$ rpki-client -vvf repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft File: 00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft (raw, json) Hash identifier: j3NClfHtx+nEoeP+BbCchz4ifzNE/k2k2l1ho+7FGgI= Subject key identifier: 47:F9:E6:40:08:3B:AD:E4:59:2B:2B:AF:CA:92:FA:E4:A9:9D:D2:FC Authority key identifier: 00:B4:EC:FC:CA:E9:0A:94:63:FD:71:82:2A:3C:EE:4C:8C:14:5A:D4 Certificate issuer: /CN=00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4 Certificate serial: 4F2DD9A89ED82F06D7FF2696456F7106EE0DEFC3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft Manifest number: 98 Signing time: Tue 17 Jun 2025 05:01:33 +0000 Manifest this update: Tue 17 Jun 2025 04:56:33 +0000 Manifest next update: Fri 20 Jun 2025 06:46:33 +0000 Files and hashes: 1: 3130332e3136392e33322e302f32332d3234203d3e20313432333333.roa (hash: 3Hm40iWjQ2mGL/ioKg4PmFkyFgospmr9E6G7OvRGuhQ=) 2: 323030313a6466323a663334303a3a2f34382d3438203d3e20313432333333.roa (hash: iwWTX/EFBujyZQDKZ9Hg7h0CZYdGO5vfAJe8qoIVz88=) 3: 00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.crl (hash: zkHTSZayZR4WtSsxWvad4/2g962EDw7QaEdLqJN2Xyc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.crl rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:46:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:2d:d9:a8:9e:d8:2f:06:d7:ff:26:96:45:6f:71:06:ee:0d:ef:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4 Validity Not Before: Jun 17 04:56:33 2025 GMT Not After : Jun 20 06:46:33 2025 GMT Subject: CN=47F9E640083BADE4592B2BAFCA92FAE4A99DD2FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:26:e4:06:1e:fb:75:a9:ce:7d:f2:2a:e3:f0: 59:9a:31:7e:7b:c1:dc:3a:e2:55:75:12:7c:a9:03: 09:d8:94:33:74:3f:25:7b:95:08:4e:ce:16:a1:a4: f9:fd:b2:0f:44:ca:45:c8:ee:fb:1f:5c:e1:7b:20: 0f:29:06:79:6b:01:ab:68:72:41:96:86:7d:8b:2d: 7f:33:3c:ee:19:56:d8:3a:56:8f:b1:61:1f:c8:d8: 5f:aa:5f:68:2e:c9:7c:54:2d:41:d3:b1:da:70:6b: eb:67:98:f7:97:9e:62:d0:ed:4c:87:41:b7:06:63: c1:9f:c0:0c:c7:1c:42:b5:40:44:87:61:96:a5:d2: d0:2d:d7:1b:3a:43:bb:3b:c7:61:4d:5d:b2:02:5b: 2f:3c:71:3f:d6:21:5e:6a:c6:b6:99:0d:07:63:7c: 48:7e:c5:90:81:70:f6:73:80:f5:df:2e:98:f8:af: 67:f7:ec:c8:8b:2b:8a:8e:57:f6:59:e8:86:a6:27: 7a:d7:b2:02:f7:69:c4:4a:fb:18:8c:14:a2:47:fa: 7e:c1:82:e5:62:3e:30:c9:8d:cd:db:90:78:08:f8: 3a:59:65:57:4e:86:1c:7f:e9:5c:15:2e:93:4d:ac: 10:7c:19:19:dc:8e:4c:23:cc:17:39:3f:93:32:6e: 5f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F9:E6:40:08:3B:AD:E4:59:2B:2B:AF:CA:92:FA:E4:A9:9D:D2:FC X509v3 Authority Key Identifier: keyid:00:B4:EC:FC:CA:E9:0A:94:63:FD:71:82:2A:3C:EE:4C:8C:14:5A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:7c:af:f6:1c:f2:1e:c3:57:b3:25:71:37:38:aa:4c:61:7b: 1c:74:63:06:bb:b4:33:75:0d:92:90:fc:f1:43:02:4e:f1:e3: 67:06:08:ca:cf:da:5c:dc:f1:30:94:01:49:24:f7:73:eb:2a: e1:4b:5f:2d:77:ca:12:59:db:87:e8:93:9e:7e:6d:3e:a2:5f: cf:04:74:29:0e:1a:4e:ff:49:df:36:ab:9a:ae:1a:c9:05:81: b2:f8:e1:e6:d4:6e:d8:eb:63:95:de:15:f8:0d:ff:c1:cd:55: 18:39:92:61:0a:1f:7a:99:84:6a:57:35:43:55:a9:bf:de:b9: a9:87:a6:53:bd:d9:0e:e8:49:19:10:30:11:b1:59:e3:d6:22: 28:0a:e4:02:ab:9c:dc:1a:ca:8e:6f:72:2e:b7:61:de:f5:e1: bb:9d:6e:22:d7:fb:63:92:d4:e8:bc:ac:eb:12:5f:62:d8:f9: 38:55:85:99:12:60:fb:db:7d:16:72:82:6e:f4:d6:21:df:7c: d5:8f:be:5f:9d:a7:08:84:35:1d:02:4f:b2:56:ca:d3:c0:03: f2:5c:6d:59:5d:f7:84:b4:6d:28:c7:3a:21:27:a2:b0:fa:9c: 64:60:85:8e:a7:34:4b:6a:72:77:0b:54:50:43:4e:1e:bf:a1: e3:d4:e8:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTy3ZqJ7YLwbX/yaWRW9xBu4N78MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBCNEVDRkNDQUU5MEE5NDYzRkQ3MTgyMkEzQ0VFNEM4 QzE0NUFENDAeFw0yNTA2MTcwNDU2MzNaFw0yNTA2MjAwNjQ2MzNaMDMxMTAvBgNV BAMTKDQ3RjlFNjQwMDgzQkFERTQ1OTJCMkJBRkNBOTJGQUU0QTk5REQyRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0JuQGHvt1qc598irj8FmaMX57 wdw64lV1EnypAwnYlDN0PyV7lQhOzhahpPn9sg9EykXI7vsfXOF7IA8pBnlrAato ckGWhn2LLX8zPO4ZVtg6Vo+xYR/I2F+qX2guyXxULUHTsdpwa+tnmPeXnmLQ7UyH QbcGY8GfwAzHHEK1QESHYZal0tAt1xs6Q7s7x2FNXbICWy88cT/WIV5qxraZDQdj fEh+xZCBcPZzgPXfLpj4r2f37MiLK4qOV/ZZ6IamJ3rXsgL3acRK+xiMFKJH+n7B guViPjDJjc3bkHgI+DpZZVdOhhx/6VwVLpNNrBB8GRncjkwjzBc5P5Mybl+ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR/nmQAg7reRZKyuvypL65Kmd0vwwHwYDVR0j BBgwFoAUALTs/MrpCpRj/XGCKjzuTIwUWtQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzBjMWJhYi0xM2Y0LTRjZTYtODVmNy1jMzg4NzM3ZjZkMTkvMC8wMEI0RUNGQ0NB RTkwQTk0NjNGRDcxODIyQTNDRUU0QzhDMTQ1QUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBCNEVDRkNDQUU5MEE5NDYzRkQ3MTgyMkEzQ0VFNEM4QzE0 NUFENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcwYzFiYWItMTNmNC00Y2U2LTg1 ZjctYzM4ODczN2Y2ZDE5LzAvMDBCNEVDRkNDQUU5MEE5NDYzRkQ3MTgyMkEzQ0VF NEM4QzE0NUFENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJp8r/Yc8h7DV7MlcTc4qkxhexx0Ywa7tDN1 DZKQ/PFDAk7x42cGCMrP2lzc8TCUAUkk93PrKuFLXy13yhJZ24fok55+bT6iX88E dCkOGk7/Sd82q5quGskFgbL44ebUbtjrY5XeFfgN/8HNVRg5kmEKH3qZhGpXNUNV qb/euamHplO92Q7oSRkQMBGxWePWIigK5AKrnNwayo5vci63Yd714budbiLX+2OS 1Oi8rOsSX2LY+ThVhZkSYPvbfRZygm701iHffNWPvl+dpwiENR0CT7JWytPAA/Jc bVld94S0bSjHOiEnorD6nGRghY6nNEtqcncLVFBDTh6/oePU6Jw= -----END CERTIFICATE-----Generated at Tue Jun 17 15:37:29 2025 by rpki-client