$ rpki-client -vvf repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft File: 289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft (raw, json) Hash identifier: 1jNXTUj5HMsgXCsQLCSuGk8swekQ6aySCBhLjeEl+64= Subject key identifier: B6:7B:62:F1:B8:D5:1A:19:D3:9A:6B:F3:63:F1:17:A7:50:17:A7:7A Authority key identifier: 28:91:51:EF:8A:E8:A7:9D:8F:42:66:83:D1:52:5A:D8:2F:AB:3D:5C Certificate issuer: /CN=289151EF8AE8A79D8F426683D1525AD82FAB3D5C Certificate serial: 4CFC481AC4629B5C166DE7AF1E173EE4D24340F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft Manifest number: 0145 Signing time: Wed 04 Jun 2025 04:21:42 +0000 Manifest this update: Wed 04 Jun 2025 04:16:42 +0000 Manifest next update: Sat 07 Jun 2025 13:40:42 +0000 Files and hashes: 1: 323030313a6466313a633263303a3a2f34382d3438203d3e20313439393039.roa (hash: 6LOGBCF5zTr7iAtxuc25TGgWiHmJgXAtcLTxMujO3no=) 2: 3130332e3139312e35382e302f32332d3234203d3e20313439393039.roa (hash: uLA8drzoTGDdLRLknWkZIaOJdJxpC+UKHzjWLF3FpOA=) 3: 289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl (hash: IHiKPgjzSP4L4jyMnMdZmPMAldBRNFqPRUyIhv9CZeM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 13:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:fc:48:1a:c4:62:9b:5c:16:6d:e7:af:1e:17:3e:e4:d2:43:40:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=289151EF8AE8A79D8F426683D1525AD82FAB3D5C Validity Not Before: Jun 4 04:16:42 2025 GMT Not After : Jun 7 13:40:42 2025 GMT Subject: CN=B67B62F1B8D51A19D39A6BF363F117A75017A77A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a8:d6:45:5c:16:98:0f:af:74:fe:74:20:b1: 30:dc:4f:31:e4:b3:70:38:d9:87:ce:fa:8a:60:8e: 6c:e3:4c:b2:41:2b:89:45:51:c0:2a:6e:d9:ad:07: 7e:ef:cf:20:24:49:1a:c6:51:b0:7b:20:76:f2:7b: 64:ac:06:3c:61:69:cd:b2:00:3c:f8:27:92:cf:86: a6:a7:05:b1:bb:ab:24:30:1d:d1:5f:16:e0:57:e2: d9:49:ac:d5:30:ea:87:6e:90:75:05:13:51:9a:da: 35:0a:86:a2:20:1b:cb:47:14:e4:57:b1:8d:78:03: c3:e3:31:06:e5:b2:e2:42:5c:e3:81:d1:2e:a6:9a: 24:63:54:f3:5a:3d:e1:d6:25:fc:27:c2:5c:f8:d9: f7:fb:c7:69:0f:11:7f:ba:27:9e:5b:3d:1e:7d:d5: ec:b8:79:ce:00:60:0b:b9:03:0e:c8:4d:84:91:7c: 77:43:af:49:14:52:45:c3:c9:e1:f7:e7:49:08:31: 7e:6d:2e:e6:e1:fa:1c:d2:1a:8b:db:7d:1a:5e:d6: aa:e2:f2:ab:6d:69:82:bf:c3:9d:86:2f:2e:71:bc: c7:ff:18:46:11:db:b5:63:6e:07:4b:4a:1f:9e:02: 97:47:f9:f8:f6:9b:52:1a:8a:a9:cf:5a:f9:85:2f: 36:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:7B:62:F1:B8:D5:1A:19:D3:9A:6B:F3:63:F1:17:A7:50:17:A7:7A X509v3 Authority Key Identifier: keyid:28:91:51:EF:8A:E8:A7:9D:8F:42:66:83:D1:52:5A:D8:2F:AB:3D:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:f2:9c:7a:72:ec:b7:53:29:bb:93:7e:02:ca:8f:6d:60:63: 85:2b:3e:af:71:c4:2a:4d:07:0c:2b:d8:b8:f4:16:8f:1c:4a: c8:66:aa:16:6b:86:86:b0:d8:38:1e:7f:72:a0:5f:73:4a:c8: 28:bd:c6:12:b4:95:56:fd:92:8c:79:71:11:1e:64:fe:4e:b8: c0:d5:35:82:6c:45:b9:e2:59:a5:19:42:df:f5:b2:4d:6b:0a: 36:b1:60:c3:48:15:64:39:8d:14:2a:ce:16:05:40:f6:1f:0e: dc:d1:03:32:20:ad:81:83:d9:3f:6b:9b:d0:db:43:b3:5b:2b: fe:9f:9d:5f:44:97:2b:00:ba:7b:f7:f6:5f:9c:07:1d:88:04: 87:b0:a4:e3:5b:df:63:08:18:34:86:a6:3f:cc:9c:4e:1d:fe: 1f:9f:60:7d:86:71:f0:64:c0:3f:be:57:54:f9:51:c6:f6:61: b4:14:af:73:fc:1e:79:ff:41:a1:38:2f:20:b2:67:e3:87:20: 87:52:c4:42:f7:83:46:8a:aa:59:29:5a:59:43:c0:03:95:93: e5:45:d8:7e:c1:2d:6a:62:d9:19:82:5d:6f:79:54:92:ee:a9: b5:70:12:23:cf:3f:f5:8f:3b:5e:b5:9c:f0:25:96:8b:1c:e2: 65:42:67:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTPxIGsRim1wWbeevHhc+5NJDQPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5MTUxRUY4QUU4QTc5RDhGNDI2NjgzRDE1MjVBRDgy RkFCM0Q1QzAeFw0yNTA2MDQwNDE2NDJaFw0yNTA2MDcxMzQwNDJaMDMxMTAvBgNV BAMTKEI2N0I2MkYxQjhENTFBMTlEMzlBNkJGMzYzRjExN0E3NTAxN0E3N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGqNZFXBaYD690/nQgsTDcTzHk s3A42YfO+opgjmzjTLJBK4lFUcAqbtmtB37vzyAkSRrGUbB7IHbye2SsBjxhac2y ADz4J5LPhqanBbG7qyQwHdFfFuBX4tlJrNUw6odukHUFE1Ga2jUKhqIgG8tHFORX sY14A8PjMQblsuJCXOOB0S6mmiRjVPNaPeHWJfwnwlz42ff7x2kPEX+6J55bPR59 1ey4ec4AYAu5Aw7ITYSRfHdDr0kUUkXDyeH350kIMX5tLubh+hzSGovbfRpe1qri 8qttaYK/w52GLy5xvMf/GEYR27VjbgdLSh+eApdH+fj2m1IaiqnPWvmFLzbBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtnti8bjVGhnTmmvzY/EXp1AXp3owHwYDVR0j BBgwFoAUKJFR74rop52PQmaD0VJa2C+rPVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YmJlNjgxNS0zMTBlLTQyMDYtYTUwMC02YmI5ZDMyNjNhYmYvMC8yODkxNTFFRjhB RThBNzlEOEY0MjY2ODNEMTUyNUFEODJGQUIzRDVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg5MTUxRUY4QUU4QTc5RDhGNDI2NjgzRDE1MjVBRDgyRkFC M0Q1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmJiZTY4MTUtMzEwZS00MjA2LWE1 MDAtNmJiOWQzMjYzYWJmLzAvMjg5MTUxRUY4QUU4QTc5RDhGNDI2NjgzRDE1MjVB RDgyRkFCM0Q1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGjynHpy7LdTKbuTfgLKj21gY4UrPq9xxCpN Bwwr2Lj0Fo8cSshmqhZrhoaw2Dgef3KgX3NKyCi9xhK0lVb9kox5cREeZP5OuMDV NYJsRbniWaUZQt/1sk1rCjaxYMNIFWQ5jRQqzhYFQPYfDtzRAzIgrYGD2T9rm9Db Q7NbK/6fnV9ElysAunv39l+cBx2IBIewpONb32MIGDSGpj/MnE4d/h+fYH2GcfBk wD++V1T5Ucb2YbQUr3P8Hnn/QaE4LyCyZ+OHIIdSxEL3g0aKqlkpWllDwAOVk+VF 2H7BLWpi2RmCXW95VJLuqbVwEiPPP/WPO161nPAllosc4mVCZ1o= -----END CERTIFICATE-----Generated at Thu Jun 5 18:18:27 2025 by rpki-client