$ rpki-client -vvf repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft File: CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft (raw, json) Hash identifier: ivWDoxAOLLP7dkUMX00o2KgZZH7eyfjNVYPSdoafvgs= Subject key identifier: CA:2B:47:88:34:89:A1:3F:6A:32:18:18:FF:56:FA:81:50:01:D9:ED Authority key identifier: CB:96:62:73:31:53:C0:2E:4C:41:1B:7D:2F:2B:9E:22:D2:F0:EB:85 Certificate issuer: /CN=CB9662733153C02E4C411B7D2F2B9E22D2F0EB85 Certificate serial: 458DCC643E86DA6BEC88C7FBF3EA4FD50C8FD831 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft Manifest number: 015C Signing time: Thu 05 Jun 2025 18:00:05 +0000 Manifest this update: Thu 05 Jun 2025 17:55:05 +0000 Manifest next update: Mon 09 Jun 2025 04:15:05 +0000 Files and hashes: 1: 3130332e3133322e34302e302f32342d3234203d3e20313530393730.roa (hash: zG4bUujzmzqdwkICkCb1gdMUqEbOsnXYVfCYSY0KH6c=) 2: 3130332e3133322e34312e302f32342d3234203d3e20313530393730.roa (hash: tzY1XNU5cVp0pp1q9NAQ2OMSeEZ2zfRfv6jNIeP9/Ac=) 3: CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.crl (hash: UfKSFxRO8mmpk7Z5aAJjvC2DjIGdGPTohHjvLqvTzzk=) 4: 3130332e3133322e34302e302f32332d3234203d3e20313530393730.roa (hash: KLg+Fz2BzcIwd4SxZ1zeV5yC0o2hRKcPTvTH6A9r9sk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.crl rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 04:15:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:8d:cc:64:3e:86:da:6b:ec:88:c7:fb:f3:ea:4f:d5:0c:8f:d8:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB9662733153C02E4C411B7D2F2B9E22D2F0EB85 Validity Not Before: Jun 5 17:55:05 2025 GMT Not After : Jun 9 04:15:05 2025 GMT Subject: CN=CA2B47883489A13F6A321818FF56FA815001D9ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:12:85:5c:31:5d:e8:a1:7b:9b:9b:75:7d:20: 68:5c:29:4b:57:c1:c5:66:8f:d5:89:47:ee:2a:b7: c8:9f:fa:75:f4:af:80:73:d4:e2:a6:6d:f5:c8:ae: 9d:2a:fd:da:2f:25:66:6e:32:0d:12:39:0b:50:ae: 1d:b2:78:42:2c:40:96:2a:a9:41:08:95:59:44:7e: fa:4b:2c:b1:76:ca:b5:4b:f4:47:85:6e:4e:c8:70: 8e:9a:85:ba:22:16:3e:ae:e5:ef:80:7e:cf:7f:a3: 04:0c:c0:ad:00:5c:96:a1:f7:91:f9:ac:fc:52:db: f2:92:c9:98:ed:fa:0c:69:fc:6c:5b:9e:ff:94:1c: ec:65:bd:dc:e8:54:a2:8a:00:40:24:4c:4b:e0:d7: b6:c5:dc:7f:62:2a:29:fc:7c:2c:32:71:8e:49:d1: b5:ac:f2:d4:b1:ab:ad:8f:5f:9c:2f:33:a8:c8:b0: 57:6d:93:cb:0c:71:69:15:ec:83:a6:8c:d8:e4:15: 20:5a:8f:ff:ff:1a:91:ba:13:08:d5:3d:43:e5:48: 61:1b:46:46:5c:b1:2c:2a:18:21:31:d9:cf:5a:a2: 1e:e2:a0:b6:5a:5f:d6:0f:7e:01:6c:27:f9:c2:a8: 6b:8a:66:45:13:81:11:65:71:7a:69:74:15:90:45: b1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:2B:47:88:34:89:A1:3F:6A:32:18:18:FF:56:FA:81:50:01:D9:ED X509v3 Authority Key Identifier: keyid:CB:96:62:73:31:53:C0:2E:4C:41:1B:7D:2F:2B:9E:22:D2:F0:EB:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:53:54:01:3c:68:e8:ba:36:2f:1c:2e:4a:29:38:84:49:fa: f3:e9:90:16:18:cf:c7:d4:93:a8:8f:ec:bf:7e:96:a4:a5:52: 3a:cb:85:87:09:4e:50:bc:b6:f6:9a:9b:29:60:92:72:79:d2: c6:d5:66:61:3d:bf:c7:ce:45:c2:2b:44:ca:87:bf:b4:2c:ae: e3:e5:0b:9c:e1:2c:7f:d1:89:d5:70:af:6a:af:0a:db:73:a9: 96:03:e8:07:af:f9:7f:a6:75:73:7e:bf:96:1a:92:80:c3:14: d2:14:51:3f:27:c2:f1:40:f5:52:5a:5a:c8:ec:e6:2d:34:fb: 8b:59:1e:3d:77:5a:40:bf:e6:34:cc:61:e5:93:f7:97:53:3b: af:cd:95:b0:99:5c:17:e6:0d:c3:6a:1d:6f:f0:a9:67:83:7f: 1c:77:c3:c3:ef:19:8a:c4:09:11:9b:af:a9:1e:d8:e3:aa:7a: 2e:ca:3f:4b:2f:15:04:fd:df:97:59:69:03:4b:0f:53:d8:eb: e2:dc:f4:8c:03:e8:e9:21:89:42:5a:82:5c:25:e1:79:53:ea: 51:b0:a4:87:8c:eb:f3:e8:61:1b:f3:af:b6:41:b4:aa:d4:33: 11:1a:49:d6:65:8d:83:30:d2:28:69:21:6b:26:1e:0e:74:a9: e0:96:8a:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURY3MZD6G2mvsiMf78+pP1QyP2DEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I5NjYyNzMzMTUzQzAyRTRDNDExQjdEMkYyQjlFMjJE MkYwRUI4NTAeFw0yNTA2MDUxNzU1MDVaFw0yNTA2MDkwNDE1MDVaMDMxMTAvBgNV BAMTKENBMkI0Nzg4MzQ4OUExM0Y2QTMyMTgxOEZGNTZGQTgxNTAwMUQ5RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqEoVcMV3ooXubm3V9IGhcKUtX wcVmj9WJR+4qt8if+nX0r4Bz1OKmbfXIrp0q/dovJWZuMg0SOQtQrh2yeEIsQJYq qUEIlVlEfvpLLLF2yrVL9EeFbk7IcI6ahboiFj6u5e+Afs9/owQMwK0AXJah95H5 rPxS2/KSyZjt+gxp/Gxbnv+UHOxlvdzoVKKKAEAkTEvg17bF3H9iKin8fCwycY5J 0bWs8tSxq62PX5wvM6jIsFdtk8sMcWkV7IOmjNjkFSBaj///GpG6EwjVPUPlSGEb RkZcsSwqGCEx2c9aoh7ioLZaX9YPfgFsJ/nCqGuKZkUTgRFlcXppdBWQRbGlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyitHiDSJoT9qMhgY/1b6gVAB2e0wHwYDVR0j BBgwFoAUy5ZiczFTwC5MQRt9LyueItLw64UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGYyZmZkYS0wNWQxLTQwODUtYTEzNS0wMzk4N2EwN2YzOWUvMC9DQjk2NjI3MzMx NTNDMDJFNEM0MTFCN0QyRjJCOUUyMkQyRjBFQjg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0I5NjYyNzMzMTUzQzAyRTRDNDExQjdEMkYyQjlFMjJEMkYw RUI4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRmMmZmZGEtMDVkMS00MDg1LWEx MzUtMDM5ODdhMDdmMzllLzAvQ0I5NjYyNzMzMTUzQzAyRTRDNDExQjdEMkYyQjlF MjJEMkYwRUI4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAARTVAE8aOi6Ni8cLkopOIRJ+vPpkBYYz8fU k6iP7L9+lqSlUjrLhYcJTlC8tvaamylgknJ50sbVZmE9v8fORcIrRMqHv7QsruPl C5zhLH/RidVwr2qvCttzqZYD6Aev+X+mdXN+v5YakoDDFNIUUT8nwvFA9VJaWsjs 5i00+4tZHj13WkC/5jTMYeWT95dTO6/NlbCZXBfmDcNqHW/wqWeDfxx3w8PvGYrE CRGbr6ke2OOqei7KP0svFQT935dZaQNLD1PY6+Lc9IwD6OkhiUJaglwl4XlT6lGw pIeM6/PoYRvzr7ZBtKrUMxEaSdZljYMw0ihpIWsmHg50qeCWiro= -----END CERTIFICATE-----Generated at Sat Jun 7 04:01:41 2025 by rpki-client