$ rpki-client -vvf repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.mft File: 129285A478A166EE0B54DBCDA60771DA54C4F65F.mft (raw, json) Hash identifier: 2qiR4WtmXf4SiqY2YymmkESjAUb93fp5Hco47SPhGdg= Subject key identifier: B6:75:27:07:59:C6:21:79:D8:28:81:DC:64:B3:54:E1:CF:77:9B:4C Authority key identifier: 12:92:85:A4:78:A1:66:EE:0B:54:DB:CD:A6:07:71:DA:54:C4:F6:5F Certificate issuer: /CN=129285A478A166EE0B54DBCDA60771DA54C4F65F Certificate serial: 36359C17C1E2DC2E480E577FC266ACC90C930FE6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129285A478A166EE0B54DBCDA60771DA54C4F65F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.mft Manifest number: 04E7 Signing time: Mon 02 Jun 2025 02:04:08 +0000 Manifest this update: Mon 02 Jun 2025 01:59:08 +0000 Manifest next update: Thu 05 Jun 2025 13:19:08 +0000 Files and hashes: 1: 323030313a6466373a326630303a3a2f34382d3438203d3e20313338313134.roa (hash: Bb/OkwwJmJHe8/z9Qp5PTG+7pV0l1ZMHq6rEYToHVas=) 2: 3130332e3132352e3138342e302f32342d3234203d3e20313338313134.roa (hash: IVCqBdFN38jWB6ahE4bcDTBKo48M7ALZxNEE15iGilE=) 3: 129285A478A166EE0B54DBCDA60771DA54C4F65F.crl (hash: /YhI8DIJoWKJBehvAYQWWpbdXig9FzMluGQQcHgdeJo=) 4: 3130332e3132352e3138352e302f32342d3234203d3e20313338313134.roa (hash: noI2jWxEeYAXqaAE/PBFmQAfbP3FU/DH8uqnt/6EwU8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.crl rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129285A478A166EE0B54DBCDA60771DA54C4F65F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 13:19:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:35:9c:17:c1:e2:dc:2e:48:0e:57:7f:c2:66:ac:c9:0c:93:0f:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=129285A478A166EE0B54DBCDA60771DA54C4F65F Validity Not Before: Jun 2 01:59:08 2025 GMT Not After : Jun 5 13:19:08 2025 GMT Subject: CN=B675270759C62179D82881DC64B354E1CF779B4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:7e:d0:3a:1d:fa:f5:64:cb:e3:85:80:48:69: 84:66:eb:b3:76:0e:fa:5c:8a:a5:33:db:71:43:c6: a6:f5:70:1a:bf:1d:56:1d:04:fe:d7:a4:9e:cb:80: 41:25:b0:1f:fa:0c:41:35:d3:73:53:60:39:45:06: aa:bc:62:49:f2:9c:ae:cc:05:bd:5c:12:e2:3b:dc: 1c:83:4d:d4:1d:26:d8:49:31:b3:6f:46:a2:1a:be: e1:ba:4b:54:a7:bf:d5:34:10:28:d4:3e:58:a0:08: 98:91:3a:dc:e2:6b:f2:a3:7d:d2:57:52:47:47:c7: 86:2f:c2:4f:ba:61:ec:cb:7f:17:10:5a:f5:29:8f: 1a:33:f4:88:b2:5a:6d:ea:73:7b:72:30:da:85:90: 2a:d4:c5:37:62:50:92:66:ac:2c:6c:b6:f7:ab:77: cf:79:90:63:d2:0f:15:cd:0b:9d:94:c0:34:31:a0: c2:79:1c:5f:5e:d3:04:5c:4e:3f:99:a2:b0:37:00: 00:e5:e6:55:f5:11:0d:92:bb:25:28:48:0f:98:e2: 1a:d6:38:c1:f8:44:8e:a8:ba:0f:af:44:15:42:0d: 7c:37:4f:81:f8:1f:82:8b:44:4b:fe:c2:81:45:04: c3:6a:46:70:d7:a9:bc:f4:d1:56:f9:33:b9:4b:73: db:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:75:27:07:59:C6:21:79:D8:28:81:DC:64:B3:54:E1:CF:77:9B:4C X509v3 Authority Key Identifier: keyid:12:92:85:A4:78:A1:66:EE:0B:54:DB:CD:A6:07:71:DA:54:C4:F6:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129285A478A166EE0B54DBCDA60771DA54C4F65F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:3b:fe:0b:fc:21:d2:db:5b:5d:cd:64:94:cd:b2:5e:81:41: f3:42:4e:a1:27:34:cd:aa:70:b3:2c:0c:51:db:32:c3:d0:77: d2:a8:fd:06:e3:ad:8c:87:a0:34:e5:f7:34:e9:c6:f4:23:02: d7:12:8b:c2:69:da:47:60:82:d2:c9:9c:f9:00:ed:e6:9a:9f: e8:5c:96:0b:21:5f:85:1c:d3:2d:28:71:f8:8e:13:45:1c:0f: 69:0c:6f:29:b5:8b:97:75:3a:e0:36:63:ec:d0:87:d0:d3:f6: 86:c1:ff:76:83:04:c1:03:69:6b:0c:28:a4:cb:94:e5:45:ae: f0:ff:7d:2e:01:70:b9:06:38:44:f6:5c:df:4e:a1:42:4a:c6: 94:eb:e1:c3:e7:4c:6c:17:de:15:19:0d:0c:31:5c:94:ab:09: 9f:f2:b7:e2:23:a9:24:f1:4a:1a:ba:04:a0:07:c1:50:e5:7c: d3:81:3a:ca:44:4b:00:a0:07:4a:17:c7:ec:aa:03:38:1e:3d: b7:9c:3a:9e:c9:4b:bc:14:e8:50:c7:8a:db:27:7f:7b:58:11: e8:60:09:22:85:44:bb:f6:a9:5f:f0:be:a5:09:97:c5:6f:c8: d3:a3:b9:53:35:02:af:e6:1a:bb:c0:d2:e0:28:6e:1b:3e:20: 6b:14:95:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNjWcF8Hi3C5IDld/wmasyQyTD+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI5Mjg1QTQ3OEExNjZFRTBCNTREQkNEQTYwNzcxREE1 NEM0RjY1RjAeFw0yNTA2MDIwMTU5MDhaFw0yNTA2MDUxMzE5MDhaMDMxMTAvBgNV BAMTKEI2NzUyNzA3NTlDNjIxNzlEODI4ODFEQzY0QjM1NEUxQ0Y3NzlCNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrftA6Hfr1ZMvjhYBIaYRm67N2 DvpciqUz23FDxqb1cBq/HVYdBP7XpJ7LgEElsB/6DEE103NTYDlFBqq8YknynK7M Bb1cEuI73ByDTdQdJthJMbNvRqIavuG6S1Snv9U0ECjUPligCJiROtzia/KjfdJX UkdHx4Yvwk+6YezLfxcQWvUpjxoz9IiyWm3qc3tyMNqFkCrUxTdiUJJmrCxstver d895kGPSDxXNC52UwDQxoMJ5HF9e0wRcTj+ZorA3AADl5lX1EQ2SuyUoSA+Y4hrW OMH4RI6oug+vRBVCDXw3T4H4H4KLREv+woFFBMNqRnDXqbz00Vb5M7lLc9tRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtnUnB1nGIXnYKIHcZLNU4c93m0wwHwYDVR0j BBgwFoAUEpKFpHihZu4LVNvNpgdx2lTE9l8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 M2Q5MjY4Yi01ZTYxLTQzYjItYTYyNC00MWIwMWQ3ZDc2YjIvMC8xMjkyODVBNDc4 QTE2NkVFMEI1NERCQ0RBNjA3NzFEQTU0QzRGNjVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTI5Mjg1QTQ3OEExNjZFRTBCNTREQkNEQTYwNzcxREE1NEM0 RjY1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTNkOTI2OGItNWU2MS00M2IyLWE2 MjQtNDFiMDFkN2Q3NmIyLzAvMTI5Mjg1QTQ3OEExNjZFRTBCNTREQkNEQTYwNzcx REE1NEM0RjY1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABA7/gv8IdLbW13NZJTNsl6BQfNCTqEnNM2q cLMsDFHbMsPQd9Ko/QbjrYyHoDTl9zTpxvQjAtcSi8Jp2kdggtLJnPkA7eaan+hc lgshX4Uc0y0ocfiOE0UcD2kMbym1i5d1OuA2Y+zQh9DT9obB/3aDBMEDaWsMKKTL lOVFrvD/fS4BcLkGOET2XN9OoUJKxpTr4cPnTGwX3hUZDQwxXJSrCZ/yt+IjqSTx Shq6BKAHwVDlfNOBOspESwCgB0oXx+yqAzgePbecOp7JS7wU6FDHitsnf3tYEehg CSKFRLv2qV/wvqUJl8VvyNOjuVM1Aq/mGrvA0uAobhs+IGsUlXs= -----END CERTIFICATE-----Generated at Tue Jun 3 23:19:26 2025 by rpki-client