$ rpki-client -vvf repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft File: B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft (raw, json) Hash identifier: WoOn2MrXq3G2fHMtcphWwqTBRlpueAUjk++u/TaGmLg= Subject key identifier: D0:C0:E1:E6:96:35:4E:44:80:6B:AF:F0:85:B5:9C:8D:71:33:3E:DE Authority key identifier: B5:76:6E:F9:69:F5:BB:0A:7C:76:FA:A9:E5:3B:DE:82:74:E5:64:3E Certificate issuer: /CN=B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E Certificate serial: 2FAF75549823DB9DF0534B36F1CB57CC1896984C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft Manifest number: 93 Signing time: Mon 09 Jun 2025 16:11:32 +0000 Manifest this update: Mon 09 Jun 2025 16:06:32 +0000 Manifest next update: Thu 12 Jun 2025 22:50:32 +0000 Files and hashes: 1: 3136302e32352e34382e302f32342d3234203d3e20313533303634.roa (hash: dVHu44pKcvz5U1omvV2/zPeIxZKwNKUUdjHfrjYDpmg=) 2: B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl (hash: Bmh6Vp991UC1gb4ggzoehi59+uCB76jBdBwUPtUFfuE=) 3: 3136302e32352e34392e302f32342d3234203d3e20313533303634.roa (hash: Bb/yKULy883g9sFO67fqVa1UiPajZYa54/AsGogXeAU=) 4: 3136302e32352e34382e302f32332d3233203d3e20313533303634.roa (hash: /rUcJeyUd1b6fJu3vZNYQIJ9uleZbXipEYIybBuU1gs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 22:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:af:75:54:98:23:db:9d:f0:53:4b:36:f1:cb:57:cc:18:96:98:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E Validity Not Before: Jun 9 16:06:32 2025 GMT Not After : Jun 12 22:50:32 2025 GMT Subject: CN=D0C0E1E696354E44806BAFF085B59C8D71333EDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:67:8a:d9:44:be:70:be:95:1e:10:3b:92:eb: 31:c9:cb:82:5c:e3:dc:e8:30:27:c6:9e:5f:7f:3f: 3d:ba:0d:f2:a9:9e:40:fc:34:8a:e6:3d:b3:73:0d: 47:0c:8a:78:38:8a:38:90:51:9c:51:80:20:7d:2a: 8a:64:db:ab:01:0e:c8:a9:24:8e:a9:23:06:2a:53: f5:54:f9:5c:f4:e0:68:66:f9:bd:a2:00:03:5e:7a: 72:9a:8f:06:80:b5:5c:b1:eb:aa:dd:c4:06:3d:9c: 19:41:d7:9f:47:bf:22:ac:87:9e:25:df:25:2a:f4: fc:e8:24:75:f3:c9:e1:43:a1:39:19:bd:16:f9:44: 4b:c8:3e:03:0b:b4:ee:6f:9f:8a:fa:b0:31:27:e8: b8:e1:f5:8b:94:02:57:2a:c4:a1:4a:c7:90:0b:14: 19:06:58:8d:ca:7a:7e:cb:ea:49:e8:6b:52:46:c8: 09:42:1c:61:fb:43:7e:d0:8a:4e:23:75:f5:ed:d6: c5:c2:20:67:e0:37:6b:bd:89:ff:21:c2:15:76:6a: 40:83:1e:c3:30:1b:fa:77:cf:38:eb:9b:e4:dc:02: de:5b:90:a7:19:fb:02:8a:84:68:2d:63:a5:a6:95: 11:6a:d0:94:64:21:c4:05:90:80:1a:35:eb:4e:dc: 4a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C0:E1:E6:96:35:4E:44:80:6B:AF:F0:85:B5:9C:8D:71:33:3E:DE X509v3 Authority Key Identifier: keyid:B5:76:6E:F9:69:F5:BB:0A:7C:76:FA:A9:E5:3B:DE:82:74:E5:64:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:c6:56:53:10:10:52:d1:60:3f:82:4f:ff:5c:58:64:3d:f0: 98:cd:c6:8e:45:ad:a7:63:1d:9d:9e:7f:91:5c:88:89:6f:07: 20:86:40:16:6b:57:1f:6a:fa:9e:98:8a:c2:70:b2:2f:0b:27: 1f:01:64:be:00:98:84:05:58:91:eb:a6:4d:5c:16:5e:4f:74: df:80:36:14:a5:dd:a1:4f:11:d4:c8:c5:17:9b:de:ff:8c:ad: e0:84:22:72:af:b0:c6:8f:e6:8c:76:2a:04:1e:2e:57:37:94: 63:2c:f6:63:12:56:46:32:13:8c:16:d1:22:a8:ec:a0:a0:9e: 9b:96:9d:c7:39:72:ab:06:23:ff:8f:9f:6d:cd:d0:ae:62:3d: 51:fc:02:1c:58:b3:12:6b:cf:cb:1c:9e:fc:c8:64:4a:60:9e: 61:8a:62:da:57:18:88:1e:01:8d:b0:73:61:52:d1:52:8a:73: d2:f0:ff:0e:46:cb:94:44:c0:5e:d9:05:c0:32:aa:32:31:48: 51:16:b0:03:be:65:e1:89:2d:29:54:59:dc:a6:52:df:d9:a9: d3:07:0c:f6:5f:13:01:29:b3:de:bd:37:93:05:79:d7:4d:6c: 80:4e:24:d2:86:38:1b:a3:3d:17:d9:8b:0d:d8:54:8d:09:71: 0b:53:e7:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL691VJgj253wU0s28ctXzBiWmEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU3NjZFRjk2OUY1QkIwQTdDNzZGQUE5RTUzQkRFODI3 NEU1NjQzRTAeFw0yNTA2MDkxNjA2MzJaFw0yNTA2MTIyMjUwMzJaMDMxMTAvBgNV BAMTKEQwQzBFMUU2OTYzNTRFNDQ4MDZCQUZGMDg1QjU5QzhENzEzMzNFREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNZ4rZRL5wvpUeEDuS6zHJy4Jc 49zoMCfGnl9/Pz26DfKpnkD8NIrmPbNzDUcMing4ijiQUZxRgCB9Kopk26sBDsip JI6pIwYqU/VU+Vz04Ghm+b2iAANeenKajwaAtVyx66rdxAY9nBlB159HvyKsh54l 3yUq9PzoJHXzyeFDoTkZvRb5REvIPgMLtO5vn4r6sDEn6Ljh9YuUAlcqxKFKx5AL FBkGWI3Ken7L6knoa1JGyAlCHGH7Q37Qik4jdfXt1sXCIGfgN2u9if8hwhV2akCD HsMwG/p3zzjrm+TcAt5bkKcZ+wKKhGgtY6WmlRFq0JRkIcQFkIAaNetO3ErBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0MDh5pY1TkSAa6/whbWcjXEzPt4wHwYDVR0j BBgwFoAUtXZu+Wn1uwp8dvqp5TvegnTlZD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTY4MmJmMi0wNjM0LTQ3ODItYTVhZi1lZWI5MTlmMTkxNDMvMC9CNTc2NkVGOTY5 RjVCQjBBN0M3NkZBQTlFNTNCREU4Mjc0RTU2NDNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjU3NjZFRjk2OUY1QkIwQTdDNzZGQUE5RTUzQkRFODI3NEU1 NjQzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU2ODJiZjItMDYzNC00NzgyLWE1 YWYtZWViOTE5ZjE5MTQzLzAvQjU3NjZFRjk2OUY1QkIwQTdDNzZGQUE5RTUzQkRF ODI3NEU1NjQzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjGVlMQEFLRYD+CT/9cWGQ98JjNxo5Fradj HZ2ef5FciIlvByCGQBZrVx9q+p6YisJwsi8LJx8BZL4AmIQFWJHrpk1cFl5PdN+A NhSl3aFPEdTIxReb3v+MreCEInKvsMaP5ox2KgQeLlc3lGMs9mMSVkYyE4wW0SKo 7KCgnpuWncc5cqsGI/+Pn23N0K5iPVH8AhxYsxJrz8scnvzIZEpgnmGKYtpXGIge AY2wc2FS0VKKc9Lw/w5Gy5REwF7ZBcAyqjIxSFEWsAO+ZeGJLSlUWdymUt/ZqdMH DPZfEwEps969N5MFeddNbIBOJNKGOBujPRfZiw3YVI0JcQtT51M= -----END CERTIFICATE-----Generated at Wed Jun 11 10:15:49 2025 by rpki-client