$ rpki-client -vvf repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft File: 0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft (raw, json) Hash identifier: 3ThOzmDWNwUcWk6beei6bA3ou8VQhxzK6bmepTk31xE= Subject key identifier: CA:C1:07:8D:23:4B:2E:37:3A:14:02:A5:27:64:61:D5:6C:F2:EE:AC Authority key identifier: 09:12:BC:2A:8D:2E:8B:F2:55:3D:71:06:FF:6E:62:22:8E:03:C1:E4 Certificate issuer: /CN=0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4 Certificate serial: 143F7224A71CFDEF68B1E2BCC417065C7C72CACE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft Manifest number: 04DB Signing time: Mon 02 Jun 2025 02:04:29 +0000 Manifest this update: Mon 02 Jun 2025 01:59:29 +0000 Manifest next update: Thu 05 Jun 2025 05:32:29 +0000 Files and hashes: 1: 0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.crl (hash: x2oAczOMBsaNY8cOemtaPIiP2S/Z66vQN5DwV5riP2k=) 2: 3130332e3133302e3138322e302f32332d3233203d3e20313338303833.roa (hash: /xZYFYyOB1e+pblVdjFbZfEDRpifvi0rioH8bq15tlY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.crl rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 05:32:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:3f:72:24:a7:1c:fd:ef:68:b1:e2:bc:c4:17:06:5c:7c:72:ca:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4 Validity Not Before: Jun 2 01:59:29 2025 GMT Not After : Jun 5 05:32:29 2025 GMT Subject: CN=CAC1078D234B2E373A1402A5276461D56CF2EEAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:49:1e:55:6d:51:85:8a:49:ce:a0:76:6b:c6: f9:92:8a:19:48:db:86:5b:e6:16:e3:1c:7d:c9:d2: be:f5:91:07:58:bd:5d:3d:2a:bf:59:ce:bf:c1:46: f4:df:2b:85:0a:2a:56:cf:24:de:c6:58:2b:a8:81: 27:d0:2c:48:ce:7c:15:c4:44:c0:bc:61:f9:c5:72: c9:72:50:33:e3:ac:e8:fa:ae:8f:e6:0c:6c:02:04: 80:7d:a1:57:29:f7:1b:dd:2d:aa:fb:a1:47:b5:fc: 3e:f8:ff:71:bd:61:75:25:60:6e:c5:6c:9e:94:95: ce:32:75:e1:e7:51:a9:db:69:e0:ea:80:ce:4c:76: c8:f4:62:a9:68:2b:f8:7e:0c:98:4d:ad:fc:74:07: 7e:d6:6e:d1:d5:09:b0:88:6c:b6:d8:27:1d:9f:2e: e8:01:d8:01:14:dd:cc:ae:26:0e:e1:37:bd:ab:8d: d4:e7:8a:d7:d2:1e:7f:48:1b:7f:34:bb:4b:eb:9c: d5:15:66:66:3c:9f:0f:7f:03:c4:1d:63:4b:ef:a9: a2:5d:a6:80:cc:24:a1:24:72:18:d4:0f:1e:a5:40: b3:0b:cd:20:7e:91:41:b3:57:35:03:56:13:0b:6d: 2d:e6:5b:e0:ea:3d:58:d5:af:69:6f:da:93:3d:e2: 75:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C1:07:8D:23:4B:2E:37:3A:14:02:A5:27:64:61:D5:6C:F2:EE:AC X509v3 Authority Key Identifier: keyid:09:12:BC:2A:8D:2E:8B:F2:55:3D:71:06:FF:6E:62:22:8E:03:C1:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:b3:ab:f3:50:54:07:7e:da:af:6d:58:b1:f9:e4:39:f0:82: 72:65:6e:4b:8e:10:5a:aa:e3:e5:a4:fc:c8:e7:6f:4d:78:19: 03:f5:60:36:ee:21:14:04:75:cf:27:08:f0:28:f3:6b:77:2e: 6d:ff:09:1d:89:12:1b:61:e7:38:96:a4:20:fb:1c:b2:28:d4: 63:f4:5b:d6:8d:91:bc:2b:77:46:1b:6a:23:6f:bb:c2:75:55: 03:fc:24:44:f5:7d:cb:86:65:0b:b7:fb:37:c0:95:98:ea:e9: 05:b3:b4:4c:35:b6:83:d2:a7:e0:c1:c4:17:01:16:df:4e:49: 66:03:fa:cd:35:ae:36:46:e0:84:83:95:53:64:ba:6c:f9:30: 8a:1f:f1:29:e8:6e:b5:36:27:ee:b7:d1:87:6b:0e:15:05:b3: d5:c2:d3:75:2d:35:28:54:be:17:59:ff:92:f8:7b:80:53:ed: c0:01:d5:6e:69:62:87:a4:ea:93:ad:e9:e1:5d:4e:29:eb:99: f2:a1:49:24:11:31:aa:43:8e:9d:49:fd:44:d3:31:f1:45:f0: de:2c:af:3d:97:c6:45:c7:73:11:26:95:ba:e6:5b:7d:c6:4a: 64:b8:d1:89:87:c2:f8:28:b6:3c:4e:61:e5:17:32:24:00:ba: b9:6d:f4:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFD9yJKcc/e9oseK8xBcGXHxyys4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDkxMkJDMkE4RDJFOEJGMjU1M0Q3MTA2RkY2RTYyMjI4 RTAzQzFFNDAeFw0yNTA2MDIwMTU5MjlaFw0yNTA2MDUwNTMyMjlaMDMxMTAvBgNV BAMTKENBQzEwNzhEMjM0QjJFMzczQTE0MDJBNTI3NjQ2MUQ1NkNGMkVFQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWSR5VbVGFiknOoHZrxvmSihlI 24Zb5hbjHH3J0r71kQdYvV09Kr9Zzr/BRvTfK4UKKlbPJN7GWCuogSfQLEjOfBXE RMC8YfnFcslyUDPjrOj6ro/mDGwCBIB9oVcp9xvdLar7oUe1/D74/3G9YXUlYG7F bJ6Ulc4ydeHnUanbaeDqgM5Mdsj0YqloK/h+DJhNrfx0B37WbtHVCbCIbLbYJx2f LugB2AEU3cyuJg7hN72rjdTnitfSHn9IG380u0vrnNUVZmY8nw9/A8QdY0vvqaJd poDMJKEkchjUDx6lQLMLzSB+kUGzVzUDVhMLbS3mW+DqPVjVr2lv2pM94nXZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUysEHjSNLLjc6FAKlJ2Rh1Wzy7qwwHwYDVR0j BBgwFoAUCRK8Ko0ui/JVPXEG/25iIo4DweQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTY2OTgwNy0wNTBlLTQzYWUtODcwOC1iNDZiODgxNzg0MmMvMC8wOTEyQkMyQThE MkU4QkYyNTUzRDcxMDZGRjZFNjIyMjhFMDNDMUU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDkxMkJDMkE4RDJFOEJGMjU1M0Q3MTA2RkY2RTYyMjI4RTAz QzFFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU2Njk4MDctMDUwZS00M2FlLTg3 MDgtYjQ2Yjg4MTc4NDJjLzAvMDkxMkJDMkE4RDJFOEJGMjU1M0Q3MTA2RkY2RTYy MjI4RTAzQzFFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKSzq/NQVAd+2q9tWLH55DnwgnJlbkuOEFqq 4+Wk/Mjnb014GQP1YDbuIRQEdc8nCPAo82t3Lm3/CR2JEhth5ziWpCD7HLIo1GP0 W9aNkbwrd0YbaiNvu8J1VQP8JET1fcuGZQu3+zfAlZjq6QWztEw1toPSp+DBxBcB Ft9OSWYD+s01rjZG4ISDlVNkumz5MIof8SnobrU2J+630YdrDhUFs9XC03UtNShU vhdZ/5L4e4BT7cAB1W5pYoek6pOt6eFdTinrmfKhSSQRMapDjp1J/UTTMfFF8N4s rz2XxkXHcxEmlbrmW33GSmS40YmHwvgotjxOYeUXMiQAurlt9M4= -----END CERTIFICATE-----Generated at Tue Jun 3 23:38:47 2025 by rpki-client