$ rpki-client -vvf repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft File: B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft (raw, json) Hash identifier: zBkIlIqsxl67KIuA990s7qnwtLrtEsMbI9UtfJlP3q0= Subject key identifier: D7:0A:B5:F8:1B:22:93:19:AD:00:00:05:C1:21:6A:02:45:EA:A8:99 Authority key identifier: B8:93:98:BA:60:3C:43:BD:F7:11:A2:B3:1F:AD:C8:CD:FF:C9:CC:16 Certificate issuer: /CN=B89398BA603C43BDF711A2B31FADC8CDFFC9CC16 Certificate serial: 0116F60ABCEEA537ABBDC36D38C14125C60DE087 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft Manifest number: 04DA Signing time: Wed 04 Jun 2025 03:31:38 +0000 Manifest this update: Wed 04 Jun 2025 03:26:38 +0000 Manifest next update: Sat 07 Jun 2025 12:00:38 +0000 Files and hashes: 1: 323030313a6466323a346238303a3a2f34382d3438203d3e20313339343537.roa (hash: O/T9Xztwa1eZpftLg0Xl5KOsLOQM47dFO4VcGsJ1wDg=) 2: B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl (hash: yLRRKll+hVekAtW4p/RiUOOD3amftfuAHv3rHA4A2+E=) 3: 3130332e3134362e36322e302f32332d3234203d3e20313339343537.roa (hash: J9nhXOhW6jatN3t2cMwD6dQ3cCJrOL1soCUmU7Ehehg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 12:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:16:f6:0a:bc:ee:a5:37:ab:bd:c3:6d:38:c1:41:25:c6:0d:e0:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B89398BA603C43BDF711A2B31FADC8CDFFC9CC16 Validity Not Before: Jun 4 03:26:38 2025 GMT Not After : Jun 7 12:00:38 2025 GMT Subject: CN=D70AB5F81B229319AD000005C1216A0245EAA899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:aa:a9:3d:a7:1f:8b:38:18:07:da:d5:20:52: 3a:01:c1:77:a3:c7:a0:ef:9d:dd:6a:57:a3:12:08: 38:94:15:71:86:c5:dd:d1:95:6a:d4:fd:cc:b7:9a: ee:5e:1b:f3:61:75:27:a3:33:40:dd:1b:fd:bd:90: 16:64:7b:b0:ea:55:b8:ae:df:14:e6:45:a9:f7:af: 2e:92:f5:b5:82:14:ce:0f:81:0c:72:9a:cd:cf:98: e2:45:6a:c8:22:da:91:e0:20:54:29:30:5d:14:e7: 5a:25:b6:c4:47:2b:c1:56:1c:98:9e:1a:cc:e6:b7: 6b:2e:7d:5e:d9:56:24:df:e1:d5:4b:86:a5:50:df: b0:94:26:7b:ca:22:3c:d0:df:5a:7b:ad:fa:b6:5e: 3d:74:55:dd:0c:e7:66:a9:9e:3c:19:f8:9c:d1:c7: 7f:18:9e:39:fe:b7:41:1c:d2:da:fe:fe:9d:a2:23: 9d:5b:e6:d4:00:14:28:a0:7b:df:e2:b4:c7:2c:07: 5d:d8:34:ee:0e:27:cb:61:26:51:ab:1b:51:e3:85: c9:1b:49:12:b2:36:2c:ae:41:90:44:bb:a9:ba:77: 8b:dd:e4:08:0b:a2:b8:6b:89:f1:8b:32:c1:6a:76: dd:15:ae:ed:fb:ee:ab:ad:8c:04:c8:3c:dc:1c:f8: 16:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:0A:B5:F8:1B:22:93:19:AD:00:00:05:C1:21:6A:02:45:EA:A8:99 X509v3 Authority Key Identifier: keyid:B8:93:98:BA:60:3C:43:BD:F7:11:A2:B3:1F:AD:C8:CD:FF:C9:CC:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:0e:53:09:70:56:85:97:ad:d2:b4:ba:11:7e:a4:0f:59:c7: e2:50:b2:d1:23:95:93:15:4f:9f:09:60:1b:29:dd:b0:72:ab: 61:a6:62:93:29:c4:66:d7:00:68:40:15:a7:ee:e1:f9:2e:10: dd:f6:3a:1b:22:ff:9e:00:4a:42:9b:36:d6:37:2d:20:3f:80: df:05:9d:a2:37:e3:44:8e:6e:4c:16:45:76:9a:fa:6d:91:31: c3:b3:84:2a:e6:35:ea:a9:c7:08:b2:9d:72:ab:3f:87:33:60: 78:9e:ac:73:8b:81:bc:58:4c:eb:f5:35:fb:df:6f:02:0f:42: 7c:ef:8c:c6:06:60:b5:94:e8:75:a6:fa:5e:95:6a:5e:ba:d1: 32:26:14:16:ac:0a:e3:89:04:df:61:46:b0:84:9f:5a:96:91: d3:c2:28:c0:4a:70:13:19:22:70:bf:92:5b:29:9a:cc:46:8a: 0e:04:5e:d1:d5:a0:38:3a:9b:65:fe:1b:be:21:36:7c:1f:34: 24:0b:90:82:f4:de:e2:ac:e8:93:92:c8:41:6e:48:62:df:2f: 9e:cd:f6:e9:e6:0e:06:89:35:ac:50:b8:4f:87:b2:7f:d2:f6: 62:ab:01:17:15:4d:45:91:1d:43:a3:3a:1a:94:c7:fc:48:0c: 7c:25:10:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUARb2CrzupTervcNtOMFBJcYN4IcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg5Mzk4QkE2MDNDNDNCREY3MTFBMkIzMUZBREM4Q0RG RkM5Q0MxNjAeFw0yNTA2MDQwMzI2MzhaFw0yNTA2MDcxMjAwMzhaMDMxMTAvBgNV BAMTKEQ3MEFCNUY4MUIyMjkzMTlBRDAwMDAwNUMxMjE2QTAyNDVFQUE4OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9qqk9px+LOBgH2tUgUjoBwXej x6Dvnd1qV6MSCDiUFXGGxd3RlWrU/cy3mu5eG/NhdSejM0DdG/29kBZke7DqVbiu 3xTmRan3ry6S9bWCFM4PgQxyms3PmOJFasgi2pHgIFQpMF0U51oltsRHK8FWHJie Gszmt2sufV7ZViTf4dVLhqVQ37CUJnvKIjzQ31p7rfq2Xj10Vd0M52apnjwZ+JzR x38Ynjn+t0Ec0tr+/p2iI51b5tQAFCige9/itMcsB13YNO4OJ8thJlGrG1Hjhckb SRKyNiyuQZBEu6m6d4vd5AgLorhrifGLMsFqdt0Vru377qutjATIPNwc+BZZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1wq1+BsikxmtAAAFwSFqAkXqqJkwHwYDVR0j BBgwFoAUuJOYumA8Q733EaKzH63Izf/JzBYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWE3OTM0MC00ZGIyLTQ1OGQtOTVkZC1hZjIwYjRmY2RiM2QvMC9CODkzOThCQTYw M0M0M0JERjcxMUEyQjMxRkFEQzhDREZGQzlDQzE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg5Mzk4QkE2MDNDNDNCREY3MTFBMkIzMUZBREM4Q0RGRkM5 Q0MxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGVhNzkzNDAtNGRiMi00NThkLTk1 ZGQtYWYyMGI0ZmNkYjNkLzAvQjg5Mzk4QkE2MDNDNDNCREY3MTFBMkIzMUZBREM4 Q0RGRkM5Q0MxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHgOUwlwVoWXrdK0uhF+pA9Zx+JQstEjlZMV T58JYBsp3bByq2GmYpMpxGbXAGhAFafu4fkuEN32Ohsi/54ASkKbNtY3LSA/gN8F naI340SObkwWRXaa+m2RMcOzhCrmNeqpxwiynXKrP4czYHierHOLgbxYTOv1Nfvf bwIPQnzvjMYGYLWU6HWm+l6Val660TImFBasCuOJBN9hRrCEn1qWkdPCKMBKcBMZ InC/klspmsxGig4EXtHVoDg6m2X+G74hNnwfNCQLkIL03uKs6JOSyEFuSGLfL57N 9unmDgaJNaxQuE+Hsn/S9mKrARcVTUWRHUOjOhqUx/xIDHwlEIs= -----END CERTIFICATE-----Generated at Thu Jun 5 18:10:19 2025 by rpki-client