$ rpki-client -vvf repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft File: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft (raw, json) Hash identifier: DtbEbK17DgNNvgubJ6HhvcTpNgcg64ZTq3NVDNGresM= Subject key identifier: 36:74:A0:66:87:E6:CA:34:69:D5:12:DE:72:46:D6:11:FE:4A:95:BF Authority key identifier: 13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE Certificate issuer: /CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Certificate serial: 6ADCDDA8A866624D9EA5CD8833F6F08893C98242 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft Manifest number: 02E5 Signing time: Sun 15 Jun 2025 07:40:54 +0000 Manifest this update: Sun 15 Jun 2025 07:35:53 +0000 Manifest next update: Wed 18 Jun 2025 10:35:53 +0000 Files and hashes: 1: 3130332e3137342e32342e302f32332d3234203d3e20313331313131.roa (hash: +ESPL9RiV1kXE5HVVZEJFevVqgb2FPlNrLYphfud9Dg=) 2: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl (hash: 4wA3YalYLiaUjtdH+sVbcUJcuzW5oeM0RFMzNekTC00=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 10:35:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:dc:dd:a8:a8:66:62:4d:9e:a5:cd:88:33:f6:f0:88:93:c9:82:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Validity Not Before: Jun 15 07:35:53 2025 GMT Not After : Jun 18 10:35:53 2025 GMT Subject: CN=3674A06687E6CA3469D512DE7246D611FE4A95BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7a:4e:d8:ef:b7:97:40:d3:63:d4:c8:0e:72: a9:4b:a9:4d:e2:37:d1:2c:3a:33:5a:15:0a:bb:91: 60:07:b5:b7:6a:b5:36:b6:e4:4f:6d:f1:65:17:36: a3:7e:03:29:e4:fa:1b:06:c8:9a:9a:69:7a:e4:53: ae:61:5d:8f:80:13:9c:04:31:e7:06:65:07:94:42: 46:d3:c9:2c:8a:58:60:a9:6b:d9:25:ae:1f:21:cd: 6e:c8:13:43:70:ab:05:0e:5c:36:f7:5a:d4:ab:ca: a9:02:ca:81:e2:55:76:43:68:db:8b:02:1b:83:f5: 28:90:2f:6c:ad:de:86:12:ed:a0:4a:80:0c:26:b2: cb:de:0d:c3:93:60:fc:9e:d9:f7:34:97:61:a8:4c: dc:46:7a:fe:08:c1:20:de:d6:19:ed:81:06:20:31: 3e:ec:3c:24:f1:b0:79:37:60:e8:97:01:be:c2:db: 05:d1:9c:ed:6d:41:ca:c9:66:5f:75:e2:11:0c:89: 8a:24:89:41:50:9b:8a:1c:35:38:5d:ad:5a:31:94: 16:ab:3d:74:22:e0:3c:e4:02:9b:fa:0a:20:1d:ad: 98:0c:c1:96:ba:c3:1f:ab:d8:b0:1e:94:3d:ac:f1: 20:46:0d:6a:34:11:a0:79:7a:3d:6e:b5:4b:a4:fe: e4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:74:A0:66:87:E6:CA:34:69:D5:12:DE:72:46:D6:11:FE:4A:95:BF X509v3 Authority Key Identifier: keyid:13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:c9:ef:1e:e6:bb:5c:18:26:eb:1a:32:99:2f:36:f1:0b:4e: d5:5d:d7:8f:62:0f:4c:b5:61:71:50:52:b5:ff:16:90:06:ea: ec:d2:06:5c:bc:34:af:90:4c:ef:81:37:e8:4b:58:93:c4:37: b8:c1:d3:33:a6:6e:b4:63:83:41:a1:dd:46:46:e7:e2:7d:40: 28:a7:d3:c0:21:c6:0d:1b:f7:47:b8:0c:6a:f7:c7:9f:c1:18: e5:f5:2f:15:6e:fe:48:22:74:50:72:9d:56:6d:89:f9:77:83: 18:4a:e2:27:da:64:cf:6d:38:26:0b:1c:5f:d0:b4:c9:fd:c2: 0a:77:65:29:78:ba:6a:79:55:af:1b:66:28:01:1d:cf:80:f5: 91:d4:df:83:ff:f8:c6:f6:4d:68:a5:d4:43:9f:4c:1f:ed:f9: 36:a8:14:54:5a:95:f3:29:16:19:87:9e:72:ce:06:07:8d:a0: 06:d2:5c:1b:90:3d:32:29:3b:de:92:9b:6a:55:0c:28:ee:b1: fd:30:81:74:67:91:c5:e0:c6:75:24:a0:f2:ff:bc:8e:f3:d7: 36:fb:11:85:38:11:e1:b0:34:55:1c:fa:47:4d:4d:f5:d0:46: a7:42:58:ed:80:03:73:98:75:0b:ec:94:06:3a:fb:a7:65:fc: 08:38:f2:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUatzdqKhmYk2epc2IM/bwiJPJgkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNC MDRGRENCRTAeFw0yNTA2MTUwNzM1NTNaFw0yNTA2MTgxMDM1NTNaMDMxMTAvBgNV BAMTKDM2NzRBMDY2ODdFNkNBMzQ2OUQ1MTJERTcyNDZENjExRkU0QTk1QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjek7Y77eXQNNj1MgOcqlLqU3i N9EsOjNaFQq7kWAHtbdqtTa25E9t8WUXNqN+Aynk+hsGyJqaaXrkU65hXY+AE5wE MecGZQeUQkbTySyKWGCpa9klrh8hzW7IE0NwqwUOXDb3WtSryqkCyoHiVXZDaNuL AhuD9SiQL2yt3oYS7aBKgAwmssveDcOTYPye2fc0l2GoTNxGev4IwSDe1hntgQYg MT7sPCTxsHk3YOiXAb7C2wXRnO1tQcrJZl914hEMiYokiUFQm4ocNThdrVoxlBar PXQi4DzkApv6CiAdrZgMwZa6wx+r2LAelD2s8SBGDWo0EaB5ej1utUuk/uSLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNnSgZofmyjRp1RLeckbWEf5Klb8wHwYDVR0j BBgwFoAUExgHvdqvl+1yIU37xcU5rLBP3L4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjI1Yjk2OC0wOTI3LTQ1OTQtODg3ZS02N2Y1M2Y5NjdiMTIvMC8xMzE4MDdCRERB QUY5N0VENzIyMTRERkJDNUM1MzlBQ0IwNEZEQ0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNCMDRG RENCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmYyNWI5NjgtMDkyNy00NTk0LTg4 N2UtNjdmNTNmOTY3YjEyLzAvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5 QUNCMDRGRENCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKHJ7x7mu1wYJusaMpkvNvELTtVd149iD0y1 YXFQUrX/FpAG6uzSBly8NK+QTO+BN+hLWJPEN7jB0zOmbrRjg0Gh3UZG5+J9QCin 08Ahxg0b90e4DGr3x5/BGOX1LxVu/kgidFBynVZtifl3gxhK4ifaZM9tOCYLHF/Q tMn9wgp3ZSl4ump5Va8bZigBHc+A9ZHU34P/+Mb2TWil1EOfTB/t+TaoFFRalfMp FhmHnnLOBgeNoAbSXBuQPTIpO96Sm2pVDCjusf0wgXRnkcXgxnUkoPL/vI7z1zb7 EYU4EeGwNFUc+kdNTfXQRqdCWO2AA3OYdQvslAY6+6dl/Ag48nY= -----END CERTIFICATE-----Generated at Sun Jun 15 17:29:49 2025 by rpki-client