$ rpki-client -vvf repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft File: D84954514E2FF8171F1DC8D8C911A96481911DBB.mft (raw, json) Hash identifier: oBgGCwfGCUr+8hNkHMjUY0jQjVrrLZglaxiBw+K7lvg= Subject key identifier: F2:96:55:88:70:34:53:15:DA:8F:32:DC:EB:34:F2:EA:95:23:EA:CC Authority key identifier: D8:49:54:51:4E:2F:F8:17:1F:1D:C8:D8:C9:11:A9:64:81:91:1D:BB Certificate issuer: /CN=D84954514E2FF8171F1DC8D8C911A96481911DBB Certificate serial: 687AAE93FBC73C805E70F721C563938DB43888FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft Manifest number: 01D7 Signing time: Tue 03 Jun 2025 08:34:00 +0000 Manifest this update: Tue 03 Jun 2025 08:29:00 +0000 Manifest next update: Fri 06 Jun 2025 18:24:00 +0000 Files and hashes: 1: 3130332e3137352e38372e302f32342d3234203d3e20313437313434.roa (hash: rSj9OVlqtiPPskUUwR+sB8KTVHxG2CyA4iMG/fwGrQ8=) 2: D84954514E2FF8171F1DC8D8C911A96481911DBB.crl (hash: yTfAGGIQgTPNhPZ+AdKXM2I5YmPWs3zVcvIPNh29fjI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.crl rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:24:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:7a:ae:93:fb:c7:3c:80:5e:70:f7:21:c5:63:93:8d:b4:38:88:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D84954514E2FF8171F1DC8D8C911A96481911DBB Validity Not Before: Jun 3 08:29:00 2025 GMT Not After : Jun 6 18:24:00 2025 GMT Subject: CN=F296558870345315DA8F32DCEB34F2EA9523EACC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c0:43:95:4c:ba:66:08:66:80:f9:2c:80:5d: 08:f1:a0:f7:23:a4:79:7e:7b:b5:77:f5:43:20:58: e6:42:6d:64:1d:3f:ab:c5:69:6d:95:44:5e:ef:ca: 5e:12:fe:ce:3b:89:5c:60:69:e5:8a:54:b5:c2:a9: 3c:03:f8:a8:01:74:c3:d7:59:6e:44:33:d0:7d:93: 52:fa:f8:dd:63:b8:16:e9:df:ef:37:5f:ab:64:27: 6a:c7:da:83:98:08:bb:18:56:2c:1e:7a:d8:f0:72: e4:5e:09:a7:19:bc:57:98:8c:23:76:5c:41:00:e9: 8d:56:fe:91:8e:3c:9e:01:90:dc:6b:df:ea:a2:01: ed:66:fe:4f:4f:76:87:a9:25:4b:36:9c:9d:62:f9: 31:ba:e7:23:c3:53:2c:80:da:85:f9:30:7b:ea:45: c5:66:f3:a6:52:fa:b1:e8:69:5d:a6:38:ab:5c:df: 4b:91:ae:8c:e4:9f:1b:ff:01:bd:92:ad:f3:8d:89: c7:f1:e8:ae:65:ee:be:df:8f:cb:c7:b9:7f:4b:5e: 1a:24:d1:75:3c:f0:99:7f:34:65:3e:3b:30:1e:e2: 00:bc:52:06:80:e1:f3:0a:ba:5f:64:21:9f:de:b6: d5:e1:76:3b:a5:17:43:0e:4b:60:34:46:82:23:33: 9f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:96:55:88:70:34:53:15:DA:8F:32:DC:EB:34:F2:EA:95:23:EA:CC X509v3 Authority Key Identifier: keyid:D8:49:54:51:4E:2F:F8:17:1F:1D:C8:D8:C9:11:A9:64:81:91:1D:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:47:44:e3:28:83:51:e5:51:95:80:de:81:b9:fd:d2:6e:0b: d5:8a:97:ac:3b:35:3f:20:df:63:f3:d6:74:be:82:d0:c0:ab: b2:fd:02:92:ce:82:eb:60:44:c6:7e:66:88:c6:f5:42:da:50: a0:a0:3e:62:db:63:67:73:37:0d:f8:2b:95:c0:97:7e:25:22: 62:7f:d9:9f:0b:97:b1:79:33:fb:d4:87:39:b8:6f:0d:ea:6e: 81:9d:23:95:c2:e1:f3:64:e1:91:3a:f8:b2:a2:ca:bd:4d:75: b6:56:5a:e7:18:5b:13:f0:21:b6:09:38:39:29:3a:13:fd:5f: d2:5a:f7:31:fc:6b:7c:c1:66:04:9e:7b:96:0a:91:f6:f8:9a: b2:b0:f2:8c:85:80:1f:4e:5d:34:a3:2b:27:75:3d:ca:fc:a0: 41:0d:61:ee:70:36:b4:c6:73:69:f7:5d:ff:f9:af:14:40:e0: 84:a4:32:ff:10:a3:f6:a0:ed:68:f6:c9:aa:07:18:7c:72:a9: de:57:63:d0:94:ed:5d:38:19:c1:7f:c1:c2:ff:dd:00:37:4e: 99:e5:6a:86:b0:7a:64:3d:a2:3d:ee:5b:42:c5:91:cd:77:5f: d6:3a:96:21:f1:30:ed:b6:8c:b4:2d:c4:6b:84:f0:91:4d:b7: f9:ac:62:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaHquk/vHPIBecPchxWOTjbQ4iPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg0OTU0NTE0RTJGRjgxNzFGMURDOEQ4QzkxMUE5NjQ4 MTkxMURCQjAeFw0yNTA2MDMwODI5MDBaFw0yNTA2MDYxODI0MDBaMDMxMTAvBgNV BAMTKEYyOTY1NTg4NzAzNDUzMTVEQThGMzJEQ0VCMzRGMkVBOTUyM0VBQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4wEOVTLpmCGaA+SyAXQjxoPcj pHl+e7V39UMgWOZCbWQdP6vFaW2VRF7vyl4S/s47iVxgaeWKVLXCqTwD+KgBdMPX WW5EM9B9k1L6+N1juBbp3+83X6tkJ2rH2oOYCLsYViweetjwcuReCacZvFeYjCN2 XEEA6Y1W/pGOPJ4BkNxr3+qiAe1m/k9PdoepJUs2nJ1i+TG65yPDUyyA2oX5MHvq RcVm86ZS+rHoaV2mOKtc30uRrozknxv/Ab2SrfONicfx6K5l7r7fj8vHuX9LXhok 0XU88Jl/NGU+OzAe4gC8UgaA4fMKul9kIZ/ettXhdjulF0MOS2A0RoIjM5/fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8pZViHA0UxXajzLc6zTy6pUj6swwHwYDVR0j BBgwFoAU2ElUUU4v+BcfHcjYyRGpZIGRHbswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWI4NDU5YS1lMzUxLTRjOGQtYmMyOS01ZmQwOGM0YzU5NDEvMC9EODQ5NTQ1MTRF MkZGODE3MUYxREM4RDhDOTExQTk2NDgxOTExREJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDg0OTU0NTE0RTJGRjgxNzFGMURDOEQ4QzkxMUE5NjQ4MTkx MURCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjViODQ1OWEtZTM1MS00YzhkLWJj MjktNWZkMDhjNGM1OTQxLzAvRDg0OTU0NTE0RTJGRjgxNzFGMURDOEQ4QzkxMUE5 NjQ4MTkxMURCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG9HROMog1HlUZWA3oG5/dJuC9WKl6w7NT8g 32Pz1nS+gtDAq7L9ApLOgutgRMZ+ZojG9ULaUKCgPmLbY2dzNw34K5XAl34lImJ/ 2Z8Ll7F5M/vUhzm4bw3qboGdI5XC4fNk4ZE6+LKiyr1NdbZWWucYWxPwIbYJODkp OhP9X9Ja9zH8a3zBZgSee5YKkfb4mrKw8oyFgB9OXTSjKyd1Pcr8oEENYe5wNrTG c2n3Xf/5rxRA4ISkMv8Qo/ag7Wj2yaoHGHxyqd5XY9CU7V04GcF/wcL/3QA3Tpnl aoawemQ9oj3uW0LFkc13X9Y6liHxMO22jLQtxGuE8JFNt/msYvY= -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:55 2025 by rpki-client