$ rpki-client -vvf repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft File: B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft (raw, json) Hash identifier: fIaHe+eOPB/t++JzglPUFxfLSQEYuF/q0fItxqNXwvw= Subject key identifier: 45:6D:E3:CA:47:9F:96:3E:3A:0D:CF:13:FF:B4:86:75:AC:EE:4B:91 Authority key identifier: B5:F8:E7:71:2A:83:BE:2B:D7:8C:FC:40:65:8C:80:32:F0:3B:66:82 Certificate issuer: /CN=B5F8E7712A83BE2BD78CFC40658C8032F03B6682 Certificate serial: 18F9E8DB76C3EF65E331DC3E169D7CB0B7551D95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft Manifest number: 0108 Signing time: Mon 02 Jun 2025 16:11:49 +0000 Manifest this update: Mon 02 Jun 2025 16:06:49 +0000 Manifest next update: Thu 05 Jun 2025 22:17:49 +0000 Files and hashes: 1: B5F8E7712A83BE2BD78CFC40658C8032F03B6682.crl (hash: bCd+7GSAdiJiulCvnVkeZ5eFPxMChQGu74M6ycCmGRM=) 2: 3130332e33382e3130382e302f32332d3234203d3e20313531353539.roa (hash: 56z54u+xHay43ruNITFTpnwbxjBWMk76HiIcFsZdZcE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.crl rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 22:17:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:f9:e8:db:76:c3:ef:65:e3:31:dc:3e:16:9d:7c:b0:b7:55:1d:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5F8E7712A83BE2BD78CFC40658C8032F03B6682 Validity Not Before: Jun 2 16:06:49 2025 GMT Not After : Jun 5 22:17:49 2025 GMT Subject: CN=456DE3CA479F963E3A0DCF13FFB48675ACEE4B91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:61:d2:4b:81:c8:3e:b6:b7:05:a9:5b:36:14: e1:21:07:96:8d:ac:03:73:e7:82:db:7d:15:84:fe: e7:e2:1d:4e:fd:fb:81:e8:cb:51:29:ca:a9:a4:66: 1f:e3:3f:a2:6a:96:69:5a:71:cf:b9:a4:be:5a:b3: b7:73:cf:8b:79:fc:3d:cc:0c:e6:73:1d:b9:c0:62: 25:09:fc:fa:88:ac:1e:5c:09:9e:08:b5:d7:e0:a9: 3c:d0:bd:e1:ac:50:cb:b3:69:09:63:05:77:59:d2: fd:19:f4:9e:eb:04:51:23:85:e2:65:82:b3:c7:be: e7:3a:13:3c:6a:14:d3:ed:c7:2f:df:9c:29:d5:b5: 37:4a:6b:97:7a:2a:e3:91:df:50:fe:23:07:7a:a9: dd:39:7f:eb:db:ad:76:83:d8:c2:01:b3:04:c0:8c: 2c:52:c7:0f:03:e5:7f:a2:81:27:a2:47:c5:36:de: 56:3a:86:39:84:57:86:31:8f:ea:34:18:2b:8e:e8: df:6f:d2:ed:06:4c:e9:0a:0a:35:79:c5:8e:1c:c3: b7:e6:10:08:dd:8d:3d:e7:76:1f:c2:62:a8:91:f6: 32:a5:f5:22:cf:3c:8c:74:11:1f:fd:c8:62:0c:0f: 10:5c:5c:cc:c8:3c:dd:82:87:23:b7:8d:23:33:21: 5e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:6D:E3:CA:47:9F:96:3E:3A:0D:CF:13:FF:B4:86:75:AC:EE:4B:91 X509v3 Authority Key Identifier: keyid:B5:F8:E7:71:2A:83:BE:2B:D7:8C:FC:40:65:8C:80:32:F0:3B:66:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:13:d0:b9:40:bd:57:28:64:a5:6f:c4:b1:f5:2e:f3:c4:6f: f0:f2:71:2b:a6:10:0b:23:e9:c2:c9:c0:0f:e9:4f:07:b0:ac: d2:ab:d6:07:1b:2a:c9:b3:f6:55:f7:81:cf:8b:e1:0d:38:ec: 18:f6:81:c0:f0:a5:c1:b9:fe:70:a9:fc:97:d5:5d:ff:c9:9b: 6a:13:d4:35:57:71:03:92:30:5f:3d:80:84:81:14:f9:0a:64: b6:f3:c5:a6:23:db:e3:f7:b4:0b:23:86:ad:5a:51:2d:59:42: 42:8d:bc:c8:59:49:33:cf:ee:9b:9b:35:2a:c4:6c:d2:1e:5b: 1f:5e:b3:96:b4:e7:2b:00:34:ee:ee:d6:8e:4b:c1:e9:c6:70: a7:0b:ec:f7:ba:d8:c0:19:12:dc:33:90:b3:2d:3f:e8:4d:dd: 9b:ff:c1:e5:94:1e:e4:16:7d:03:eb:6e:2d:b2:eb:44:a9:19: 77:98:ec:22:a2:4b:ef:fa:92:67:f7:11:31:25:d1:22:57:5d: 9d:ff:bb:57:da:94:22:dd:27:af:b1:75:2b:07:a4:d2:94:47: 52:71:b4:e6:c0:ba:11:77:8e:3a:16:2f:2c:b2:9c:13:9b:ef: 7d:72:f0:48:7f:50:4d:5a:4a:ff:98:d9:a1:79:d5:1b:32:7d: b8:21:84:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGPno23bD72XjMdw+Fp18sLdVHZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVGOEU3NzEyQTgzQkUyQkQ3OENGQzQwNjU4QzgwMzJG MDNCNjY4MjAeFw0yNTA2MDIxNjA2NDlaFw0yNTA2MDUyMjE3NDlaMDMxMTAvBgNV BAMTKDQ1NkRFM0NBNDc5Rjk2M0UzQTBEQ0YxM0ZGQjQ4Njc1QUNFRTRCOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuYdJLgcg+trcFqVs2FOEhB5aN rANz54LbfRWE/ufiHU79+4Hoy1EpyqmkZh/jP6Jqlmlacc+5pL5as7dzz4t5/D3M DOZzHbnAYiUJ/PqIrB5cCZ4ItdfgqTzQveGsUMuzaQljBXdZ0v0Z9J7rBFEjheJl grPHvuc6EzxqFNPtxy/fnCnVtTdKa5d6KuOR31D+Iwd6qd05f+vbrXaD2MIBswTA jCxSxw8D5X+igSeiR8U23lY6hjmEV4Yxj+o0GCuO6N9v0u0GTOkKCjV5xY4cw7fm EAjdjT3ndh/CYqiR9jKl9SLPPIx0ER/9yGIMDxBcXMzIPN2ChyO3jSMzIV4rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURW3jykeflj46Dc8T/7SGdazuS5EwHwYDVR0j BBgwFoAUtfjncSqDvivXjPxAZYyAMvA7ZoIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZGI1OWExMC01OGQwLTQ2MmUtYjA5Yi0xOTE5YjFjMzVkNzIvMC9CNUY4RTc3MTJB ODNCRTJCRDc4Q0ZDNDA2NThDODAzMkYwM0I2NjgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjVGOEU3NzEyQTgzQkUyQkQ3OENGQzQwNjU4QzgwMzJGMDNC NjY4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2RiNTlhMTAtNThkMC00NjJlLWIw OWItMTkxOWIxYzM1ZDcyLzAvQjVGOEU3NzEyQTgzQkUyQkQ3OENGQzQwNjU4Qzgw MzJGMDNCNjY4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHUT0LlAvVcoZKVvxLH1LvPEb/DycSumEAsj 6cLJwA/pTwewrNKr1gcbKsmz9lX3gc+L4Q047Bj2gcDwpcG5/nCp/JfVXf/Jm2oT 1DVXcQOSMF89gISBFPkKZLbzxaYj2+P3tAsjhq1aUS1ZQkKNvMhZSTPP7pubNSrE bNIeWx9es5a05ysANO7u1o5LwenGcKcL7Pe62MAZEtwzkLMtP+hN3Zv/weWUHuQW fQPrbi2y60SpGXeY7CKiS+/6kmf3ETEl0SJXXZ3/u1falCLdJ6+xdSsHpNKUR1Jx tObAuhF3jjoWLyyynBOb731y8Eh/UE1aSv+Y2aF51RsyfbghhKI= -----END CERTIFICATE-----Generated at Tue Jun 3 23:26:18 2025 by rpki-client