c:6b:2b:dc:eb:06:98:57:dd:e4:8b:ef:0e:e7:30:af: f8:af:b7:c5:7b:a6:d8:73:9d:f5:fd:11:e9:f2:67:2e:fa:66: a6:77:8e:61:16:f8:6c:37:9d:47:14:32:75:63:3b:8a:12:c2: 0f:ad:88:d1:c5:cb:e7:bb:25:6c:13:9c:71:5a:9b:15:cd:31: f9:48:26:a1:11:8e:a1:80:6d:c7:ba:3c:ed:21:46:ee:c7:3a: e8:bf:8f:47:81:1b:fc:66:46:f1:69:44:98:70:57:43:f7:62: a2:b0:f9:2f:0f:78:d9:97:a5:09:9d:3d:8c:1f:21:32:53:89: 3d:b5:4d:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCPhctEyPXQrG0VvK8X9dO1Jj5RowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRGNzVCMDRDRUJFMERGMUQwQjkyNEVDRjFBRDlDOUMx Mzk5MjM4MzAeFw0yNTA2MTcwNzQ1NDZaFw0yNTA2MjAwOTQ5NDZaMDMxMTAvBgNV BAMTKDUwNUMzREZERjQwQ0EyNTlGODA5MjBBOTNBN0VBNDdCMjY4RkMzNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyCQdtBqRTX/Bz1LiYKUEawonZ AX6va9/IhQhMv9s2R815DFEaVDTFD6adosloz1MeDTHVXwukajm8Y4Bi2JkLGfwt vbB3zinLi+46EVVxBBzRKdL4pReeZRgL/uYnyf4CnYtw9aJlURjmpx5qaB+Lfdnn RSUk1ML2+k6D/WgAKsu96NxQZvC9QF/70kgRDjaF+uch2SOYU2VWPAZQZRYGDR1M krlBwm5Txq7+j2H475boXLhYzLbe+hefDNse8rDkiLKaVlPFrd7Hh52AKAMN3mCo ZDjR462cI/S78QyLAObX6qPYlmzqRpabyN851FcYhem2QBk5YpzqXG5o6s6/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUFw9/fQMoln4CSCpOn6keyaPw08wHwYDVR0j BBgwFoAUlPdbBM6+DfHQuSTs8a2cnBOZI4MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjEyN2ZlYi05NjE1LTRjNTgtYTNiYi1lZWY3YjdhNjU0N2UvMC85NEY3NUIwNENF QkUwREYxRDBCOTI0RUNGMUFEOUM5QzEzOTkyMzgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTRGNzVCMDRDRUJFMERGMUQwQjkyNEVDRjFBRDlDOUMxMzk5 MjM4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTIxMjdmZWItOTYxNS00YzU4LWEz YmItZWVmN2I3YTY1NDdlLzAvOTRGNzVCMDRDRUJFMERGMUQwQjkyNEVDRjFBRDlD OUMxMzk5MjM4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG6aMmKD0kuMFJ/u4ngvPMADpkeOEewxKTS4 wO4evJ1QKaLoyEecniTmKOjenT3u4AMePaY/bQCzM7Ws428WohRj038TkgPAGRti OoMO77K0CmprJCrv9Bg13IW9Ai2lwG3rAGm6o0E85JJhnZheGPDbAOJRS7fJFadw VpJIb5AVXGsr3OsGmFfd5IvvDucwr/ivt8V7pthznfX9EenyZy76ZqZ3jmEW+Gw3 nUcUMnVjO4oSwg+tiNHFy+e7JWwTnHFamxXNMflIJqERjqGAbce6PO0hRu7HOui/ j0eBG/xmRvFpRJhwV0P3YqKw+S8PeNmXpQmdPYwfITJTiT21TRw= -----END CERTIFICATE-----Generated at Wed Jun 18 15:48:56 2025 by rpki-client