$ rpki-client -vvf repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft File: CA5B0322788B7A041373A944677E83F0D48FF4E7.mft (raw, json) Hash identifier: v795zyncleyqpO4l4pGjXZPtJmN7RJGwgGsHRoRrFh4= Subject key identifier: 60:72:73:9A:5B:7A:FA:09:4D:C2:BD:3D:92:01:EB:60:F2:6B:BA:BF Authority key identifier: CA:5B:03:22:78:8B:7A:04:13:73:A9:44:67:7E:83:F0:D4:8F:F4:E7 Certificate issuer: /CN=CA5B0322788B7A041373A944677E83F0D48FF4E7 Certificate serial: 7FDF7D58FB5009C0CC79395C66AEE85AF701DBA2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA5B0322788B7A041373A944677E83F0D48FF4E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft Manifest number: 98 Signing time: Mon 02 Jun 2025 19:02:07 +0000 Manifest this update: Mon 02 Jun 2025 18:57:07 +0000 Manifest next update: Thu 05 Jun 2025 23:23:07 +0000 Files and hashes: 1: 3130332e37312e3136302e302f32322d3234203d3e20313339393831.roa (hash: lDykVwxJoW4GFsi2L2TOWuZVobAaZLaNG/GuK7uwVOw=) 2: CA5B0322788B7A041373A944677E83F0D48FF4E7.crl (hash: YtwQ/uapqXy+XA9A5cNV81TWhXQHrK0tLO32/qPtsi4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.crl rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA5B0322788B7A041373A944677E83F0D48FF4E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 23:23:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:df:7d:58:fb:50:09:c0:cc:79:39:5c:66:ae:e8:5a:f7:01:db:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA5B0322788B7A041373A944677E83F0D48FF4E7 Validity Not Before: Jun 2 18:57:07 2025 GMT Not After : Jun 5 23:23:07 2025 GMT Subject: CN=6072739A5B7AFA094DC2BD3D9201EB60F26BBABF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ab:29:1f:91:20:0f:7a:c8:40:58:b8:09:77: 11:a1:66:1f:bb:7a:32:3f:ed:97:5e:ff:3e:42:59: 32:9f:f2:2d:df:83:28:74:9f:6a:68:97:37:43:13: f4:b7:18:c0:c1:68:75:cc:2b:e8:e5:af:ec:32:9d: 57:5a:6c:56:02:86:00:35:66:6b:95:8d:d1:ee:ca: d2:f2:f3:ad:6b:3c:5c:b6:74:d7:25:8f:35:63:e0: 10:4b:c2:4e:08:7f:ab:21:6b:13:d4:12:37:fa:5b: 71:96:c8:25:97:08:63:50:71:59:6b:20:da:44:81: 07:b4:b8:f1:69:4a:f7:dd:8e:27:87:c3:ae:f2:39: 14:35:65:e7:a1:dd:22:37:98:84:ab:51:f9:2e:15: 50:de:e3:a1:af:69:95:33:d7:a5:75:3c:55:a3:50: 3c:7c:00:83:b6:23:b9:82:05:1e:f6:da:c2:77:07: ea:bb:75:d9:00:d0:ee:49:88:9d:d1:46:e6:6e:35: cc:5e:92:66:14:43:a5:27:86:78:cb:5a:6f:f8:02: 2a:cf:0b:b3:8e:72:d3:d3:2e:35:53:40:58:26:ea: 76:c4:39:b4:4c:9b:2a:e6:88:a2:84:13:34:90:f6: a4:cb:0d:cc:37:64:a9:51:5d:15:47:e1:25:f1:71: 9a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:72:73:9A:5B:7A:FA:09:4D:C2:BD:3D:92:01:EB:60:F2:6B:BA:BF X509v3 Authority Key Identifier: keyid:CA:5B:03:22:78:8B:7A:04:13:73:A9:44:67:7E:83:F0:D4:8F:F4:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA5B0322788B7A041373A944677E83F0D48FF4E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:75:d4:84:1b:7e:2c:13:a0:75:92:90:1b:ba:e4:3e:8b:bb: c5:54:ad:70:a5:d1:60:14:5d:c0:fe:18:9c:9f:3e:76:af:78: 03:1a:1f:47:a8:03:ce:71:d0:f4:c6:d6:7b:fb:c4:bb:b7:17: 9c:f8:1a:34:15:8a:15:76:9a:18:02:b3:db:4e:14:f8:4c:5a: f6:75:38:47:af:b5:5e:8e:33:45:fc:86:db:96:f5:54:aa:83: c8:e2:87:f7:fe:33:fd:0f:f4:ec:91:24:39:58:8f:56:f6:01: e0:f6:a1:8d:63:96:36:18:be:d5:b4:9b:f3:42:f2:06:46:0e: a7:37:ee:fe:0c:cf:b5:58:cd:96:8b:1e:c4:34:6b:6a:b2:34: 9d:a6:a7:9e:c9:48:ba:b3:fc:32:61:b1:18:46:5e:c3:ba:35: da:08:a3:4b:91:7d:e4:7d:73:4d:0e:60:e8:9a:ed:cb:8f:9a: b0:7c:c7:bc:bc:db:02:4c:08:8e:4c:0a:12:44:87:ac:06:16: 2b:84:4b:ae:9c:ea:e0:83:0a:b4:0a:d7:0b:44:19:1b:03:b3: 6c:e2:f6:9e:73:f4:fa:56:7b:2a:ff:4f:f3:e5:26:8a:2c:b2: 13:ab:27:ee:6a:be:ea:fe:75:dc:a2:dd:fc:8c:58:4a:68:fc: 72:b6:ea:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf999WPtQCcDMeTlcZq7oWvcB26IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E1QjAzMjI3ODhCN0EwNDEzNzNBOTQ0Njc3RTgzRjBE NDhGRjRFNzAeFw0yNTA2MDIxODU3MDdaFw0yNTA2MDUyMzIzMDdaMDMxMTAvBgNV BAMTKDYwNzI3MzlBNUI3QUZBMDk0REMyQkQzRDkyMDFFQjYwRjI2QkJBQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDqykfkSAPeshAWLgJdxGhZh+7 ejI/7Zde/z5CWTKf8i3fgyh0n2polzdDE/S3GMDBaHXMK+jlr+wynVdabFYChgA1 ZmuVjdHuytLy861rPFy2dNcljzVj4BBLwk4If6shaxPUEjf6W3GWyCWXCGNQcVlr INpEgQe0uPFpSvfdjieHw67yORQ1Zeeh3SI3mISrUfkuFVDe46GvaZUz16V1PFWj UDx8AIO2I7mCBR722sJ3B+q7ddkA0O5JiJ3RRuZuNcxekmYUQ6UnhnjLWm/4AirP C7OOctPTLjVTQFgm6nbEObRMmyrmiKKEEzSQ9qTLDcw3ZKlRXRVH4SXxcZo/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYHJzmlt6+glNwr09kgHrYPJrur8wHwYDVR0j BBgwFoAUylsDIniLegQTc6lEZ36D8NSP9OcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZWJhODY3YS04Zjg0LTQ2NjMtYjMyMC1mNDM1MjgyYjlmZmUvMC9DQTVCMDMyMjc4 OEI3QTA0MTM3M0E5NDQ2NzdFODNGMEQ0OEZGNEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E1QjAzMjI3ODhCN0EwNDEzNzNBOTQ0Njc3RTgzRjBENDhG RjRFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGViYTg2N2EtOGY4NC00NjYzLWIz MjAtZjQzNTI4MmI5ZmZlLzAvQ0E1QjAzMjI3ODhCN0EwNDEzNzNBOTQ0Njc3RTgz RjBENDhGRjRFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAR11IQbfiwToHWSkBu65D6Lu8VUrXCl0WAU XcD+GJyfPnaveAMaH0eoA85x0PTG1nv7xLu3F5z4GjQVihV2mhgCs9tOFPhMWvZ1 OEevtV6OM0X8htuW9VSqg8jih/f+M/0P9OyRJDlYj1b2AeD2oY1jljYYvtW0m/NC 8gZGDqc37v4Mz7VYzZaLHsQ0a2qyNJ2mp57JSLqz/DJhsRhGXsO6NdoIo0uRfeR9 c00OYOia7cuPmrB8x7y82wJMCI5MChJEh6wGFiuES66c6uCDCrQK1wtEGRsDs2zi 9p5z9PpWeyr/T/PlJoosshOrJ+5qvur+ddyi3fyMWEpo/HK26l4= -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:25 2025 by rpki-client