$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft File: B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft (raw, json) Hash identifier: mdEecvlY7n1BDKiET/1E9PejcRY78vZqcmcQ5rxtMTM= Subject key identifier: FB:59:68:17:54:B9:26:D9:99:BD:E6:A1:CE:CF:A3:45:94:DF:27:23 Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA Certificate serial: 3BB7A144A7CAADF7C8CA1EA132345EFD20857890 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft Manifest number: 05C4 Signing time: Sat 19 Jul 2025 16:20:03 +0000 Manifest this update: Sat 19 Jul 2025 16:15:03 +0000 Manifest next update: Tue 22 Jul 2025 22:08:03 +0000 Files and hashes: 1: AS139994.roa (hash: F7hIwzPI2Ea9gB0Xp4Xk6YhQEbDGp6jagSlzZiZywSc=) 2: AS17885.roa (hash: +GO2dMXskkTZVI0G/x5c/tJuemAtakjNsz3wmOidFEQ=) 3: B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl (hash: Fi1z5VIsP+2+c1Y39AK/Or41mNsFwh7jm35RoQPMlQ4=) 4: AS24203.roa (hash: PiioCRun01W3USZE21jLudCAK52GzKjTWQkIrQ39VD0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 22:08:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:b7:a1:44:a7:ca:ad:f7:c8:ca:1e:a1:32:34:5e:fd:20:85:78:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA Validity Not Before: Jul 19 16:15:03 2025 GMT Not After : Jul 22 22:08:03 2025 GMT Subject: CN=FB59681754B926D999BDE6A1CECFA34594DF2723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5c:76:df:12:d2:b6:c0:0c:ed:28:93:3b:2a: 75:36:dd:0d:c0:2e:db:4b:01:d0:1e:3b:9b:09:90: da:57:ef:2d:3f:29:45:26:a7:b9:58:1d:77:0c:8d: 79:d4:96:02:f0:87:05:a6:ae:3f:c0:72:6e:a1:ff: 90:e4:25:fb:c8:ba:79:d0:55:b2:dd:aa:70:2c:09: b1:ac:01:46:66:f6:d4:52:14:61:15:a4:4f:68:c5: ac:13:06:2f:7d:11:10:8a:ea:ee:38:0b:af:01:ea: ea:8b:35:f1:50:1a:9d:16:28:2f:58:0d:69:62:48: a0:bf:23:95:b2:62:df:9d:60:59:f9:26:44:07:ba: b1:08:a3:14:bb:4e:d4:7f:1c:99:62:d7:33:48:ae: cc:44:c1:2a:2f:18:32:3f:7d:c3:ed:1e:39:af:b2: d5:42:cf:6c:fa:e2:e9:f0:db:e5:d9:29:f1:43:ab: 25:a0:9f:3f:7d:1e:63:b8:1d:a4:95:06:85:08:6a: 11:19:31:89:d8:07:ac:4f:73:e9:35:12:15:54:e5: 14:54:9b:72:16:67:bb:6a:2b:ea:4b:b2:db:90:b6: 85:6c:f9:80:ff:ac:ba:eb:31:29:90:18:0c:7e:02: cf:a1:c6:55:6b:aa:63:c2:e8:c4:46:8b:92:28:bc: 89:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:59:68:17:54:B9:26:D9:99:BD:E6:A1:CE:CF:A3:45:94:DF:27:23 X509v3 Authority Key Identifier: keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:e6:ae:81:fa:09:e1:0a:75:33:af:0c:0a:71:b5:10:c1:8d: fe:80:bb:72:b4:99:f1:ff:25:1e:13:2e:fa:cc:4a:74:9a:24: b5:16:ac:b2:14:83:1d:7d:86:ee:7f:6a:1f:a9:5c:47:49:b6: 5d:c0:24:c6:26:dd:93:9b:8e:20:a6:e1:c7:6d:70:46:d4:34: a2:57:59:d3:1f:61:7f:84:d0:bc:61:63:da:ae:d3:72:62:9c: e4:96:bc:cd:d0:e1:eb:f2:9a:e9:91:99:a0:4e:14:df:cf:17: 93:51:de:d2:cf:c6:68:63:5b:9e:2b:5a:a0:2b:fb:3b:34:bc: 20:fe:59:8d:77:b4:57:96:c3:18:e8:14:fc:b7:35:e2:f5:80: a7:b7:2a:3b:aa:7f:79:3b:8c:9d:58:de:37:dc:81:49:10:2c: 54:9c:76:52:bb:86:c5:bd:4d:8b:68:b6:dc:40:86:5e:ac:f7: 85:24:b5:70:c6:76:a3:fc:e0:be:f9:f7:77:b9:7a:6b:4a:6e: e5:f0:0c:8a:cb:ce:b7:80:d9:0c:49:e2:32:3c:57:98:d7:63: d4:72:63:66:52:6e:bd:35:1a:7a:75:da:5b:f4:7c:9d:2b:ab: fa:64:4c:b2:1f:54:26:57:a6:6d:68:6b:28:48:f3:4b:cc:b9: 35:6d:7c:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO7ehRKfKrffIyh6hMjRe/SCFeJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIw OTU2ODdEQTAeFw0yNTA3MTkxNjE1MDNaFw0yNTA3MjIyMjA4MDNaMDMxMTAvBgNV BAMTKEZCNTk2ODE3NTRCOTI2RDk5OUJERTZBMUNFQ0ZBMzQ1OTRERjI3MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiXHbfEtK2wAztKJM7KnU23Q3A LttLAdAeO5sJkNpX7y0/KUUmp7lYHXcMjXnUlgLwhwWmrj/Acm6h/5DkJfvIunnQ VbLdqnAsCbGsAUZm9tRSFGEVpE9oxawTBi99ERCK6u44C68B6uqLNfFQGp0WKC9Y DWliSKC/I5WyYt+dYFn5JkQHurEIoxS7TtR/HJli1zNIrsxEwSovGDI/fcPtHjmv stVCz2z64unw2+XZKfFDqyWgnz99HmO4HaSVBoUIahEZMYnYB6xPc+k1EhVU5RRU m3IWZ7tqK+pLstuQtoVs+YD/rLrrMSmQGAx+As+hxlVrqmPC6MRGi5IovIkfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+1loF1S5JtmZveahzs+jRZTfJyMwHwYDVR0j BBgwFoAUtJOlzr8J4QvDXZrCIR2v0glWh9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMC9CNDkzQTVDRUJG MDlFMTBCQzM1RDlBQzIyMTFEQUZEMjA5NTY4N0RBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIwOTU2 ODdEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzAvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFG RDIwOTU2ODdEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEvmroH6CeEKdTOvDApxtRDBjf6Au3K0mfH/ JR4TLvrMSnSaJLUWrLIUgx19hu5/ah+pXEdJtl3AJMYm3ZObjiCm4cdtcEbUNKJX WdMfYX+E0LxhY9qu03JinOSWvM3Q4evymumRmaBOFN/PF5NR3tLPxmhjW54rWqAr +zs0vCD+WY13tFeWwxjoFPy3NeL1gKe3Kjuqf3k7jJ1Y3jfcgUkQLFScdlK7hsW9 TYtottxAhl6s94UktXDGdqP84L7593e5emtKbuXwDIrLzreA2QxJ4jI8V5jXY9Ry Y2ZSbr01Gnp12lv0fJ0rq/pkTLIfVCZXpm1oayhI80vMuTVtfCM= -----END CERTIFICATE-----Generated at Mon Jul 21 02:06:37 2025 by rpki-client