$ rpki-client -vvf repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.mft File: 11489A5805B7FE2710AE32C3077C3450579D1288.mft (raw, json) Hash identifier: kMGj9T8A5HP6LVv1U9t3oo0V/jFc3eH9tOn54p5JeeY= Subject key identifier: 82:F2:8B:43:5B:55:77:85:7C:42:A6:CC:60:BC:DA:17:90:0B:45:E8 Authority key identifier: 11:48:9A:58:05:B7:FE:27:10:AE:32:C3:07:7C:34:50:57:9D:12:88 Certificate issuer: /CN=11489A5805B7FE2710AE32C3077C3450579D1288 Certificate serial: 37FF3C45DB351C4165D1E5294E7B3F23EA44D1DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11489A5805B7FE2710AE32C3077C3450579D1288.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.mft Manifest number: EB Signing time: Tue 03 Jun 2025 19:23:23 +0000 Manifest this update: Tue 03 Jun 2025 19:18:23 +0000 Manifest next update: Sat 07 Jun 2025 00:24:23 +0000 Files and hashes: 1: 11489A5805B7FE2710AE32C3077C3450579D1288.crl (hash: K2bhyTRApb4MNU/3w8qJBMMrDYSt7lptXdF2qgKDhYc=) 2: 3130332e3131332e32362e302f32342d3234203d3e20313337333339.roa (hash: NOH9wRK9inkAfrcmkP1Y7WHt1AAQ1F9Kr20Q6/2/AlY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.crl rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11489A5805B7FE2710AE32C3077C3450579D1288.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:ff:3c:45:db:35:1c:41:65:d1:e5:29:4e:7b:3f:23:ea:44:d1:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11489A5805B7FE2710AE32C3077C3450579D1288 Validity Not Before: Jun 3 19:18:23 2025 GMT Not After : Jun 7 00:24:23 2025 GMT Subject: CN=82F28B435B5577857C42A6CC60BCDA17900B45E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d1:99:87:68:f8:b6:8b:e9:91:31:ad:04:d6: 6b:93:97:67:5e:ae:67:31:01:88:59:cc:8d:ba:f3: dd:61:8b:b8:03:05:ca:e0:13:6d:c0:39:2a:c9:64: 9e:6c:94:88:5f:0f:66:36:c7:f1:8d:0c:d5:23:70: 6e:52:0a:eb:4b:7a:97:d0:d7:14:9c:fa:ce:22:00: a2:85:1b:2f:56:14:7a:9c:a1:91:47:a6:fb:60:79: b7:c6:c7:76:12:3c:c2:9a:97:79:e1:bd:f7:a4:49: e2:2d:44:5a:ff:0a:1c:6f:01:61:89:45:1d:75:83: 93:51:53:9f:f3:55:25:fd:28:f0:04:7f:97:39:89: 19:15:19:35:70:04:4f:c4:48:83:0e:0b:76:29:3c: 48:48:46:3f:ac:17:22:a5:dd:1a:39:72:9f:69:d5: 01:e3:b5:c0:87:cc:3d:13:05:2a:c2:d1:2d:b0:92: 14:14:4f:e5:48:19:04:02:d5:9c:61:a0:b3:a0:2a: 64:40:64:ef:68:59:23:76:b5:7e:b8:1b:dd:07:c4: bb:60:3c:80:db:e7:16:db:63:10:ab:4d:91:66:cb: 39:71:61:29:8d:7b:20:3b:0a:a1:6a:55:c1:85:c9: ac:ae:6b:d0:2c:81:86:64:aa:4d:62:5e:d9:ea:df: 06:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F2:8B:43:5B:55:77:85:7C:42:A6:CC:60:BC:DA:17:90:0B:45:E8 X509v3 Authority Key Identifier: keyid:11:48:9A:58:05:B7:FE:27:10:AE:32:C3:07:7C:34:50:57:9D:12:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11489A5805B7FE2710AE32C3077C3450579D1288.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:7a:1c:67:84:5c:fc:0d:0d:08:27:d9:83:e0:8c:b5:b3:08: c0:f4:d4:5c:af:52:b1:e7:09:45:7d:09:4e:46:c2:48:c5:b3: 23:c1:25:ce:cc:ad:0f:5c:8d:25:df:95:74:10:99:fe:fb:cc: c9:03:81:4d:1b:21:e3:cb:8c:12:f4:6a:b6:01:28:ce:c5:ff: 63:75:28:63:21:ff:6f:1e:bc:0c:74:e0:81:9f:e5:c7:9e:96: 71:d6:bc:f0:43:54:5d:ba:8f:fe:a2:4a:6a:91:ba:76:67:91: 36:6a:32:d4:10:45:6c:9e:c0:06:fa:de:c0:85:4e:3f:57:c5: d9:24:2d:a7:bf:b4:c3:ce:76:e6:2b:c6:27:d6:75:89:2a:2c: 2b:f8:fc:22:9a:5e:1a:a0:29:84:c6:a7:9c:ae:8e:12:11:14: e4:58:28:0e:cb:4c:5c:ec:ca:8a:af:30:20:ec:b6:af:2b:69: f0:58:a8:ea:67:43:05:be:cb:43:d3:a6:5f:86:3c:20:63:de: 7d:0b:8e:33:ae:f3:43:69:a2:17:1c:26:5c:5e:4d:16:f9:50: 21:6a:18:fa:a2:04:f1:84:f9:f6:ae:bb:32:ba:00:22:1f:1d: 2b:40:5f:37:98:9e:cc:f0:93:63:ac:99:62:1d:d5:c3:bd:ea: c4:11:c8:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN/88Rds1HEFl0eUpTns/I+pE0dowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE0ODlBNTgwNUI3RkUyNzEwQUUzMkMzMDc3QzM0NTA1 NzlEMTI4ODAeFw0yNTA2MDMxOTE4MjNaFw0yNTA2MDcwMDI0MjNaMDMxMTAvBgNV BAMTKDgyRjI4QjQzNUI1NTc3ODU3QzQyQTZDQzYwQkNEQTE3OTAwQjQ1RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl0ZmHaPi2i+mRMa0E1muTl2de rmcxAYhZzI26891hi7gDBcrgE23AOSrJZJ5slIhfD2Y2x/GNDNUjcG5SCutLepfQ 1xSc+s4iAKKFGy9WFHqcoZFHpvtgebfGx3YSPMKal3nhvfekSeItRFr/ChxvAWGJ RR11g5NRU5/zVSX9KPAEf5c5iRkVGTVwBE/ESIMOC3YpPEhIRj+sFyKl3Ro5cp9p 1QHjtcCHzD0TBSrC0S2wkhQUT+VIGQQC1ZxhoLOgKmRAZO9oWSN2tX64G90HxLtg PIDb5xbbYxCrTZFmyzlxYSmNeyA7CqFqVcGFyayua9AsgYZkqk1iXtnq3wZNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgvKLQ1tVd4V8QqbMYLzaF5ALRegwHwYDVR0j BBgwFoAUEUiaWAW3/icQrjLDB3w0UFedEogwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWJjZTcxZS00ZWU0LTQ1OTAtOTRmYi0zN2ZmZDlmMGQ2YjcvMC8xMTQ4OUE1ODA1 QjdGRTI3MTBBRTMyQzMwNzdDMzQ1MDU3OUQxMjg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE0ODlBNTgwNUI3RkUyNzEwQUUzMkMzMDc3QzM0NTA1NzlE MTI4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFiY2U3MWUtNGVlNC00NTkwLTk0 ZmItMzdmZmQ5ZjBkNmI3LzAvMTE0ODlBNTgwNUI3RkUyNzEwQUUzMkMzMDc3QzM0 NTA1NzlEMTI4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHR6HGeEXPwNDQgn2YPgjLWzCMD01FyvUrHn CUV9CU5GwkjFsyPBJc7MrQ9cjSXflXQQmf77zMkDgU0bIePLjBL0arYBKM7F/2N1 KGMh/28evAx04IGf5ceelnHWvPBDVF26j/6iSmqRunZnkTZqMtQQRWyewAb63sCF Tj9XxdkkLae/tMPOduYrxifWdYkqLCv4/CKaXhqgKYTGp5yujhIRFORYKA7LTFzs yoqvMCDstq8rafBYqOpnQwW+y0PTpl+GPCBj3n0LjjOu80NpohccJlxeTRb5UCFq GPqiBPGE+fauuzK6ACIfHStAXzeYnszwk2OsmWId1cO96sQRyCg= -----END CERTIFICATE-----Generated at Thu Jun 5 18:18:19 2025 by rpki-client