$ rpki-client -vvf repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft File: B59504F478A4226C16D97004A6F98153CD19D2E0.mft (raw, json) Hash identifier: z3ThDuue4Zjb1B367lfOoq/dz30lAvNmz9v6pIQN88U= Subject key identifier: 92:03:D6:7B:99:DD:28:FC:91:3D:B4:94:31:90:54:56:69:E8:E8:B7 Authority key identifier: B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0 Certificate issuer: /CN=B59504F478A4226C16D97004A6F98153CD19D2E0 Certificate serial: 253077108526A34A82FD7912F60450CD2967EB88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft Manifest number: 30 Signing time: Wed 04 Jun 2025 17:12:20 +0000 Manifest this update: Wed 04 Jun 2025 17:07:20 +0000 Manifest next update: Sun 08 Jun 2025 04:40:20 +0000 Files and hashes: 1: B59504F478A4226C16D97004A6F98153CD19D2E0.crl (hash: pc9lYT6Lf6cBtLaiZwQKiQa/4E0BaMfFgrVxQLWWE84=) 2: 3130332e3132322e352e302f32342d3234203d3e20313338303530.roa (hash: 3JVZnoM38MMLZt8EaIuKj3KzjzbuiEZaBDfLeCAseRs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.crl rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 04:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:30:77:10:85:26:a3:4a:82:fd:79:12:f6:04:50:cd:29:67:eb:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B59504F478A4226C16D97004A6F98153CD19D2E0 Validity Not Before: Jun 4 17:07:20 2025 GMT Not After : Jun 8 04:40:20 2025 GMT Subject: CN=9203D67B99DD28FC913DB4943190545669E8E8B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6e:90:62:fe:67:50:cd:5c:26:51:3e:5b:e8: 1c:aa:ab:ff:51:44:ff:eb:24:10:fc:08:55:54:9b: ea:a6:51:0c:2a:cf:c8:22:00:5c:00:f9:0f:bd:74: c5:56:b5:c9:92:e4:74:76:fd:89:64:2b:07:7c:b2: fe:94:cc:1f:40:99:71:1c:1d:1a:a9:3a:bb:43:c9: 6e:5d:08:22:68:57:f5:6c:44:23:97:c5:c6:10:a8: f4:11:18:20:22:93:b0:74:63:b6:ab:9d:6d:df:ba: 45:88:7b:35:9b:35:37:46:d5:61:10:8b:5e:30:5d: b9:3c:1d:14:03:d5:d0:bb:6a:fa:ca:d4:76:7a:6b: 0d:0c:fc:18:22:86:99:18:91:a8:61:a1:82:fd:02: bf:9a:fe:c1:03:99:ed:97:7b:c7:5c:24:12:b2:db: 75:67:21:28:cb:2e:2b:c8:6a:17:8c:12:1b:dd:05: dd:e1:b2:63:92:2e:09:f4:24:57:e7:c0:85:6c:cf: fe:81:14:30:15:ae:2d:36:79:f3:ac:2d:cd:a0:81: 00:b6:61:2c:d1:a8:2f:af:e1:6f:a9:5d:45:b0:d8: 37:13:06:b8:af:6a:bd:37:d4:df:46:bc:1c:76:c7: f6:6b:3b:00:f1:e5:4f:cf:3f:e5:40:1e:7b:25:22: a8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:03:D6:7B:99:DD:28:FC:91:3D:B4:94:31:90:54:56:69:E8:E8:B7 X509v3 Authority Key Identifier: keyid:B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:b8:e3:0b:8e:52:5c:2a:02:29:61:b9:69:d4:c6:50:b1:be: e2:a1:f5:d4:e3:cd:06:d0:36:c8:4a:f6:5e:ef:41:23:c7:43: ba:dc:2d:12:6c:71:57:c3:b6:34:fe:d5:4a:32:ee:71:40:ed: db:7e:5f:35:9d:63:3f:09:04:70:ed:7f:8a:ba:c0:1e:ca:ea: 15:5b:46:47:7a:be:ba:aa:9b:77:0d:68:74:97:f3:09:fd:cc: 65:57:4e:6a:c9:6f:94:9f:99:c6:dd:cf:75:76:55:79:90:00: ef:f5:c2:a0:59:33:d9:fb:b1:9c:f9:42:22:c7:39:8f:59:35: 9f:54:30:51:aa:9c:e6:c5:20:c1:68:85:48:96:9d:66:87:ca: 66:53:30:86:05:6e:ef:29:05:b7:27:ce:dd:8e:b5:91:2c:03: 6f:e7:0a:8e:28:4f:f4:06:0b:ed:ca:15:f0:b0:7d:4b:99:39: 15:0a:7a:91:9b:96:e4:dc:9a:92:3e:7f:a9:e2:90:70:28:e6: 47:bc:86:84:3c:e7:bc:f4:fd:7e:05:70:00:13:8f:8b:bb:1a: b3:ef:91:7d:af:38:5b:1c:ea:0a:81:fa:6d:96:0f:4f:4a:41: 62:02:c7:c1:a5:c9:95:2f:69:e7:9e:e8:c2:9d:99:24:70:90: a4:e2:ae:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJTB3EIUmo0qC/XkS9gRQzSln64gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgxNTND RDE5RDJFMDAeFw0yNTA2MDQxNzA3MjBaFw0yNTA2MDgwNDQwMjBaMDMxMTAvBgNV BAMTKDkyMDNENjdCOTlERDI4RkM5MTNEQjQ5NDMxOTA1NDU2NjlFOEU4QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcbpBi/mdQzVwmUT5b6Byqq/9R RP/rJBD8CFVUm+qmUQwqz8giAFwA+Q+9dMVWtcmS5HR2/YlkKwd8sv6UzB9AmXEc HRqpOrtDyW5dCCJoV/VsRCOXxcYQqPQRGCAik7B0Y7arnW3fukWIezWbNTdG1WEQ i14wXbk8HRQD1dC7avrK1HZ6aw0M/BgihpkYkahhoYL9Ar+a/sEDme2Xe8dcJBKy 23VnISjLLivIaheMEhvdBd3hsmOSLgn0JFfnwIVsz/6BFDAVri02efOsLc2ggQC2 YSzRqC+v4W+pXUWw2DcTBrivar031N9GvBx2x/ZrOwDx5U/PP+VAHnslIqjHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkgPWe5ndKPyRPbSUMZBUVmno6LcwHwYDVR0j BBgwFoAUtZUE9HikImwW2XAEpvmBU80Z0uAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDRmYmZiMC05M2VlLTRlYTYtYjRjZi0wN2Q3NjliODhhMjIvMC9CNTk1MDRGNDc4 QTQyMjZDMTZEOTcwMDRBNkY5ODE1M0NEMTlEMkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgxNTNDRDE5 RDJFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ0ZmJmYjAtOTNlZS00ZWE2LWI0 Y2YtMDdkNzY5Yjg4YTIyLzAvQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgx NTNDRDE5RDJFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHO44wuOUlwqAilhuWnUxlCxvuKh9dTjzQbQ NshK9l7vQSPHQ7rcLRJscVfDtjT+1Uoy7nFA7dt+XzWdYz8JBHDtf4q6wB7K6hVb Rkd6vrqqm3cNaHSX8wn9zGVXTmrJb5Sfmcbdz3V2VXmQAO/1wqBZM9n7sZz5QiLH OY9ZNZ9UMFGqnObFIMFohUiWnWaHymZTMIYFbu8pBbcnzt2OtZEsA2/nCo4oT/QG C+3KFfCwfUuZORUKepGbluTcmpI+f6nikHAo5ke8hoQ857z0/X4FcAATj4u7GrPv kX2vOFsc6gqB+m2WD09KQWICx8GlyZUvaeee6MKdmSRwkKTirow= -----END CERTIFICATE-----Generated at Thu Jun 5 18:33:00 2025 by rpki-client