$ rpki-client -vvf repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft File: B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft (raw, json) Hash identifier: TPSpQjXQ1XDFvsaWDC2EZKVBbWMpFUKpzO9H3Ryb1bg= Subject key identifier: 29:FC:96:AA:B4:58:9A:4D:2C:75:D2:02:41:EF:B1:21:50:2A:D4:FE Authority key identifier: B8:D4:44:C5:B3:18:4A:4F:8C:8F:19:9A:43:22:42:C4:4E:19:EA:CB Certificate issuer: /CN=B8D444C5B3184A4F8C8F199A432242C44E19EACB Certificate serial: 68D3B9092BCEC165B0B1350AA5E8C486E4FD3B3B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft Manifest number: 98 Signing time: Fri 13 Jun 2025 19:12:06 +0000 Manifest this update: Fri 13 Jun 2025 19:07:06 +0000 Manifest next update: Tue 17 Jun 2025 05:56:06 +0000 Files and hashes: 1: 3136302e32352e33362e302f32342d3234203d3e20313532383332.roa (hash: le0N09QJH4rB2Cs8/+qGf8BVJE6y94DB31o5gUkZnZI=) 2: 3136302e32352e33372e302f32342d3234203d3e20313532383332.roa (hash: M7PLTShc17cNHbAkZ/Aq1Y/sFTRdm7Sh5vz/cqQ2zg0=) 3: 3136302e32352e33362e302f32332d3234203d3e20313532383332.roa (hash: 0s3rWLKkoef0LRd26YLEPlEN62q6VM66IYGFVdLCLsM=) 4: B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl (hash: i1JAv1RMGJtwAFcFsrJ3ycfRUdWoVPsnByQKU7/q9rY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 05:56:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:d3:b9:09:2b:ce:c1:65:b0:b1:35:0a:a5:e8:c4:86:e4:fd:3b:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D444C5B3184A4F8C8F199A432242C44E19EACB Validity Not Before: Jun 13 19:07:06 2025 GMT Not After : Jun 17 05:56:06 2025 GMT Subject: CN=29FC96AAB4589A4D2C75D20241EFB121502AD4FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:24:ec:f0:12:cd:6f:0f:28:97:86:8c:e6:67: d9:1e:55:40:0a:41:a1:45:07:50:f7:d2:fd:13:c6: 54:d0:3c:c2:37:b2:13:91:d6:5b:ae:dc:05:59:98: 0a:02:a2:40:9a:a8:db:1e:ce:26:51:13:aa:a2:1c: 5f:be:4d:cd:68:6b:da:3f:50:eb:d2:cc:c0:44:ea: 64:ba:6e:dc:68:a6:a0:7d:47:ff:94:0d:0a:40:d5: 34:3a:22:df:c9:a5:40:25:3d:f6:cb:54:b6:52:cd: 04:60:85:3b:f4:03:70:1c:1c:12:fe:b0:21:6f:22: 19:19:24:38:ca:36:f5:31:83:87:ce:f7:a2:4c:56: 1a:70:65:4c:d3:50:59:94:2a:43:90:de:31:32:dc: 54:ed:49:ff:86:3f:0b:50:a4:76:10:f4:bc:fb:58: 13:4f:4b:57:d4:5e:de:4a:f4:47:fc:de:a6:16:e0: ec:f0:b2:c8:42:02:15:8e:06:87:f1:e4:2f:1b:15: 48:43:c8:26:08:c6:11:f7:f9:e1:26:b3:da:11:90: 3a:79:d3:e6:9f:c4:9b:96:d8:60:95:a3:58:ae:92: 30:5c:b2:dc:0b:df:65:80:05:7a:7d:fc:1a:40:dc: 09:6f:0b:36:17:02:67:57:64:44:da:86:ab:a5:55: 7d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:FC:96:AA:B4:58:9A:4D:2C:75:D2:02:41:EF:B1:21:50:2A:D4:FE X509v3 Authority Key Identifier: keyid:B8:D4:44:C5:B3:18:4A:4F:8C:8F:19:9A:43:22:42:C4:4E:19:EA:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:0e:8f:02:0c:4e:42:cf:06:cf:b4:d3:d1:f7:f9:e8:67:c7: 0f:f2:63:70:8c:8f:7e:98:17:71:ba:2e:9d:0c:fd:31:d5:b5: 40:b1:15:9e:ea:a2:3a:d6:b8:4c:f5:f5:d8:59:25:cc:0b:3f: 12:de:df:9e:90:c1:92:dc:b8:31:07:29:d3:d7:70:b4:13:28: eb:df:14:bb:2c:f6:25:a3:50:75:14:72:68:04:60:d9:84:ee: 53:b9:0d:8c:58:bb:a7:27:13:e1:59:e7:08:1d:05:12:6d:af: 9c:ed:5f:6b:a3:b5:f3:d1:85:f7:d6:e4:38:50:42:b2:e1:1d: 8c:ca:27:95:f6:ef:ca:f1:df:a6:8f:83:ab:bc:47:27:df:f2: df:43:36:bc:24:d1:2a:6c:d5:10:a2:20:71:7f:c1:bf:b4:18: 5d:14:d6:29:65:43:c8:ed:13:5a:f2:27:41:7f:7a:34:c9:0b: fa:aa:3e:e7:27:be:32:a6:32:bb:ec:76:dc:a2:1e:1e:bc:02: 89:d0:69:b0:9e:ec:ba:55:79:79:06:c9:6d:ab:3b:b8:31:11: 75:b4:45:e4:ae:b3:c8:92:ed:ee:08:84:e2:cf:e4:66:ac:16: 90:fd:d6:3a:04:54:0c:89:03:f5:60:a3:2a:e8:c9:19:9b:d0: a8:d1:03:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaNO5CSvOwWWwsTUKpejEhuT9OzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQyQzQ0 RTE5RUFDQjAeFw0yNTA2MTMxOTA3MDZaFw0yNTA2MTcwNTU2MDZaMDMxMTAvBgNV BAMTKDI5RkM5NkFBQjQ1ODlBNEQyQzc1RDIwMjQxRUZCMTIxNTAyQUQ0RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpJOzwEs1vDyiXhozmZ9keVUAK QaFFB1D30v0TxlTQPMI3shOR1luu3AVZmAoCokCaqNseziZRE6qiHF++Tc1oa9o/ UOvSzMBE6mS6btxopqB9R/+UDQpA1TQ6It/JpUAlPfbLVLZSzQRghTv0A3AcHBL+ sCFvIhkZJDjKNvUxg4fO96JMVhpwZUzTUFmUKkOQ3jEy3FTtSf+GPwtQpHYQ9Lz7 WBNPS1fUXt5K9Ef83qYW4OzwsshCAhWOBofx5C8bFUhDyCYIxhH3+eEms9oRkDp5 0+afxJuW2GCVo1iukjBcstwL32WABXp9/BpA3AlvCzYXAmdXZETahqulVX2/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKfyWqrRYmk0sddICQe+xIVAq1P4wHwYDVR0j BBgwFoAUuNRExbMYSk+MjxmaQyJCxE4Z6sswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjRiNTNkOC1iMmZmLTQ5NzMtYjFhYy02Zjg1ZmFlYWRiZTUvMC9COEQ0NDRDNUIz MTg0QTRGOEM4RjE5OUE0MzIyNDJDNDRFMTlFQUNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQyQzQ0RTE5 RUFDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Y0YjUzZDgtYjJmZi00OTczLWIx YWMtNmY4NWZhZWFkYmU1LzAvQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQy QzQ0RTE5RUFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4OjwIMTkLPBs+009H3+ehnxw/yY3CMj36Y F3G6Lp0M/THVtUCxFZ7qojrWuEz19dhZJcwLPxLe356QwZLcuDEHKdPXcLQTKOvf FLss9iWjUHUUcmgEYNmE7lO5DYxYu6cnE+FZ5wgdBRJtr5ztX2ujtfPRhffW5DhQ QrLhHYzKJ5X278rx36aPg6u8Ryff8t9DNrwk0Sps1RCiIHF/wb+0GF0U1illQ8jt E1ryJ0F/ejTJC/qqPucnvjKmMrvsdtyiHh68AonQabCe7LpVeXkGyW2rO7gxEXW0 ReSus8iS7e4IhOLP5GasFpD91joEVAyJA/VgoyroyRmb0KjRA5A= -----END CERTIFICATE-----Generated at Sun Jun 15 16:37:29 2025 by rpki-client