$ rpki-client -vvf repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft File: 116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft (raw, json) Hash identifier: x8JevI4/CAq0V+eZaE3hWWnRDL/xY7eMobbZez6pINc= Subject key identifier: E2:1D:AB:C6:34:8D:95:C9:87:5F:61:A0:75:DB:A3:A3:C5:ED:E7:87 Authority key identifier: 11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38 Certificate issuer: /CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38 Certificate serial: 336565D03AF4701D8101260319DBDDB6610FC725 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft Manifest number: 04EA Signing time: Wed 04 Jun 2025 06:30:33 +0000 Manifest this update: Wed 04 Jun 2025 06:25:33 +0000 Manifest next update: Sat 07 Jun 2025 12:40:33 +0000 Files and hashes: 1: 3230322e36322e31322e302f32322d3234203d3e203234353233.roa (hash: zDNAzKqw5j02WXuh6T5DV38kgqgTtQhlXzyZ+EBpvWk=) 2: 3230332e38342e3135322e302f32312d3234203d3e203234353233.roa (hash: sHtP5I2fCL/ByfK8+QejX4fzdx/zVWKbMfpBHH71lYU=) 3: 116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl (hash: ipjSuvMBv063JorXyWiC7Sjaun3vipVnEAdDLPLPNCo=) 4: 3131302e352e39362e302f32302d3234203d3e203234353233.roa (hash: YQwpls/VIYk0HtO6le+F2vrKuryHDRtN3YkX83o6jq0=) 5: 323430323a313230303a3a2f33322d3438203d3e203234353233.roa (hash: RF31+hlg7a1h6KD8MpJ2iWEMUqzQM6jZSnJZLrwUpW8=) 6: 3130332e32322e3234302e302f32322d3234203d3e203234353233.roa (hash: O8/63tusLe+8VPLAAqnF2wRbO5seVh0CdjonLiqJ+TA=) 7: 34332e3234372e32322e302f32342d3234203d3e20313331373830.roa (hash: HBRVL6ab1EXX/4v+TicYMdAP2m56HzSbazq4BRWuQH4=) 8: 3230332e3137342e382e302f32312d3234203d3e203234353233.roa (hash: CCYyG9Lvz2JHKUXuBts3OmPCfqvhkN40wl/1YoY63Gk=) 9: 34332e3234372e32302e302f32322d3234203d3e203234353233.roa (hash: H+RNVENUJYTTFsMWsgJwmtIem8PyNZc4K51/hdOdwYc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 12:40:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:65:65:d0:3a:f4:70:1d:81:01:26:03:19:db:dd:b6:61:0f:c7:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38 Validity Not Before: Jun 4 06:25:33 2025 GMT Not After : Jun 7 12:40:33 2025 GMT Subject: CN=E21DABC6348D95C9875F61A075DBA3A3C5EDE787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5f:16:3a:68:c5:4f:05:b5:c1:eb:a6:fe:30: 77:99:3b:5e:81:93:9b:57:6f:04:e3:56:07:1b:06: b9:02:65:cf:26:37:92:66:70:84:0f:dc:e2:72:58: 1b:3e:39:3c:5e:ca:39:e2:59:2d:72:f6:d8:d5:23: a4:8d:c5:b1:66:bb:11:f4:ce:a5:ed:63:aa:65:7e: 4f:76:a8:fb:6b:70:78:cb:74:ff:5f:5a:0b:c3:45: f1:c5:1c:82:8b:4b:61:c4:54:92:09:c5:5b:74:dd: 89:c5:86:b9:d7:e7:f9:b2:20:20:99:d9:a7:96:ce: 50:e0:83:9b:d0:67:f5:b6:05:de:80:3d:51:6e:63: 88:52:82:28:63:eb:51:35:2f:24:ad:c7:3d:59:dd: 07:91:7d:03:2b:36:ab:5d:2a:bb:98:0d:28:29:9a: 10:c2:75:35:88:69:f4:d8:74:a7:fc:a1:f1:14:dc: e9:ee:5e:7f:5e:ed:94:9e:80:54:74:a8:d2:78:95: 5f:da:f1:94:59:9d:29:be:42:cc:50:27:b3:d5:22: cf:c5:40:6a:f9:92:96:6a:b6:8e:3b:78:4a:09:8c: 52:d0:ca:90:80:1d:67:83:09:a9:77:27:dc:f6:17: 6e:1a:f0:ea:33:e5:9f:79:2d:01:a2:c6:ff:48:81: a0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:1D:AB:C6:34:8D:95:C9:87:5F:61:A0:75:DB:A3:A3:C5:ED:E7:87 X509v3 Authority Key Identifier: keyid:11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:c9:f1:57:d0:47:4f:17:74:4b:a9:d1:da:cf:37:a7:38:d8: 8c:16:80:ff:ac:83:c4:b6:9d:f8:65:75:4f:b2:c0:2f:74:2f: 9f:31:9c:a2:8c:28:a8:2e:66:da:54:65:bd:d4:30:09:4c:a7: be:8c:70:08:56:af:b6:70:66:f3:8e:e9:02:77:65:0c:d4:51: d0:d1:25:dc:3e:ca:95:b4:fc:3c:d2:30:83:0c:80:a9:3f:52: 25:c5:84:5e:34:a8:d2:a8:18:f2:f7:d2:71:ef:cd:39:a8:c5: c0:0b:a6:88:5b:0a:2f:07:20:bf:77:ea:48:73:b0:3f:5e:c4: e2:0e:7c:f5:e5:a8:46:4c:11:29:ee:64:33:97:dd:c8:dc:6f: 27:6c:e0:b9:74:4f:11:c9:ce:96:1f:2d:17:cb:96:46:06:01: 95:a7:ef:d2:5b:52:bd:fe:46:93:fe:e0:5e:75:7c:6a:0e:cf: 4a:15:24:2e:18:96:64:d6:96:7f:3c:83:dc:00:cc:95:70:ef: 49:72:43:f0:f0:b1:8b:ed:74:27:b4:3b:3e:59:7c:1e:ef:c3: 02:df:b4:f7:60:78:8c:e6:8a:e3:19:a8:14:6e:79:71:e5:e6: 43:fe:b4:56:43:42:35:32:46:6b:52:7e:e0:95:e2:96:3f:29: d5:6e:7f:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM2Vl0Dr0cB2BASYDGdvdtmEPxyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE2QjFCNDkzMTE0RTZGODcyNDREQTU0Q0FCOEQ4RUFC MjUwM0EzODAeFw0yNTA2MDQwNjI1MzNaFw0yNTA2MDcxMjQwMzNaMDMxMTAvBgNV BAMTKEUyMURBQkM2MzQ4RDk1Qzk4NzVGNjFBMDc1REJBM0EzQzVFREU3ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmXxY6aMVPBbXB66b+MHeZO16B k5tXbwTjVgcbBrkCZc8mN5JmcIQP3OJyWBs+OTxeyjniWS1y9tjVI6SNxbFmuxH0 zqXtY6plfk92qPtrcHjLdP9fWgvDRfHFHIKLS2HEVJIJxVt03YnFhrnX5/myICCZ 2aeWzlDgg5vQZ/W2Bd6APVFuY4hSgihj61E1LyStxz1Z3QeRfQMrNqtdKruYDSgp mhDCdTWIafTYdKf8ofEU3OnuXn9e7ZSegFR0qNJ4lV/a8ZRZnSm+QsxQJ7PVIs/F QGr5kpZqto47eEoJjFLQypCAHWeDCal3J9z2F24a8Ooz5Z95LQGixv9IgaAhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4h2rxjSNlcmHX2Ggddujo8Xt54cwHwYDVR0j BBgwFoAUEWsbSTEU5vhyRNpUyrjY6rJQOjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YzY2Nzc2OS04MGRjLTQwOTMtYjVmNy1kZmU3YzU3MjA0ODYvMC8xMTZCMUI0OTMx MTRFNkY4NzI0NERBNTRDQUI4RDhFQUIyNTAzQTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE2QjFCNDkzMTE0RTZGODcyNDREQTU0Q0FCOEQ4RUFCMjUw M0EzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGM2Njc3NjktODBkYy00MDkzLWI1 ZjctZGZlN2M1NzIwNDg2LzAvMTE2QjFCNDkzMTE0RTZGODcyNDREQTU0Q0FCOEQ4 RUFCMjUwM0EzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAADJ8VfQR08XdEup0drPN6c42IwWgP+sg8S2 nfhldU+ywC90L58xnKKMKKguZtpUZb3UMAlMp76McAhWr7ZwZvOO6QJ3ZQzUUdDR Jdw+ypW0/DzSMIMMgKk/UiXFhF40qNKoGPL30nHvzTmoxcALpohbCi8HIL936khz sD9exOIOfPXlqEZMESnuZDOX3cjcbyds4Ll0TxHJzpYfLRfLlkYGAZWn79JbUr3+ RpP+4F51fGoOz0oVJC4YlmTWln88g9wAzJVw70lyQ/DwsYvtdCe0Oz5ZfB7vwwLf tPdgeIzmiuMZqBRueXHl5kP+tFZDQjUyRmtSfuCV4pY/KdVufxE= -----END CERTIFICATE-----Generated at Thu Jun 5 19:49:39 2025 by rpki-client