$ rpki-client -vvf repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft File: B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft (raw, json) Hash identifier: 22wQgmUfIMRzZ764WzRmUX/8Cat2QZeKNfkkID9v24M= Subject key identifier: C5:DA:E9:6D:1A:A6:24:F2:2C:99:84:71:A6:7F:6E:AA:44:CA:F1:FD Authority key identifier: B5:76:6E:F9:69:F5:BB:0A:7C:76:FA:A9:E5:3B:DE:82:74:E5:64:3E Certificate issuer: /CN=B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E Certificate serial: 2045243F787EFE50AF6955BDA1FC325E009581E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft Manifest number: 92 Signing time: Sat 07 Jun 2025 10:11:35 +0000 Manifest this update: Sat 07 Jun 2025 10:06:35 +0000 Manifest next update: Tue 10 Jun 2025 16:03:35 +0000 Files and hashes: 1: 3136302e32352e34382e302f32332d3233203d3e20313533303634.roa (hash: /rUcJeyUd1b6fJu3vZNYQIJ9uleZbXipEYIybBuU1gs=) 2: B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl (hash: Uyzi9G6/Kua+uPIF4ev5fLDtG1f7waIOiKOffV/uecg=) 3: 3136302e32352e34382e302f32342d3234203d3e20313533303634.roa (hash: dVHu44pKcvz5U1omvV2/zPeIxZKwNKUUdjHfrjYDpmg=) 4: 3136302e32352e34392e302f32342d3234203d3e20313533303634.roa (hash: Bb/yKULy883g9sFO67fqVa1UiPajZYa54/AsGogXeAU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 16:03:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:45:24:3f:78:7e:fe:50:af:69:55:bd:a1:fc:32:5e:00:95:81:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E Validity Not Before: Jun 7 10:06:35 2025 GMT Not After : Jun 10 16:03:35 2025 GMT Subject: CN=C5DAE96D1AA624F22C998471A67F6EAA44CAF1FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f5:d3:a9:63:86:7f:56:4c:8c:af:f1:5d:bd: e3:b7:92:bb:10:65:39:c3:6a:12:4e:77:7e:0e:fd: c1:d5:24:68:c6:6a:12:95:31:4a:d2:ae:0b:46:5d: d8:8b:e3:8e:11:21:7b:05:b3:c4:10:d6:37:cd:fc: 61:29:ab:b0:0c:7e:95:b3:0d:18:44:be:a3:7d:c6: 73:63:1e:40:10:a4:71:63:7b:bf:da:4a:1e:be:83: 65:9b:61:a1:25:58:21:55:f2:62:61:22:c0:ed:09: 1a:ec:14:19:c9:ef:f9:d4:9b:ee:07:a9:18:0a:de: c3:32:a6:7a:6b:fb:3d:e6:79:e3:6c:be:9c:1c:ce: d9:40:fb:9b:6e:8d:39:d5:c1:47:08:fe:87:29:ab: a1:3f:24:5d:61:e3:c3:23:11:19:43:1d:fe:65:0b: fd:0e:95:eb:ec:c4:38:3e:99:45:07:ce:54:71:92: 86:02:3f:88:31:66:73:12:31:bb:92:16:0e:b0:18: a3:5d:53:fb:4d:cd:50:76:14:75:7a:a0:ea:00:70: db:3b:52:39:ed:66:70:62:0c:7c:d7:dc:f0:d0:ed: ef:fe:a1:b1:10:cc:32:1c:2f:e8:2e:e6:6c:27:bf: dc:f6:75:2b:42:71:62:ee:2c:b5:28:a1:5a:31:5d: 8b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:DA:E9:6D:1A:A6:24:F2:2C:99:84:71:A6:7F:6E:AA:44:CA:F1:FD X509v3 Authority Key Identifier: keyid:B5:76:6E:F9:69:F5:BB:0A:7C:76:FA:A9:E5:3B:DE:82:74:E5:64:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:8b:f1:54:25:ed:36:17:3f:91:14:15:60:59:2d:9a:6d:c1: c4:6c:9e:ca:8b:95:54:a9:2d:e5:4f:0b:51:3b:ae:10:15:17: 20:c0:65:96:ea:80:44:f4:76:af:f0:56:0c:a7:3a:1d:5e:3d: 55:04:04:fb:06:61:a0:8b:c5:0f:c5:87:f4:5a:b3:c5:74:50: 77:42:54:54:14:fc:f8:34:d0:8e:98:e6:25:00:d7:0e:25:de: 06:da:58:01:0d:39:50:18:1d:8a:68:47:1e:cb:c5:20:28:8e: 36:60:14:3a:fc:56:76:eb:4e:ad:74:08:aa:35:d2:ad:3b:3e: df:b6:63:7c:d3:67:1a:9d:bd:d3:8a:a0:d0:bb:2e:33:09:01: c8:24:d8:7f:5c:66:df:a5:29:55:bd:7e:d2:90:a6:52:6c:e9: b6:62:91:47:26:df:29:b6:b6:5b:d4:b8:a1:8c:b9:0a:98:d7: e2:28:a1:af:2e:78:25:08:4a:0a:77:1a:ea:1b:73:eb:de:42: f3:73:f5:2f:33:a2:b4:76:28:3e:fb:96:c0:ad:b8:f4:3f:b9: b6:ad:67:c5:3e:54:a6:2e:f7:87:e3:27:8e:35:79:86:48:a8: f0:ff:ac:29:ac:3e:48:e6:d0:bb:c9:44:54:d4:b3:63:e1:de: c3:77:ce:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIEUkP3h+/lCvaVW9ofwyXgCVgeUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU3NjZFRjk2OUY1QkIwQTdDNzZGQUE5RTUzQkRFODI3 NEU1NjQzRTAeFw0yNTA2MDcxMDA2MzVaFw0yNTA2MTAxNjAzMzVaMDMxMTAvBgNV BAMTKEM1REFFOTZEMUFBNjI0RjIyQzk5ODQ3MUE2N0Y2RUFBNDRDQUYxRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD9dOpY4Z/VkyMr/FdveO3krsQ ZTnDahJOd34O/cHVJGjGahKVMUrSrgtGXdiL444RIXsFs8QQ1jfN/GEpq7AMfpWz DRhEvqN9xnNjHkAQpHFje7/aSh6+g2WbYaElWCFV8mJhIsDtCRrsFBnJ7/nUm+4H qRgK3sMypnpr+z3meeNsvpwcztlA+5tujTnVwUcI/ocpq6E/JF1h48MjERlDHf5l C/0OlevsxDg+mUUHzlRxkoYCP4gxZnMSMbuSFg6wGKNdU/tNzVB2FHV6oOoAcNs7 UjntZnBiDHzX3PDQ7e/+obEQzDIcL+gu5mwnv9z2dStCcWLuLLUooVoxXYtrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxdrpbRqmJPIsmYRxpn9uqkTK8f0wHwYDVR0j BBgwFoAUtXZu+Wn1uwp8dvqp5TvegnTlZD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTY4MmJmMi0wNjM0LTQ3ODItYTVhZi1lZWI5MTlmMTkxNDMvMC9CNTc2NkVGOTY5 RjVCQjBBN0M3NkZBQTlFNTNCREU4Mjc0RTU2NDNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjU3NjZFRjk2OUY1QkIwQTdDNzZGQUE5RTUzQkRFODI3NEU1 NjQzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU2ODJiZjItMDYzNC00NzgyLWE1 YWYtZWViOTE5ZjE5MTQzLzAvQjU3NjZFRjk2OUY1QkIwQTdDNzZGQUE5RTUzQkRF ODI3NEU1NjQzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAACL8VQl7TYXP5EUFWBZLZptwcRsnsqLlVSp LeVPC1E7rhAVFyDAZZbqgET0dq/wVgynOh1ePVUEBPsGYaCLxQ/Fh/Ras8V0UHdC VFQU/Pg00I6Y5iUA1w4l3gbaWAENOVAYHYpoRx7LxSAojjZgFDr8VnbrTq10CKo1 0q07Pt+2Y3zTZxqdvdOKoNC7LjMJAcgk2H9cZt+lKVW9ftKQplJs6bZikUcm3ym2 tlvUuKGMuQqY1+Iooa8ueCUISgp3Guobc+veQvNz9S8zorR2KD77lsCtuPQ/ubat Z8U+VKYu94fjJ441eYZIqPD/rCmsPkjm0LvJRFTUs2Ph3sN3zqU= -----END CERTIFICATE-----Generated at Mon Jun 9 09:20:28 2025 by rpki-client