$ rpki-client -vvf repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft File: B605E2C01C5BDC6CEE49545C80501360234DC910.mft (raw, json) Hash identifier: 3xYmAPmBnV/SwhsxO/4t/Z5eO/LCCEvJo6SK9h/Hfzk= Subject key identifier: F6:9D:2B:B7:66:FE:D3:6F:47:E2:14:65:97:AE:52:7D:C7:8C:2F:40 Authority key identifier: B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10 Certificate issuer: /CN=B605E2C01C5BDC6CEE49545C80501360234DC910 Certificate serial: 7839DA9454B80527E5E4B1D648EF9E9342A73565 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer Subject info access: rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft Manifest number: 04E3 Signing time: Wed 04 Jun 2025 10:00:04 +0000 Manifest this update: Wed 04 Jun 2025 09:55:04 +0000 Manifest next update: Sat 07 Jun 2025 16:06:04 +0000 Files and hashes: 1: 3131352e3137382e35342e302f32342d3234203d3e20313331373137.roa (hash: 4R3cIWzWFlBnUOjDtKgjITkNYaOCw4Tx4+7Vb5ietQo=) 2: B605E2C01C5BDC6CEE49545C80501360234DC910.crl (hash: 2+f7ULPrRJ8JWH2Gtl7wlJdJ0w4Sqznxe+CFDyxshyg=) 3: 3131352e3137382e35302e302f32342d3234203d3e203338373833.roa (hash: AVHUuCu/pWOfGEGbs7pgdGUZzNAVfi/HDMj4JakhRSI=) 4: 3131352e3137382e34382e302f32342d3234203d3e203338373833.roa (hash: /bgLX80Id13xkunC59CvIZtu8KOfj3mxVa1lG5ZXF/0=) 5: 3131352e3137382e35312e302f32342d3234203d3e20313331373137.roa (hash: FpCRPN3/sh87yKc8VhdJ2zd+tYzqklLo+UKit0tTGBI=) 6: 3131352e3137382e34392e302f32342d3234203d3e203338373833.roa (hash: isINXQLKIC1dEiiAoWDEseWdjl997XY6+RtHzF8UKMk=) 7: 3131352e3137382e35332e302f32342d3234203d3e20313331373137.roa (hash: 5Br8jzUfiBL0O6Kopm71gWMUaniCVXm/uXqyIID9rs0=) 8: 3131352e3137382e35322e302f32342d3234203d3e20313331373137.roa (hash: QNOScV9kvLXfJ4ZvrZSU6WwTkajrzvaS7q6+eyoaI+A=) 9: 3131352e3137382e35352e302f32342d3234203d3e203338373833.roa (hash: L3ZzIiAydRdMLY3ej77+q1So7IkWU5tA3zvtMa14wvQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 16:06:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:39:da:94:54:b8:05:27:e5:e4:b1:d6:48:ef:9e:93:42:a7:35:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B605E2C01C5BDC6CEE49545C80501360234DC910 Validity Not Before: Jun 4 09:55:04 2025 GMT Not After : Jun 7 16:06:04 2025 GMT Subject: CN=F69D2BB766FED36F47E2146597AE527DC78C2F40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:0d:47:86:e1:b5:3e:2d:c3:85:62:1b:3a:f5: 8c:85:b9:9f:72:f4:7c:f3:63:7b:84:5f:b7:0e:2c: 0d:c2:dc:10:d4:72:01:7f:aa:b9:45:bf:e8:5e:de: cf:37:24:46:b6:77:0f:64:93:93:22:04:09:4a:eb: 1b:a0:f3:6c:f7:af:05:a1:bf:9c:cb:47:ae:61:87: e7:78:a8:5e:85:f9:12:47:9f:57:fc:07:b2:7d:94: 6b:6e:2f:fb:dc:1f:a8:9d:df:c6:54:bc:44:5e:63: 30:0e:d1:ff:dc:9e:5b:a3:f6:8a:33:47:17:53:ea: f4:85:b3:37:ab:3e:3b:f7:d5:42:d7:f2:0c:77:f7: 00:4e:9c:51:2d:b3:00:9c:bd:21:91:e6:b7:8b:a7: e1:36:29:f0:11:c4:d9:b3:1e:fe:c6:c1:dc:c5:14: c6:65:18:a8:2c:16:67:00:43:67:c9:9b:0f:d8:64: 14:1d:71:e6:25:d0:28:9d:1c:a8:be:80:4a:94:5f: 98:76:59:4f:7a:6a:10:58:d5:6e:03:e3:82:40:3e: d8:43:00:39:f6:55:28:49:a6:99:db:7a:61:e9:bd: 03:3f:ee:f6:98:d2:c3:66:c1:f9:39:13:dd:1a:c3: 0b:9e:12:56:8d:f3:e8:68:d5:75:2b:6d:e1:92:d4: 8f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:9D:2B:B7:66:FE:D3:6F:47:E2:14:65:97:AE:52:7D:C7:8C:2F:40 X509v3 Authority Key Identifier: keyid:B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:97:95:85:4d:5b:e4:44:9f:41:f4:96:8f:1b:7b:69:46:01: 12:3a:d9:a9:52:22:ba:e2:71:be:24:73:9c:8c:2d:af:d5:54: ef:7b:81:62:c9:d3:7f:97:28:72:49:5c:be:d8:c1:0e:34:80: ce:5c:24:e7:25:61:4e:aa:28:fc:1b:29:81:5c:a1:3c:59:2d: 99:40:a5:65:57:d5:00:1e:25:b8:1a:9a:84:0f:c4:ad:26:48: 37:dc:d0:52:5c:4d:93:d2:30:ea:b5:a3:21:53:9d:78:cd:26: fb:48:8d:9e:2f:d1:02:77:36:3f:7c:54:d8:96:2c:bd:9d:d5: 0e:07:f7:27:44:f5:f0:13:72:23:ec:f4:ee:fa:e9:5c:eb:e7: 57:95:2c:42:62:f5:e8:a6:93:b4:2a:bb:bf:a8:eb:d8:e4:c8: 0f:e7:61:a1:0f:7f:34:f7:e6:91:34:42:58:ca:b9:29:98:85: 4c:8c:4f:6d:16:18:e4:d3:eb:21:3b:60:ba:04:8b:36:db:9c: 62:99:0c:cc:5d:64:38:6f:24:a4:91:e3:38:ff:74:51:c0:97: 3e:39:7e:35:18:da:cd:01:3f:d1:6c:50:ec:e6:4c:65:c5:fd: e4:3f:3f:db:8a:51:b4:71:f6:4d:ef:81:0f:41:cf:81:15:bf: c1:94:b6:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeDnalFS4BSfl5LHWSO+ek0KnNWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEzNjAy MzREQzkxMDAeFw0yNTA2MDQwOTU1MDRaFw0yNTA2MDcxNjA2MDRaMDMxMTAvBgNV BAMTKEY2OUQyQkI3NjZGRUQzNkY0N0UyMTQ2NTk3QUU1MjdEQzc4QzJGNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpDUeG4bU+LcOFYhs69YyFuZ9y 9HzzY3uEX7cOLA3C3BDUcgF/qrlFv+he3s83JEa2dw9kk5MiBAlK6xug82z3rwWh v5zLR65hh+d4qF6F+RJHn1f8B7J9lGtuL/vcH6id38ZUvEReYzAO0f/cnluj9ooz RxdT6vSFszerPjv31ULX8gx39wBOnFEtswCcvSGR5reLp+E2KfARxNmzHv7GwdzF FMZlGKgsFmcAQ2fJmw/YZBQdceYl0CidHKi+gEqUX5h2WU96ahBY1W4D44JAPthD ADn2VShJppnbemHpvQM/7vaY0sNmwfk5E90awwueElaN8+ho1XUrbeGS1I/zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9p0rt2b+029H4hRll65SfceML0AwHwYDVR0j BBgwFoAUtgXiwBxb3GzuSVRcgFATYCNNyRAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWZlOGY5Yi04YzM0LTQzNDItYTBmZS1jYTEwNzVmYmE1ZmYvMC9CNjA1RTJDMDFD NUJEQzZDRUU0OTU0NUM4MDUwMTM2MDIzNERDOTEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEzNjAyMzRE QzkxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGVmZThmOWItOGMzNC00MzQyLWEw ZmUtY2ExMDc1ZmJhNWZmLzAvQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEz NjAyMzREQzkxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMmXlYVNW+REn0H0lo8be2lGARI62alSIrri cb4kc5yMLa/VVO97gWLJ03+XKHJJXL7YwQ40gM5cJOclYU6qKPwbKYFcoTxZLZlA pWVX1QAeJbgamoQPxK0mSDfc0FJcTZPSMOq1oyFTnXjNJvtIjZ4v0QJ3Nj98VNiW LL2d1Q4H9ydE9fATciPs9O766Vzr51eVLEJi9eimk7Qqu7+o69jkyA/nYaEPfzT3 5pE0QljKuSmYhUyMT20WGOTT6yE7YLoEizbbnGKZDMxdZDhvJKSR4zj/dFHAlz45 fjUY2s0BP9FsUOzmTGXF/eQ/P9uKUbRx9k3vgQ9Bz4EVv8GUtog= -----END CERTIFICATE-----Generated at Thu Jun 5 18:34:24 2025 by rpki-client