$ rpki-client -vvf repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft File: D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft (raw, json) Hash identifier: SniosVFoD67jHu88EqoCneXT1pqXL2iusLyQDxnVJy4= Subject key identifier: 2B:4B:46:5A:F2:BA:FA:A3:6D:54:A2:B2:3C:DF:A2:1B:17:C2:90:DD Authority key identifier: D4:68:8B:55:FB:8C:00:F6:AE:C2:84:E5:BC:B8:1E:22:7C:51:2D:ED Certificate issuer: /CN=D4688B55FB8C00F6AEC284E5BCB81E227C512DED Certificate serial: 50DF18EBDB117B190A085984E6995E65AD624294 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft Manifest number: 55 Signing time: Fri 06 Jun 2025 11:01:23 +0000 Manifest this update: Fri 06 Jun 2025 10:56:23 +0000 Manifest next update: Mon 09 Jun 2025 11:33:23 +0000 Files and hashes: 1: 3135372e32302e3133322e302f32342d3234203d3e20313532343033.roa (hash: 594wKSAWlPpCaF+0MRLR4aC4V5qJ2eufvq7sqBbmmOc=) 2: D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl (hash: NdMC6+y/I2B99WbMVgjGqnBvF8skn5CcBCN0Ye5lZtM=) 3: 3135372e32302e3133332e302f32342d3234203d3e20313532343033.roa (hash: urPap96O72bhGMnY7pKE8RIJODUHRqXobYzgJgy+CAg=) 4: 3135372e32302e3133322e302f32332d3233203d3e20313532343033.roa (hash: 8j1+acCdsJVbTJGY7uHwLQICxHIGJ/neg6B/vDw5bQ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 11:33:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:df:18:eb:db:11:7b:19:0a:08:59:84:e6:99:5e:65:ad:62:42:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4688B55FB8C00F6AEC284E5BCB81E227C512DED Validity Not Before: Jun 6 10:56:23 2025 GMT Not After : Jun 9 11:33:23 2025 GMT Subject: CN=2B4B465AF2BAFAA36D54A2B23CDFA21B17C290DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:cc:55:63:ac:3f:06:c2:33:be:b7:db:72:1d: 23:8d:6f:09:90:09:c2:13:18:4f:ae:37:9e:1e:cf: 58:d2:e8:8f:7a:72:0f:b3:64:ce:92:c1:5c:46:56: a1:0a:91:fc:0c:dd:00:ec:17:18:a8:25:3f:2f:3b: f4:7b:18:ab:fa:40:03:cd:f6:2a:78:fd:15:dd:52: c3:18:90:ea:61:d6:62:41:fd:e9:97:e5:6b:34:a0: fd:84:54:a3:90:23:dc:70:c6:13:50:80:6e:d8:b8: 88:0d:05:43:49:3d:a2:0b:17:f8:b9:c6:b4:49:8e: ae:81:47:2b:99:2a:e8:63:8d:11:7f:6a:1f:92:c0: 52:5a:46:cc:4a:8c:d7:81:8f:6b:c3:7f:70:21:77: 2e:48:24:f4:e4:6a:3b:1e:a6:d7:ab:12:60:86:ec: 17:6a:af:07:85:f7:30:a0:3f:79:ec:40:b9:96:42: 42:b5:05:e4:81:47:88:f2:14:ec:7a:5f:5d:21:52: 5c:f6:6b:57:dc:39:ad:ff:c5:d7:ff:40:03:36:c0: 27:86:43:d3:30:00:a5:5d:1d:ab:83:ff:df:d2:f0: 41:1c:72:e9:9e:dc:5c:4a:41:1b:a8:86:8b:0b:41: c2:22:c4:f1:9c:81:be:29:e3:30:18:ce:d0:8c:09: 24:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:4B:46:5A:F2:BA:FA:A3:6D:54:A2:B2:3C:DF:A2:1B:17:C2:90:DD X509v3 Authority Key Identifier: keyid:D4:68:8B:55:FB:8C:00:F6:AE:C2:84:E5:BC:B8:1E:22:7C:51:2D:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:be:98:b4:f2:49:fa:09:e7:43:18:62:bf:ef:3d:94:5e:0d: 8f:ec:27:16:13:27:27:f7:17:9d:72:0d:e6:c7:78:3d:21:f5: 31:29:48:d5:4c:98:f5:2c:8b:bd:6b:08:6a:6b:aa:f9:fa:ac: db:95:50:88:13:d3:1e:52:d2:28:2e:cf:4a:d7:4c:62:f8:64: e0:53:64:7a:35:9b:af:6e:e4:29:1c:df:35:99:8f:08:a2:aa: d1:18:e2:c6:ee:91:06:31:23:91:c5:ab:18:07:b8:4f:91:d2: 82:6c:6e:54:f0:f9:4d:c9:29:31:60:94:7d:78:12:33:67:7b: f6:9f:fe:e5:15:5c:49:9f:5d:22:c9:ee:38:0a:30:44:0f:82: 11:2a:d9:2b:54:f0:93:29:e8:89:8d:65:ba:01:1f:70:4d:3c: f2:f6:0b:4a:b7:9b:4a:5c:2e:67:aa:71:43:2a:d5:33:01:a1: 0f:3c:93:cf:da:4f:21:07:ce:f7:29:9c:fe:f4:46:bf:69:18: 43:20:43:95:0d:61:14:f9:42:06:c8:be:30:d4:c1:2f:be:ad: 8f:36:b5:47:6c:19:64:5e:fb:dc:d7:76:61:9e:24:c3:0b:f0: f2:61:fa:e3:9b:c6:90:7c:85:fa:44:00:8c:3a:4e:29:a2:ad: fc:33:58:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUN8Y69sRexkKCFmE5pleZa1iQpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFFMjI3 QzUxMkRFRDAeFw0yNTA2MDYxMDU2MjNaFw0yNTA2MDkxMTMzMjNaMDMxMTAvBgNV BAMTKDJCNEI0NjVBRjJCQUZBQTM2RDU0QTJCMjNDREZBMjFCMTdDMjkwREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDizFVjrD8GwjO+t9tyHSONbwmQ CcITGE+uN54ez1jS6I96cg+zZM6SwVxGVqEKkfwM3QDsFxioJT8vO/R7GKv6QAPN 9ip4/RXdUsMYkOph1mJB/emX5Ws0oP2EVKOQI9xwxhNQgG7YuIgNBUNJPaILF/i5 xrRJjq6BRyuZKuhjjRF/ah+SwFJaRsxKjNeBj2vDf3Ahdy5IJPTkajsepterEmCG 7BdqrweF9zCgP3nsQLmWQkK1BeSBR4jyFOx6X10hUlz2a1fcOa3/xdf/QAM2wCeG Q9MwAKVdHauD/9/S8EEccume3FxKQRuohosLQcIixPGcgb4p4zAYztCMCSSNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK0tGWvK6+qNtVKKyPN+iGxfCkN0wHwYDVR0j BBgwFoAU1GiLVfuMAPauwoTlvLgeInxRLe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OWMxNWI3OC0yMDcxLTQ0ZDEtOWExZC1hZDZlYjA5ZmFlMDgvMC9ENDY4OEI1NUZC OEMwMEY2QUVDMjg0RTVCQ0I4MUUyMjdDNTEyREVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFFMjI3QzUx MkRFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTljMTViNzgtMjA3MS00NGQxLTlh MWQtYWQ2ZWIwOWZhZTA4LzAvRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFF MjI3QzUxMkRFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHG+mLTySfoJ50MYYr/vPZReDY/sJxYTJyf3 F51yDebHeD0h9TEpSNVMmPUsi71rCGprqvn6rNuVUIgT0x5S0iguz0rXTGL4ZOBT ZHo1m69u5Ckc3zWZjwiiqtEY4sbukQYxI5HFqxgHuE+R0oJsblTw+U3JKTFglH14 EjNne/af/uUVXEmfXSLJ7jgKMEQPghEq2StU8JMp6ImNZboBH3BNPPL2C0q3m0pc LmeqcUMq1TMBoQ88k8/aTyEHzvcpnP70Rr9pGEMgQ5UNYRT5QgbIvjDUwS++rY82 tUdsGWRe+9zXdmGeJMML8PJh+uObxpB8hfpEAIw6TimirfwzWKU= -----END CERTIFICATE-----Generated at Sun Jun 8 01:52:09 2025 by rpki-client