$ rpki-client -vvf repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft File: B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft (raw, json) Hash identifier: UyRXVFPUiRf64rghbg/5YX5/wv6tA/Kw0/HFD9ZN1/s= Subject key identifier: FF:F9:39:84:69:F6:4B:19:7F:3C:FA:2B:A2:98:AD:91:DB:1B:28:45 Authority key identifier: B9:37:59:B1:9E:4C:1F:8F:FB:6E:9D:1E:2E:67:4E:4E:31:7D:7E:94 Certificate issuer: /CN=B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94 Certificate serial: 63F8F28893818EFD1AB73EEED0B424A017B46317 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft Manifest number: 01D3 Signing time: Sat 07 Jun 2025 12:12:21 +0000 Manifest this update: Sat 07 Jun 2025 12:07:21 +0000 Manifest next update: Tue 10 Jun 2025 22:02:21 +0000 Files and hashes: 1: B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.crl (hash: IZh+8Tp+kOGIQCOGQqXIIXXEB7m5SR8qXBoavRegOMg=) 2: 3130332e3135302e3135382e302f32342d3234203d3e20313430333937.roa (hash: XFDD1vzbK3fH2oVTZT7/I8pF/szQ/Q1UsEfrzMZOTGI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.crl rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 22:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:f8:f2:88:93:81:8e:fd:1a:b7:3e:ee:d0:b4:24:a0:17:b4:63:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94 Validity Not Before: Jun 7 12:07:21 2025 GMT Not After : Jun 10 22:02:21 2025 GMT Subject: CN=FFF9398469F64B197F3CFA2BA298AD91DB1B2845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b3:03:1d:b3:d9:38:d2:c5:9e:36:67:c4:61: b5:d6:ae:63:b8:ee:90:39:db:c0:ee:61:2b:78:bb: 87:84:d4:ce:d8:3a:b1:d7:b2:90:1c:3f:c5:d8:6a: b5:f1:bc:5b:ea:09:6b:d7:b3:df:ad:46:25:e6:19: 11:1b:45:a7:29:4c:53:b5:a4:b2:3f:24:18:f0:2f: 6c:57:72:91:ad:9d:b5:5e:79:8f:f6:fe:ef:3b:14: 61:b2:2e:8d:1f:dc:10:57:80:fc:df:08:5f:e0:81: e0:dd:19:8f:f6:ff:6c:4d:a8:05:b1:71:c9:0d:9e: 8d:26:21:e4:34:c7:f0:81:3f:0a:62:96:49:5c:e7: b2:d0:0c:64:87:d3:c4:07:a7:d4:97:49:38:61:9e: a5:21:16:3b:5b:60:1e:7c:0b:8e:1b:99:2c:81:48: 5c:55:1b:c0:a8:95:6e:de:4b:ec:6a:e2:4d:05:e0: 82:82:7c:f2:4a:9e:35:18:db:d7:ea:ab:97:26:65: ac:fa:0c:23:ac:30:c6:ab:7d:38:50:a7:72:27:4a: a2:54:dd:4a:d4:52:69:cf:61:e7:81:99:66:99:36: 68:da:c0:a1:5a:c4:48:91:7d:21:49:73:12:32:7b: 61:d7:33:06:f1:0d:cf:40:c2:86:ae:34:07:37:a4: 65:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F9:39:84:69:F6:4B:19:7F:3C:FA:2B:A2:98:AD:91:DB:1B:28:45 X509v3 Authority Key Identifier: keyid:B9:37:59:B1:9E:4C:1F:8F:FB:6E:9D:1E:2E:67:4E:4E:31:7D:7E:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:db:26:2d:66:32:d6:23:03:71:e5:e3:29:e5:41:97:01:a2: 6e:69:3f:8b:f2:13:4d:cc:1b:74:0b:34:49:78:f8:8e:ed:be: 39:cc:2a:ef:a7:a6:af:8e:0a:e9:6e:fc:28:fa:a1:c9:c9:47: 23:7a:a5:db:99:47:c4:47:aa:0c:16:0d:33:ac:20:09:02:90: f4:51:92:37:68:fb:ea:19:64:31:72:c1:8a:b9:e5:1f:b5:47: 38:27:1a:b0:69:6a:78:98:be:30:57:77:75:3b:43:ee:2d:aa: 8e:c8:01:f9:15:3a:b9:b0:dd:0a:5d:c7:d2:85:4f:d5:3f:b4: b5:17:7f:c4:12:28:80:db:aa:9a:4f:43:66:e5:a0:fd:4d:45: 3d:f6:2a:97:aa:17:61:dc:da:0e:c4:f0:27:e1:00:2f:e1:4e: 76:19:c1:e0:c6:05:26:01:07:f4:dd:0e:6e:f5:16:77:fb:13: b6:18:30:d6:ef:47:d5:77:b6:94:2a:c9:a7:23:7b:b1:cc:51: 2c:4c:95:38:73:2e:c3:30:f3:f7:27:38:7e:de:39:b5:f4:98: 92:db:4e:16:8b:1f:fb:c9:9f:21:34:66:e3:32:76:e0:57:fd: 08:80:ca:6b:a6:80:4b:0f:ed:a5:2b:5f:ce:1e:42:d0:16:ce: 51:3f:71:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY/jyiJOBjv0atz7u0LQkoBe0YxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkzNzU5QjE5RTRDMUY4RkZCNkU5RDFFMkU2NzRFNEUz MTdEN0U5NDAeFw0yNTA2MDcxMjA3MjFaFw0yNTA2MTAyMjAyMjFaMDMxMTAvBgNV BAMTKEZGRjkzOTg0NjlGNjRCMTk3RjNDRkEyQkEyOThBRDkxREIxQjI4NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPswMds9k40sWeNmfEYbXWrmO4 7pA528DuYSt4u4eE1M7YOrHXspAcP8XYarXxvFvqCWvXs9+tRiXmGREbRacpTFO1 pLI/JBjwL2xXcpGtnbVeeY/2/u87FGGyLo0f3BBXgPzfCF/ggeDdGY/2/2xNqAWx cckNno0mIeQ0x/CBPwpilklc57LQDGSH08QHp9SXSThhnqUhFjtbYB58C44bmSyB SFxVG8ColW7eS+xq4k0F4IKCfPJKnjUY29fqq5cmZaz6DCOsMMarfThQp3InSqJU 3UrUUmnPYeeBmWaZNmjawKFaxEiRfSFJcxIye2HXMwbxDc9AwoauNAc3pGVXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU//k5hGn2Sxl/PPoropitkdsbKEUwHwYDVR0j BBgwFoAUuTdZsZ5MH4/7bp0eLmdOTjF9fpQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzYwZjA3OC04YTIwLTQ4ZDEtODJiOC1lMWY1MGExNTUyMDEvMC9COTM3NTlCMTlF NEMxRjhGRkI2RTlEMUUyRTY3NEU0RTMxN0Q3RTk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkzNzU5QjE5RTRDMUY4RkZCNkU5RDFFMkU2NzRFNEUzMTdE N0U5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM2MGYwNzgtOGEyMC00OGQxLTgy YjgtZTFmNTBhMTU1MjAxLzAvQjkzNzU5QjE5RTRDMUY4RkZCNkU5RDFFMkU2NzRF NEUzMTdEN0U5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHHbJi1mMtYjA3Hl4ynlQZcBom5pP4vyE03M G3QLNEl4+I7tvjnMKu+npq+OCulu/Cj6ocnJRyN6pduZR8RHqgwWDTOsIAkCkPRR kjdo++oZZDFywYq55R+1RzgnGrBpaniYvjBXd3U7Q+4tqo7IAfkVOrmw3Qpdx9KF T9U/tLUXf8QSKIDbqppPQ2bloP1NRT32KpeqF2Hc2g7E8CfhAC/hTnYZweDGBSYB B/TdDm71Fnf7E7YYMNbvR9V3tpQqyacje7HMUSxMlThzLsMw8/cnOH7eObX0mJLb ThaLH/vJnyE0ZuMyduBX/QiAymumgEsP7aUrX84eQtAWzlE/cfw= -----END CERTIFICATE-----Generated at Sun Jun 8 04:53:24 2025 by rpki-client