$ rpki-client -vvf repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft File: CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft (raw, json) Hash identifier: mYiY0ePt6e15XBjXHrC3+Ih/LVaUaqWeocMAj11mvjc= Subject key identifier: DC:F5:07:44:12:55:01:72:3D:AD:12:07:48:FB:BF:9E:48:F6:FF:B1 Authority key identifier: CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8 Certificate issuer: /CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8 Certificate serial: 04D5824F1FB9F9448FCEDDC4E1F51262443BD273 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft Manifest number: CE Signing time: Thu 12 Jun 2025 22:10:38 +0000 Manifest this update: Thu 12 Jun 2025 22:05:38 +0000 Manifest next update: Mon 16 Jun 2025 01:30:38 +0000 Files and hashes: 1: 3135372e31352e36322e302f32332d3233203d3e20313532333733.roa (hash: jXxQ64IynNf9UaROvNwdTvfTlkwJClGyFCLy03gvgpE=) 2: 3135372e31352e36332e302f32342d3234203d3e20313532333733.roa (hash: O3gcBChIby3AdjPp6ABgzZyB6Dva+5HT0HMij4bC+80=) 3: 3135372e31352e36322e302f32342d3234203d3e20313532333733.roa (hash: lS5KueYMn8bh5TmvZ4yUXAkTqzodamQRrumfFCdScxY=) 4: CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl (hash: XSlPP08FD7HUOIoqNipZy2mMiWVETM6TuZx+MLtDBJU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 12:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:d5:82:4f:1f:b9:f9:44:8f:ce:dd:c4:e1:f5:12:62:44:3b:d2:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8 Validity Not Before: Jun 12 22:05:38 2025 GMT Not After : Jun 16 01:30:38 2025 GMT Subject: CN=DCF50744125501723DAD120748FBBF9E48F6FFB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:80:d8:20:94:dd:92:bb:03:a1:ae:46:6b:6b: b1:69:ba:27:2a:bd:98:99:49:56:55:99:25:df:7d: 8b:03:59:54:2d:20:d3:f1:c5:be:4f:e2:de:5c:cb: af:5e:05:36:de:b6:bf:2a:f8:7e:a4:b6:81:1d:57: 3b:2e:73:7f:8d:50:13:f1:d0:a6:26:c6:7f:63:1f: c4:b0:7e:6c:ec:3a:f2:7e:12:fe:04:b4:69:bc:26: 13:49:ab:3b:9f:0e:59:b9:20:ba:34:45:1f:8a:91: 28:ff:59:a3:5a:94:14:75:76:f6:6e:48:dc:5a:28: 7e:0e:2e:e4:0b:8e:55:5a:6c:49:74:0a:14:11:b8: db:3d:36:f5:d0:0c:2c:75:5e:b4:44:24:b6:92:70: 32:8e:fc:55:2b:f8:17:33:a4:eb:26:30:f2:b4:23: 7e:5e:33:68:98:b6:b3:27:02:53:e6:6f:f3:63:e1: 60:cd:ec:47:07:f1:dd:ca:14:ed:68:a1:b5:f3:3e: 31:d8:88:39:3b:91:eb:5d:9c:1a:07:43:e1:a4:6e: 1c:9e:28:df:90:51:23:fe:1f:eb:81:2e:15:15:98: 33:d0:9c:76:17:76:af:cb:0d:19:2d:8d:fe:a1:37: 12:94:8c:45:e5:77:2b:0c:67:65:8f:24:20:2e:c2: d9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F5:07:44:12:55:01:72:3D:AD:12:07:48:FB:BF:9E:48:F6:FF:B1 X509v3 Authority Key Identifier: keyid:CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:a1:bc:e4:9c:8c:e4:cd:22:f7:be:91:7a:58:cf:38:af:16: bc:4c:0f:65:3b:0b:8e:fa:4c:bb:91:85:d4:1f:f3:f9:bd:28: 3a:d6:95:90:2f:57:c5:44:9e:5c:25:20:6c:1f:93:da:52:e7: 5b:6a:a2:0f:9f:56:23:b6:dd:32:46:05:16:cc:a0:6d:24:f9: 42:50:a7:8c:0a:b6:91:98:26:06:33:cf:1a:b7:b1:d6:15:4b: ec:2b:40:18:4a:6f:96:8a:9a:ca:6e:5e:17:04:73:f4:d2:66: 01:5f:f5:8c:30:06:7b:8f:c0:46:31:eb:c7:12:ca:7f:4d:1b: f1:94:c4:a9:0a:67:21:39:d6:ed:da:c9:01:5c:bd:35:c8:88: b3:f4:07:19:77:11:23:f1:ec:70:f2:7a:42:30:68:73:d0:b3: 17:9d:c1:b6:24:cd:dc:ba:ec:7e:d4:96:41:d5:02:60:d7:f6: d4:5a:b8:4c:0a:4d:59:b9:14:b9:81:bd:39:a6:f1:8e:8b:ac: f7:a9:26:b1:3c:4e:fe:40:e0:65:02:4a:b4:f8:dc:76:8e:61: 6a:3f:b6:b4:e7:7a:58:0b:95:1a:13:48:f3:7e:2a:53:66:ac: 23:71:bb:0b:c9:af:c1:e6:93:13:4e:4d:b3:46:af:2e:ce:03: 4e:22:c7:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBNWCTx+5+USPzt3E4fUSYkQ70nMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2QUJF MzlCRjhFODAeFw0yNTA2MTIyMjA1MzhaFw0yNTA2MTYwMTMwMzhaMDMxMTAvBgNV BAMTKERDRjUwNzQ0MTI1NTAxNzIzREFEMTIwNzQ4RkJCRjlFNDhGNkZGQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJgNgglN2SuwOhrkZra7Fpuicq vZiZSVZVmSXffYsDWVQtINPxxb5P4t5cy69eBTbetr8q+H6ktoEdVzsuc3+NUBPx 0KYmxn9jH8SwfmzsOvJ+Ev4EtGm8JhNJqzufDlm5ILo0RR+KkSj/WaNalBR1dvZu SNxaKH4OLuQLjlVabEl0ChQRuNs9NvXQDCx1XrREJLaScDKO/FUr+BczpOsmMPK0 I35eM2iYtrMnAlPmb/Nj4WDN7EcH8d3KFO1oobXzPjHYiDk7ketdnBoHQ+Gkbhye KN+QUSP+H+uBLhUVmDPQnHYXdq/LDRktjf6hNxKUjEXldysMZ2WPJCAuwtmTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3PUHRBJVAXI9rRIHSPu/nkj2/7EwHwYDVR0j BBgwFoAUy1TcUm+iFPn3NpJuaqoWq+Ob+OgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTIzNGM0YS1hOGZmLTQwMzYtODQyMC1kYTgxNjIxMTE4MDYvMC9DQjU0REM1MjZG QTIxNEY5RjczNjkyNkU2QUFBMTZBQkUzOUJGOEU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2QUJFMzlC RjhFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyMzRjNGEtYThmZi00MDM2LTg0 MjAtZGE4MTYyMTExODA2LzAvQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2 QUJFMzlCRjhFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGehvOScjOTNIve+kXpYzzivFrxMD2U7C476 TLuRhdQf8/m9KDrWlZAvV8VEnlwlIGwfk9pS51tqog+fViO23TJGBRbMoG0k+UJQ p4wKtpGYJgYzzxq3sdYVS+wrQBhKb5aKmspuXhcEc/TSZgFf9YwwBnuPwEYx68cS yn9NG/GUxKkKZyE51u3ayQFcvTXIiLP0Bxl3ESPx7HDyekIwaHPQsxedwbYkzdy6 7H7UlkHVAmDX9tRauEwKTVm5FLmBvTmm8Y6LrPepJrE8Tv5A4GUCSrT43HaOYWo/ trTnelgLlRoTSPN+KlNmrCNxuwvJr8HmkxNOTbNGry7OA04ix80= -----END CERTIFICATE-----Generated at Fri Jun 13 15:01:21 2025 by rpki-client