$ rpki-client -vvf repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft File: CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft (raw, json) Hash identifier: 7MGBt/6YCXwak6Fqb2TTddISFStAaoVxmS6wIWjHxb8= Subject key identifier: 3B:5F:D0:12:F1:01:2B:8D:F4:91:70:9D:63:B1:8F:A8:60:52:CA:14 Authority key identifier: CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8 Certificate issuer: /CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8 Certificate serial: 110FB95C6EE5AFB10E3DD04178CCB90221D82464 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft Manifest number: CD Signing time: Tue 10 Jun 2025 21:50:38 +0000 Manifest this update: Tue 10 Jun 2025 21:45:38 +0000 Manifest next update: Fri 13 Jun 2025 22:09:38 +0000 Files and hashes: 1: CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl (hash: ymIghLZNJF72Ge76ehV4uIRj2eopUqjqjE5S12aS7Fs=) 2: 3135372e31352e36322e302f32342d3234203d3e20313532333733.roa (hash: lS5KueYMn8bh5TmvZ4yUXAkTqzodamQRrumfFCdScxY=) 3: 3135372e31352e36322e302f32332d3233203d3e20313532333733.roa (hash: jXxQ64IynNf9UaROvNwdTvfTlkwJClGyFCLy03gvgpE=) 4: 3135372e31352e36332e302f32342d3234203d3e20313532333733.roa (hash: O3gcBChIby3AdjPp6ABgzZyB6Dva+5HT0HMij4bC+80=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 22:09:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:0f:b9:5c:6e:e5:af:b1:0e:3d:d0:41:78:cc:b9:02:21:d8:24:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8 Validity Not Before: Jun 10 21:45:38 2025 GMT Not After : Jun 13 22:09:38 2025 GMT Subject: CN=3B5FD012F1012B8DF491709D63B18FA86052CA14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c4:f3:45:80:08:7b:29:09:5c:3b:eb:b5:9c: 92:45:76:8b:c3:e8:83:dd:34:63:41:7b:a2:b5:83: 2b:59:23:ad:05:fb:b1:76:e2:00:d4:2d:a0:c8:b7: 49:2c:b1:e6:31:6f:c5:f5:91:e5:60:03:68:7c:5a: 39:1b:d8:a2:26:4b:ee:84:e5:b6:e2:c7:fa:f2:99: b0:15:f8:2f:da:a6:6c:8b:97:d3:1a:87:fa:ab:00: 7b:10:de:08:1c:9b:3a:23:74:1a:43:8c:56:41:07: 53:1e:71:64:d3:06:43:0a:34:d1:09:cc:2f:3e:68: b5:b1:d6:f4:85:d2:8d:2c:f4:01:ec:1c:92:f0:88: 0a:08:6a:4e:0d:8a:80:90:c8:db:16:6f:d9:53:d6: 42:a9:41:e3:cd:c3:87:2e:65:8c:7d:5a:b3:29:f6: 0e:15:d9:6e:be:45:94:aa:21:b3:d7:d0:59:4e:53: b8:8d:03:20:c1:f1:5f:5a:43:d4:70:72:e1:98:00: 83:af:56:15:d5:a4:36:24:4a:2a:c0:bd:33:69:54: c6:d6:6c:74:33:c1:82:6b:a7:e2:83:3c:24:ba:32: c5:16:8d:e4:70:9c:a7:77:2f:55:7c:3b:76:98:df: 38:78:aa:4a:e1:6a:e0:94:e0:1b:7f:ba:18:4a:11: c3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:5F:D0:12:F1:01:2B:8D:F4:91:70:9D:63:B1:8F:A8:60:52:CA:14 X509v3 Authority Key Identifier: keyid:CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:f6:b2:83:5f:d6:35:92:e6:fe:e0:e3:de:32:c6:64:73:36: ed:9f:45:c1:1e:11:98:46:66:df:91:9a:4c:0f:c6:d1:7e:5a: 0e:c6:b8:f3:38:fc:96:98:4d:72:e8:79:75:87:16:26:0c:a1: 4f:17:20:4c:da:f3:e9:3d:58:90:97:ef:6d:da:c2:1d:16:30: e4:0f:4f:34:c3:eb:76:36:c3:f6:9f:eb:da:4f:6e:3a:9c:6a: 20:53:5c:dd:68:30:58:04:49:53:ab:ee:33:5b:8f:0d:8f:ec: 89:11:9f:72:af:7f:86:21:ca:c9:3f:93:84:04:ed:60:52:f5: 91:5e:24:fd:ff:c1:90:4f:d0:ca:24:4a:96:7e:fd:24:3e:89: 98:a9:01:3f:4c:83:bd:fd:12:16:5c:99:77:66:c3:22:88:9a: 57:10:52:fc:8f:d0:2d:6b:cf:bf:36:c5:1f:30:a7:fd:bf:aa: 9f:5e:b3:aa:0b:98:eb:d8:94:6c:a1:d6:b5:42:a0:b6:12:62: 58:38:97:21:6f:a3:2c:99:a5:a6:95:23:bf:db:ce:21:c6:c6: 71:92:27:c6:3b:fc:d3:14:6a:2f:0a:16:08:bc:70:72:d8:fd: b9:2b:d3:41:57:70:f2:7c:e7:a1:25:0c:47:1f:60:6e:32:7f: cc:e1:32:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEQ+5XG7lr7EOPdBBeMy5AiHYJGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2QUJF MzlCRjhFODAeFw0yNTA2MTAyMTQ1MzhaFw0yNTA2MTMyMjA5MzhaMDMxMTAvBgNV BAMTKDNCNUZEMDEyRjEwMTJCOERGNDkxNzA5RDYzQjE4RkE4NjA1MkNBMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVxPNFgAh7KQlcO+u1nJJFdovD 6IPdNGNBe6K1gytZI60F+7F24gDULaDIt0ksseYxb8X1keVgA2h8Wjkb2KImS+6E 5bbix/rymbAV+C/apmyLl9Mah/qrAHsQ3ggcmzojdBpDjFZBB1MecWTTBkMKNNEJ zC8+aLWx1vSF0o0s9AHsHJLwiAoIak4NioCQyNsWb9lT1kKpQePNw4cuZYx9WrMp 9g4V2W6+RZSqIbPX0FlOU7iNAyDB8V9aQ9RwcuGYAIOvVhXVpDYkSirAvTNpVMbW bHQzwYJrp+KDPCS6MsUWjeRwnKd3L1V8O3aY3zh4qkrhauCU4Bt/uhhKEcP/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO1/QEvEBK430kXCdY7GPqGBSyhQwHwYDVR0j BBgwFoAUy1TcUm+iFPn3NpJuaqoWq+Ob+OgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTIzNGM0YS1hOGZmLTQwMzYtODQyMC1kYTgxNjIxMTE4MDYvMC9DQjU0REM1MjZG QTIxNEY5RjczNjkyNkU2QUFBMTZBQkUzOUJGOEU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2QUJFMzlC RjhFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyMzRjNGEtYThmZi00MDM2LTg0 MjAtZGE4MTYyMTExODA2LzAvQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2 QUJFMzlCRjhFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKT2soNf1jWS5v7g494yxmRzNu2fRcEeEZhG Zt+RmkwPxtF+Wg7GuPM4/JaYTXLoeXWHFiYMoU8XIEza8+k9WJCX723awh0WMOQP TzTD63Y2w/af69pPbjqcaiBTXN1oMFgESVOr7jNbjw2P7IkRn3Kvf4Yhysk/k4QE 7WBS9ZFeJP3/wZBP0MokSpZ+/SQ+iZipAT9Mg739EhZcmXdmwyKImlcQUvyP0C1r z782xR8wp/2/qp9es6oLmOvYlGyh1rVCoLYSYlg4lyFvoyyZpaaVI7/bziHGxnGS J8Y7/NMUai8KFgi8cHLY/bkr00FXcPJ856ElDEcfYG4yf8zhMi8= -----END CERTIFICATE-----Generated at Fri Jun 13 01:01:08 2025 by rpki-client