$ rpki-client -vvf repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.mft File: B891A45840F824B9F116CBEAA3574A68343F5538.mft (raw, json) Hash identifier: QlQio34vK0JLHktLuDjw2B2pOI37gVUqXpjOWkH8bQQ= Subject key identifier: 06:29:BE:56:DC:EF:80:35:8A:4A:3C:C4:0C:5D:8C:D5:0D:6F:5C:0B Authority key identifier: B8:91:A4:58:40:F8:24:B9:F1:16:CB:EA:A3:57:4A:68:34:3F:55:38 Certificate issuer: /CN=B891A45840F824B9F116CBEAA3574A68343F5538 Certificate serial: 2665BBCCC1B2E5C641E4FD250C669CD9273A1A6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B891A45840F824B9F116CBEAA3574A68343F5538.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.mft Manifest number: 53 Signing time: Sat 14 Jun 2025 02:52:06 +0000 Manifest this update: Sat 14 Jun 2025 02:47:06 +0000 Manifest next update: Tue 17 Jun 2025 13:30:06 +0000 Files and hashes: 1: 3130332e32382e3231382e302f32342d3234203d3e203538333835.roa (hash: cMJACG+wJYTKnGt0rpeqO/b7Kbn+Qvg12TrUivh9cCk=) 2: 3130332e3234362e3136392e302f32342d3234203d3e203538333835.roa (hash: 8meh4qssPriL64kBvXs5YtBumf6ArWnflJaVktjo3Fo=) 3: 3131302e39322e37342e302f32332d3234203d3e203538333835.roa (hash: XgxFmfrvLr/HS422k6dRWPfIUiiCoQbGouQtaJJQX4Y=) 4: B891A45840F824B9F116CBEAA3574A68343F5538.crl (hash: UmVBFG0i+KJnTcnSF10NLIraga2h16qA0SaeplI24zc=) 5: 3130332e32332e3131362e302f32332d3234203d3e203538333835.roa (hash: 5UewkM1pAbLnP65YZLTVxzSYU/L1g1J84e5HTrwnd3M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.crl rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B891A45840F824B9F116CBEAA3574A68343F5538.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 13:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:65:bb:cc:c1:b2:e5:c6:41:e4:fd:25:0c:66:9c:d9:27:3a:1a:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B891A45840F824B9F116CBEAA3574A68343F5538 Validity Not Before: Jun 14 02:47:06 2025 GMT Not After : Jun 17 13:30:06 2025 GMT Subject: CN=0629BE56DCEF80358A4A3CC40C5D8CD50D6F5C0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c3:e6:96:90:28:62:ce:65:7a:14:3e:6d:89: 7c:a6:95:93:33:50:1a:c6:21:8a:41:c3:bf:78:89: 0c:f4:b3:0c:5b:b7:4c:5d:41:60:74:14:6a:3e:ed: 80:9e:3a:dc:33:72:3a:12:2e:ca:2c:f7:3e:b1:5d: af:51:d1:28:0d:9d:f4:08:cf:28:99:33:b5:4c:aa: d7:ea:22:9e:2e:39:69:a9:ac:dc:69:80:fb:fe:79: 5c:86:e2:cd:28:dc:77:09:30:1a:de:4e:c5:9d:cb: 91:02:e8:c1:3e:cf:98:58:fd:7f:cb:49:d2:50:9d: 70:b9:5f:e0:9f:55:83:4b:e5:9d:91:28:6a:0c:21: 37:0d:1b:58:40:68:1a:c2:4e:ce:27:c5:16:91:36: e5:02:cc:fa:9e:2b:77:ea:bd:39:ea:49:4b:65:bf: 52:28:d8:2c:2a:11:48:04:78:98:22:91:33:fd:d8: 18:7d:22:92:41:0a:7c:7a:4e:8f:38:a3:3f:a9:48: 7b:7a:84:32:a1:b7:f1:f5:c9:28:6a:d3:78:14:a9: 8a:04:67:b2:3d:3b:98:d4:53:b6:70:61:3b:aa:aa: 8b:06:67:fe:8f:1d:68:80:37:e7:37:69:63:e7:e0: 3d:04:66:9a:73:6b:ac:98:8c:f6:73:7e:47:b5:13: 73:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:29:BE:56:DC:EF:80:35:8A:4A:3C:C4:0C:5D:8C:D5:0D:6F:5C:0B X509v3 Authority Key Identifier: keyid:B8:91:A4:58:40:F8:24:B9:F1:16:CB:EA:A3:57:4A:68:34:3F:55:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B891A45840F824B9F116CBEAA3574A68343F5538.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:66:15:1b:39:82:96:32:13:2b:e8:0c:6b:63:8b:10:e8:09: c0:22:75:78:ff:24:e7:d0:91:10:eb:f6:0c:4f:07:7c:4b:2b: 4c:e8:c2:69:6e:3c:6e:51:8d:0a:4a:e2:85:39:56:30:e7:95: 70:e6:89:f6:46:ec:c3:ba:35:4c:29:24:d8:22:19:cb:19:76: 71:9c:1a:82:25:9b:fc:35:9c:d2:2c:c7:9c:3a:15:96:d4:56: f9:14:21:63:23:26:8a:2a:85:4f:1d:94:22:6e:5c:1e:91:c5: 27:f1:d4:b2:13:8d:ca:a0:84:d3:0b:14:bf:1f:4b:c1:4e:10: 0e:a7:a4:d5:a9:4d:97:9e:a3:c2:c2:67:70:de:5c:90:79:7e: b2:fe:11:58:49:d0:bb:2c:13:2b:04:3a:f0:ca:e9:88:0d:9a: 45:60:df:a0:06:0b:5f:a2:72:fa:9a:0f:73:1e:67:a9:1f:b2: d7:44:89:9b:3d:40:5a:bc:85:e6:2b:0d:a1:12:ad:dd:c4:0d: c0:18:16:24:4f:a3:26:61:80:50:6d:0b:53:88:32:40:b0:7c: 84:fc:c9:f9:b8:23:91:17:b1:f7:06:03:0d:51:8e:f4:de:b8: 05:fa:72:d0:23:38:e5:b0:5f:2b:66:23:0e:f9:c9:80:74:d9: f2:05:9c:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJmW7zMGy5cZB5P0lDGac2Sc6Gm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg5MUE0NTg0MEY4MjRCOUYxMTZDQkVBQTM1NzRBNjgz NDNGNTUzODAeFw0yNTA2MTQwMjQ3MDZaFw0yNTA2MTcxMzMwMDZaMDMxMTAvBgNV BAMTKDA2MjlCRTU2RENFRjgwMzU4QTRBM0NDNDBDNUQ4Q0Q1MEQ2RjVDMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7w+aWkChizmV6FD5tiXymlZMz UBrGIYpBw794iQz0swxbt0xdQWB0FGo+7YCeOtwzcjoSLsos9z6xXa9R0SgNnfQI zyiZM7VMqtfqIp4uOWmprNxpgPv+eVyG4s0o3HcJMBreTsWdy5EC6ME+z5hY/X/L SdJQnXC5X+CfVYNL5Z2RKGoMITcNG1hAaBrCTs4nxRaRNuUCzPqeK3fqvTnqSUtl v1Io2CwqEUgEeJgikTP92Bh9IpJBCnx6To84oz+pSHt6hDKht/H1yShq03gUqYoE Z7I9O5jUU7ZwYTuqqosGZ/6PHWiAN+c3aWPn4D0EZppza6yYjPZzfke1E3NJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBim+VtzvgDWKSjzEDF2M1Q1vXAswHwYDVR0j BBgwFoAUuJGkWED4JLnxFsvqo1dKaDQ/VTgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MzkyNTM4OC0zNWM2LTQxZDctOWRjNC1kYjRkMTE4ZDEzNWEvMC9CODkxQTQ1ODQw RjgyNEI5RjExNkNCRUFBMzU3NEE2ODM0M0Y1NTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg5MUE0NTg0MEY4MjRCOUYxMTZDQkVBQTM1NzRBNjgzNDNG NTUzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM5MjUzODgtMzVjNi00MWQ3LTlk YzQtZGI0ZDExOGQxMzVhLzAvQjg5MUE0NTg0MEY4MjRCOUYxMTZDQkVBQTM1NzRB NjgzNDNGNTUzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG5mFRs5gpYyEyvoDGtjixDoCcAidXj/JOfQ kRDr9gxPB3xLK0zowmluPG5RjQpK4oU5VjDnlXDmifZG7MO6NUwpJNgiGcsZdnGc GoIlm/w1nNIsx5w6FZbUVvkUIWMjJooqhU8dlCJuXB6RxSfx1LITjcqghNMLFL8f S8FOEA6npNWpTZeeo8LCZ3DeXJB5frL+EVhJ0LssEysEOvDK6YgNmkVg36AGC1+i cvqaD3MeZ6kfstdEiZs9QFq8heYrDaESrd3EDcAYFiRPoyZhgFBtC1OIMkCwfIT8 yfm4I5EXsfcGAw1RjvTeuAX6ctAjOOWwXytmIw75yYB02fIFnN4= -----END CERTIFICATE-----Generated at Mon Jun 16 06:06:00 2025 by rpki-client