$ rpki-client -vvf repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft File: B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft (raw, json) Hash identifier: JhHZJGu49E5k40PTP47NWfWjMPG3ExeSKgvaoVlpdAA= Subject key identifier: 13:5E:D3:20:7F:A5:BD:13:2D:3C:96:35:7D:6D:A2:E8:56:F8:F4:D2 Authority key identifier: B9:2F:0F:B3:E1:41:D5:2E:D2:A7:1F:A4:83:ED:3C:6D:72:3F:60:E2 Certificate issuer: /CN=B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2 Certificate serial: 7E29B897C2351E752B302948840FAD07237E6E93 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft Manifest number: 44 Signing time: Tue 29 Apr 2025 05:51:29 +0000 Manifest this update: Tue 29 Apr 2025 05:46:29 +0000 Manifest next update: Fri 02 May 2025 07:55:29 +0000 Files and hashes: 1: 323030313a6466343a363463303a3a2f34382d3438203d3e20313533313430.roa (hash: yyzmdDb8FTjdC+THNvwdhgAOOXsuzFTHgJxxHYpFD6k=) 2: B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl (hash: +jozFbBgtCRWmLM1jU/UqkqTEwWnB8HvIfnnIeQISVU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:29:b8:97:c2:35:1e:75:2b:30:29:48:84:0f:ad:07:23:7e:6e:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2 Validity Not Before: Apr 29 05:46:29 2025 GMT Not After : May 2 07:55:29 2025 GMT Subject: CN=135ED3207FA5BD132D3C96357D6DA2E856F8F4D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8a:85:e0:a7:92:60:81:12:1a:55:1a:30:59: 44:11:18:70:f8:85:bd:46:1e:4f:80:a9:7d:a3:53: 5c:3a:24:84:42:b4:e6:98:b3:d0:7c:30:41:3f:7d: 3f:5d:11:58:7f:67:c6:8c:a2:e4:e5:a8:db:97:5c: 38:a0:d7:38:0f:b5:16:f4:2a:96:3f:96:12:93:eb: 6b:d4:d0:fd:09:28:88:22:42:c2:bf:8c:19:de:3c: 45:05:9a:ce:f3:99:e7:34:63:13:c5:72:56:7b:a3: 5a:16:3a:70:db:f1:e0:a7:df:e2:b0:6b:aa:45:e0: c7:7d:91:56:ac:b1:d9:9e:54:d4:fe:fd:2a:5b:b9: 3a:cd:37:e9:32:f7:2b:21:22:4b:6c:01:1f:8a:cd: 62:10:0e:2f:c0:0d:de:39:fd:87:be:97:2f:a1:51: 1e:7f:e7:b1:c9:d8:37:69:5a:e3:94:83:97:35:6d: dd:76:ca:2e:39:ba:1a:4a:a4:99:bf:7d:de:38:11: 47:48:40:84:0b:3b:35:61:09:81:8d:f9:3f:03:6a: 1c:2d:df:48:f9:90:bb:9b:65:45:9b:4c:ea:2d:30: e1:9c:74:8d:fb:52:d3:5e:00:01:04:85:c2:11:47: 34:bb:50:c3:3e:e3:89:b3:6b:c1:53:74:1d:05:02: f0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:5E:D3:20:7F:A5:BD:13:2D:3C:96:35:7D:6D:A2:E8:56:F8:F4:D2 X509v3 Authority Key Identifier: keyid:B9:2F:0F:B3:E1:41:D5:2E:D2:A7:1F:A4:83:ED:3C:6D:72:3F:60:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:8b:da:e0:f9:c9:7a:a9:31:a6:5c:e0:46:f4:dd:a4:9a:27: 0a:dc:77:e0:38:10:f8:6f:ba:22:33:2c:c6:8d:cd:dc:20:96: 3a:ed:1d:bf:c7:ae:9a:19:53:50:96:e3:cc:29:af:ee:c7:2a: 6c:9d:f4:ce:d1:3c:bc:ce:0e:ff:41:4f:d7:da:f3:9f:49:62: c3:81:28:53:45:9f:bd:8a:07:51:86:e1:f7:59:33:bf:6f:8f: ce:27:6a:33:50:e4:c0:d8:3c:05:66:23:2a:d6:b5:b8:8d:78: 8b:de:a2:e4:c0:bf:27:70:ca:4c:ee:5e:c9:6a:45:c9:09:41: 7a:10:4d:87:77:08:8a:c6:a6:66:d8:28:2c:04:2b:f6:ee:c2: 09:32:7d:6a:e6:03:f0:cc:04:9d:fc:4e:3e:f1:c0:dd:88:c3: 18:da:22:65:81:db:59:8f:7d:b8:10:d6:01:d2:31:25:8c:f0: 72:84:df:7a:78:55:74:ad:86:46:3c:8b:e7:94:d7:9a:28:b3: f7:92:37:cd:ee:61:9b:f8:61:bb:13:2e:d8:a2:8c:cd:ef:30: c1:07:46:b6:89:16:35:92:23:b8:58:65:6b:c3:d4:3a:dc:5b: db:55:ca:f1:7e:b0:43:c6:42:40:40:2d:c4:49:6d:bd:a5:ef: 09:9d:78:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfim4l8I1HnUrMClIhA+tByN+bpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDNDNkQ3 MjNGNjBFMjAeFw0yNTA0MjkwNTQ2MjlaFw0yNTA1MDIwNzU1MjlaMDMxMTAvBgNV BAMTKDEzNUVEMzIwN0ZBNUJEMTMyRDNDOTYzNTdENkRBMkU4NTZGOEY0RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFioXgp5JggRIaVRowWUQRGHD4 hb1GHk+AqX2jU1w6JIRCtOaYs9B8MEE/fT9dEVh/Z8aMouTlqNuXXDig1zgPtRb0 KpY/lhKT62vU0P0JKIgiQsK/jBnePEUFms7zmec0YxPFclZ7o1oWOnDb8eCn3+Kw a6pF4Md9kVassdmeVNT+/SpbuTrNN+ky9yshIktsAR+KzWIQDi/ADd45/Ye+ly+h UR5/57HJ2DdpWuOUg5c1bd12yi45uhpKpJm/fd44EUdIQIQLOzVhCYGN+T8Dahwt 30j5kLubZUWbTOotMOGcdI37UtNeAAEEhcIRRzS7UMM+44mza8FTdB0FAvB/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE17TIH+lvRMtPJY1fW2i6Fb49NIwHwYDVR0j BBgwFoAUuS8Ps+FB1S7Spx+kg+08bXI/YOIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWZjYmZiYi1iYTNmLTRkNTMtYTA0Zi0xNGQ2ZjRiZTBjYjEvMS9COTJGMEZCM0Ux NDFENTJFRDJBNzFGQTQ4M0VEM0M2RDcyM0Y2MEUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDNDNkQ3MjNG NjBFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzEvQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDND NkQ3MjNGNjBFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHSL2uD5yXqpMaZc4Eb03aSaJwrcd+A4EPhv uiIzLMaNzdwgljrtHb/HrpoZU1CW48wpr+7HKmyd9M7RPLzODv9BT9fa859JYsOB KFNFn72KB1GG4fdZM79vj84najNQ5MDYPAVmIyrWtbiNeIveouTAvydwykzuXslq RckJQXoQTYd3CIrGpmbYKCwEK/buwgkyfWrmA/DMBJ38Tj7xwN2IwxjaImWB21mP fbgQ1gHSMSWM8HKE33p4VXSthkY8i+eU15oos/eSN83uYZv4YbsTLtiijM3vMMEH RraJFjWSI7hYZWvD1DrcW9tVyvF+sEPGQkBALcRJbb2l7wmdeII= -----END CERTIFICATE-----Generated at Wed Apr 30 00:07:38 2025 by rpki-client