$ rpki-client -vvf repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft File: B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft (raw, json) Hash identifier: iBYw3WRC7Go7zZ3goELBsXv4u3cH4WuQh3ZPgeeYDho= Subject key identifier: 63:09:61:E6:82:09:C3:1A:F5:69:46:B8:C0:51:7A:6C:E0:96:14:40 Authority key identifier: B9:2F:0F:B3:E1:41:D5:2E:D2:A7:1F:A4:83:ED:3C:6D:72:3F:60:E2 Certificate issuer: /CN=B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2 Certificate serial: 6314986BDC11AA78EE0088D8567B5FFDD27B2C1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft Manifest number: 59 Signing time: Sat 14 Jun 2025 09:41:30 +0000 Manifest this update: Sat 14 Jun 2025 09:36:30 +0000 Manifest next update: Tue 17 Jun 2025 14:13:30 +0000 Files and hashes: 1: B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl (hash: NOFqM+1KTliGIwSbMvHMlcMo+MAkIb6K3+3nT68+maQ=) 2: 323030313a6466343a363463303a3a2f34382d3438203d3e20313533313430.roa (hash: yyzmdDb8FTjdC+THNvwdhgAOOXsuzFTHgJxxHYpFD6k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 14:13:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:14:98:6b:dc:11:aa:78:ee:00:88:d8:56:7b:5f:fd:d2:7b:2c:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2 Validity Not Before: Jun 14 09:36:30 2025 GMT Not After : Jun 17 14:13:30 2025 GMT Subject: CN=630961E68209C31AF56946B8C0517A6CE0961440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c2:0b:cb:e8:41:93:bd:83:4f:4f:b9:18:69: fb:98:ce:a6:10:80:65:26:fe:de:ec:eb:20:8a:7a: 33:b9:66:4b:3f:f3:f1:0a:26:74:94:93:aa:c2:55: c4:de:a0:6b:68:bf:d3:88:0c:a9:26:25:e8:9a:9a: 8c:58:47:d4:84:bc:94:86:7a:7a:a6:80:40:1e:92: 5d:f3:6d:de:49:d4:d1:1f:db:f8:88:57:2c:04:e2: 7d:0a:71:e9:32:ef:3c:5e:1d:36:0d:9b:0b:61:38: 8a:d4:5a:26:ba:f1:68:c2:d3:31:f8:30:c5:75:ae: 00:37:4a:3c:5e:18:f8:1c:ba:a4:a7:2b:29:b4:a8: 44:ff:39:b3:47:26:17:ce:a1:75:c6:62:d1:24:d8: bb:8f:a5:dc:63:a4:e3:07:35:1b:2a:32:cc:71:c6: 73:21:b0:f2:17:17:90:c7:d8:16:92:c1:c0:88:d1: 00:b2:39:e3:e3:8b:63:e9:92:37:bc:ca:8e:d3:5b: 46:e7:94:61:d3:6b:13:38:98:2a:9b:2a:2d:f9:c5: 37:49:01:b6:ab:80:47:38:e5:8d:a1:d7:d4:fd:e2: 64:8d:e6:02:4b:e7:17:f7:d7:8d:b3:18:b2:5c:04: ca:ce:11:88:fe:07:12:df:ed:82:b2:d8:ce:02:51: a2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:09:61:E6:82:09:C3:1A:F5:69:46:B8:C0:51:7A:6C:E0:96:14:40 X509v3 Authority Key Identifier: keyid:B9:2F:0F:B3:E1:41:D5:2E:D2:A7:1F:A4:83:ED:3C:6D:72:3F:60:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ce:66:ac:75:9c:81:b2:59:f4:03:03:5e:e5:17:1f:cc:50: 90:f1:9b:f3:e2:f1:93:ca:1a:a9:d9:29:b2:7d:7d:b0:e2:f7: ad:5f:cd:29:81:95:19:3f:26:26:b5:32:1c:72:0c:a8:7f:83: 0c:1b:db:6a:e7:fb:e5:16:80:9b:0d:29:5c:26:9f:99:b0:c8: 76:a1:c9:76:63:43:25:f4:93:9d:24:1c:ee:00:ef:67:2b:86: d3:c6:90:f9:01:81:25:91:27:76:66:5f:50:7c:4c:46:6d:04: 58:ef:7a:c4:ea:33:2e:05:1b:92:81:57:c1:cb:82:b4:46:4a: 1b:59:1b:f4:c3:f3:2c:16:ac:3b:cf:2c:19:27:2d:06:e7:dd: cf:20:d9:f1:63:3d:1f:f5:8e:c7:cb:61:6c:3a:76:09:bd:ed: 94:da:79:63:2f:64:43:7e:58:b0:47:a0:52:22:a0:26:f1:94: 2b:41:03:cc:fc:06:fc:c2:c8:73:6d:ce:4a:2f:fe:ab:5d:6e: 9e:f6:51:00:17:17:42:bc:6d:76:14:df:c0:50:67:97:3b:b4: 16:32:4e:e1:64:b9:a3:44:a9:fa:db:d8:51:b0:fc:37:3b:45: a9:68:da:47:58:f0:66:26:6c:e2:df:49:2a:76:34:80:67:59: 58:b6:8f:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYxSYa9wRqnjuAIjYVntf/dJ7LBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDNDNkQ3 MjNGNjBFMjAeFw0yNTA2MTQwOTM2MzBaFw0yNTA2MTcxNDEzMzBaMDMxMTAvBgNV BAMTKDYzMDk2MUU2ODIwOUMzMUFGNTY5NDZCOEMwNTE3QTZDRTA5NjE0NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbwgvL6EGTvYNPT7kYafuYzqYQ gGUm/t7s6yCKejO5Zks/8/EKJnSUk6rCVcTeoGtov9OIDKkmJeiamoxYR9SEvJSG enqmgEAekl3zbd5J1NEf2/iIVywE4n0Kceky7zxeHTYNmwthOIrUWia68WjC0zH4 MMV1rgA3SjxeGPgcuqSnKym0qET/ObNHJhfOoXXGYtEk2LuPpdxjpOMHNRsqMsxx xnMhsPIXF5DH2BaSwcCI0QCyOePji2Ppkje8yo7TW0bnlGHTaxM4mCqbKi35xTdJ AbargEc45Y2h19T94mSN5gJL5xf3142zGLJcBMrOEYj+BxLf7YKy2M4CUaL7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYwlh5oIJwxr1aUa4wFF6bOCWFEAwHwYDVR0j BBgwFoAUuS8Ps+FB1S7Spx+kg+08bXI/YOIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWZjYmZiYi1iYTNmLTRkNTMtYTA0Zi0xNGQ2ZjRiZTBjYjEvMS9COTJGMEZCM0Ux NDFENTJFRDJBNzFGQTQ4M0VEM0M2RDcyM0Y2MEUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDNDNkQ3MjNG NjBFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzEvQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDND NkQ3MjNGNjBFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3OZqx1nIGyWfQDA17lFx/MUJDxm/Pi8ZPK GqnZKbJ9fbDi961fzSmBlRk/Jia1MhxyDKh/gwwb22rn++UWgJsNKVwmn5mwyHah yXZjQyX0k50kHO4A72crhtPGkPkBgSWRJ3ZmX1B8TEZtBFjvesTqMy4FG5KBV8HL grRGShtZG/TD8ywWrDvPLBknLQbn3c8g2fFjPR/1jsfLYWw6dgm97ZTaeWMvZEN+ WLBHoFIioCbxlCtBA8z8BvzCyHNtzkov/qtdbp72UQAXF0K8bXYU38BQZ5c7tBYy TuFkuaNEqfrb2FGw/Dc7Ralo2kdY8GYmbOLfSSp2NIBnWVi2jyM= -----END CERTIFICATE-----Generated at Mon Jun 16 10:43:53 2025 by rpki-client