$ rpki-client -vvf repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft File: B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft (raw, json) Hash identifier: 4NJU0c8wp/hkgPxJsZ9dQHHuqMV2ym5xpKtah5GSlHA= Subject key identifier: 82:E6:69:47:1C:D7:72:D9:69:7A:0C:D4:9A:A1:90:05:CB:7A:01:9B Authority key identifier: B8:D4:44:C5:B3:18:4A:4F:8C:8F:19:9A:43:22:42:C4:4E:19:EA:CB Certificate issuer: /CN=B8D444C5B3184A4F8C8F199A432242C44E19EACB Certificate serial: 78AA3B02188E096F6BE98651526556DAF8CD4C17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft Manifest number: 95 Signing time: Sat 07 Jun 2025 09:11:55 +0000 Manifest this update: Sat 07 Jun 2025 09:06:55 +0000 Manifest next update: Tue 10 Jun 2025 10:53:55 +0000 Files and hashes: 1: B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl (hash: +Kpw9wXM/WnH4tGO4Ks+YJdn+C7g5bXvK1Va7MsKVq8=) 2: 3136302e32352e33372e302f32342d3234203d3e20313532383332.roa (hash: M7PLTShc17cNHbAkZ/Aq1Y/sFTRdm7Sh5vz/cqQ2zg0=) 3: 3136302e32352e33362e302f32342d3234203d3e20313532383332.roa (hash: le0N09QJH4rB2Cs8/+qGf8BVJE6y94DB31o5gUkZnZI=) 4: 3136302e32352e33362e302f32332d3234203d3e20313532383332.roa (hash: 0s3rWLKkoef0LRd26YLEPlEN62q6VM66IYGFVdLCLsM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 06:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:aa:3b:02:18:8e:09:6f:6b:e9:86:51:52:65:56:da:f8:cd:4c:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D444C5B3184A4F8C8F199A432242C44E19EACB Validity Not Before: Jun 7 09:06:55 2025 GMT Not After : Jun 10 10:53:55 2025 GMT Subject: CN=82E669471CD772D9697A0CD49AA19005CB7A019B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ac:37:03:4b:3a:cb:df:03:db:e0:15:cb:2e: c2:db:f0:47:3e:47:f3:6e:a0:c4:7e:4f:c4:de:e2: 92:47:66:2f:27:e5:7c:c2:c8:da:00:58:07:40:38: b9:19:79:41:17:16:a6:05:06:bd:c1:f5:c7:b4:bc: 4c:0b:6c:d0:6c:fe:24:2f:5b:b2:3d:e9:a2:ac:6b: 16:7a:1c:d8:a2:dd:6a:83:86:27:c6:44:49:88:35: b7:bf:8a:39:3e:3b:cd:9b:51:fc:a5:97:8b:f0:ab: de:2c:4e:b0:3f:9b:a7:33:c2:a6:7d:d0:1b:b9:52: 69:7c:2e:e4:44:b7:03:b5:b5:4c:73:a4:1d:9b:dc: ff:ce:d6:26:39:b4:0d:b2:a6:7d:28:70:c4:d3:9b: 7e:a8:08:c0:81:78:b7:da:8c:02:b1:0c:c0:a9:24: d5:8e:a6:97:0c:6c:fe:6d:7d:37:7d:52:2b:ce:46: 4a:9f:ce:8a:48:3f:e3:51:c2:cd:5c:43:d2:a7:9d: f2:54:85:81:0b:71:0f:9b:86:4e:c5:a7:80:98:7c: bf:e8:91:ba:43:2b:85:f4:c8:b3:e7:22:a1:0f:b8: 23:6b:26:83:38:2d:ec:6f:fa:7d:f0:26:f9:74:f0: 30:e6:0f:e5:49:cd:5e:c9:ef:71:2d:9c:0c:c5:11: 56:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E6:69:47:1C:D7:72:D9:69:7A:0C:D4:9A:A1:90:05:CB:7A:01:9B X509v3 Authority Key Identifier: keyid:B8:D4:44:C5:B3:18:4A:4F:8C:8F:19:9A:43:22:42:C4:4E:19:EA:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:2f:87:63:cb:15:7e:f9:cb:93:8e:96:ea:2d:81:01:75:73: 15:f6:59:21:81:15:b0:35:4b:17:92:da:c5:84:c2:42:d3:78: d7:78:d0:0f:f7:72:3a:c4:0a:01:db:b9:e9:7e:86:31:61:b2: d4:3a:c4:95:7b:d1:cc:e7:80:2b:ee:95:e6:7e:22:05:af:e3: 36:5f:fb:8d:56:d4:11:0b:32:8d:de:db:73:9a:9f:70:f2:c8: 48:ee:42:4a:e4:a6:46:e8:79:c4:36:b7:a4:04:4a:3f:54:28: 8b:b7:61:dc:51:0b:21:80:04:0d:80:36:9e:08:eb:70:ef:71: 1b:3c:b2:e3:fe:e2:33:89:4f:7a:62:87:e2:f7:fa:1c:46:b6: fc:3d:26:25:1d:4b:60:45:b1:52:29:e8:7e:e4:f5:09:5c:df: 27:8e:3c:1a:bb:36:18:ca:9c:d7:ec:1d:aa:78:0e:24:41:db: 77:4a:1f:6e:e6:e0:59:eb:e1:fe:72:51:78:e0:9c:63:83:db: 8b:98:4a:68:60:46:7c:5f:04:e9:0e:3d:ee:af:db:70:d5:1b: d3:2e:d9:71:20:dd:de:f3:26:ff:81:a6:1d:61:3a:7f:99:0b: 47:2c:1e:ff:73:c6:c7:bd:46:a1:b8:0d:ad:be:bf:16:bf:53: 84:24:27:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeKo7AhiOCW9r6YZRUmVW2vjNTBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQyQzQ0 RTE5RUFDQjAeFw0yNTA2MDcwOTA2NTVaFw0yNTA2MTAxMDUzNTVaMDMxMTAvBgNV BAMTKDgyRTY2OTQ3MUNENzcyRDk2OTdBMENENDlBQTE5MDA1Q0I3QTAxOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBrDcDSzrL3wPb4BXLLsLb8Ec+ R/NuoMR+T8Te4pJHZi8n5XzCyNoAWAdAOLkZeUEXFqYFBr3B9ce0vEwLbNBs/iQv W7I96aKsaxZ6HNii3WqDhifGREmINbe/ijk+O82bUfyll4vwq94sTrA/m6czwqZ9 0Bu5Uml8LuREtwO1tUxzpB2b3P/O1iY5tA2ypn0ocMTTm36oCMCBeLfajAKxDMCp JNWOppcMbP5tfTd9UivORkqfzopIP+NRws1cQ9KnnfJUhYELcQ+bhk7Fp4CYfL/o kbpDK4X0yLPnIqEPuCNrJoM4Lexv+n3wJvl08DDmD+VJzV7J73EtnAzFEVbNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUguZpRxzXctlpegzUmqGQBct6AZswHwYDVR0j BBgwFoAUuNRExbMYSk+MjxmaQyJCxE4Z6sswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjRiNTNkOC1iMmZmLTQ5NzMtYjFhYy02Zjg1ZmFlYWRiZTUvMC9COEQ0NDRDNUIz MTg0QTRGOEM4RjE5OUE0MzIyNDJDNDRFMTlFQUNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQyQzQ0RTE5 RUFDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Y0YjUzZDgtYjJmZi00OTczLWIx YWMtNmY4NWZhZWFkYmU1LzAvQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQy QzQ0RTE5RUFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQvh2PLFX75y5OOluotgQF1cxX2WSGBFbA1 SxeS2sWEwkLTeNd40A/3cjrECgHbuel+hjFhstQ6xJV70czngCvuleZ+IgWv4zZf +41W1BELMo3e23Oan3DyyEjuQkrkpkboecQ2t6QESj9UKIu3YdxRCyGABA2ANp4I 63DvcRs8suP+4jOJT3pih+L3+hxGtvw9JiUdS2BFsVIp6H7k9Qlc3yeOPBq7NhjK nNfsHap4DiRB23dKH27m4Fnr4f5yUXjgnGOD24uYSmhgRnxfBOkOPe6v23DVG9Mu 2XEg3d7zJv+Bph1hOn+ZC0csHv9zxse9RqG4Da2+vxa/U4QkJyw= -----END CERTIFICATE-----Generated at Sat Jun 7 23:22:22 2025 by rpki-client