$ rpki-client -vvf repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft File: 94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft (raw, json) Hash identifier: 5CTyEe3F5EJHN9iO2wsb9bJ4J0df0/JNAIbB3qeAHmI= Subject key identifier: E7:BC:B0:C8:D8:D2:F4:A4:89:51:09:95:81:0C:FE:AE:82:FC:32:E3 Authority key identifier: 94:15:9F:AF:0A:97:95:02:CA:B6:C5:AD:DC:AE:4C:FD:EC:DE:ED:EF Certificate issuer: /CN=94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF Certificate serial: 601EF4366E95A9BFBAED5C44C245D346C90126DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft Manifest number: 87 Signing time: Thu 05 Jun 2025 15:10:35 +0000 Manifest this update: Thu 05 Jun 2025 15:05:35 +0000 Manifest next update: Sun 08 Jun 2025 19:25:35 +0000 Files and hashes: 1: 3130332e3135322e3233322e302f32332d3234203d3e20313430343436.roa (hash: w8USKPwJWUmAD2EnMdpXJB1C3F3hUfqedwFlox0zn3A=) 2: 323030313a6466343a323038303a3a2f34382d3438203d3e20313430343436.roa (hash: /sVHS2YVPGN4I7pjlv0CumuB8iSOyLfbW32z22cHMqg=) 3: 94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl (hash: PVvDZXLlTdKHbxj6GPFbMGZ+YY4GZ3BsgJWVQnErV/o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 19:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:1e:f4:36:6e:95:a9:bf:ba:ed:5c:44:c2:45:d3:46:c9:01:26:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF Validity Not Before: Jun 5 15:05:35 2025 GMT Not After : Jun 8 19:25:35 2025 GMT Subject: CN=E7BCB0C8D8D2F4A489510995810CFEAE82FC32E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5f:8c:4b:f9:17:a1:12:91:b5:dd:83:10:bc: 48:44:20:67:52:ee:1c:c6:d6:81:dc:d4:5b:2c:b6: fa:f1:7c:54:2e:19:62:e0:34:88:4f:ba:71:03:2f: f3:95:41:5a:ba:2c:1d:bc:5c:5b:ac:9d:dc:de:23: c9:54:1d:3b:b9:d7:41:9a:68:d7:41:2a:ed:da:7b: 08:6a:a5:d1:a5:11:4d:58:75:f1:ce:e1:2b:99:7d: fe:76:e4:c1:8d:01:39:cf:f9:ba:33:a5:d8:25:87: 0b:0a:5c:1a:a0:83:b9:dd:8b:a0:fb:fa:64:45:88: 30:ca:fb:7f:4b:1d:ef:a2:0d:6c:28:a1:4d:8a:82: 43:d2:c3:17:67:cf:29:c6:56:30:6c:cf:23:9b:dc: 14:06:34:80:3a:1f:e0:21:5c:71:82:e4:49:8d:13: bf:65:73:f5:31:0f:d8:97:89:a1:e4:0a:7a:34:91: 1a:3d:9b:41:9e:10:26:9d:af:e1:21:29:4b:45:2d: 46:fb:5d:7d:e4:6d:96:bb:28:8c:da:1a:35:95:5e: 3a:18:80:19:37:73:9f:8b:d1:61:8a:a2:a5:4a:f3: 4c:70:82:bb:37:41:ed:0a:28:d7:32:51:f4:0e:9c: 86:35:7a:2a:e1:3e:6e:dc:96:37:9c:4f:7e:be:9b: a1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:BC:B0:C8:D8:D2:F4:A4:89:51:09:95:81:0C:FE:AE:82:FC:32:E3 X509v3 Authority Key Identifier: keyid:94:15:9F:AF:0A:97:95:02:CA:B6:C5:AD:DC:AE:4C:FD:EC:DE:ED:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:39:ed:b6:33:ae:27:d2:4c:50:e7:78:2c:5d:c2:87:ef:d8: 0f:bc:f4:76:fd:fb:39:6d:34:43:39:d7:3c:7e:fe:0d:ee:aa: 1a:2f:4e:1e:c3:22:7b:07:c4:7b:d2:48:8a:a0:63:d5:79:4f: 5c:ff:89:11:dd:4b:df:d2:df:0d:31:91:71:88:40:c7:c9:61: 05:04:6f:94:d2:9f:4c:de:14:d0:35:94:6d:c8:a3:ed:05:60: e2:92:2d:2b:9e:be:4e:d7:18:af:c9:d3:fc:c2:52:b6:fc:e3: eb:56:5a:1f:26:e9:2b:67:31:de:bf:d5:b4:4e:07:d4:8b:71: 41:fb:fa:28:54:61:ec:db:3a:5f:1a:7b:19:76:39:72:a2:44: 97:b7:dc:a5:0f:3d:ee:d6:f6:64:5d:ff:87:94:bd:34:08:3f: a7:c8:3f:a2:4a:6f:7d:b6:3e:21:33:8c:3c:6c:06:64:86:32: 3e:60:63:69:27:b8:2e:de:f4:bd:60:23:74:91:dc:18:63:46: 5c:f9:e7:34:b9:aa:71:c3:7f:36:ce:0a:86:4f:3d:8e:55:99: 9f:ef:94:1d:36:ed:ec:75:69:ed:83:a3:3f:50:68:ce:a0:fe: 62:b4:73:f7:f4:c6:79:00:50:41:97:f2:0f:fa:7f:80:41:11: e6:46:fc:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYB70Nm6Vqb+67VxEwkXTRskBJtowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRDRkRF Q0RFRURFRjAeFw0yNTA2MDUxNTA1MzVaFw0yNTA2MDgxOTI1MzVaMDMxMTAvBgNV BAMTKEU3QkNCMEM4RDhEMkY0QTQ4OTUxMDk5NTgxMENGRUFFODJGQzMyRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLX4xL+RehEpG13YMQvEhEIGdS 7hzG1oHc1FsstvrxfFQuGWLgNIhPunEDL/OVQVq6LB28XFusndzeI8lUHTu510Ga aNdBKu3aewhqpdGlEU1YdfHO4SuZff525MGNATnP+bozpdglhwsKXBqgg7ndi6D7 +mRFiDDK+39LHe+iDWwooU2KgkPSwxdnzynGVjBszyOb3BQGNIA6H+AhXHGC5EmN E79lc/UxD9iXiaHkCno0kRo9m0GeECadr+EhKUtFLUb7XX3kbZa7KIzaGjWVXjoY gBk3c5+L0WGKoqVK80xwgrs3Qe0KKNcyUfQOnIY1eirhPm7cljecT36+m6FfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU57ywyNjS9KSJUQmVgQz+roL8MuMwHwYDVR0j BBgwFoAUlBWfrwqXlQLKtsWt3K5M/eze7e8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NGYwNzk4Ny1iOGVjLTQ0NGEtOWI0NC0yOTEwMTFmZjQ2YTYvMC85NDE1OUZBRjBB OTc5NTAyQ0FCNkM1QUREQ0FFNENGREVDREVFREVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRDRkRFQ0RF RURFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzRmMDc5ODctYjhlYy00NDRhLTli NDQtMjkxMDExZmY0NmE2LzAvOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRD RkRFQ0RFRURFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHw57bYzrifSTFDneCxdwofv2A+89Hb9+zlt NEM51zx+/g3uqhovTh7DInsHxHvSSIqgY9V5T1z/iRHdS9/S3w0xkXGIQMfJYQUE b5TSn0zeFNA1lG3Io+0FYOKSLSuevk7XGK/J0/zCUrb84+tWWh8m6StnMd6/1bRO B9SLcUH7+ihUYezbOl8aexl2OXKiRJe33KUPPe7W9mRd/4eUvTQIP6fIP6JKb322 PiEzjDxsBmSGMj5gY2knuC7e9L1gI3SR3BhjRlz55zS5qnHDfzbOCoZPPY5VmZ/v lB027ex1ae2Doz9QaM6g/mK0c/f0xnkAUEGX8g/6f4BBEeZG/EQ= -----END CERTIFICATE-----Generated at Thu Jun 5 19:10:45 2025 by rpki-client