$ rpki-client -vvf repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft File: 94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft (raw, json) Hash identifier: +InThXpCgrm9ZsP4c/IPhoCfk9K3OdfeFCs+IyQzjEo= Subject key identifier: 11:DC:C4:38:AA:E0:49:D3:F4:8A:FA:A2:18:66:7C:F2:E2:89:4F:89 Authority key identifier: 94:15:9F:AF:0A:97:95:02:CA:B6:C5:AD:DC:AE:4C:FD:EC:DE:ED:EF Certificate issuer: /CN=94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF Certificate serial: 2D117C6972A527236E5696E24B7B5D043EAEEA17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft Manifest number: 8D Signing time: Wed 18 Jun 2025 12:30:34 +0000 Manifest this update: Wed 18 Jun 2025 12:25:34 +0000 Manifest next update: Sat 21 Jun 2025 13:16:34 +0000 Files and hashes: 1: 94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl (hash: noabmsybwSS3g4MKJCdovvC7xM5x1KvgbWCgcjZS9G8=) 2: 323030313a6466343a323038303a3a2f34382d3438203d3e20313430343436.roa (hash: /sVHS2YVPGN4I7pjlv0CumuB8iSOyLfbW32z22cHMqg=) 3: 3130332e3135322e3233322e302f32332d3234203d3e20313430343436.roa (hash: w8USKPwJWUmAD2EnMdpXJB1C3F3hUfqedwFlox0zn3A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 13:16:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:11:7c:69:72:a5:27:23:6e:56:96:e2:4b:7b:5d:04:3e:ae:ea:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF Validity Not Before: Jun 18 12:25:34 2025 GMT Not After : Jun 21 13:16:34 2025 GMT Subject: CN=11DCC438AAE049D3F48AFAA218667CF2E2894F89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ca:92:29:fd:fa:92:fa:68:d9:33:cc:7a:8a: 65:2e:c1:61:c1:a8:eb:ac:84:a9:a8:f4:c2:2f:5d: e7:cd:86:f1:2c:c1:8f:49:f5:39:26:4a:71:9a:2a: 49:88:0d:d9:35:e2:b3:cf:f7:7f:3f:e5:ed:b0:1a: e7:88:5c:41:d7:3a:47:73:23:f1:84:a0:f7:64:0e: 97:39:8b:d5:58:79:e9:7f:05:8f:7e:1f:35:9d:7c: 78:ce:16:f9:73:0b:90:f0:d0:ba:20:ac:6b:14:77: 32:2e:3f:08:0c:63:3e:53:50:66:45:40:fc:1e:c7: 66:9c:89:f6:60:3f:41:8e:d2:3e:ef:1e:2f:f5:73: 94:5d:2f:7b:e2:a2:49:e8:8f:e4:ff:8c:4d:24:c6: 5e:a5:1d:da:7d:92:68:ac:b4:22:3b:18:99:83:0f: b4:94:c8:74:76:e2:80:40:2c:cc:55:8b:6a:ca:e5: ea:50:7e:61:70:14:bf:d2:4b:2b:db:4d:15:8a:9c: 14:6f:2e:95:da:8d:1a:29:23:59:e0:2c:58:95:6f: a9:b1:a8:64:c5:fe:6a:b7:8b:62:f2:ee:4f:7c:d4: 79:b6:a5:22:90:86:7e:4e:d8:89:98:68:1a:57:4a: b2:a7:fc:8e:44:ca:38:6e:9c:75:04:25:50:c8:d9: 5b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:DC:C4:38:AA:E0:49:D3:F4:8A:FA:A2:18:66:7C:F2:E2:89:4F:89 X509v3 Authority Key Identifier: keyid:94:15:9F:AF:0A:97:95:02:CA:B6:C5:AD:DC:AE:4C:FD:EC:DE:ED:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:6b:2a:72:8b:f6:74:53:d9:7d:c0:10:8a:9c:7f:ca:fd:c3: 12:e7:3b:62:13:2b:37:ca:0e:a4:a6:6f:0b:52:1b:b6:43:50: 87:7d:4e:04:d3:5e:91:84:e1:b3:80:9b:63:2b:89:b7:5f:53: ad:18:f5:7b:5a:ae:a0:01:71:56:9f:fa:ac:90:e5:5b:7a:d1: f4:03:e4:4e:4b:97:d6:25:24:37:a8:70:0b:a5:96:51:a2:36: d2:98:b5:51:11:02:2c:98:39:d6:64:a7:db:62:0d:72:27:b4: 0f:53:af:9d:e7:3d:f8:bc:6a:52:19:3c:54:5b:fb:da:18:77: ec:1e:17:2a:9a:66:e6:f3:83:c2:80:d0:2d:80:66:5e:82:85: 4e:14:6a:02:92:69:79:75:2d:8b:33:9c:c8:f4:b7:30:fe:43: 6f:b2:7c:1e:15:4c:fe:62:d6:f8:07:49:5e:56:2f:b9:ae:08: a8:32:67:83:ac:d1:a8:0d:eb:55:c7:82:36:87:9b:5a:e1:ec: 4f:c1:01:27:ad:0f:b1:b0:18:29:fa:49:18:7a:2f:60:fd:ce: d1:8e:2c:ef:44:23:a6:05:09:41:af:85:6b:97:c2:c2:44:1e: c2:d0:f7:08:57:93:cb:c9:14:16:5b:cc:7f:58:51:3f:55:5a: d7:42:98:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULRF8aXKlJyNuVpbiS3tdBD6u6hcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRDRkRF Q0RFRURFRjAeFw0yNTA2MTgxMjI1MzRaFw0yNTA2MjExMzE2MzRaMDMxMTAvBgNV BAMTKDExRENDNDM4QUFFMDQ5RDNGNDhBRkFBMjE4NjY3Q0YyRTI4OTRGODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwypIp/fqS+mjZM8x6imUuwWHB qOushKmo9MIvXefNhvEswY9J9TkmSnGaKkmIDdk14rPP938/5e2wGueIXEHXOkdz I/GEoPdkDpc5i9VYeel/BY9+HzWdfHjOFvlzC5Dw0LogrGsUdzIuPwgMYz5TUGZF QPwex2acifZgP0GO0j7vHi/1c5RdL3vioknoj+T/jE0kxl6lHdp9kmistCI7GJmD D7SUyHR24oBALMxVi2rK5epQfmFwFL/SSyvbTRWKnBRvLpXajRopI1ngLFiVb6mx qGTF/mq3i2Ly7k981Hm2pSKQhn5O2ImYaBpXSrKn/I5EyjhunHUEJVDI2Vu5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEdzEOKrgSdP0ivqiGGZ88uKJT4kwHwYDVR0j BBgwFoAUlBWfrwqXlQLKtsWt3K5M/eze7e8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NGYwNzk4Ny1iOGVjLTQ0NGEtOWI0NC0yOTEwMTFmZjQ2YTYvMC85NDE1OUZBRjBB OTc5NTAyQ0FCNkM1QUREQ0FFNENGREVDREVFREVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRDRkRFQ0RF RURFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzRmMDc5ODctYjhlYy00NDRhLTli NDQtMjkxMDExZmY0NmE2LzAvOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRD RkRFQ0RFRURFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC5rKnKL9nRT2X3AEIqcf8r9wxLnO2ITKzfK DqSmbwtSG7ZDUId9TgTTXpGE4bOAm2MribdfU60Y9XtarqABcVaf+qyQ5Vt60fQD 5E5Ll9YlJDeocAulllGiNtKYtVERAiyYOdZkp9tiDXIntA9Tr53nPfi8alIZPFRb +9oYd+weFyqaZubzg8KA0C2AZl6ChU4UagKSaXl1LYsznMj0tzD+Q2+yfB4VTP5i 1vgHSV5WL7muCKgyZ4Os0agN61XHgjaHm1rh7E/BASetD7GwGCn6SRh6L2D9ztGO LO9EI6YFCUGvhWuXwsJEHsLQ9whXk8vJFBZbzH9YUT9VWtdCmMU= -----END CERTIFICATE-----Generated at Thu Jun 19 11:09:38 2025 by rpki-client