$ rpki-client -vvf repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft File: B9A55DD123C2F224C4E245856905F78F2F354D92.mft (raw, json) Hash identifier: 4Vm2s0+5LARpO/qQV31ln9e3LFoCbmgIPa0SsQtip1A= Subject key identifier: C5:D1:AD:70:5D:CC:82:95:79:75:05:46:60:7B:C5:9C:F5:F8:DD:26 Authority key identifier: B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92 Certificate issuer: /CN=B9A55DD123C2F224C4E245856905F78F2F354D92 Certificate serial: 3F03D2374BEA225B7FBF3914CE5ECCC338161E7A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft Manifest number: AC Signing time: Fri 06 Jun 2025 17:41:00 +0000 Manifest this update: Fri 06 Jun 2025 17:36:00 +0000 Manifest next update: Mon 09 Jun 2025 19:07:00 +0000 Files and hashes: 1: B9A55DD123C2F224C4E245856905F78F2F354D92.crl (hash: +v0ntTYQaPXjQZo7tqwzhmUVIO4LQImhAFoOLjojtqo=) 2: 3135372e31302e39372e302f32342d3234203d3e203538383231.roa (hash: UPR5y8V0jVDX7lorT6sk4sYb0YCh+EKPNMakCdOkBwI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.crl rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 19:07:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:03:d2:37:4b:ea:22:5b:7f:bf:39:14:ce:5e:cc:c3:38:16:1e:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9A55DD123C2F224C4E245856905F78F2F354D92 Validity Not Before: Jun 6 17:36:00 2025 GMT Not After : Jun 9 19:07:00 2025 GMT Subject: CN=C5D1AD705DCC829579750546607BC59CF5F8DD26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b6:87:8b:63:63:39:0b:4c:45:2a:5f:44:61: 80:d7:64:10:e8:8a:ec:ea:cc:91:ca:12:3f:7f:0a: 77:18:19:27:45:12:31:fe:18:8c:8f:e2:cf:17:cd: 4a:80:89:66:4c:f5:38:86:69:b4:05:36:f4:66:fd: ea:8e:4b:c2:49:70:00:0f:cf:95:3e:86:7c:88:c0: 09:56:50:3a:32:31:69:a1:d6:d1:5f:0e:6c:22:47: d4:63:92:30:36:2b:7c:46:39:2f:21:3d:7a:56:3e: 71:7e:4a:ff:ad:37:90:d5:6e:95:0a:3c:7a:18:0c: 4d:72:20:42:c2:46:f6:35:14:34:6e:81:6c:cf:a0: b2:4d:f2:39:cc:15:f4:96:4f:2a:8c:ff:14:f6:be: cb:c8:9b:b0:41:ae:3d:5c:21:8e:36:2f:b5:ad:0f: c3:1a:1d:dd:08:ec:24:04:b2:73:dd:40:ba:39:ed: 0b:b5:b3:9c:dc:17:73:35:c6:cc:b0:77:74:9d:05: fd:a9:a3:56:77:71:24:3d:71:50:10:13:f4:bf:e7: a3:03:d5:47:cf:2f:8f:79:80:c7:05:80:d8:d5:db: 12:de:9b:0a:1f:88:aa:84:6a:43:56:8c:bf:f1:aa: e3:c9:0c:33:87:90:08:bd:2b:42:dd:9e:c7:c3:9f: 66:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D1:AD:70:5D:CC:82:95:79:75:05:46:60:7B:C5:9C:F5:F8:DD:26 X509v3 Authority Key Identifier: keyid:B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:e9:0f:fa:64:07:19:26:22:f2:d1:4e:83:3f:56:b3:74:ed: f5:68:92:fa:ab:1f:17:12:79:48:29:27:75:53:a0:9a:38:9c: 94:25:79:b6:48:23:f0:cd:1d:4c:9f:8b:39:0f:6c:8a:0e:7a: 7c:42:bb:d0:fc:e9:6e:44:84:ee:f5:9f:45:93:ca:fe:95:da: 59:2c:95:8e:4a:17:42:6f:ec:d8:15:70:2d:52:f1:96:19:1e: 31:c0:e8:43:c4:9e:9c:1c:9b:4b:2c:26:43:73:a3:cb:16:45: da:a9:cb:c1:8a:23:65:1b:f0:3e:42:96:f1:70:e8:bf:9a:be: 0a:28:3f:08:7c:dc:28:c3:ff:fc:e4:30:ef:50:c2:4d:75:1f: 20:3b:23:d2:33:50:62:b8:a9:a3:98:93:83:3f:30:92:93:8e: 6b:97:86:de:8e:0e:51:6a:28:46:e5:98:77:1e:f1:d4:5a:63: 1b:4e:8f:bc:35:59:61:4f:aa:9f:4a:ea:7c:06:d5:2b:56:6e: bf:7b:47:d1:18:79:64:da:ca:8c:df:1b:c7:7d:e2:ae:25:ba: 06:f5:a0:4e:9b:4d:96:a9:63:a0:4b:32:cf:9f:30:9b:a7:6f: c5:32:d2:3f:61:6a:7a:28:49:2c:55:7b:71:21:56:71:a5:7c: 97:38:60:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPwPSN0vqIlt/vzkUzl7MwzgWHnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3OEYy RjM1NEQ5MjAeFw0yNTA2MDYxNzM2MDBaFw0yNTA2MDkxOTA3MDBaMDMxMTAvBgNV BAMTKEM1RDFBRDcwNURDQzgyOTU3OTc1MDU0NjYwN0JDNTlDRjVGOEREMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCltoeLY2M5C0xFKl9EYYDXZBDo iuzqzJHKEj9/CncYGSdFEjH+GIyP4s8XzUqAiWZM9TiGabQFNvRm/eqOS8JJcAAP z5U+hnyIwAlWUDoyMWmh1tFfDmwiR9RjkjA2K3xGOS8hPXpWPnF+Sv+tN5DVbpUK PHoYDE1yIELCRvY1FDRugWzPoLJN8jnMFfSWTyqM/xT2vsvIm7BBrj1cIY42L7Wt D8MaHd0I7CQEsnPdQLo57Qu1s5zcF3M1xsywd3SdBf2po1Z3cSQ9cVAQE/S/56MD 1UfPL495gMcFgNjV2xLemwofiKqEakNWjL/xquPJDDOHkAi9K0LdnsfDn2aZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxdGtcF3MgpV5dQVGYHvFnPX43SYwHwYDVR0j BBgwFoAUuaVd0SPC8iTE4kWFaQX3jy81TZIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZjJmNjRjYS1mYTU0LTQ5OWUtYmMzMy00ODYyZGNhNzk0ZjcvMC9COUE1NUREMTIz QzJGMjI0QzRFMjQ1ODU2OTA1Rjc4RjJGMzU0RDkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3OEYyRjM1 NEQ5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWYyZjY0Y2EtZmE1NC00OTllLWJj MzMtNDg2MmRjYTc5NGY3LzAvQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3 OEYyRjM1NEQ5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvpD/pkBxkmIvLRToM/VrN07fVokvqrHxcS eUgpJ3VToJo4nJQlebZII/DNHUyfizkPbIoOenxCu9D86W5EhO71n0WTyv6V2lks lY5KF0Jv7NgVcC1S8ZYZHjHA6EPEnpwcm0ssJkNzo8sWRdqpy8GKI2Ub8D5ClvFw 6L+avgooPwh83CjD//zkMO9Qwk11HyA7I9IzUGK4qaOYk4M/MJKTjmuXht6ODlFq KEblmHce8dRaYxtOj7w1WWFPqp9K6nwG1StWbr97R9EYeWTayozfG8d94q4lugb1 oE6bTZapY6BLMs+fMJunb8Uy0j9hanooSSxVe3EhVnGlfJc4YMw= -----END CERTIFICATE-----Generated at Sat Jun 7 21:47:42 2025 by rpki-client