$ rpki-client -vvf repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft File: B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft (raw, json) Hash identifier: kWu1e/nHYZar7JeifbSMv25v1l4N64S8ZuW49BWmkYo= Subject key identifier: F2:C7:0F:2D:D7:22:79:05:B0:E3:61:48:1C:E7:13:B0:05:DD:9F:0C Authority key identifier: B9:21:DA:AB:B8:49:49:DD:C2:50:0D:4F:0A:6D:93:FA:0E:B3:84:E1 Certificate issuer: /CN=B921DAABB84949DDC2500D4F0A6D93FA0EB384E1 Certificate serial: 1A139E1C0F62AE465A86718DA929BA873A2520DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft Manifest number: 026D Signing time: Sun 01 Jun 2025 08:41:51 +0000 Manifest this update: Sun 01 Jun 2025 08:36:51 +0000 Manifest next update: Wed 04 Jun 2025 19:44:51 +0000 Files and hashes: 1: 3130332e33302e3232322e302f32342d3234203d3e203338313438.roa (hash: ZPi+JZqMM8ZilEO1UdhpjL1kpie3JMIqiKeJGeN+nJU=) 2: 3130332e33302e3232332e302f32342d3234203d3e203338313438.roa (hash: 8BH7HUPp+qT0dOPwFMHWiAT720E6kg8wn1sWk04/fIM=) 3: 3130332e33302e3232312e302f32342d3234203d3e203338313438.roa (hash: w9cZPX/3pDPz2+LwzvjA2m3xBMWMxQj8fam9ODXwU7Y=) 4: B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.crl (hash: 2WocAy4kQz4Ci8tiz2oR2O76vn+es7U+uVXWzbrbYj8=) 5: 3130332e33302e3232302e302f32322d3233203d3e203338313438.roa (hash: d/qApoJ7mr0vuB+K0fvN+XpOWjHSmWf3V1Wp1hQdcro=) 6: 323430313a396230303a3a2f33322d3438203d3e203338313438.roa (hash: hc6ECrtKO1f8LRbUaOngruzuLZGjjKMcrVpSYHLGH+4=) 7: 3132322e3230302e3134342e302f32312d3234203d3e203338313438.roa (hash: Q0JPOTRHz7S3KCYgxrzfh7sPXe85gqUb+g55+vjlzmE=) 8: 3130332e33302e3232302e302f32342d3234203d3e203338313438.roa (hash: 5MfpBewFDSPuWTooHE8O1IkKqC/swjstgMNE2K+S+q4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.crl rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 19:44:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:13:9e:1c:0f:62:ae:46:5a:86:71:8d:a9:29:ba:87:3a:25:20:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B921DAABB84949DDC2500D4F0A6D93FA0EB384E1 Validity Not Before: Jun 1 08:36:51 2025 GMT Not After : Jun 4 19:44:51 2025 GMT Subject: CN=F2C70F2DD7227905B0E361481CE713B005DD9F0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f3:69:d5:4a:27:84:cd:dd:b7:97:29:32:35: 73:09:01:7b:16:42:70:d8:ac:d9:68:2d:b1:32:98: ba:c7:6f:e8:61:45:f7:52:d9:fc:99:f6:21:4a:ca: 9b:86:f6:f4:a4:0f:ff:b4:fe:0c:1b:37:77:cf:37: 31:00:df:31:f0:3e:3d:cb:da:74:a4:68:3b:64:85: ce:cc:81:a9:4a:44:1c:c0:56:fd:5c:0d:41:ff:d3: e7:99:82:9c:1a:86:bb:20:40:3c:d8:cf:73:1d:08: 50:f7:a4:13:02:d4:75:97:56:3b:81:b3:40:f1:b4: 62:a8:04:4a:29:b0:e7:2b:5d:0e:ee:41:82:11:11: 50:71:40:dc:ac:7f:72:6c:67:0b:b1:6c:38:3f:cd: 72:aa:9b:12:6e:8a:2b:ce:74:7b:bc:10:e5:f4:91: 14:a6:41:20:16:37:b4:34:ca:71:4a:c7:3e:78:d6: d0:bd:2c:c0:8b:69:f6:1a:3a:d9:bc:ff:72:2a:c3: 60:02:d9:ed:e7:88:e8:c7:de:b2:9a:ae:e8:11:26: 86:fa:74:aa:d6:d6:87:73:2a:91:48:5d:29:e6:a2: b5:5b:0e:2d:37:15:15:56:d9:64:23:da:a3:fe:a7: 73:51:80:59:bf:d0:b0:16:32:bf:fe:24:f8:1b:13: 0d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C7:0F:2D:D7:22:79:05:B0:E3:61:48:1C:E7:13:B0:05:DD:9F:0C X509v3 Authority Key Identifier: keyid:B9:21:DA:AB:B8:49:49:DD:C2:50:0D:4F:0A:6D:93:FA:0E:B3:84:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:d6:e2:08:fe:d6:cf:7c:d4:ef:c0:b3:34:f4:b4:56:58:d8: 34:5d:6e:9c:62:9e:7f:23:08:8f:db:8c:f5:bb:a2:25:7b:ba: 65:65:42:f1:10:49:81:9a:12:f1:d8:16:d6:99:d3:25:44:d8: ae:99:80:87:29:6e:73:f0:e8:aa:b0:a5:bf:77:64:98:36:a6: 3c:a6:11:6e:3c:8f:75:b9:90:48:01:2d:23:d6:78:bb:04:b7: d7:9d:bd:c2:19:a4:53:bd:fd:8f:fd:24:44:b2:53:dd:0a:36: 8c:8e:44:5e:53:99:11:17:a5:25:4e:60:18:7d:a4:33:76:c4: e8:b1:1a:86:18:14:5a:6b:a3:68:67:52:e7:9c:07:91:be:23: 36:a9:b7:33:e0:f8:32:c5:8f:bc:f4:97:60:de:65:ab:88:d5: 8d:dc:bd:3b:58:92:58:73:bb:16:54:1f:2a:12:3a:a1:7a:65: 15:3e:ec:ef:09:f2:6f:c8:9d:91:8f:24:65:57:09:18:f9:51: 0c:d1:e5:ec:38:62:4f:a5:6e:26:3f:87:97:bf:f0:70:58:bc: fe:c3:dd:79:b6:0b:92:c5:c7:67:7d:c4:01:13:38:a7:91:be: 85:2e:ff:3b:04:8a:b3:d8:16:81:cc:49:70:91:a0:23:4a:cb: 36:5c:c5:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGhOeHA9irkZahnGNqSm6hzolIN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkyMURBQUJCODQ5NDlEREMyNTAwRDRGMEE2RDkzRkEw RUIzODRFMTAeFw0yNTA2MDEwODM2NTFaFw0yNTA2MDQxOTQ0NTFaMDMxMTAvBgNV BAMTKEYyQzcwRjJERDcyMjc5MDVCMEUzNjE0ODFDRTcxM0IwMDVERDlGMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/82nVSieEzd23lykyNXMJAXsW QnDYrNloLbEymLrHb+hhRfdS2fyZ9iFKypuG9vSkD/+0/gwbN3fPNzEA3zHwPj3L 2nSkaDtkhc7MgalKRBzAVv1cDUH/0+eZgpwahrsgQDzYz3MdCFD3pBMC1HWXVjuB s0DxtGKoBEopsOcrXQ7uQYIREVBxQNysf3JsZwuxbDg/zXKqmxJuiivOdHu8EOX0 kRSmQSAWN7Q0ynFKxz541tC9LMCLafYaOtm8/3Iqw2AC2e3niOjH3rKarugRJob6 dKrW1odzKpFIXSnmorVbDi03FRVW2WQj2qP+p3NRgFm/0LAWMr/+JPgbEw0bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8scPLdcieQWw42FIHOcTsAXdnwwwHwYDVR0j BBgwFoAUuSHaq7hJSd3CUA1PCm2T+g6zhOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTkyYzI3NC0xMWRiLTQxMjctYmFiYi1hZWFlOTkyODRiMDAvMC9COTIxREFBQkI4 NDk0OUREQzI1MDBENEYwQTZEOTNGQTBFQjM4NEUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkyMURBQUJCODQ5NDlEREMyNTAwRDRGMEE2RDkzRkEwRUIz ODRFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTU5MmMyNzQtMTFkYi00MTI3LWJh YmItYWVhZTk5Mjg0YjAwLzAvQjkyMURBQUJCODQ5NDlEREMyNTAwRDRGMEE2RDkz RkEwRUIzODRFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADbW4gj+1s981O/AszT0tFZY2DRdbpxinn8j CI/bjPW7oiV7umVlQvEQSYGaEvHYFtaZ0yVE2K6ZgIcpbnPw6Kqwpb93ZJg2pjym EW48j3W5kEgBLSPWeLsEt9edvcIZpFO9/Y/9JESyU90KNoyORF5TmREXpSVOYBh9 pDN2xOixGoYYFFpro2hnUuecB5G+IzaptzPg+DLFj7z0l2DeZauI1Y3cvTtYklhz uxZUHyoSOqF6ZRU+7O8J8m/InZGPJGVXCRj5UQzR5ew4Yk+lbiY/h5e/8HBYvP7D 3Xm2C5LFx2d9xAETOKeRvoUu/zsEirPYFoHMSXCRoCNKyzZcxQg= -----END CERTIFICATE-----Generated at Tue Jun 3 23:30:36 2025 by rpki-client