$ rpki-client -vvf repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft File: 94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft (raw, json) Hash identifier: Tz3QBmzaLSGwCyJget/P36RWt2aJfxE7nZHAUw5f2Bs= Subject key identifier: C9:98:5F:C1:1B:1C:4F:63:49:1B:30:3E:1D:BA:E5:F3:77:C6:52:15 Authority key identifier: 94:ED:A4:B2:36:0B:47:DC:65:38:6E:3E:7E:BA:E3:5B:99:7F:2A:42 Certificate issuer: /CN=94EDA4B2360B47DC65386E3E7EBAE35B997F2A42 Certificate serial: 1801916D4551BE409D884B02026AC75729418C3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft Manifest number: 04D9 Signing time: Wed 04 Jun 2025 10:20:49 +0000 Manifest this update: Wed 04 Jun 2025 10:15:49 +0000 Manifest next update: Sat 07 Jun 2025 18:17:49 +0000 Files and hashes: 1: 3130332e3134342e3235302e302f32332d3234203d3e20313339343335.roa (hash: JjtMSSCssV5HqQAouXYm4WHr16DMfc7UE3Z2A9weGck=) 2: 94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.crl (hash: LrsdS5BAhT5pAZyuV4TrtUSpW1whCwH+f2YnMZ413Wc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.crl rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 18:17:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:01:91:6d:45:51:be:40:9d:88:4b:02:02:6a:c7:57:29:41:8c:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EDA4B2360B47DC65386E3E7EBAE35B997F2A42 Validity Not Before: Jun 4 10:15:49 2025 GMT Not After : Jun 7 18:17:49 2025 GMT Subject: CN=C9985FC11B1C4F63491B303E1DBAE5F377C65215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:c5:58:23:3c:87:a4:3e:5c:fa:f8:b7:c4:fd: e2:d5:bf:b2:f1:fe:54:98:2f:f2:47:ef:63:64:37: 00:27:05:a7:bb:1c:bf:dc:bb:4a:3e:06:1e:04:7b: d6:fc:3c:fb:f4:0d:d5:fc:5e:37:30:f8:2e:60:f3: f8:0c:66:73:16:d7:86:ab:84:5e:46:51:c4:50:ed: 75:c2:f1:47:2e:85:fd:8f:e2:b1:9b:b2:6e:81:45: 29:40:70:c5:b5:1d:11:d0:2a:96:37:d4:8f:7c:a4: b7:83:f6:36:16:06:95:3c:ad:f6:cc:5e:c5:d6:75: 69:7b:08:50:ec:45:03:47:20:6f:ba:83:6f:fc:fb: 1b:97:8e:53:9a:f3:21:ee:70:29:d3:f3:f5:c5:e7: 20:b6:b8:7b:98:e0:a4:71:b8:17:5d:76:86:a4:f6: 71:2f:37:e2:25:56:8c:8f:08:11:56:cc:9f:8f:bb: f4:64:57:84:74:e0:5e:9a:07:7d:2b:89:9a:ee:58: 30:a3:8d:bd:71:ce:43:33:5b:c8:4c:cb:11:b2:ac: 6c:d0:cd:96:69:7c:39:38:53:7a:25:4c:17:55:33: cf:d8:b2:00:5f:15:e4:10:90:92:fb:0d:b6:eb:db: 16:69:4e:38:12:34:42:61:7d:97:bf:6d:30:f2:5b: 85:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:98:5F:C1:1B:1C:4F:63:49:1B:30:3E:1D:BA:E5:F3:77:C6:52:15 X509v3 Authority Key Identifier: keyid:94:ED:A4:B2:36:0B:47:DC:65:38:6E:3E:7E:BA:E3:5B:99:7F:2A:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:dc:c6:bd:8d:45:1f:5f:4a:a1:76:95:a1:78:97:ad:89:8b: 41:51:06:fe:f0:bb:e9:c4:05:b4:da:06:10:60:99:5c:e2:90: ab:b8:26:8e:15:26:0a:b2:b5:94:62:67:3e:1f:6a:09:6e:13: b8:62:f8:f0:3e:17:b1:69:73:2d:c7:01:72:c2:c5:ca:0f:fb: c3:d0:25:80:71:70:36:ba:33:52:69:23:b5:76:c2:b3:90:7c: 43:23:2b:52:1a:f8:4a:73:4a:67:1b:f0:c6:45:00:69:0f:c2: cd:bb:9a:7c:6b:78:4b:5f:76:80:15:11:94:5e:45:47:d3:9f: 99:73:72:9f:83:c7:6a:32:e9:5a:c2:4c:ce:9d:ac:43:00:a9: 8c:ac:c3:6c:b3:4c:5f:96:43:6d:97:40:da:23:14:a9:c7:c9: 9b:81:95:40:82:09:c0:2b:41:0f:a6:69:6e:ea:a4:8a:79:c9: 03:d6:81:e0:25:e4:f4:3d:b3:c1:39:28:eb:7d:b0:08:04:85: 7d:ab:8f:76:88:41:4c:ab:ce:93:42:11:51:b5:ad:d6:29:4e: 0f:65:66:54:8b:81:ba:56:39:23:8d:01:a3:4f:7b:a9:e8:22: 99:71:95:ce:71:f7:3f:2a:75:44:6c:e3:8c:35:cc:2c:56:12: 32:8b:a0:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGAGRbUVRvkCdiEsCAmrHVylBjDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRFREE0QjIzNjBCNDdEQzY1Mzg2RTNFN0VCQUUzNUI5 OTdGMkE0MjAeFw0yNTA2MDQxMDE1NDlaFw0yNTA2MDcxODE3NDlaMDMxMTAvBgNV BAMTKEM5OTg1RkMxMUIxQzRGNjM0OTFCMzAzRTFEQkFFNUYzNzdDNjUyMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrxVgjPIekPlz6+LfE/eLVv7Lx /lSYL/JH72NkNwAnBae7HL/cu0o+Bh4Ee9b8PPv0DdX8Xjcw+C5g8/gMZnMW14ar hF5GUcRQ7XXC8Ucuhf2P4rGbsm6BRSlAcMW1HRHQKpY31I98pLeD9jYWBpU8rfbM XsXWdWl7CFDsRQNHIG+6g2/8+xuXjlOa8yHucCnT8/XF5yC2uHuY4KRxuBdddoak 9nEvN+IlVoyPCBFWzJ+Pu/RkV4R04F6aB30riZruWDCjjb1xzkMzW8hMyxGyrGzQ zZZpfDk4U3olTBdVM8/YsgBfFeQQkJL7Dbbr2xZpTjgSNEJhfZe/bTDyW4VxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyZhfwRscT2NJGzA+Hbrl83fGUhUwHwYDVR0j BBgwFoAUlO2ksjYLR9xlOG4+frrjW5l/KkIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NWJmNzE4ZC05MTFlLTQzZDYtOGUzYy0wZDFiMzY0NmUyNzYvMC85NEVEQTRCMjM2 MEI0N0RDNjUzODZFM0U3RUJBRTM1Qjk5N0YyQTQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTRFREE0QjIzNjBCNDdEQzY1Mzg2RTNFN0VCQUUzNUI5OTdG MkE0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTViZjcxOGQtOTExZS00M2Q2LThl M2MtMGQxYjM2NDZlMjc2LzAvOTRFREE0QjIzNjBCNDdEQzY1Mzg2RTNFN0VCQUUz NUI5OTdGMkE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKXcxr2NRR9fSqF2laF4l62Ji0FRBv7wu+nE BbTaBhBgmVzikKu4Jo4VJgqytZRiZz4fagluE7hi+PA+F7Fpcy3HAXLCxcoP+8PQ JYBxcDa6M1JpI7V2wrOQfEMjK1Ia+EpzSmcb8MZFAGkPws27mnxreEtfdoAVEZRe RUfTn5lzcp+Dx2oy6VrCTM6drEMAqYysw2yzTF+WQ22XQNojFKnHyZuBlUCCCcAr QQ+maW7qpIp5yQPWgeAl5PQ9s8E5KOt9sAgEhX2rj3aIQUyrzpNCEVG1rdYpTg9l ZlSLgbpWOSONAaNPe6noIplxlc5x9z8qdURs44w1zCxWEjKLoAA= -----END CERTIFICATE-----Generated at Thu Jun 5 18:27:51 2025 by rpki-client