$ rpki-client -vvf repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft File: B392381083372148D0977D0066CFF38FD5A32CDB.mft (raw, json) Hash identifier: YuvJbqmuulPJ08dX6NOwrQgREzuSDZDXYbQDJs/o+G0= Subject key identifier: E5:45:B4:18:A5:3A:F0:D2:EB:51:CC:99:E1:7F:11:45:19:D1:4C:D4 Authority key identifier: B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB Certificate issuer: /CN=B392381083372148D0977D0066CFF38FD5A32CDB Certificate serial: 68EE44424B4AA555F73B21CFC499791D639C1DFC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft Manifest number: 020B Signing time: Sun 15 Jun 2025 17:21:58 +0000 Manifest this update: Sun 15 Jun 2025 17:16:58 +0000 Manifest next update: Thu 19 Jun 2025 03:07:58 +0000 Files and hashes: 1: B392381083372148D0977D0066CFF38FD5A32CDB.crl (hash: LWuKUIDRW+68jvhoyySEIdX5e2QI84c0DvL4XY3cztI=) 2: 3130332e3138352e38322e302f32332d3234203d3e203538383230.roa (hash: HSEFfxxLTR9pPfTqUIYx4lI4vavTZEpGUjc26Y26XRA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.crl rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 03:07:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:ee:44:42:4b:4a:a5:55:f7:3b:21:cf:c4:99:79:1d:63:9c:1d:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B392381083372148D0977D0066CFF38FD5A32CDB Validity Not Before: Jun 15 17:16:58 2025 GMT Not After : Jun 19 03:07:58 2025 GMT Subject: CN=E545B418A53AF0D2EB51CC99E17F114519D14CD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:68:70:eb:da:8e:46:93:2c:99:c0:f8:45:e6: 2f:90:ae:ab:29:c8:08:c8:e4:92:ee:fd:27:1a:e0: 72:0d:c0:39:4a:f4:7d:f1:1d:dd:bc:9e:7f:94:b2: d3:df:d9:7c:c3:ad:76:d3:1a:6a:1c:35:67:c6:c4: 0f:70:6a:75:f6:e4:71:b7:22:8a:e9:bd:85:d7:e9: c5:54:32:a8:b6:7a:62:94:1e:9c:35:15:20:2c:96: 46:0c:27:45:ea:09:37:bc:d2:33:29:42:7e:2b:ee: dd:5e:4a:5e:35:bd:3e:77:3c:59:f3:3f:69:09:67: 4f:7e:67:e4:0b:f7:f4:de:6c:3f:12:18:72:7c:4e: 90:80:9a:9c:17:07:b1:31:bd:fc:ab:04:7a:f1:e5: 7e:72:59:3a:ca:cf:ff:63:03:2c:1a:ac:a3:8b:98: 4b:55:75:02:5b:42:f2:1c:5a:d9:11:c1:16:0f:e4: 63:af:04:b3:da:fc:30:fe:af:8c:91:db:ab:74:bd: 4a:9a:6a:f1:79:21:19:fd:c0:1e:99:20:9e:a1:4d: 07:8d:67:46:a9:11:0b:9e:54:9d:11:5d:a7:73:e5: 96:f0:b1:b9:9f:63:39:91:bb:30:71:3e:38:4c:ab: 07:c0:0c:66:10:e9:ac:a3:bf:86:40:42:13:f2:6c: 5d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:45:B4:18:A5:3A:F0:D2:EB:51:CC:99:E1:7F:11:45:19:D1:4C:D4 X509v3 Authority Key Identifier: keyid:B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:88:17:29:d2:a8:d4:fc:06:35:c2:42:c5:1e:6e:35:84:cc: 62:43:af:4c:0a:74:1f:16:10:27:75:71:7c:45:50:62:a3:6e: bd:0a:34:70:bc:5f:9c:5a:c0:a1:1c:b4:4b:7b:e2:ca:81:3d: 37:f3:9b:b3:c4:18:cf:4f:2b:cf:8f:d7:60:01:8b:5b:e9:c1: 49:ff:45:32:66:5d:32:82:cb:fa:e8:82:10:08:46:00:11:6e: 58:30:0c:ef:df:96:4c:ea:8a:80:e6:4d:f4:b0:b3:bb:de:77: ba:64:69:0d:e5:51:c5:e6:ac:79:36:a4:80:97:e4:6b:f3:e6: a3:bb:a4:d4:12:ea:9b:d8:c8:d1:73:b7:25:c5:2b:f6:7c:2d: 75:29:7a:91:25:f5:c7:7b:04:1b:35:5b:11:89:17:b2:55:c1: 97:4d:ad:fd:5c:65:60:eb:f6:3a:4a:d8:05:75:4e:79:a8:2a: 38:51:a4:1e:71:f3:73:e4:b0:86:f9:c2:16:45:d3:0b:35:a4: 7c:de:40:e5:f4:e7:76:a6:c7:80:8d:c8:be:b4:ac:62:f4:d3: 65:51:2c:0a:ff:c9:41:aa:d5:63:f6:db:ca:eb:1f:6f:88:d0: e2:d0:5c:7e:55:d7:91:24:df:2b:9c:37:e8:b9:bf:3f:61:a4: 05:bc:75:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaO5EQktKpVX3OyHPxJl5HWOcHfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM5MjM4MTA4MzM3MjE0OEQwOTc3RDAwNjZDRkYzOEZE NUEzMkNEQjAeFw0yNTA2MTUxNzE2NThaFw0yNTA2MTkwMzA3NThaMDMxMTAvBgNV BAMTKEU1NDVCNDE4QTUzQUYwRDJFQjUxQ0M5OUUxN0YxMTQ1MTlEMTRDRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjaHDr2o5GkyyZwPhF5i+Qrqsp yAjI5JLu/Sca4HINwDlK9H3xHd28nn+UstPf2XzDrXbTGmocNWfGxA9wanX25HG3 IorpvYXX6cVUMqi2emKUHpw1FSAslkYMJ0XqCTe80jMpQn4r7t1eSl41vT53PFnz P2kJZ09+Z+QL9/TebD8SGHJ8TpCAmpwXB7ExvfyrBHrx5X5yWTrKz/9jAywarKOL mEtVdQJbQvIcWtkRwRYP5GOvBLPa/DD+r4yR26t0vUqaavF5IRn9wB6ZIJ6hTQeN Z0apEQueVJ0RXadz5ZbwsbmfYzmRuzBxPjhMqwfADGYQ6ayjv4ZAQhPybF25AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5UW0GKU68NLrUcyZ4X8RRRnRTNQwHwYDVR0j BBgwFoAUs5I4EIM3IUjQl30AZs/zj9WjLNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmYyY2YwMy1mOWY5LTRiY2EtOGMyYy02MDczMjgwZGZlYTgvMC9CMzkyMzgxMDgz MzcyMTQ4RDA5NzdEMDA2NkNGRjM4RkQ1QTMyQ0RCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjM5MjM4MTA4MzM3MjE0OEQwOTc3RDAwNjZDRkYzOEZENUEz MkNEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJmMmNmMDMtZjlmOS00YmNhLThj MmMtNjA3MzI4MGRmZWE4LzAvQjM5MjM4MTA4MzM3MjE0OEQwOTc3RDAwNjZDRkYz OEZENUEzMkNEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKOIFynSqNT8BjXCQsUebjWEzGJDr0wKdB8W ECd1cXxFUGKjbr0KNHC8X5xawKEctEt74sqBPTfzm7PEGM9PK8+P12ABi1vpwUn/ RTJmXTKCy/roghAIRgARblgwDO/flkzqioDmTfSws7ved7pkaQ3lUcXmrHk2pICX 5Gvz5qO7pNQS6pvYyNFztyXFK/Z8LXUpepEl9cd7BBs1WxGJF7JVwZdNrf1cZWDr 9jpK2AV1TnmoKjhRpB5x83PksIb5whZF0ws1pHzeQOX053amx4CNyL60rGL002VR LAr/yUGq1WP228rrH2+I0OLQXH5V15Ek3yucN+i5vz9hpAW8dQY= -----END CERTIFICATE-----Generated at Mon Jun 16 15:44:58 2025 by rpki-client