$ rpki-client -vvf repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft File: B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft (raw, json) Hash identifier: Dbu28Uy5NdDky2mkEM/8qEUOpoiAwS1X11cY+KY38U4= Subject key identifier: 01:CF:9A:48:91:FF:44:44:9D:1D:78:13:C8:D0:FD:08:7C:CB:8F:F6 Authority key identifier: B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E Certificate issuer: /CN=B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E Certificate serial: 537ABCC430547252D0084AB6C12E9CDB0F5862F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft Manifest number: 04DF Signing time: Mon 16 Jun 2025 00:30:44 +0000 Manifest this update: Mon 16 Jun 2025 00:25:44 +0000 Manifest next update: Thu 19 Jun 2025 04:50:44 +0000 Files and hashes: 1: B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl (hash: w0Rdzk1x9x0ZNEgUiqO6X19/Rxvsb3kTMI8ARFjadOE=) 2: 3130332e37322e3131302e302f32342d3234203d3e203538343736.roa (hash: voekDMYuoDNmVswZr7/xsWsJnvx7lZSdUg+Aq+ToSP0=) 3: 323030313a6466303a3236663a3a2f34382d3438203d3e203538343736.roa (hash: 19ABnycRhti98EG6MJ/6S6W4a31omV6sktXNN7fCeRE=) 4: 3130332e32382e3130362e302f32342d3234203d3e203538343736.roa (hash: 3CwSzY5tw6Zm4h624sLhttPd8ZN8CiHTGKhVehN+hWE=) 5: 3130332e32382e3130372e302f32342d3234203d3e203538343736.roa (hash: 1UalLxKn41/lSLgzHwYn+86cGRYM0p3PY4M21eZtrAo=) 6: 34332e3234322e3133332e302f32342d3234203d3e203538343736.roa (hash: 2NAEElgvlB7IhQMwd1Atvpj3R7riVOfOU9AzMjYnGF0=) 7: 3130332e37322e3131312e302f32342d3234203d3e203538343736.roa (hash: lw8CjbCa9nau6CgaK9qo3W7fJOYahpzK8W9j4IBI5bo=) 8: 34332e3234322e3133322e302f32342d3234203d3e203538343736.roa (hash: ut8mKe181e+GL8gZVd8D9lpxfAhurYa657vG8sPaVZU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 04:50:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:7a:bc:c4:30:54:72:52:d0:08:4a:b6:c1:2e:9c:db:0f:58:62:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E Validity Not Before: Jun 16 00:25:44 2025 GMT Not After : Jun 19 04:50:44 2025 GMT Subject: CN=01CF9A4891FF44449D1D7813C8D0FD087CCB8FF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e9:fc:cd:81:41:bb:84:a3:54:ac:61:55:50: 00:c5:21:06:19:c1:26:ca:0f:a4:f3:4c:92:46:8d: 13:f8:c5:49:0a:f5:76:45:60:0d:d7:4c:40:c0:26: ae:00:4e:19:80:f8:30:05:97:65:a5:e8:aa:e8:da: 30:67:80:84:14:cf:cf:40:a8:82:0f:05:85:74:f9: 31:12:3d:67:8b:5e:a1:e8:6c:60:15:54:70:05:37: 32:8c:ac:38:a3:1b:48:64:57:a5:6f:94:e9:be:e1: c6:ce:cd:a2:6c:f8:cc:4e:e9:fa:9c:91:e9:c0:1b: 33:0f:2b:0d:71:f8:12:03:79:b1:5e:61:66:a7:c8: 89:71:b0:3a:75:ec:31:ac:c2:50:78:f5:50:ca:02: ad:d1:5e:de:93:5e:04:fb:8e:bd:45:fb:9f:f6:7d: 84:2d:3b:b5:a8:06:85:1b:09:f4:8f:47:7f:ed:b2: 01:e2:29:58:6a:9c:83:37:7a:31:b9:c9:83:99:4a: 4c:19:26:b5:b4:93:78:41:0d:71:99:6c:28:91:66: de:4b:52:bf:d7:37:70:95:2d:8b:a8:35:2d:e1:07: 22:49:85:4e:35:3c:c2:25:7c:cb:ee:fb:95:1a:a4: f8:17:44:29:b5:e1:82:c3:ef:66:3d:79:82:d1:9a: 04:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:CF:9A:48:91:FF:44:44:9D:1D:78:13:C8:D0:FD:08:7C:CB:8F:F6 X509v3 Authority Key Identifier: keyid:B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:91:c4:3f:9e:3a:e9:27:55:e8:c2:f1:62:a0:7a:e1:30:56: 51:af:3e:bd:40:d6:ad:d5:6c:5e:5d:4d:5b:1a:8c:25:f0:0c: 46:4d:a7:70:bb:d1:0d:ef:0a:61:b4:a3:4f:1f:21:53:da:e8: e0:2d:cd:21:6a:4a:c7:96:2d:b2:aa:8e:69:d6:3c:3e:63:52: ea:4d:98:66:65:0a:02:80:a2:74:21:1a:38:65:ec:61:1e:7c: 93:41:3b:4a:91:81:76:75:c6:67:32:9e:7e:0e:b4:05:1a:b7: 17:c7:d0:50:a2:24:95:26:6a:fe:62:84:77:1e:4e:e9:9a:85: e3:0c:33:50:3c:3f:7e:30:99:c3:e4:c0:3f:42:f7:d2:4c:e3: f5:fd:e6:e3:52:21:54:59:ac:68:7f:30:73:fb:8f:fb:71:c3: f3:84:cc:d0:ea:57:08:a2:69:dc:f4:82:d7:b1:0a:0b:e2:1e: 19:34:52:f3:88:bc:29:03:5e:b6:7f:1a:ae:69:dc:7e:f6:69: 70:b9:76:55:fe:44:6a:ba:d9:19:e8:d3:f3:a8:aa:a6:f0:7e: 7a:0f:ce:d5:f7:68:80:f4:26:dd:9c:65:7e:d7:15:eb:45:45: 7b:1b:fc:03:14:05:f1:74:f6:46:4d:eb:0d:c3:ff:5f:33:fc: 2c:6a:f8:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU3q8xDBUclLQCEq2wS6c2w9YYvIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdCM0VD NTAzRUYzRTAeFw0yNTA2MTYwMDI1NDRaFw0yNTA2MTkwNDUwNDRaMDMxMTAvBgNV BAMTKDAxQ0Y5QTQ4OTFGRjQ0NDQ5RDFENzgxM0M4RDBGRDA4N0NDQjhGRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR6fzNgUG7hKNUrGFVUADFIQYZ wSbKD6TzTJJGjRP4xUkK9XZFYA3XTEDAJq4AThmA+DAFl2Wl6Kro2jBngIQUz89A qIIPBYV0+TESPWeLXqHobGAVVHAFNzKMrDijG0hkV6VvlOm+4cbOzaJs+MxO6fqc kenAGzMPKw1x+BIDebFeYWanyIlxsDp17DGswlB49VDKAq3RXt6TXgT7jr1F+5/2 fYQtO7WoBoUbCfSPR3/tsgHiKVhqnIM3ejG5yYOZSkwZJrW0k3hBDXGZbCiRZt5L Ur/XN3CVLYuoNS3hByJJhU41PMIlfMvu+5UapPgXRCm14YLD72Y9eYLRmgT/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAc+aSJH/RESdHXgTyND9CHzLj/YwHwYDVR0j BBgwFoAUsUTk6yj2nZt2wMJJm/17PsUD7z4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m N2Y0OTA2OC1jMGNhLTRhMjEtOWE4YS1lZWQyNmZjZGQxYWEvMC9CMTQ0RTRFQjI4 RjY5RDlCNzZDMEMyNDk5QkZEN0IzRUM1MDNFRjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdCM0VDNTAz RUYzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjdmNDkwNjgtYzBjYS00YTIxLTlh OGEtZWVkMjZmY2RkMWFhLzAvQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdC M0VDNTAzRUYzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+RxD+eOuknVejC8WKgeuEwVlGvPr1A1q3V bF5dTVsajCXwDEZNp3C70Q3vCmG0o08fIVPa6OAtzSFqSseWLbKqjmnWPD5jUupN mGZlCgKAonQhGjhl7GEefJNBO0qRgXZ1xmcynn4OtAUatxfH0FCiJJUmav5ihHce TumaheMMM1A8P34wmcPkwD9C99JM4/X95uNSIVRZrGh/MHP7j/txw/OEzNDqVwii adz0gtexCgviHhk0UvOIvCkDXrZ/Gq5p3H72aXC5dlX+RGq62Rno0/OoqqbwfnoP ztX3aID0Jt2cZX7XFetFRXsb/AMUBfF09kZN6w3D/18z/Cxq+GI= -----END CERTIFICATE-----Generated at Tue Jun 17 03:27:51 2025 by rpki-client