$ rpki-client -vvf repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft File: 1391AB90F1BF56A92FBDF7B8F48207992410775E.mft (raw, json) Hash identifier: fAL1iog+Pk/o859cAloTjnlxGv5Pa8GlSoduQQFB40I= Subject key identifier: BD:C8:5C:03:47:DF:5F:BC:D6:15:73:4B:07:94:BA:59:0E:5A:97:14 Authority key identifier: 13:91:AB:90:F1:BF:56:A9:2F:BD:F7:B8:F4:82:07:99:24:10:77:5E Certificate issuer: /CN=1391AB90F1BF56A92FBDF7B8F48207992410775E Certificate serial: 0BBF79745A6690376E3553FFC43AD6A88689B0B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft Manifest number: A8 Signing time: Thu 05 Jun 2025 16:40:35 +0000 Manifest this update: Thu 05 Jun 2025 16:35:35 +0000 Manifest next update: Mon 09 Jun 2025 03:48:35 +0000 Files and hashes: 1: 3136302e31392e3134372e302f32342d3234203d3e20313532373735.roa (hash: wpy96Czy5F/nzDP8R5DbJxynZ45/sg3wvq9eZTmuQ4k=) 2: 1391AB90F1BF56A92FBDF7B8F48207992410775E.crl (hash: j0C7AR3Kj/1oHVovWbOCNXzYOY05KeZokU8qYpMUAgs=) 3: 3136302e31392e3134362e302f32342d3234203d3e20313532373735.roa (hash: KqfiAsqedp1jTN5MJJRXQeZ9izmOQOboRC1ur5qsBHw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.crl rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 01:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:bf:79:74:5a:66:90:37:6e:35:53:ff:c4:3a:d6:a8:86:89:b0:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1391AB90F1BF56A92FBDF7B8F48207992410775E Validity Not Before: Jun 5 16:35:35 2025 GMT Not After : Jun 9 03:48:35 2025 GMT Subject: CN=BDC85C0347DF5FBCD615734B0794BA590E5A9714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f0:e0:9e:4b:3f:a7:fa:84:89:1a:18:4f:b0: c7:eb:4e:d6:f7:3a:bc:05:cd:27:2d:9f:4d:ba:41: 46:d1:f4:12:ad:64:08:97:f5:86:4f:a3:4d:05:dd: be:6c:04:77:3b:cf:82:96:4b:a5:cb:56:81:6c:a8: 59:2e:fe:54:83:e6:ba:9e:05:87:94:14:13:f5:92: d6:e3:bf:32:0d:62:a6:5d:e6:d3:0d:5e:76:68:0d: ef:bf:c7:c7:50:24:0f:04:55:de:31:87:0d:ed:92: 37:9b:5d:8d:c2:09:73:77:5a:ce:73:23:12:9a:a6: 80:42:96:f4:d6:ea:74:41:91:c9:5e:ca:c4:3e:31: e0:6d:78:6c:78:e3:37:47:e2:80:74:3d:fe:b3:4c: e8:2e:7f:a6:43:c0:c3:6a:91:f9:e6:09:ba:34:58: f5:3c:95:af:85:73:fc:ac:fb:1f:53:6d:90:dc:57: 11:57:1f:05:51:fc:82:7c:7b:19:5e:44:af:51:bc: 7a:61:5c:25:21:02:97:3e:79:1b:93:b3:26:ee:9f: 41:0e:dc:72:4d:cb:9e:6a:69:e6:1c:fa:0d:1e:42: a8:8e:19:9b:a5:a2:ab:4a:f1:6a:c5:c6:19:dd:55: 72:0a:f5:f7:4d:4d:5f:f6:27:c0:75:98:ab:f1:1d: 5e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C8:5C:03:47:DF:5F:BC:D6:15:73:4B:07:94:BA:59:0E:5A:97:14 X509v3 Authority Key Identifier: keyid:13:91:AB:90:F1:BF:56:A9:2F:BD:F7:B8:F4:82:07:99:24:10:77:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:79:28:51:99:e2:4f:a6:88:74:42:48:8e:ec:ab:80:5b:f4: e6:03:43:a5:0b:c0:63:9b:b1:99:3d:d3:48:99:be:9f:62:48: 6c:82:00:57:ee:58:21:de:4d:47:c5:a6:2a:bc:a1:d3:64:db: 3b:51:7c:e0:19:1c:a4:9f:3b:e7:7f:81:e9:7c:29:50:d2:70: 27:19:da:e0:fd:f7:84:8c:5c:b5:e1:4e:6d:dd:89:fc:0e:b6: 6b:18:07:ec:1c:09:94:94:38:e0:8d:59:7c:98:b6:5c:d8:5e: 85:92:6e:a1:73:f7:82:b0:d2:90:c6:56:d6:e4:04:79:ae:cf: fd:05:a2:54:c1:8e:31:5b:c5:f8:52:dd:c9:14:e0:14:a3:92: 6f:37:0b:83:83:aa:27:3f:3b:1a:20:1a:58:8c:f9:81:10:b8: e4:72:44:06:37:15:dd:25:f3:2c:d7:34:92:d1:63:ba:6b:45: 53:10:62:a4:c6:84:c2:02:80:f3:cc:77:ad:cd:d0:57:d9:ae: dc:7b:1b:74:39:5c:b9:54:cc:29:6b:75:53:09:30:0c:c4:60: c0:67:af:78:bb:c0:e3:70:a9:df:47:b7:1d:43:fc:28:6d:a6: e4:86:6d:3a:f7:22:b5:3c:bb:7a:78:93:58:0c:c7:c1:70:d4: 2d:f7:2e:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC795dFpmkDduNVP/xDrWqIaJsLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM5MUFCOTBGMUJGNTZBOTJGQkRGN0I4RjQ4MjA3OTky NDEwNzc1RTAeFw0yNTA2MDUxNjM1MzVaFw0yNTA2MDkwMzQ4MzVaMDMxMTAvBgNV BAMTKEJEQzg1QzAzNDdERjVGQkNENjE1NzM0QjA3OTRCQTU5MEU1QTk3MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH8OCeSz+n+oSJGhhPsMfrTtb3 OrwFzSctn026QUbR9BKtZAiX9YZPo00F3b5sBHc7z4KWS6XLVoFsqFku/lSD5rqe BYeUFBP1ktbjvzINYqZd5tMNXnZoDe+/x8dQJA8EVd4xhw3tkjebXY3CCXN3Ws5z IxKapoBClvTW6nRBkcleysQ+MeBteGx44zdH4oB0Pf6zTOguf6ZDwMNqkfnmCbo0 WPU8la+Fc/ys+x9TbZDcVxFXHwVR/IJ8exleRK9RvHphXCUhApc+eRuTsybun0EO 3HJNy55qaeYc+g0eQqiOGZuloqtK8WrFxhndVXIK9fdNTV/2J8B1mKvxHV6XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvchcA0ffX7zWFXNLB5S6WQ5alxQwHwYDVR0j BBgwFoAUE5GrkPG/Vqkvvfe49IIHmSQQd14wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OWI5YmQzOC0yZWZhLTRkNGMtYTk1Ni00MjQ5MmEzZTYwMDAvMC8xMzkxQUI5MEYx QkY1NkE5MkZCREY3QjhGNDgyMDc5OTI0MTA3NzVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTM5MUFCOTBGMUJGNTZBOTJGQkRGN0I4RjQ4MjA3OTkyNDEw Nzc1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjliOWJkMzgtMmVmYS00ZDRjLWE5 NTYtNDI0OTJhM2U2MDAwLzAvMTM5MUFCOTBGMUJGNTZBOTJGQkRGN0I4RjQ4MjA3 OTkyNDEwNzc1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALF5KFGZ4k+miHRCSI7sq4Bb9OYDQ6ULwGOb sZk900iZvp9iSGyCAFfuWCHeTUfFpiq8odNk2ztRfOAZHKSfO+d/gel8KVDScCcZ 2uD994SMXLXhTm3difwOtmsYB+wcCZSUOOCNWXyYtlzYXoWSbqFz94Kw0pDGVtbk BHmuz/0FolTBjjFbxfhS3ckU4BSjkm83C4ODqic/OxogGliM+YEQuORyRAY3Fd0l 8yzXNJLRY7prRVMQYqTGhMICgPPMd63N0FfZrtx7G3Q5XLlUzClrdVMJMAzEYMBn r3i7wONwqd9Htx1D/ChtpuSGbTr3IrU8u3p4k1gMx8Fw1C33LgM= -----END CERTIFICATE-----Generated at Fri Jun 6 04:57:28 2025 by rpki-client