$ rpki-client -vvf repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft File: B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft (raw, json) Hash identifier: JO1K3gNfy3nqiMxg7ZaWKqEAS8v8vE2BGfwn4pMux3E= Subject key identifier: 48:37:8A:3E:46:77:82:4A:CF:2D:B7:BA:A2:CA:4C:99:CE:80:A6:7D Authority key identifier: B9:2F:0F:B3:E1:41:D5:2E:D2:A7:1F:A4:83:ED:3C:6D:72:3F:60:E2 Certificate issuer: /CN=B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2 Certificate serial: 3AB8F8A67D669680796809E12B298A6AAEE9A11D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft Manifest number: 56 Signing time: Sat 07 Jun 2025 20:51:31 +0000 Manifest this update: Sat 07 Jun 2025 20:46:31 +0000 Manifest next update: Wed 11 Jun 2025 05:25:31 +0000 Files and hashes: 1: B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl (hash: 6RNlEUOlDL8ysRsFYYSGv39H67q+qhN+cIl2WSzgpyo=) 2: 323030313a6466343a363463303a3a2f34382d3438203d3e20313533313430.roa (hash: yyzmdDb8FTjdC+THNvwdhgAOOXsuzFTHgJxxHYpFD6k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 02:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b8:f8:a6:7d:66:96:80:79:68:09:e1:2b:29:8a:6a:ae:e9:a1:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2 Validity Not Before: Jun 7 20:46:31 2025 GMT Not After : Jun 11 05:25:31 2025 GMT Subject: CN=48378A3E4677824ACF2DB7BAA2CA4C99CE80A67D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e8:a6:4b:a3:13:32:50:bf:a4:eb:3d:89:cd: 16:56:ce:48:b0:63:b1:6b:d0:33:1c:bc:c1:f5:fc: a8:ac:34:d8:d8:08:47:a9:1c:fd:04:15:e8:5c:44: 22:7e:c2:1e:c1:2c:0f:07:5a:31:d6:78:8d:ce:d5: 44:0c:1e:ab:79:73:61:9d:d0:93:58:9e:19:45:24: 80:30:9a:23:f9:ef:6b:a7:c2:f0:34:4c:66:11:e6: 58:ee:bd:95:86:6b:9c:46:a0:ae:d9:c0:2b:ab:e8: f7:84:d0:8f:7d:bd:d1:12:d7:79:7c:db:11:44:19: f2:af:1c:d2:3c:38:cf:d8:94:0e:35:2a:b8:a0:cd: 2e:1f:eb:70:1c:d7:7c:02:38:22:3d:7f:1c:5a:84: 17:8d:df:75:53:5f:d1:ed:2c:26:63:77:a1:06:4f: bf:f3:81:45:8c:bb:9f:32:34:a0:28:7f:b1:2c:9d: 3e:75:5e:00:7e:6c:d3:4d:db:8e:df:b3:3e:51:72: c2:10:e0:0e:6e:27:7f:f0:d5:f6:4e:a7:c2:e1:b7: 3a:c3:fb:c8:70:ff:c1:0f:ec:fd:39:36:f9:4b:e1: 30:b8:91:83:8f:53:ac:d9:05:f7:49:bd:d2:e1:d0: 45:09:5a:20:e1:47:25:09:5d:82:c8:63:77:10:70: 7a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:37:8A:3E:46:77:82:4A:CF:2D:B7:BA:A2:CA:4C:99:CE:80:A6:7D X509v3 Authority Key Identifier: keyid:B9:2F:0F:B3:E1:41:D5:2E:D2:A7:1F:A4:83:ED:3C:6D:72:3F:60:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:d3:41:66:62:1f:b3:16:d2:67:26:e4:0b:ad:5c:4a:93:d9: cd:67:82:a4:50:cd:31:44:f9:0a:8e:14:1e:e7:09:68:a5:b6: 7e:db:41:e6:55:af:da:2d:5b:7a:c5:de:b0:91:2c:90:31:fc: a4:ee:52:36:f5:a1:ce:19:43:1d:b3:96:2a:6f:ac:47:1c:f7: 4e:c8:04:2b:d2:6f:07:ac:c4:81:0f:75:d9:e6:e1:49:3f:3b: 26:91:e6:56:16:04:43:c9:8d:a5:80:dc:75:74:53:55:3e:0a: d9:0a:ed:08:17:ad:33:f1:98:0e:f7:fc:52:6f:e7:16:7f:39: 33:4d:ce:0e:df:d4:41:ea:e7:27:fb:b5:fe:3c:42:41:d5:16: e1:0f:30:85:72:92:43:b1:57:e7:ec:4f:16:54:c2:25:4d:2f: 09:7c:12:a1:57:f4:71:3b:f8:f0:07:29:85:05:cd:54:05:4e: ee:8e:c3:27:5b:16:35:b1:c7:98:8e:13:c2:b9:d2:16:34:62: ba:5a:32:82:c0:28:46:54:39:55:eb:29:4c:2e:94:00:03:7a: 3e:bc:8a:2b:db:75:02:bd:94:74:c3:f9:ad:25:d9:a4:0b:f9: 79:2f:6b:4b:23:08:13:51:19:3b:5f:88:69:7a:0f:f7:91:67: 91:ba:43:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOrj4pn1mloB5aAnhKymKaq7poR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDNDNkQ3 MjNGNjBFMjAeFw0yNTA2MDcyMDQ2MzFaFw0yNTA2MTEwNTI1MzFaMDMxMTAvBgNV BAMTKDQ4Mzc4QTNFNDY3NzgyNEFDRjJEQjdCQUEyQ0E0Qzk5Q0U4MEE2N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG6KZLoxMyUL+k6z2JzRZWzkiw Y7Fr0DMcvMH1/KisNNjYCEepHP0EFehcRCJ+wh7BLA8HWjHWeI3O1UQMHqt5c2Gd 0JNYnhlFJIAwmiP572unwvA0TGYR5ljuvZWGa5xGoK7ZwCur6PeE0I99vdES13l8 2xFEGfKvHNI8OM/YlA41KrigzS4f63Ac13wCOCI9fxxahBeN33VTX9HtLCZjd6EG T7/zgUWMu58yNKAof7EsnT51XgB+bNNN247fsz5RcsIQ4A5uJ3/w1fZOp8LhtzrD +8hw/8EP7P05NvlL4TC4kYOPU6zZBfdJvdLh0EUJWiDhRyUJXYLIY3cQcHqXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSDeKPkZ3gkrPLbe6ospMmc6Apn0wHwYDVR0j BBgwFoAUuS8Ps+FB1S7Spx+kg+08bXI/YOIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWZjYmZiYi1iYTNmLTRkNTMtYTA0Zi0xNGQ2ZjRiZTBjYjEvMS9COTJGMEZCM0Ux NDFENTJFRDJBNzFGQTQ4M0VEM0M2RDcyM0Y2MEUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDNDNkQ3MjNG NjBFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzEvQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDND NkQ3MjNGNjBFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACDTQWZiH7MW0mcm5AutXEqT2c1ngqRQzTFE +QqOFB7nCWiltn7bQeZVr9otW3rF3rCRLJAx/KTuUjb1oc4ZQx2zlipvrEcc907I BCvSbwesxIEPddnm4Uk/OyaR5lYWBEPJjaWA3HV0U1U+CtkK7QgXrTPxmA73/FJv 5xZ/OTNNzg7f1EHq5yf7tf48QkHVFuEPMIVykkOxV+fsTxZUwiVNLwl8EqFX9HE7 +PAHKYUFzVQFTu6OwydbFjWxx5iOE8K50hY0YrpaMoLAKEZUOVXrKUwulAADej68 iivbdQK9lHTD+a0l2aQL+Xkva0sjCBNRGTtfiGl6D/eRZ5G6Q10= -----END CERTIFICATE-----Generated at Sat Jun 7 23:48:01 2025 by rpki-client