$ rpki-client -vvf repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft File: B956E5764D9917A7389654D67836D02779ED9E22.mft (raw, json) Hash identifier: J9PQdgNYsQqXRTbKdQ5BnwURtxdYuS3vLWO1R1vzuc8= Subject key identifier: 40:A3:F4:3A:F2:0E:E6:D1:EB:BB:C5:88:1B:F8:1E:37:CD:F0:09:FA Authority key identifier: B9:56:E5:76:4D:99:17:A7:38:96:54:D6:78:36:D0:27:79:ED:9E:22 Certificate issuer: /CN=B956E5764D9917A7389654D67836D02779ED9E22 Certificate serial: 13005E6A10804577FA6EFF084970C1E3B157A632 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft Manifest number: 01C1 Signing time: Wed 04 Jun 2025 08:41:09 +0000 Manifest this update: Wed 04 Jun 2025 08:36:09 +0000 Manifest next update: Sat 07 Jun 2025 14:27:09 +0000 Files and hashes: 1: B956E5764D9917A7389654D67836D02779ED9E22.crl (hash: 7EfKAY1GV4/eQ0d9xn4DvFRMIPK+zwezTGh18dNAGy4=) 2: 3130332e34342e31392e302f32342d3234203d3e20313530313931.roa (hash: yZTOcXBkGCXgKprLwFpmf211S49vRO43pg0K+2x6c9c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.crl rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:00:5e:6a:10:80:45:77:fa:6e:ff:08:49:70:c1:e3:b1:57:a6:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B956E5764D9917A7389654D67836D02779ED9E22 Validity Not Before: Jun 4 08:36:09 2025 GMT Not After : Jun 7 14:27:09 2025 GMT Subject: CN=40A3F43AF20EE6D1EBBBC5881BF81E37CDF009FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:18:53:6c:0e:16:bb:2a:8b:3a:51:3c:2c:2b: 18:27:58:87:3c:34:28:3a:ab:f6:78:63:6c:96:7f: 0b:65:b7:40:a4:18:0a:39:52:9f:e5:29:d5:b8:fc: 1b:2d:9e:5f:8e:66:c5:f9:44:70:bb:6e:a3:49:9b: 34:c0:39:cc:b9:10:f3:e5:85:61:32:55:9b:58:c0: bb:83:11:c9:91:5f:f5:54:eb:bf:16:cb:70:f9:ac: 89:dd:c4:4b:78:20:a4:13:09:6d:bd:ed:cc:e4:2c: 18:3c:57:5b:e5:86:68:47:05:15:8e:e8:4b:df:7a: c2:30:df:ce:02:4a:6e:9e:b9:6f:d3:0e:9a:77:94: 83:a9:21:3e:9c:00:3e:93:f1:91:34:59:af:19:95: 6d:86:4f:55:81:01:a7:29:6a:89:c7:f4:22:23:6a: 64:c3:5c:c9:0d:19:88:60:87:ad:e3:88:98:42:88: c3:1e:be:5d:6a:e2:e0:b3:d4:3d:55:a2:d8:1c:d8: 6b:f1:e1:26:cf:69:e4:01:77:80:e2:7c:5a:e7:2d: 92:b5:a2:24:d3:9c:bc:de:0a:70:68:d9:0a:f6:09: 53:07:a8:9e:3a:37:19:5a:d0:0f:fa:05:21:cc:71: ae:28:92:0d:f8:eb:44:9a:41:1a:11:d8:ef:30:79: 7a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A3:F4:3A:F2:0E:E6:D1:EB:BB:C5:88:1B:F8:1E:37:CD:F0:09:FA X509v3 Authority Key Identifier: keyid:B9:56:E5:76:4D:99:17:A7:38:96:54:D6:78:36:D0:27:79:ED:9E:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:48:57:51:89:fb:89:13:bd:ca:6a:dc:65:49:da:c7:4d:ec: 9a:10:09:94:7d:74:90:c0:9b:48:11:8a:b9:fa:50:2c:20:3c: f1:2f:5b:b6:4d:44:85:7e:55:fe:95:4d:18:52:ef:86:82:58: d5:14:93:28:39:1b:f2:ff:16:ef:60:1a:3d:14:f4:87:61:54: 00:08:24:5a:b8:be:03:65:09:14:97:06:dc:79:2f:d1:ea:d3: 0c:e9:27:d5:87:46:99:f1:11:fb:82:f4:42:2b:a8:ff:43:8b: 1c:ab:93:c4:7d:f0:d3:ee:52:03:5c:1a:a6:b9:3a:ad:72:27: 82:b2:10:13:76:09:ee:02:7c:e4:ba:c1:79:bc:fd:19:0e:f2: cc:e5:47:3d:b6:a9:91:dc:bd:4d:c2:1d:be:e7:f0:ca:15:ab: 68:d2:36:06:67:93:4e:01:76:b7:c0:d3:da:35:47:dd:f4:40: 2e:01:af:0f:2d:18:8f:20:f3:5c:c3:04:d9:27:58:66:68:60: d0:eb:5a:33:7b:59:dc:0e:0f:e9:61:49:d8:02:f3:c1:0f:4d: 4c:31:f5:45:c0:32:d0:9d:c7:04:44:f9:17:03:84:1a:20:3a: 75:76:a8:28:e1:33:09:52:e2:6b:75:70:1c:43:c0:f9:1e:49: 7c:f4:a0:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEwBeahCARXf6bv8ISXDB47FXpjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk1NkU1NzY0RDk5MTdBNzM4OTY1NEQ2NzgzNkQwMjc3 OUVEOUUyMjAeFw0yNTA2MDQwODM2MDlaFw0yNTA2MDcxNDI3MDlaMDMxMTAvBgNV BAMTKDQwQTNGNDNBRjIwRUU2RDFFQkJCQzU4ODFCRjgxRTM3Q0RGMDA5RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIGFNsDha7Kos6UTwsKxgnWIc8 NCg6q/Z4Y2yWfwtlt0CkGAo5Up/lKdW4/Bstnl+OZsX5RHC7bqNJmzTAOcy5EPPl hWEyVZtYwLuDEcmRX/VU678Wy3D5rIndxEt4IKQTCW297czkLBg8V1vlhmhHBRWO 6EvfesIw384CSm6euW/TDpp3lIOpIT6cAD6T8ZE0Wa8ZlW2GT1WBAacpaonH9CIj amTDXMkNGYhgh63jiJhCiMMevl1q4uCz1D1Votgc2Gvx4SbPaeQBd4DifFrnLZK1 oiTTnLzeCnBo2Qr2CVMHqJ46Nxla0A/6BSHMca4okg3460SaQRoR2O8weXpDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQKP0OvIO5tHru8WIG/geN83wCfowHwYDVR0j BBgwFoAUuVbldk2ZF6c4llTWeDbQJ3ntniIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODExN2NhOC1iNGU1LTQ2N2EtODhhOC1hNGI2M2U0MGMzZWQvMC9COTU2RTU3NjRE OTkxN0E3Mzg5NjU0RDY3ODM2RDAyNzc5RUQ5RTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjk1NkU1NzY0RDk5MTdBNzM4OTY1NEQ2NzgzNkQwMjc3OUVE OUUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjgxMTdjYTgtYjRlNS00NjdhLTg4 YTgtYTRiNjNlNDBjM2VkLzAvQjk1NkU1NzY0RDk5MTdBNzM4OTY1NEQ2NzgzNkQw Mjc3OUVEOUUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFIV1GJ+4kTvcpq3GVJ2sdN7JoQCZR9dJDA m0gRirn6UCwgPPEvW7ZNRIV+Vf6VTRhS74aCWNUUkyg5G/L/Fu9gGj0U9IdhVAAI JFq4vgNlCRSXBtx5L9Hq0wzpJ9WHRpnxEfuC9EIrqP9Dixyrk8R98NPuUgNcGqa5 Oq1yJ4KyEBN2Ce4CfOS6wXm8/RkO8szlRz22qZHcvU3CHb7n8MoVq2jSNgZnk04B drfA09o1R930QC4Brw8tGI8g81zDBNknWGZoYNDrWjN7WdwOD+lhSdgC88EPTUwx 9UXAMtCdxwRE+RcDhBogOnV2qCjhMwlS4mt1cBxDwPkeSXz0oEg= -----END CERTIFICATE-----Generated at Thu Jun 5 18:30:34 2025 by rpki-client