$ rpki-client -vvf repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft File: D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft (raw, json) Hash identifier: Gmkb6Ytvvp/9lt/NXEpNFvjAu/vQBp5PLkdOtDR+Jlo= Subject key identifier: FB:11:D7:0B:45:95:84:63:AC:9C:CE:D8:D9:C8:01:C6:BD:0D:C6:8B Authority key identifier: D8:5B:24:E8:18:A4:DA:C3:88:41:5F:B8:C9:69:05:DF:03:C8:D6:EA Certificate issuer: /CN=D85B24E818A4DAC388415FB8C96905DF03C8D6EA Certificate serial: CB87BE78B7CB1C000C2721CD4F0D5508E48442 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft Manifest number: 0176 Signing time: Thu 05 Jun 2025 17:51:56 +0000 Manifest this update: Thu 05 Jun 2025 17:46:56 +0000 Manifest next update: Mon 09 Jun 2025 01:23:56 +0000 Files and hashes: 1: D85B24E818A4DAC388415FB8C96905DF03C8D6EA.crl (hash: BlRCBANc/YhnhXjZIopqN6E33DbqNjKZvEkm+iagIxU=) 2: 3130332e3131382e3132312e302f32342d3234203d3e20313530323033.roa (hash: uRWbiNeHPsQtBG/4Fu8zjLX2ho1cleaNvsV0GTgbsAs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.crl rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 01:23:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: cb:87:be:78:b7:cb:1c:00:0c:27:21:cd:4f:0d:55:08:e4:84:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85B24E818A4DAC388415FB8C96905DF03C8D6EA Validity Not Before: Jun 5 17:46:56 2025 GMT Not After : Jun 9 01:23:56 2025 GMT Subject: CN=FB11D70B45958463AC9CCED8D9C801C6BD0DC68B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:89:8a:41:cb:73:6e:36:da:ce:04:9f:13:d3: 1a:2a:80:3a:e4:3f:7b:0a:1a:55:c3:46:8d:27:79: 8f:83:9d:25:0b:44:f1:84:68:6b:43:1b:92:03:90: 14:35:fc:f2:40:87:72:7a:3c:5a:5c:22:0a:85:d8: 23:83:e2:ab:66:8d:2c:4b:94:b1:e3:e2:6b:2a:9a: 6b:28:08:05:5d:a2:ab:a2:84:7a:d2:6e:1e:0f:99: a6:23:79:30:76:bc:87:78:5b:42:b1:73:95:a4:c6: 12:04:53:f8:79:29:7a:d0:09:e3:4d:6b:8f:5a:56: 81:38:ed:82:47:95:17:44:8b:03:42:42:e5:52:2e: 4a:65:53:89:ee:dc:e9:70:65:04:72:24:94:1b:0d: 91:a2:1e:34:96:21:bb:80:2e:f1:3f:f4:d8:8c:10: 42:a5:74:df:61:11:ae:8c:fc:c9:a4:56:38:c8:2c: 74:a1:c6:45:a1:18:a4:7b:c6:f5:49:80:10:14:2d: 47:98:ce:cf:70:87:24:40:ef:38:5e:f8:a1:15:58: d0:59:02:c7:23:f8:f8:8b:01:60:e8:d4:c6:bc:b0: fb:71:e6:1b:4e:97:e8:57:63:f2:2e:06:a9:49:44: 30:12:8f:02:2d:9a:74:fb:d9:cd:6a:50:21:70:a7: 13:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:11:D7:0B:45:95:84:63:AC:9C:CE:D8:D9:C8:01:C6:BD:0D:C6:8B X509v3 Authority Key Identifier: keyid:D8:5B:24:E8:18:A4:DA:C3:88:41:5F:B8:C9:69:05:DF:03:C8:D6:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:50:63:6a:ab:13:e0:90:ba:ac:c9:ff:a9:8d:be:19:cd:17: 7a:e5:48:62:a8:41:dd:6d:93:0b:69:3f:f1:ae:31:3c:54:69: 96:01:7c:c3:71:e6:a9:63:fe:73:66:ba:c7:fe:a1:04:4b:e2: b9:95:6c:71:34:dc:dd:1c:a3:20:e6:dc:f0:75:d0:66:02:e1: af:97:cd:8b:6c:bb:72:ad:c1:24:da:3d:e4:26:55:a9:a0:dd: a5:9b:d8:98:f0:3d:b4:a0:dc:79:83:87:0b:a8:0b:91:e8:b8: 6b:8f:9f:1b:21:23:10:16:cd:cb:1a:aa:72:1e:79:e3:61:25: 4c:09:1f:5e:66:8b:07:05:bb:3e:13:ea:5f:0b:49:a8:d7:7b: f3:96:77:87:b2:c6:17:bf:01:0c:c7:be:8c:73:e1:c2:d8:89: 36:bd:9b:bd:70:af:e1:5d:ad:d2:c6:23:18:27:1d:c3:03:e4: ea:da:8b:6d:12:62:fb:52:fc:0c:3b:cf:77:4a:a6:d6:f5:50: 07:10:44:47:43:30:21:b4:b9:35:c7:62:6b:46:46:92:05:19: 45:7b:da:4d:57:50:b9:f2:ea:f8:01:e0:5c:44:8a:92:5a:a0: b3:70:eb:09:32:8f:59:47:8f:4f:e4:38:e9:ce:2d:bd:1a:a8: 13:0e:f7:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAMuHvni3yxwADCchzU8NVQjkhEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1QjI0RTgxOEE0REFDMzg4NDE1RkI4Qzk2OTA1REYw M0M4RDZFQTAeFw0yNTA2MDUxNzQ2NTZaFw0yNTA2MDkwMTIzNTZaMDMxMTAvBgNV BAMTKEZCMTFENzBCNDU5NTg0NjNBQzlDQ0VEOEQ5QzgwMUM2QkQwREM2OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDciYpBy3NuNtrOBJ8T0xoqgDrk P3sKGlXDRo0neY+DnSULRPGEaGtDG5IDkBQ1/PJAh3J6PFpcIgqF2COD4qtmjSxL lLHj4msqmmsoCAVdoquihHrSbh4PmaYjeTB2vId4W0Kxc5WkxhIEU/h5KXrQCeNN a49aVoE47YJHlRdEiwNCQuVSLkplU4nu3OlwZQRyJJQbDZGiHjSWIbuALvE/9NiM EEKldN9hEa6M/MmkVjjILHShxkWhGKR7xvVJgBAULUeYzs9whyRA7zhe+KEVWNBZ Ascj+PiLAWDo1Ma8sPtx5htOl+hXY/IuBqlJRDASjwItmnT72c1qUCFwpxM1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+xHXC0WVhGOsnM7Y2cgBxr0NxoswHwYDVR0j BBgwFoAU2Fsk6Bik2sOIQV+4yWkF3wPI1uowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MmY2YTM5Zi0yOTQwLTRjY2MtOGMxZi05ZDU1OWM0N2E3OWIvMC9EODVCMjRFODE4 QTREQUMzODg0MTVGQjhDOTY5MDVERjAzQzhENkVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDg1QjI0RTgxOEE0REFDMzg4NDE1RkI4Qzk2OTA1REYwM0M4 RDZFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTJmNmEzOWYtMjk0MC00Y2NjLThj MWYtOWQ1NTljNDdhNzliLzAvRDg1QjI0RTgxOEE0REFDMzg4NDE1RkI4Qzk2OTA1 REYwM0M4RDZFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEpQY2qrE+CQuqzJ/6mNvhnNF3rlSGKoQd1t kwtpP/GuMTxUaZYBfMNx5qlj/nNmusf+oQRL4rmVbHE03N0coyDm3PB10GYC4a+X zYtsu3KtwSTaPeQmVamg3aWb2JjwPbSg3HmDhwuoC5HouGuPnxshIxAWzcsaqnIe eeNhJUwJH15miwcFuz4T6l8LSajXe/OWd4eyxhe/AQzHvoxz4cLYiTa9m71wr+Fd rdLGIxgnHcMD5Orai20SYvtS/Aw7z3dKptb1UAcQREdDMCG0uTXHYmtGRpIFGUV7 2k1XULny6vgB4FxEipJaoLNw6wkyj1lHj0/kOOnOLb0aqBMO908= -----END CERTIFICATE-----Generated at Sun Jun 8 01:47:46 2025 by rpki-client