$ rpki-client -vvf repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft File: CA5B0322788B7A041373A944677E83F0D48FF4E7.mft (raw, json) Hash identifier: PCF5gX49EVXiHvPO6WTGRUAWdta9B4ikOstShoaBtZk= Subject key identifier: F1:6C:97:3E:C3:8B:9D:15:6E:37:AF:18:53:AC:5A:73:9B:F9:A3:BE Authority key identifier: CA:5B:03:22:78:8B:7A:04:13:73:A9:44:67:7E:83:F0:D4:8F:F4:E7 Certificate issuer: /CN=CA5B0322788B7A041373A944677E83F0D48FF4E7 Certificate serial: 1768F3313BD9BE2CF66701F18CF3461DB9080910 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA5B0322788B7A041373A944677E83F0D48FF4E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft Manifest number: 9E Signing time: Mon 16 Jun 2025 09:21:07 +0000 Manifest this update: Mon 16 Jun 2025 09:16:07 +0000 Manifest next update: Thu 19 Jun 2025 14:48:07 +0000 Files and hashes: 1: CA5B0322788B7A041373A944677E83F0D48FF4E7.crl (hash: IiXkD2R6FIbjwpakOBxDshWRiL5HBQRfrz1/SNuZoz4=) 2: 3130332e37312e3136302e302f32322d3234203d3e20313339393831.roa (hash: lDykVwxJoW4GFsi2L2TOWuZVobAaZLaNG/GuK7uwVOw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.crl rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA5B0322788B7A041373A944677E83F0D48FF4E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 14:48:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:68:f3:31:3b:d9:be:2c:f6:67:01:f1:8c:f3:46:1d:b9:08:09:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA5B0322788B7A041373A944677E83F0D48FF4E7 Validity Not Before: Jun 16 09:16:07 2025 GMT Not After : Jun 19 14:48:07 2025 GMT Subject: CN=F16C973EC38B9D156E37AF1853AC5A739BF9A3BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5f:92:11:cf:c3:d6:72:4d:96:b0:be:53:1d: 43:43:b0:cb:ea:6b:2f:20:8b:a0:e2:d0:fc:7c:d4: c7:cc:7a:53:73:8c:ed:f9:4d:3e:20:f5:02:85:67: 54:5a:a5:35:cc:fe:66:80:95:55:a8:70:23:7c:97: df:20:f1:bc:ec:57:04:3d:bc:8f:10:29:5e:af:eb: 72:ab:18:e2:6d:50:11:50:55:53:87:3d:56:35:39: ba:9e:40:68:44:0c:e8:12:b0:bc:5e:1a:79:3e:b4: 5d:83:fb:48:71:55:58:1b:9e:e9:56:ae:f3:1a:32: 15:12:e3:21:79:c5:41:0e:96:b4:d6:4e:9e:83:ee: fa:3b:6d:2a:d2:35:a0:f2:f2:28:fd:30:81:ae:1a: 59:37:aa:68:2c:bc:9e:ac:62:ac:e9:ef:c0:92:a0: fe:28:f7:df:90:ac:5a:e1:17:63:55:ff:09:ef:d5: 14:44:38:a8:11:bb:bf:74:ca:97:f8:50:22:89:b1: 42:dd:6d:ce:d3:4b:eb:00:28:03:32:14:3e:10:60: 76:8a:d1:91:3c:fd:0f:f7:81:31:de:0c:35:9f:09: 18:ed:12:67:dc:6f:86:f1:3b:f7:84:53:31:0f:b7: b9:03:d7:d7:44:f9:c4:72:d7:57:5d:e7:c3:77:15: b3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:6C:97:3E:C3:8B:9D:15:6E:37:AF:18:53:AC:5A:73:9B:F9:A3:BE X509v3 Authority Key Identifier: keyid:CA:5B:03:22:78:8B:7A:04:13:73:A9:44:67:7E:83:F0:D4:8F:F4:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA5B0322788B7A041373A944677E83F0D48FF4E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:9a:18:c7:27:43:8f:60:61:c3:7d:a2:ef:91:dd:77:61:1b: d7:ce:26:cc:27:1e:8f:93:40:48:c7:51:25:8e:4f:56:ce:1a: 93:a7:38:94:4e:40:fe:58:d6:1d:37:19:ad:be:b9:8a:a1:d1: 21:12:91:52:43:cb:58:43:a0:3f:59:65:e1:85:7d:ae:f2:cd: a8:32:d6:28:26:ea:df:93:59:33:1c:8a:43:f0:d7:d2:cf:dd: 17:8c:d1:04:d8:f9:9f:27:76:59:c1:20:7f:a9:15:b8:4b:d4: e3:e8:b7:ba:c7:29:b6:4e:79:3d:93:4e:30:2f:5a:f4:18:e0: bb:8a:a7:8e:1c:c9:35:4e:f4:2b:33:f5:83:61:fe:a4:7c:a1: af:c3:08:33:66:7b:59:8b:2b:90:68:e2:8d:14:fd:e3:3f:75: 1b:d3:3d:cc:1d:44:d2:c4:46:f3:5c:3c:00:7e:55:3c:54:0b: 63:79:7a:2c:d5:62:6e:51:75:1c:6f:2d:0e:8f:16:4e:38:eb: c8:78:90:19:be:0a:40:d8:fb:4f:14:b8:d1:e1:dd:0a:35:bb: 67:a4:d1:8b:31:00:c0:ef:37:1d:5b:6e:a9:67:55:e8:a6:9a: 3e:b1:b0:49:fe:02:5a:69:ef:ab:de:d7:57:85:36:3a:f4:9b: fd:45:8e:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF2jzMTvZviz2ZwHxjPNGHbkICRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E1QjAzMjI3ODhCN0EwNDEzNzNBOTQ0Njc3RTgzRjBE NDhGRjRFNzAeFw0yNTA2MTYwOTE2MDdaFw0yNTA2MTkxNDQ4MDdaMDMxMTAvBgNV BAMTKEYxNkM5NzNFQzM4QjlEMTU2RTM3QUYxODUzQUM1QTczOUJGOUEzQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTX5IRz8PWck2WsL5THUNDsMvq ay8gi6Di0Px81MfMelNzjO35TT4g9QKFZ1RapTXM/maAlVWocCN8l98g8bzsVwQ9 vI8QKV6v63KrGOJtUBFQVVOHPVY1ObqeQGhEDOgSsLxeGnk+tF2D+0hxVVgbnulW rvMaMhUS4yF5xUEOlrTWTp6D7vo7bSrSNaDy8ij9MIGuGlk3qmgsvJ6sYqzp78CS oP4o99+QrFrhF2NV/wnv1RREOKgRu790ypf4UCKJsULdbc7TS+sAKAMyFD4QYHaK 0ZE8/Q/3gTHeDDWfCRjtEmfcb4bxO/eEUzEPt7kD19dE+cRy11dd58N3FbO1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8WyXPsOLnRVuN68YU6xac5v5o74wHwYDVR0j BBgwFoAUylsDIniLegQTc6lEZ36D8NSP9OcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZWJhODY3YS04Zjg0LTQ2NjMtYjMyMC1mNDM1MjgyYjlmZmUvMC9DQTVCMDMyMjc4 OEI3QTA0MTM3M0E5NDQ2NzdFODNGMEQ0OEZGNEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E1QjAzMjI3ODhCN0EwNDEzNzNBOTQ0Njc3RTgzRjBENDhG RjRFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGViYTg2N2EtOGY4NC00NjYzLWIz MjAtZjQzNTI4MmI5ZmZlLzAvQ0E1QjAzMjI3ODhCN0EwNDEzNzNBOTQ0Njc3RTgz RjBENDhGRjRFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAICaGMcnQ49gYcN9ou+R3XdhG9fOJswnHo+T QEjHUSWOT1bOGpOnOJROQP5Y1h03Ga2+uYqh0SESkVJDy1hDoD9ZZeGFfa7yzagy 1igm6t+TWTMcikPw19LP3ReM0QTY+Z8ndlnBIH+pFbhL1OPot7rHKbZOeT2TTjAv WvQY4LuKp44cyTVO9Csz9YNh/qR8oa/DCDNme1mLK5Bo4o0U/eM/dRvTPcwdRNLE RvNcPAB+VTxUC2N5eizVYm5RdRxvLQ6PFk4468h4kBm+CkDY+08UuNHh3Qo1u2ek 0YsxAMDvNx1bbqlnVeimmj6xsEn+Alpp76ve11eFNjr0m/1FjqA= -----END CERTIFICATE-----Generated at Mon Jun 16 22:15:39 2025 by rpki-client