$ rpki-client -vvf repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft File: B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft (raw, json) Hash identifier: hqlnjWj2JMISOtm96MJwrrGBDhQL4AuOf2NlPf27spI= Subject key identifier: 53:4A:0A:FF:7C:34:6B:8A:47:FC:A7:02:83:1C:F3:C0:1F:37:A9:8E Authority key identifier: B5:91:05:9B:6A:F2:F5:D6:6E:BB:D1:40:31:DA:23:E5:AA:FC:64:F7 Certificate issuer: /CN=B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7 Certificate serial: 7BD1C7E5BA59FED089A076DFEDD620EB20718D98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft Manifest number: 04D8 Signing time: Mon 02 Jun 2025 02:04:03 +0000 Manifest this update: Mon 02 Jun 2025 01:59:03 +0000 Manifest next update: Thu 05 Jun 2025 13:07:03 +0000 Files and hashes: 1: B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.crl (hash: uwOVglB0mTerAwXeIwl4/Uqc4M9F5EHEzuiLSkFh2bg=) 2: 3130332e3135332e33342e302f32342d3234203d3e20313430343532.roa (hash: L+WYyxtBJBb4IPQAp+Phpn95Mr1s/ocDbq38zQ6JLtA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.crl rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 13:07:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:d1:c7:e5:ba:59:fe:d0:89:a0:76:df:ed:d6:20:eb:20:71:8d:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7 Validity Not Before: Jun 2 01:59:03 2025 GMT Not After : Jun 5 13:07:03 2025 GMT Subject: CN=534A0AFF7C346B8A47FCA702831CF3C01F37A98E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f1:34:24:d9:17:11:41:83:48:24:fe:cd:a7: 33:14:0a:eb:eb:1e:ed:12:e3:cc:46:9f:03:9b:21: e8:34:c8:b8:2a:d8:fa:68:53:cd:75:56:c4:8f:4b: 59:62:6a:ea:69:91:95:d5:7c:ef:98:3b:da:1d:0d: ba:5a:e4:a8:de:e7:3e:09:27:bd:0a:43:b1:ab:5e: 75:89:54:b1:17:93:23:45:f2:6f:6e:7e:1b:fb:07: ca:44:00:4a:b5:b1:8d:36:e6:79:a7:80:d4:23:d2: 29:d7:85:07:ed:4f:ff:fe:67:fa:68:81:5b:a3:30: 18:88:29:9b:a4:84:3b:9f:40:78:48:33:24:42:77: 08:6e:34:a9:18:a6:3b:09:41:33:44:8e:9e:0d:8f: 8d:f0:c3:39:2e:45:a1:3d:c9:ee:fd:5a:3a:aa:49: 2f:e4:44:de:38:a7:c6:85:a3:cd:63:ee:b4:7d:41: 54:ca:fe:f9:2e:de:dc:20:b1:62:e2:a1:9f:62:e1: cb:40:6d:df:f0:9d:d5:f6:b8:ea:df:d8:29:15:56: 2f:41:b9:bf:7e:b0:33:14:8b:c0:a9:83:05:3e:de: 39:bf:0f:fb:12:4b:f2:5f:86:c6:40:5c:c9:62:60: 9a:d5:90:db:6a:9e:a3:aa:03:77:37:86:6b:d7:ed: 35:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4A:0A:FF:7C:34:6B:8A:47:FC:A7:02:83:1C:F3:C0:1F:37:A9:8E X509v3 Authority Key Identifier: keyid:B5:91:05:9B:6A:F2:F5:D6:6E:BB:D1:40:31:DA:23:E5:AA:FC:64:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:e6:19:3a:dd:38:ad:79:b1:ec:ad:f9:26:94:51:d3:7a:bb: 28:fa:10:17:ed:57:b6:b0:b2:99:f1:78:a2:cf:49:2d:41:fb: f2:f4:58:31:e1:f4:9b:eb:96:f6:11:09:47:f8:d8:e6:43:c7: ee:5c:7a:4a:f3:a5:09:de:f2:f6:66:c2:69:93:cd:a3:97:44: 3c:1f:58:3c:da:93:72:76:eb:2c:3e:2d:ee:a0:47:30:d1:92: fc:9f:f9:c6:2e:03:d8:64:d7:50:a7:71:83:51:2f:92:1a:28: e5:8f:15:8d:49:0f:c3:78:92:34:44:61:2a:c1:ad:fa:6f:2f: b6:da:cb:85:00:b7:3a:06:02:92:bd:6e:e0:bc:08:0e:2b:12: 4e:89:db:6f:00:d9:86:1d:94:29:52:99:f8:a3:a8:73:14:99: fb:4b:4f:3c:fa:19:56:d1:81:fc:36:51:9c:f6:58:10:3c:a2: a1:52:61:9b:cd:94:d4:0b:e8:cd:a0:f5:11:2b:ed:9c:bc:5e: c9:9c:70:ec:1b:33:4b:91:53:cb:83:5d:9b:f0:b8:01:de:9b: 7a:f2:6b:b4:74:bd:89:b7:af:ef:3b:89:7e:78:bf:96:68:fb: 04:1e:75:82:cf:84:b5:87:dd:a8:4f:f3:6f:2a:57:f3:41:5e: e3:0c:a8:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe9HH5bpZ/tCJoHbf7dYg6yBxjZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU5MTA1OUI2QUYyRjVENjZFQkJEMTQwMzFEQTIzRTVB QUZDNjRGNzAeFw0yNTA2MDIwMTU5MDNaFw0yNTA2MDUxMzA3MDNaMDMxMTAvBgNV BAMTKDUzNEEwQUZGN0MzNDZCOEE0N0ZDQTcwMjgzMUNGM0MwMUYzN0E5OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa8TQk2RcRQYNIJP7NpzMUCuvr Hu0S48xGnwObIeg0yLgq2PpoU811VsSPS1liauppkZXVfO+YO9odDbpa5Kje5z4J J70KQ7GrXnWJVLEXkyNF8m9ufhv7B8pEAEq1sY025nmngNQj0inXhQftT//+Z/po gVujMBiIKZukhDufQHhIMyRCdwhuNKkYpjsJQTNEjp4Nj43wwzkuRaE9ye79Wjqq SS/kRN44p8aFo81j7rR9QVTK/vku3twgsWLioZ9i4ctAbd/wndX2uOrf2CkVVi9B ub9+sDMUi8CpgwU+3jm/D/sSS/JfhsZAXMliYJrVkNtqnqOqA3c3hmvX7TUVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU0oK/3w0a4pH/KcCgxzzwB83qY4wHwYDVR0j BBgwFoAUtZEFm2ry9dZuu9FAMdoj5ar8ZPcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZGM0MWMxYS1lMDg4LTRlZjYtOWQyOC04MTRjNjE0NTZkMzAvMC9CNTkxMDU5QjZB RjJGNUQ2NkVCQkQxNDAzMURBMjNFNUFBRkM2NEY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU5MTA1OUI2QUYyRjVENjZFQkJEMTQwMzFEQTIzRTVBQUZD NjRGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmRjNDFjMWEtZTA4OC00ZWY2LTlk MjgtODE0YzYxNDU2ZDMwLzAvQjU5MTA1OUI2QUYyRjVENjZFQkJEMTQwMzFEQTIz RTVBQUZDNjRGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKnmGTrdOK15seyt+SaUUdN6uyj6EBftV7aw spnxeKLPSS1B+/L0WDHh9JvrlvYRCUf42OZDx+5cekrzpQne8vZmwmmTzaOXRDwf WDzak3J26yw+Le6gRzDRkvyf+cYuA9hk11CncYNRL5IaKOWPFY1JD8N4kjREYSrB rfpvL7bay4UAtzoGApK9buC8CA4rEk6J228A2YYdlClSmfijqHMUmftLTzz6GVbR gfw2UZz2WBA8oqFSYZvNlNQL6M2g9REr7Zy8XsmccOwbM0uRU8uDXZvwuAHem3ry a7R0vYm3r+87iX54v5Zo+wQedYLPhLWH3ahP828qV/NBXuMMqDc= -----END CERTIFICATE-----Generated at Tue Jun 3 23:26:26 2025 by rpki-client