$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft File: B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft (raw, json) Hash identifier: 5Cj0smOdcbc+h3M21rJ7gMioj0f6HOww4lZXaywApgg= Subject key identifier: 32:BF:D4:31:D1:00:0F:B9:E4:FB:46:6A:9A:B7:09:CC:5F:D7:5B:E1 Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA Certificate serial: 4DBD02EF2F5F477DA686003C4DF6A05C23941F37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft Manifest number: 05A0 Signing time: Tue 03 Jun 2025 00:30:14 +0000 Manifest this update: Tue 03 Jun 2025 00:25:14 +0000 Manifest next update: Fri 06 Jun 2025 11:17:14 +0000 Files and hashes: 1: B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl (hash: E6Z1aIo5RZp13WuAv+FuP1MOSfI0j730UhsCRcApWoM=) 2: AS17885.roa (hash: +GO2dMXskkTZVI0G/x5c/tJuemAtakjNsz3wmOidFEQ=) 3: AS24203.roa (hash: iUUx6/7Vijwx93IUbiSye/ssw8bJSAcdA6IGTt4AxyQ=) 4: AS139994.roa (hash: F7hIwzPI2Ea9gB0Xp4Xk6YhQEbDGp6jagSlzZiZywSc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 11:17:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:bd:02:ef:2f:5f:47:7d:a6:86:00:3c:4d:f6:a0:5c:23:94:1f:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA Validity Not Before: Jun 3 00:25:14 2025 GMT Not After : Jun 6 11:17:14 2025 GMT Subject: CN=32BFD431D1000FB9E4FB466A9AB709CC5FD75BE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ba:da:5a:19:e8:e2:9c:76:06:4a:6f:fa:0d: f0:49:3c:bd:dc:e8:57:45:0c:02:d5:9e:d2:f5:b1: 12:28:79:41:b3:bc:58:db:f8:ef:fe:99:ff:c3:21: 3f:c0:ee:e7:33:dd:df:9e:cf:f4:46:a8:66:8d:f4: d7:00:c1:46:49:18:24:a0:36:28:88:9f:68:70:c3: a6:f1:6e:91:7a:b3:cf:a0:62:76:c8:17:97:40:20: c9:b1:2d:b8:da:a8:04:d6:8a:f0:ef:fa:65:45:80: 46:cf:e7:86:7a:ee:be:68:aa:04:b0:6b:0d:28:97: 4f:12:e7:3e:bb:f8:e8:ed:57:f6:b8:44:a2:42:c4: 5f:58:3b:46:76:9e:a0:83:44:dd:33:80:ee:03:ec: 8f:a4:4c:0e:41:5b:98:17:37:d7:e2:54:cd:b8:b6: 81:6f:31:19:b5:cf:7e:d4:69:3a:36:37:84:6c:2d: b7:98:67:85:0b:c0:f0:65:73:cc:06:1d:be:0a:60: cb:bf:fb:ae:fc:17:36:02:07:2a:3a:8b:ce:b1:f6: 1f:96:34:71:9b:db:11:15:d8:fb:6b:87:2e:10:d7: 92:44:75:31:79:7c:45:88:d0:0b:6d:db:d2:b8:fc: 25:c8:70:f3:e5:05:25:fd:90:95:53:d8:81:30:df: a8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BF:D4:31:D1:00:0F:B9:E4:FB:46:6A:9A:B7:09:CC:5F:D7:5B:E1 X509v3 Authority Key Identifier: keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:5e:2c:82:3f:52:cb:00:52:a3:c7:30:2d:3a:3f:dc:13:30: a8:cd:90:7c:13:b8:79:a8:b3:e2:a2:6b:35:c8:38:69:c1:1a: e1:fa:30:2a:82:64:24:59:72:7c:ee:97:11:6c:66:ee:2c:1b: c1:49:ff:ae:59:c1:37:16:f8:cd:af:f4:56:40:86:ba:57:37: 41:3f:a6:18:50:eb:ae:64:e6:82:b3:50:ff:5c:62:a6:9a:81: 5d:89:d7:51:06:cc:f1:e1:d9:ce:55:e4:d1:77:76:0f:bc:ef: b7:01:c2:40:09:a0:60:de:78:56:ef:bf:d8:96:07:60:87:48: 8d:8b:2b:7b:8e:70:aa:00:3f:a8:51:f7:6a:e2:65:ff:62:35: 5d:bb:b1:1a:42:28:92:72:25:3e:5d:00:0f:90:1e:52:33:8c: 63:48:76:e6:05:ae:15:eb:0b:ae:2f:06:a6:23:31:43:b2:68: 4e:f9:f3:7f:37:ac:7f:6c:50:51:a2:55:46:af:bd:06:a5:6e: 49:9e:97:13:fb:0d:e5:6a:a4:60:6e:eb:0a:e0:e2:8a:c1:8b: 82:94:51:2c:1f:94:56:b7:ed:fb:b5:10:08:35:03:94:12:25: bd:be:0c:7f:c3:47:1d:d2:32:70:87:57:05:3d:c4:2f:7d:ad: ff:1f:78:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTb0C7y9fR32mhgA8TfagXCOUHzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIw OTU2ODdEQTAeFw0yNTA2MDMwMDI1MTRaFw0yNTA2MDYxMTE3MTRaMDMxMTAvBgNV BAMTKDMyQkZENDMxRDEwMDBGQjlFNEZCNDY2QTlBQjcwOUNDNUZENzVCRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChutpaGejinHYGSm/6DfBJPL3c 6FdFDALVntL1sRIoeUGzvFjb+O/+mf/DIT/A7ucz3d+ez/RGqGaN9NcAwUZJGCSg NiiIn2hww6bxbpF6s8+gYnbIF5dAIMmxLbjaqATWivDv+mVFgEbP54Z67r5oqgSw aw0ol08S5z67+OjtV/a4RKJCxF9YO0Z2nqCDRN0zgO4D7I+kTA5BW5gXN9fiVM24 toFvMRm1z37UaTo2N4RsLbeYZ4ULwPBlc8wGHb4KYMu/+678FzYCByo6i86x9h+W NHGb2xEV2Ptrhy4Q15JEdTF5fEWI0Att29K4/CXIcPPlBSX9kJVT2IEw36htAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMr/UMdEAD7nk+0ZqmrcJzF/XW+EwHwYDVR0j BBgwFoAUtJOlzr8J4QvDXZrCIR2v0glWh9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMC9CNDkzQTVDRUJG MDlFMTBCQzM1RDlBQzIyMTFEQUZEMjA5NTY4N0RBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIwOTU2 ODdEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzAvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFG RDIwOTU2ODdEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGleLII/UssAUqPHMC06P9wTMKjNkHwTuHmo s+KiazXIOGnBGuH6MCqCZCRZcnzulxFsZu4sG8FJ/65ZwTcW+M2v9FZAhrpXN0E/ phhQ665k5oKzUP9cYqaagV2J11EGzPHh2c5V5NF3dg+877cBwkAJoGDeeFbvv9iW B2CHSI2LK3uOcKoAP6hR92riZf9iNV27sRpCKJJyJT5dAA+QHlIzjGNIduYFrhXr C64vBqYjMUOyaE758383rH9sUFGiVUavvQalbkmelxP7DeVqpGBu6wrg4orBi4KU USwflFa37fu1EAg1A5QSJb2+DH/DRx3SMnCHVwU9xC99rf8feJc= -----END CERTIFICATE-----Generated at Tue Jun 3 23:35:43 2025 by rpki-client