$ rpki-client -vvf repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft File: 20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft (raw, json) Hash identifier: xSSISdb6vs+Qc7x6NViS9I9cphue9BgNeFthlu9FYCI= Subject key identifier: DC:DF:71:19:15:A7:D4:CD:9F:31:15:91:38:F5:CC:11:38:B5:BB:79 Authority key identifier: 20:B1:5C:95:FA:33:51:40:2D:60:E9:68:AD:1D:9E:CD:28:9A:BF:F9 Certificate issuer: /CN=20B15C95FA3351402D60E968AD1D9ECD289ABFF9 Certificate serial: 5B131329B3818A68B6BD1753158660E0AEC1D073 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft Manifest number: 045E Signing time: Mon 02 Jun 2025 12:00:46 +0000 Manifest this update: Mon 02 Jun 2025 11:55:46 +0000 Manifest next update: Thu 05 Jun 2025 14:35:46 +0000 Files and hashes: 1: 3130332e3136322e312e302f32342d3234203d3e2036393339.roa (hash: fzXYj+/Wlk2+pHJ1gJZrQ6X0Tnu8HMMmPoocnHTOJ8E=) 2: 3130332e3136322e312e302f32342d3234203d3e20313431363334.roa (hash: WZEcRoBw5pAR5VSb916+kaVDUlS4wq/ib5rS3X/sotw=) 3: 20B15C95FA3351402D60E968AD1D9ECD289ABFF9.crl (hash: lV3AZMVJIG3XgBW+GlI9tgITV6lIqT/ywhWlkZF1apY=) 4: 3130332e3136322e302e302f32342d3234203d3e20313431363334.roa (hash: UmfhnL8RZYJSndBdwe7iI677EbidAY8O+tflsfoU+/Y=) 5: 3130332e3136322e302e302f32332d3233203d3e20313431363334.roa (hash: 3OXjddu9GYm+pnGIRRvw8uTtgTnaQOQocX2ZWf81HfA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.crl rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 14:35:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:13:13:29:b3:81:8a:68:b6:bd:17:53:15:86:60:e0:ae:c1:d0:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20B15C95FA3351402D60E968AD1D9ECD289ABFF9 Validity Not Before: Jun 2 11:55:46 2025 GMT Not After : Jun 5 14:35:46 2025 GMT Subject: CN=DCDF711915A7D4CD9F31159138F5CC1138B5BB79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bb:5a:40:cb:15:47:bf:b5:34:98:b8:f8:43: 9a:b9:dd:ba:4d:da:5f:65:f1:62:fe:fc:74:a3:1a: b6:83:22:b0:6f:18:de:43:7e:06:fd:cf:83:28:ef: d0:b7:e6:9b:a5:42:eb:32:4b:a2:65:db:89:54:09: e3:78:bb:d3:dc:72:70:13:8f:88:95:4c:49:e7:03: e4:c1:a1:b9:f0:b7:8c:a7:8c:1b:eb:2b:c4:35:0c: 6c:ff:b0:c7:5f:da:6a:f9:3a:41:cb:bf:76:08:b7: 9e:98:8a:1d:62:33:51:7a:5f:db:16:05:8e:d6:ad: d3:a9:3e:db:5d:ec:e6:53:13:d6:46:1e:4d:58:6a: 8b:3b:00:15:a9:45:a7:5f:5a:50:ec:ef:df:53:27: 7d:09:85:67:ff:22:75:0e:18:b3:d7:01:d4:e0:2f: 45:51:a4:ef:ba:4b:54:05:5d:92:01:3d:91:22:8f: 83:c3:97:80:74:1f:86:89:54:0d:47:33:e4:f4:ee: c9:7b:12:c6:e2:05:ef:15:78:0a:cd:7e:5e:17:0c: 59:a3:cf:6f:72:bb:74:42:83:87:22:76:0f:20:42: 6e:4c:ff:9f:7d:69:3d:e1:ef:4b:00:27:c4:64:8d: e7:7f:14:6c:4a:31:bf:81:49:db:3f:ea:a2:5a:36: c3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:DF:71:19:15:A7:D4:CD:9F:31:15:91:38:F5:CC:11:38:B5:BB:79 X509v3 Authority Key Identifier: keyid:20:B1:5C:95:FA:33:51:40:2D:60:E9:68:AD:1D:9E:CD:28:9A:BF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:55:5a:14:30:54:f0:64:97:0b:b6:b7:6b:3c:77:75:6d:18: 30:bf:35:06:bd:c9:d7:48:f0:65:18:b1:b1:9b:44:c1:1b:9b: 01:ed:de:74:e8:1f:71:30:47:f1:a1:a2:9a:91:3c:4e:84:4a: f8:52:41:20:ed:d1:c7:b0:d0:2f:d2:eb:77:1c:9b:02:d5:14: 7d:e9:69:41:af:f2:04:40:e5:1a:d4:95:98:0c:b3:5e:b7:af: cd:09:a4:6c:74:0e:5c:4e:22:55:09:98:e4:8b:4a:c5:a5:e0: 75:dd:bf:81:58:2e:bf:b3:7f:10:c0:0f:37:34:5f:e0:14:0d: 83:a8:44:32:16:81:e9:26:87:38:39:78:30:89:ae:cf:42:6e: 2d:8d:1e:4e:d8:e3:ec:71:92:f2:68:c4:0d:a2:52:5b:9e:9d: f3:ba:c5:1e:54:3a:2c:77:44:a1:98:d2:40:11:96:51:73:bc: 24:1c:c8:c8:f7:c4:2f:0e:c9:a1:16:ca:5e:b7:0f:3d:79:63: 1c:62:b7:d0:4b:d7:d0:f3:9f:1d:c4:bf:e0:20:f9:f9:86:58: 2d:f2:3e:77:2c:40:70:a9:cd:05:30:0b:37:a3:8d:88:be:aa: cd:d0:f1:db:a8:53:de:a8:e1:74:3a:d3:4c:0c:9c:a9:86:fd: af:74:41:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWxMTKbOBimi2vRdTFYZg4K7B0HMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBCMTVDOTVGQTMzNTE0MDJENjBFOTY4QUQxRDlFQ0Qy ODlBQkZGOTAeFw0yNTA2MDIxMTU1NDZaFw0yNTA2MDUxNDM1NDZaMDMxMTAvBgNV BAMTKERDREY3MTE5MTVBN0Q0Q0Q5RjMxMTU5MTM4RjVDQzExMzhCNUJCNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFu1pAyxVHv7U0mLj4Q5q53bpN 2l9l8WL+/HSjGraDIrBvGN5Dfgb9z4Mo79C35pulQusyS6Jl24lUCeN4u9PccnAT j4iVTEnnA+TBobnwt4ynjBvrK8Q1DGz/sMdf2mr5OkHLv3YIt56Yih1iM1F6X9sW BY7WrdOpPttd7OZTE9ZGHk1Yaos7ABWpRadfWlDs799TJ30JhWf/InUOGLPXAdTg L0VRpO+6S1QFXZIBPZEij4PDl4B0H4aJVA1HM+T07sl7EsbiBe8VeArNfl4XDFmj z29yu3RCg4cidg8gQm5M/599aT3h70sAJ8Rkjed/FGxKMb+BSds/6qJaNsMlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3N9xGRWn1M2fMRWROPXMETi1u3kwHwYDVR0j BBgwFoAUILFclfozUUAtYOlorR2ezSiav/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTQxOTNjNC00YWJkLTRlMmMtYTFkMC0xYjVjZTMyZTQyMGIvMC8yMEIxNUM5NUZB MzM1MTQwMkQ2MEU5NjhBRDFEOUVDRDI4OUFCRkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBCMTVDOTVGQTMzNTE0MDJENjBFOTY4QUQxRDlFQ0QyODlB QkZGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE0MTkzYzQtNGFiZC00ZTJjLWEx ZDAtMWI1Y2UzMmU0MjBiLzAvMjBCMTVDOTVGQTMzNTE0MDJENjBFOTY4QUQxRDlF Q0QyODlBQkZGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAChVWhQwVPBklwu2t2s8d3VtGDC/NQa9yddI 8GUYsbGbRMEbmwHt3nToH3EwR/GhopqRPE6ESvhSQSDt0cew0C/S63ccmwLVFH3p aUGv8gRA5RrUlZgMs163r80JpGx0DlxOIlUJmOSLSsWl4HXdv4FYLr+zfxDADzc0 X+AUDYOoRDIWgekmhzg5eDCJrs9Cbi2NHk7Y4+xxkvJoxA2iUluenfO6xR5UOix3 RKGY0kARllFzvCQcyMj3xC8OyaEWyl63Dz15Yxxit9BL19Dznx3Ev+Ag+fmGWC3y PncsQHCpzQUwCzejjYi+qs3Q8duoU96o4XQ600wMnKmG/a90QcU= -----END CERTIFICATE-----Generated at Tue Jun 3 23:10:54 2025 by rpki-client