$ rpki-client -vvf repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft File: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft (raw, json) Hash identifier: 9hxPC0wnP7eQeLXDCBFrXeLYBVbs5ppU9UsA5tjjduU= Subject key identifier: 43:BC:EB:81:F5:03:F6:01:07:2D:77:B3:F4:1F:04:CC:E5:E4:E3:FE Authority key identifier: 13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE Certificate issuer: /CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Certificate serial: 28DD665F9D4FA41ED1CE2CEAEBE37DD7C48CCFE5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft Manifest number: 02E0 Signing time: Tue 03 Jun 2025 15:20:53 +0000 Manifest this update: Tue 03 Jun 2025 15:15:53 +0000 Manifest next update: Sat 07 Jun 2025 02:59:53 +0000 Files and hashes: 1: 3130332e3137342e32342e302f32332d3234203d3e20313331313131.roa (hash: +ESPL9RiV1kXE5HVVZEJFevVqgb2FPlNrLYphfud9Dg=) 2: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl (hash: CW5LlhEHkyNtKeQVFlvUqJC57EZF46AfGwfee/v+oN0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:59:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:dd:66:5f:9d:4f:a4:1e:d1:ce:2c:ea:eb:e3:7d:d7:c4:8c:cf:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Validity Not Before: Jun 3 15:15:53 2025 GMT Not After : Jun 7 02:59:53 2025 GMT Subject: CN=43BCEB81F503F601072D77B3F41F04CCE5E4E3FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:87:a6:c7:78:d5:b5:df:02:3e:94:44:b8:46: 98:e3:6e:9c:b9:c8:9d:e0:d9:82:1f:35:cf:3f:71: bb:a4:a0:bd:dd:b6:fc:41:75:0e:0c:2a:b8:0a:5d: 00:fa:4c:1f:8c:a2:a9:46:83:cc:a9:3a:cd:8d:21: 97:fc:3d:64:52:9b:91:73:4f:f6:ae:b1:07:ad:f5: 11:ad:d6:6e:31:3c:84:c0:1a:82:e6:5a:b7:36:92: 3e:ab:77:b0:fc:8a:5f:e9:38:d0:3f:06:ab:e2:44: ca:2e:1f:7a:f1:99:07:fc:86:da:c8:7c:bc:b1:11: 80:fd:5f:d3:26:0a:6b:ab:73:6e:f5:47:83:7f:a6: a9:2c:94:20:79:53:31:f5:34:b2:36:f4:47:a8:02: fd:42:55:58:9d:cd:c5:56:63:d6:90:3b:03:d7:bd: 44:ef:a1:bd:fa:02:02:d9:b4:b0:97:63:a8:4d:4d: 22:31:e5:f9:54:82:f6:35:f5:a2:e0:02:e0:3a:84: be:e3:52:c4:13:73:0a:0f:e6:a6:21:9d:62:62:69: 12:18:b8:14:d1:f1:2b:e0:2d:9a:dd:d5:57:27:28: 5b:e5:d0:f2:3e:5f:f0:8d:9b:99:6f:6e:46:3a:0f: 99:0d:4f:2b:cf:00:a8:09:d3:11:5e:fd:8a:a7:69: 82:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:BC:EB:81:F5:03:F6:01:07:2D:77:B3:F4:1F:04:CC:E5:E4:E3:FE X509v3 Authority Key Identifier: keyid:13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:a0:d0:51:68:b0:2f:0d:75:c6:a9:97:09:93:64:94:fc:cd: c6:ad:dc:1b:d2:e6:bd:e7:f9:d7:c8:e8:94:96:e6:85:dd:3d: 4a:f4:84:07:fc:69:ee:af:91:11:04:72:c5:ad:d2:59:ee:1f: 29:f7:71:ed:89:ff:c7:1c:b0:e4:e8:e2:07:e6:28:d2:98:a0: 93:0b:23:89:75:22:5e:b4:5b:17:13:a4:52:cc:a8:81:76:01: 4d:c2:e4:a3:78:18:3b:bd:39:24:05:b8:37:4c:0d:b9:c7:ec: e2:3e:81:6c:25:1b:46:9d:4d:2e:b4:40:c0:46:ad:d3:b0:b5: dc:06:77:7b:fc:1e:09:ed:bd:d0:70:e8:60:fa:fb:0f:a1:2d: 2d:a6:58:a4:a5:4b:54:18:4c:08:9e:f0:7a:21:9f:53:a5:96: fa:22:df:d8:32:66:93:64:f1:76:b1:ed:57:24:fb:9a:28:19: 74:da:d4:12:f3:0e:f6:d2:12:20:85:0d:74:20:a9:fa:66:a4: 12:68:a8:9d:f1:4f:b8:5c:28:9e:e6:68:0b:f8:90:a4:1c:92: 52:dc:43:94:27:de:10:a6:25:e3:40:63:f2:92:de:79:3c:d3: 19:dc:21:63:49:1a:af:45:d3:94:b9:be:90:a4:b6:ff:36:f0: 8d:bf:b5:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKN1mX51PpB7Rzizq6+N918SMz+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNC MDRGRENCRTAeFw0yNTA2MDMxNTE1NTNaFw0yNTA2MDcwMjU5NTNaMDMxMTAvBgNV BAMTKDQzQkNFQjgxRjUwM0Y2MDEwNzJENzdCM0Y0MUYwNENDRTVFNEUzRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAh6bHeNW13wI+lES4Rpjjbpy5 yJ3g2YIfNc8/cbukoL3dtvxBdQ4MKrgKXQD6TB+MoqlGg8ypOs2NIZf8PWRSm5Fz T/ausQet9RGt1m4xPITAGoLmWrc2kj6rd7D8il/pONA/BqviRMouH3rxmQf8htrI fLyxEYD9X9MmCmurc271R4N/pqkslCB5UzH1NLI29EeoAv1CVVidzcVWY9aQOwPX vUTvob36AgLZtLCXY6hNTSIx5flUgvY19aLgAuA6hL7jUsQTcwoP5qYhnWJiaRIY uBTR8SvgLZrd1VcnKFvl0PI+X/CNm5lvbkY6D5kNTyvPAKgJ0xFe/YqnaYIFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ7zrgfUD9gEHLXez9B8EzOXk4/4wHwYDVR0j BBgwFoAUExgHvdqvl+1yIU37xcU5rLBP3L4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjI1Yjk2OC0wOTI3LTQ1OTQtODg3ZS02N2Y1M2Y5NjdiMTIvMC8xMzE4MDdCRERB QUY5N0VENzIyMTRERkJDNUM1MzlBQ0IwNEZEQ0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNCMDRG RENCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmYyNWI5NjgtMDkyNy00NTk0LTg4 N2UtNjdmNTNmOTY3YjEyLzAvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5 QUNCMDRGRENCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIeg0FFosC8NdcaplwmTZJT8zcat3BvS5r3n +dfI6JSW5oXdPUr0hAf8ae6vkREEcsWt0lnuHyn3ce2J/8ccsOTo4gfmKNKYoJML I4l1Il60WxcTpFLMqIF2AU3C5KN4GDu9OSQFuDdMDbnH7OI+gWwlG0adTS60QMBG rdOwtdwGd3v8HgntvdBw6GD6+w+hLS2mWKSlS1QYTAie8Hohn1Ollvoi39gyZpNk 8Xax7Vck+5ooGXTa1BLzDvbSEiCFDXQgqfpmpBJoqJ3xT7hcKJ7maAv4kKQcklLc Q5Qn3hCmJeNAY/KS3nk80xncIWNJGq9F05S5vpCktv828I2/tfw= -----END CERTIFICATE-----Generated at Thu Jun 5 18:39:18 2025 by rpki-client