$ rpki-client -vvf repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft File: B563D708A094B24FC361EDD11C91EE7979AB0471.mft (raw, json) Hash identifier: 9ShTs15A6rCrSk2M1vtRLWNMUcHWYThLgKQhyIAO9mE= Subject key identifier: 89:45:28:FE:CD:20:30:11:7E:BF:A0:0C:65:FF:DC:35:F9:F7:0C:4B Authority key identifier: B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 Certificate issuer: /CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Certificate serial: 4F0615F807F1A3DA72A057DE71B639E2CD0EA27F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft Manifest number: 045E Signing time: Sat 07 Jun 2025 21:11:05 +0000 Manifest this update: Sat 07 Jun 2025 21:06:05 +0000 Manifest next update: Wed 11 Jun 2025 02:13:05 +0000 Files and hashes: 1: B563D708A094B24FC361EDD11C91EE7979AB0471.crl (hash: d7NGkj5X/YZ1BTFUIt1bX69Jkl36vXEcAR2KmPqtF2A=) 2: 3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa (hash: D2U2OhiX4JpcmakIWdkjvlLoKPGy8UFmuSAMLEyoyEQ=) 3: 3130332e3135382e3233352e302f32342d3234203d3e20313431313332.roa (hash: wu1R31TtfIFRPzZm0Pb0tIerh4jIibnO+i3KDJeQHqM=) 4: 3130332e3135382e3233342e302f32332d3233203d3e20313431313332.roa (hash: bWoeXxpcULQJI+FL8P7bige1XkZqPOoPbJG66/nkyFc=) 5: 3130332e3135382e3233352e302f32342d3234203d3e20313431383938.roa (hash: RkBfllGvEefotMCbBX+M6tjX7qjYPoT7phVfnxdgKbU=) 6: 3130332e3135382e3233342e302f32332d3233203d3e20313431383938.roa (hash: ubs3KFRcbUrpRgNw8QOw+os2JdUl6qStS3zNmN6w2iE=) 7: 3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa (hash: DGfAo05fKoOwOYpCuhv9fRDHV+AUZgV1sVLKuj31JYc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 02:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:06:15:f8:07:f1:a3:da:72:a0:57:de:71:b6:39:e2:cd:0e:a2:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Validity Not Before: Jun 7 21:06:05 2025 GMT Not After : Jun 11 02:13:05 2025 GMT Subject: CN=894528FECD2030117EBFA00C65FFDC35F9F70C4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:89:7e:10:86:a2:ba:ca:84:91:81:f3:d5:7a: cc:0e:f6:23:05:6d:64:13:20:9c:59:bb:01:e6:fe: ed:80:b0:95:64:0b:9b:42:46:55:72:fe:d7:ff:e0: c9:f9:41:a8:38:d5:df:00:86:32:19:d1:b3:fd:17: bd:df:05:fd:17:7e:01:be:7f:73:27:a2:bc:8e:70: d4:9b:5a:0f:25:b2:34:6a:cb:06:79:4a:86:9c:f8: 92:53:6e:b1:ac:c2:dd:fd:e7:c0:7a:4c:54:97:d3: e9:c3:70:be:e8:9f:ff:a0:50:68:71:3a:ff:0a:9e: 90:87:60:df:04:6c:43:67:50:8d:ac:83:7e:26:48: 0b:ea:48:9d:94:f7:34:19:d4:a5:98:14:23:e6:16: 63:b4:fb:dd:aa:e2:57:2f:ad:d0:c7:d3:8a:0a:c5: ce:45:96:79:b0:48:ed:83:d6:22:c8:33:9d:e6:51: 36:26:fd:51:ab:06:93:f8:7c:f6:77:e7:f7:00:23: f6:69:04:a8:09:5c:83:2f:75:3b:64:ff:17:52:c6: 08:5f:11:bc:ef:04:92:55:b5:09:39:6e:82:c9:19: aa:ec:5b:1f:ed:0c:6b:83:70:d9:f7:b1:72:11:76: 4e:da:c6:d0:d3:a7:51:19:2c:50:54:34:0d:86:e7: 3b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:45:28:FE:CD:20:30:11:7E:BF:A0:0C:65:FF:DC:35:F9:F7:0C:4B X509v3 Authority Key Identifier: keyid:B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:c9:aa:3d:f7:f6:aa:d7:6d:7f:80:83:45:4b:01:b2:95:55: a9:e8:27:7f:b8:10:f7:86:5c:33:99:12:6e:d7:12:c4:6c:48: 5e:97:ae:49:83:53:8b:4a:5c:93:9d:4a:71:bc:43:41:52:14: 17:80:67:1e:d2:1d:7a:8b:b3:c9:51:37:48:2d:27:9c:c7:d8: 77:bc:ca:b6:fa:51:27:0e:e2:68:20:fb:25:26:2f:a0:15:8d: 38:19:f2:5e:12:0a:21:c0:e1:81:ee:f0:e1:00:3b:3a:12:1b: a9:8d:29:7c:96:73:75:79:be:76:26:95:aa:eb:e3:91:0f:6b: 38:1e:cd:03:ef:9a:5f:89:36:60:44:e5:de:ee:36:b3:f2:b5: 54:59:4e:79:9b:46:45:c4:ca:1f:74:5c:46:b9:8d:cf:b7:71: bb:7c:6f:39:b1:a3:14:0f:23:32:7a:39:7d:53:d7:2c:69:75: 76:8a:81:29:9b:6b:6f:29:ad:f4:53:9e:9d:12:47:ff:7d:85: af:db:09:84:df:a1:15:a9:c5:a3:d4:f5:e7:68:b1:34:ca:9c: ef:b6:63:4b:f6:70:4f:2b:e2:1f:67:d5:a3:f4:94:81:b0:1d: 8d:2b:82:11:43:4f:98:8c:64:dc:3f:ba:e1:65:0b:2c:26:f5: aa:50:81:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTwYV+Afxo9pyoFfecbY54s0Oon8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3 OUFCMDQ3MTAeFw0yNTA2MDcyMTA2MDVaFw0yNTA2MTEwMjEzMDVaMDMxMTAvBgNV BAMTKDg5NDUyOEZFQ0QyMDMwMTE3RUJGQTAwQzY1RkZEQzM1RjlGNzBDNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPiX4QhqK6yoSRgfPVeswO9iMF bWQTIJxZuwHm/u2AsJVkC5tCRlVy/tf/4Mn5Qag41d8AhjIZ0bP9F73fBf0XfgG+ f3MnoryOcNSbWg8lsjRqywZ5Soac+JJTbrGswt3958B6TFSX0+nDcL7on/+gUGhx Ov8KnpCHYN8EbENnUI2sg34mSAvqSJ2U9zQZ1KWYFCPmFmO0+92q4lcvrdDH04oK xc5FlnmwSO2D1iLIM53mUTYm/VGrBpP4fPZ35/cAI/ZpBKgJXIMvdTtk/xdSxghf EbzvBJJVtQk5boLJGarsWx/tDGuDcNn3sXIRdk7axtDTp1EZLFBUNA2G5ztbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiUUo/s0gMBF+v6AMZf/cNfn3DEswHwYDVR0j BBgwFoAUtWPXCKCUsk/DYe3RHJHueXmrBHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDM2ZTA3Yy04MjgzLTQzZDMtOTE2NC0zZTBlNmNhY2Y0OTkvMC9CNTYzRDcwOEEw OTRCMjRGQzM2MUVERDExQzkxRUU3OTc5QUIwNDcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3OUFC MDQ3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAzNmUwN2MtODI4My00M2QzLTkx NjQtM2UwZTZjYWNmNDk5LzAvQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVF Nzk3OUFCMDQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKXJqj339qrXbX+Ag0VLAbKVVanoJ3+4EPeG XDOZEm7XEsRsSF6XrkmDU4tKXJOdSnG8Q0FSFBeAZx7SHXqLs8lRN0gtJ5zH2He8 yrb6UScO4mgg+yUmL6AVjTgZ8l4SCiHA4YHu8OEAOzoSG6mNKXyWc3V5vnYmlarr 45EPazgezQPvml+JNmBE5d7uNrPytVRZTnmbRkXEyh90XEa5jc+3cbt8bzmxoxQP IzJ6OX1T1yxpdXaKgSmba28prfRTnp0SR/99ha/bCYTfoRWpxaPU9edosTTKnO+2 Y0v2cE8r4h9n1aP0lIGwHY0rghFDT5iMZNw/uuFlCywm9apQgV0= -----END CERTIFICATE-----Generated at Sun Jun 8 06:15:59 2025 by rpki-client