$ rpki-client -vvf repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.mft File: B891A45840F824B9F116CBEAA3574A68343F5538.mft (raw, json) Hash identifier: PZeGfz+6NN87Ml6ZpWdLuS0hhqBUG5NDMGfKDAM6Gbg= Subject key identifier: DE:23:28:A6:23:02:F7:D9:06:0F:4B:24:7B:D3:F8:9F:44:EC:B2:7F Authority key identifier: B8:91:A4:58:40:F8:24:B9:F1:16:CB:EA:A3:57:4A:68:34:3F:55:38 Certificate issuer: /CN=B891A45840F824B9F116CBEAA3574A68343F5538 Certificate serial: 4C83A518843A2E85F1933A92B02D7EF4088A1ADE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B891A45840F824B9F116CBEAA3574A68343F5538.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.mft Manifest number: 4F Signing time: Wed 04 Jun 2025 20:32:19 +0000 Manifest this update: Wed 04 Jun 2025 20:27:19 +0000 Manifest next update: Sun 08 Jun 2025 04:23:19 +0000 Files and hashes: 1: 3130332e32382e3231382e302f32342d3234203d3e203538333835.roa (hash: cMJACG+wJYTKnGt0rpeqO/b7Kbn+Qvg12TrUivh9cCk=) 2: 3131302e39322e37342e302f32332d3234203d3e203538333835.roa (hash: XgxFmfrvLr/HS422k6dRWPfIUiiCoQbGouQtaJJQX4Y=) 3: 3130332e3234362e3136392e302f32342d3234203d3e203538333835.roa (hash: 8meh4qssPriL64kBvXs5YtBumf6ArWnflJaVktjo3Fo=) 4: 3130332e32332e3131362e302f32332d3234203d3e203538333835.roa (hash: 5UewkM1pAbLnP65YZLTVxzSYU/L1g1J84e5HTrwnd3M=) 5: B891A45840F824B9F116CBEAA3574A68343F5538.crl (hash: V/uNl19yaqaSoW2ZuYvRoGQfUZ7UEA51TQOyJNACiuA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.crl rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B891A45840F824B9F116CBEAA3574A68343F5538.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 04:23:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:83:a5:18:84:3a:2e:85:f1:93:3a:92:b0:2d:7e:f4:08:8a:1a:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B891A45840F824B9F116CBEAA3574A68343F5538 Validity Not Before: Jun 4 20:27:19 2025 GMT Not After : Jun 8 04:23:19 2025 GMT Subject: CN=DE2328A62302F7D9060F4B247BD3F89F44ECB27F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6f:93:30:3c:23:1e:f8:53:79:9c:e9:d6:34: 2f:a1:24:48:1a:ce:2d:af:f4:2f:92:2b:ab:fd:1f: 92:64:aa:56:c7:d6:27:44:01:7c:82:b4:59:05:64: 9e:c7:d7:e5:b7:2c:5b:1e:c8:54:ec:46:71:af:4b: 03:1d:71:58:fd:40:12:18:b5:f5:31:08:b0:5b:77: 74:0c:42:a1:e8:e8:17:bd:be:c6:a2:f0:03:61:9a: c3:a4:dd:ba:dc:9e:7a:b5:c6:45:b7:d8:bd:b8:8d: b6:99:9d:62:50:b8:4e:c5:89:47:fb:7e:d7:70:4a: 9d:7a:b0:b6:6d:ee:9b:f3:28:72:31:f9:a2:a1:de: e2:fa:44:3c:cd:ac:b0:54:0e:f0:f5:70:71:72:db: 25:35:5b:22:52:03:11:84:c8:2c:db:0c:40:16:e9: d3:c4:98:b4:c5:50:65:2b:ce:f7:0e:a9:0a:68:a0: 45:e6:0e:9b:37:28:ec:f8:1c:9c:d2:1d:4b:16:f5: 79:20:2f:f6:95:f5:a9:b9:0f:e0:a7:bc:30:16:d7: 22:4a:50:ed:f6:5d:ad:6b:4d:10:18:6a:e9:04:6f: d4:46:6e:47:d6:42:49:7b:a7:2c:ac:20:cc:63:ef: bc:9e:09:35:87:a7:17:f5:3c:52:73:cb:c7:d8:5d: 44:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:23:28:A6:23:02:F7:D9:06:0F:4B:24:7B:D3:F8:9F:44:EC:B2:7F X509v3 Authority Key Identifier: keyid:B8:91:A4:58:40:F8:24:B9:F1:16:CB:EA:A3:57:4A:68:34:3F:55:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B891A45840F824B9F116CBEAA3574A68343F5538.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:d9:00:77:0f:cc:84:b6:d0:95:dd:3c:ff:27:da:56:fb:bf: 4c:2d:50:ed:9c:66:db:86:cf:7f:e4:d5:2d:0e:dc:60:4c:e7: 5e:a2:88:f3:ec:46:b8:c2:00:65:23:22:4b:2e:fb:ab:93:d8: 45:da:75:0b:ae:1b:59:df:80:84:69:1c:b4:8f:5d:46:03:7c: c8:db:5e:8b:21:13:9d:3d:45:61:d2:c4:5e:fe:f3:65:7a:e5: e8:dc:8e:6f:bb:9b:6f:76:be:cc:dc:ea:51:85:6d:8e:01:7b: 6c:c4:50:14:00:fa:db:f5:24:77:b8:a8:6d:b2:12:15:9b:59: b3:e9:60:10:cc:d9:6d:71:90:8d:0c:f1:50:67:5e:6f:2e:3f: 2c:bf:c7:8c:59:40:e5:e4:72:04:43:0d:0f:09:07:a2:7d:85: 79:46:5a:4c:60:b3:73:d4:0a:69:d1:74:28:72:4a:38:c7:9c: 75:f4:c3:db:26:4c:90:6a:be:b4:18:5e:88:6d:bd:d2:a4:3f: 37:0c:e8:ff:2e:70:ea:db:ca:7a:25:df:33:33:a5:cf:92:0a: b1:e4:78:19:c2:0c:4c:87:32:4e:14:05:3d:45:a8:8a:c4:64: c3:73:4b:b0:a6:79:8a:f1:c7:26:39:63:b9:80:05:a7:fa:90: 9e:4d:5f:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTIOlGIQ6LoXxkzqSsC1+9AiKGt4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg5MUE0NTg0MEY4MjRCOUYxMTZDQkVBQTM1NzRBNjgz NDNGNTUzODAeFw0yNTA2MDQyMDI3MTlaFw0yNTA2MDgwNDIzMTlaMDMxMTAvBgNV BAMTKERFMjMyOEE2MjMwMkY3RDkwNjBGNEIyNDdCRDNGODlGNDRFQ0IyN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcb5MwPCMe+FN5nOnWNC+hJEga zi2v9C+SK6v9H5JkqlbH1idEAXyCtFkFZJ7H1+W3LFseyFTsRnGvSwMdcVj9QBIY tfUxCLBbd3QMQqHo6Be9vsai8ANhmsOk3brcnnq1xkW32L24jbaZnWJQuE7FiUf7 ftdwSp16sLZt7pvzKHIx+aKh3uL6RDzNrLBUDvD1cHFy2yU1WyJSAxGEyCzbDEAW 6dPEmLTFUGUrzvcOqQpooEXmDps3KOz4HJzSHUsW9XkgL/aV9am5D+CnvDAW1yJK UO32Xa1rTRAYaukEb9RGbkfWQkl7pyysIMxj77yeCTWHpxf1PFJzy8fYXURbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3iMopiMC99kGD0ske9P4n0Tssn8wHwYDVR0j BBgwFoAUuJGkWED4JLnxFsvqo1dKaDQ/VTgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MzkyNTM4OC0zNWM2LTQxZDctOWRjNC1kYjRkMTE4ZDEzNWEvMC9CODkxQTQ1ODQw RjgyNEI5RjExNkNCRUFBMzU3NEE2ODM0M0Y1NTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg5MUE0NTg0MEY4MjRCOUYxMTZDQkVBQTM1NzRBNjgzNDNG NTUzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM5MjUzODgtMzVjNi00MWQ3LTlk YzQtZGI0ZDExOGQxMzVhLzAvQjg5MUE0NTg0MEY4MjRCOUYxMTZDQkVBQTM1NzRB NjgzNDNGNTUzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHDZAHcPzIS20JXdPP8n2lb7v0wtUO2cZtuG z3/k1S0O3GBM516iiPPsRrjCAGUjIksu+6uT2EXadQuuG1nfgIRpHLSPXUYDfMjb XoshE509RWHSxF7+82V65ejcjm+7m292vszc6lGFbY4Be2zEUBQA+tv1JHe4qG2y EhWbWbPpYBDM2W1xkI0M8VBnXm8uPyy/x4xZQOXkcgRDDQ8JB6J9hXlGWkxgs3PU CmnRdChySjjHnHX0w9smTJBqvrQYXohtvdKkPzcM6P8ucOrbynol3zMzpc+SCrHk eBnCDEyHMk4UBT1FqIrEZMNzS7CmeYrxxyY5Y7mABaf6kJ5NX6Q= -----END CERTIFICATE-----Generated at Sat Jun 7 04:03:20 2025 by rpki-client