$ rpki-client -vvf repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft File: B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft (raw, json) Hash identifier: vDm9fhRJLMGtTfDxHKQ3WkYB94s3whl/XIzi+cBY/do= Subject key identifier: 5F:3E:0C:6D:1D:01:2F:0D:35:26:54:D5:40:A0:00:24:9A:CF:C6:C1 Authority key identifier: B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94 Certificate issuer: /CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094 Certificate serial: 2C15734CE57CCC7321CB7055AA78ED6C19A2E4E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft Manifest number: 0193 Signing time: Sat 07 Jun 2025 20:00:05 +0000 Manifest this update: Sat 07 Jun 2025 19:55:05 +0000 Manifest next update: Wed 11 Jun 2025 05:28:05 +0000 Files and hashes: 1: 3130332e312e35302e302f32332d3233203d3e20313432333532.roa (hash: Pk+CfBb09D2NLm+w/mIdTLsk/cAe1V1lpiWgoIeGFHc=) 2: 3130332e312e35312e302f32342d3234203d3e20313432333532.roa (hash: Lx6mbXqTbsqqqJEaZ6Ptl1cSIXULA4hNI34A7lM8ago=) 3: B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl (hash: pI8c2jxgEhy2fnI2x1nivqJ37ohl1y0tcwhVVy4xThw=) 4: 3130332e312e35302e302f32342d3234203d3e20313432333532.roa (hash: 13a296YbpXPKiDroOx9RoYtV5Gqcvos+cOx12thufiw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 02:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:15:73:4c:e5:7c:cc:73:21:cb:70:55:aa:78:ed:6c:19:a2:e4:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094 Validity Not Before: Jun 7 19:55:05 2025 GMT Not After : Jun 11 05:28:05 2025 GMT Subject: CN=5F3E0C6D1D012F0D352654D540A000249ACFC6C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2b:7f:49:71:21:8d:cd:30:de:cc:93:de:03: 6f:92:6c:70:95:10:5c:65:4e:de:71:46:56:80:97: 6a:8b:a0:1d:80:d1:50:4c:2e:d4:8e:bc:0f:00:51: 2a:8a:ee:8e:e3:4c:c6:59:d8:4c:cc:1f:94:c8:1f: a1:ef:67:86:ee:fc:bf:d3:f1:dc:3c:5d:17:3b:05: 5e:a2:ec:67:e4:71:1a:02:14:f3:65:7d:db:56:81: 0a:9c:d2:1f:a9:08:89:11:36:49:08:ed:97:99:2b: ad:68:73:c3:d3:2b:e2:e3:19:15:14:9b:b4:ce:65: bf:97:26:ca:01:8c:8c:17:76:16:aa:e1:45:19:7e: 9a:43:b2:a6:d3:ad:2a:0a:56:8b:d9:7f:51:16:6e: a4:40:7a:13:c3:42:7f:82:7c:3b:a8:0b:dc:97:4e: 17:87:e8:d0:08:3b:a7:f1:16:41:cd:67:ab:48:92: 83:9a:0b:1b:91:fe:4e:84:c3:5f:a3:63:1e:37:61: bc:36:88:2e:0e:f5:c4:bc:43:b4:e5:1c:e6:01:37: 44:89:c7:9f:4b:92:7e:a2:23:b1:4c:64:3f:1e:1e: 02:aa:17:f1:a9:cc:31:36:e6:f1:96:72:cc:22:0a: 03:d9:23:c0:23:50:19:21:89:19:78:54:05:75:a8: e9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:3E:0C:6D:1D:01:2F:0D:35:26:54:D5:40:A0:00:24:9A:CF:C6:C1 X509v3 Authority Key Identifier: keyid:B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:67:ba:08:98:29:c3:ef:a7:f8:fe:37:43:00:4e:93:1b:99: 8f:2a:5c:01:ff:ef:61:cb:a6:51:d0:81:c5:28:58:84:13:f0: bd:71:44:16:3f:f2:7b:62:61:c6:83:ba:67:95:b9:8c:fd:8e: db:98:e8:3b:88:ef:c5:e9:b3:39:bc:2b:72:d3:3a:8b:56:80: 8b:81:15:2f:42:49:83:f5:6b:68:e3:22:82:60:f0:01:3a:cf: 87:ce:8a:55:d1:8e:4e:d7:8a:67:db:4c:fb:1f:70:5a:8b:0c: 00:1b:9a:f0:b8:d3:c4:1b:55:86:29:50:32:c6:2d:c7:a6:d6: 28:61:45:8d:a1:f2:80:84:ac:50:65:e5:02:0b:01:43:4f:71: 80:36:20:cc:58:87:10:2d:32:c7:fa:55:63:32:ac:50:c7:06: 8c:42:20:a0:de:65:03:43:10:6e:85:bc:d2:38:b1:ba:9b:e2: 5c:2e:18:03:cd:92:e4:08:d6:3d:89:01:43:85:30:c1:ea:ef: 33:36:15:de:46:9a:7b:33:9e:e3:e6:8c:d3:70:70:74:50:75: 67:bb:d3:38:ca:b1:59:e8:06:f1:be:75:8d:22:43:84:fe:c3: 74:d9:b7:5f:24:32:31:44:5a:e3:92:45:96:0e:5d:21:6b:d6: aa:58:43:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULBVzTOV8zHMhy3BVqnjtbBmi5OIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1RDJB MDk5MzA5NDAeFw0yNTA2MDcxOTU1MDVaFw0yNTA2MTEwNTI4MDVaMDMxMTAvBgNV BAMTKDVGM0UwQzZEMUQwMTJGMEQzNTI2NTRENTQwQTAwMDI0OUFDRkM2QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5K39JcSGNzTDezJPeA2+SbHCV EFxlTt5xRlaAl2qLoB2A0VBMLtSOvA8AUSqK7o7jTMZZ2EzMH5TIH6HvZ4bu/L/T 8dw8XRc7BV6i7GfkcRoCFPNlfdtWgQqc0h+pCIkRNkkI7ZeZK61oc8PTK+LjGRUU m7TOZb+XJsoBjIwXdhaq4UUZfppDsqbTrSoKVovZf1EWbqRAehPDQn+CfDuoC9yX TheH6NAIO6fxFkHNZ6tIkoOaCxuR/k6Ew1+jYx43Ybw2iC4O9cS8Q7TlHOYBN0SJ x59Lkn6iI7FMZD8eHgKqF/GpzDE25vGWcswiCgPZI8AjUBkhiRl4VAV1qOlXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXz4MbR0BLw01JlTVQKAAJJrPxsEwHwYDVR0j BBgwFoAUtINF9/n7TxT//ovFt0aF0qCZMJQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjUyYmY5Yy02MzRiLTQwYjktYWMwYy1hODdiNDdkNTlmOTEvMC9CNDgzNDVGN0Y5 RkI0RjE0RkZGRThCQzVCNzQ2ODVEMkEwOTkzMDk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1RDJBMDk5 MzA5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY1MmJmOWMtNjM0Yi00MGI5LWFj MGMtYTg3YjQ3ZDU5ZjkxLzAvQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1 RDJBMDk5MzA5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFhnugiYKcPvp/j+N0MATpMbmY8qXAH/72HL plHQgcUoWIQT8L1xRBY/8ntiYcaDumeVuYz9jtuY6DuI78Xpszm8K3LTOotWgIuB FS9CSYP1a2jjIoJg8AE6z4fOilXRjk7XimfbTPsfcFqLDAAbmvC408QbVYYpUDLG Lcem1ihhRY2h8oCErFBl5QILAUNPcYA2IMxYhxAtMsf6VWMyrFDHBoxCIKDeZQND EG6FvNI4sbqb4lwuGAPNkuQI1j2JAUOFMMHq7zM2Fd5GmnsznuPmjNNwcHRQdWe7 0zjKsVnoBvG+dY0iQ4T+w3TZt18kMjFEWuOSRZYOXSFr1qpYQ0w= -----END CERTIFICATE-----Generated at Sun Jun 8 01:27:42 2025 by rpki-client