$ rpki-client -vvf repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft File: B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft (raw, json) Hash identifier: MgxLWBEIaU8dioVH2fzMxmWuGEBvTjQzj7ZLbswWD4c= Subject key identifier: 30:A1:BC:E1:69:3D:EC:17:E7:20:83:B8:5C:D3:30:D8:BF:89:01:F4 Authority key identifier: B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E Certificate issuer: /CN=B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E Certificate serial: 707A2CD09D7B28491CDC2574406374A2D132DAE2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft Manifest number: 04DA Signing time: Wed 04 Jun 2025 11:10:43 +0000 Manifest this update: Wed 04 Jun 2025 11:05:43 +0000 Manifest next update: Sat 07 Jun 2025 19:30:43 +0000 Files and hashes: 1: 34332e3234322e3133322e302f32342d3234203d3e203538343736.roa (hash: ut8mKe181e+GL8gZVd8D9lpxfAhurYa657vG8sPaVZU=) 2: 3130332e37322e3131302e302f32342d3234203d3e203538343736.roa (hash: voekDMYuoDNmVswZr7/xsWsJnvx7lZSdUg+Aq+ToSP0=) 3: 3130332e37322e3131312e302f32342d3234203d3e203538343736.roa (hash: lw8CjbCa9nau6CgaK9qo3W7fJOYahpzK8W9j4IBI5bo=) 4: B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl (hash: UP6S0Hvbk1bhsxd3yfBBULHJ2+V7gIYYH1N8pGvuNgE=) 5: 3130332e32382e3130372e302f32342d3234203d3e203538343736.roa (hash: 1UalLxKn41/lSLgzHwYn+86cGRYM0p3PY4M21eZtrAo=) 6: 34332e3234322e3133332e302f32342d3234203d3e203538343736.roa (hash: 2NAEElgvlB7IhQMwd1Atvpj3R7riVOfOU9AzMjYnGF0=) 7: 3130332e32382e3130362e302f32342d3234203d3e203538343736.roa (hash: 3CwSzY5tw6Zm4h624sLhttPd8ZN8CiHTGKhVehN+hWE=) 8: 323030313a6466303a3236663a3a2f34382d3438203d3e203538343736.roa (hash: 19ABnycRhti98EG6MJ/6S6W4a31omV6sktXNN7fCeRE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 19:30:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:7a:2c:d0:9d:7b:28:49:1c:dc:25:74:40:63:74:a2:d1:32:da:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E Validity Not Before: Jun 4 11:05:43 2025 GMT Not After : Jun 7 19:30:43 2025 GMT Subject: CN=30A1BCE1693DEC17E72083B85CD330D8BF8901F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:02:9e:9e:bc:50:da:97:5d:13:55:b5:11:7a: 5d:7d:54:f2:3b:9a:24:ab:48:68:d5:ce:7b:11:04: 8f:80:7b:0b:8a:d3:21:44:6f:a7:90:09:b3:8e:9d: 5a:92:41:52:37:24:11:6a:fe:4a:36:eb:b6:82:19: 03:f9:bd:aa:4d:15:20:f8:86:ed:ef:03:97:65:6e: 96:f2:e7:c4:6c:b7:22:2f:36:7d:20:51:62:13:1c: ab:32:47:31:22:26:52:3e:63:c6:7a:48:52:37:0e: 55:9a:2f:52:f0:8d:57:23:ec:bb:6c:3b:33:22:26: f7:3d:6b:79:00:a3:15:44:0b:7e:93:76:55:5b:f3: 2c:a9:00:ca:05:9c:1d:0a:d2:4f:d1:5b:a9:9b:ab: b5:5b:cd:d0:05:b4:7d:21:86:aa:58:1c:79:2a:8f: 73:b6:72:56:7a:52:77:ca:cc:a9:7f:d4:10:cd:b7: 5d:42:a7:03:df:8c:0c:60:eb:cc:b7:32:b8:7c:42: 7a:36:2b:0c:ac:ff:cd:79:59:83:31:12:02:e8:0e: 9f:67:7a:13:12:91:fa:da:0b:df:ab:a7:e0:1c:77: 0c:f8:28:5d:af:9f:be:c3:65:04:38:42:04:b9:b0: 95:34:2c:82:55:e3:68:d3:de:d4:d2:70:18:10:f4: 7d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A1:BC:E1:69:3D:EC:17:E7:20:83:B8:5C:D3:30:D8:BF:89:01:F4 X509v3 Authority Key Identifier: keyid:B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:0f:bd:65:85:ff:68:a8:90:91:44:87:5f:90:c5:fe:43:d6: 66:55:aa:e2:cd:50:6d:da:7f:52:3f:c5:e1:96:70:b0:03:22: 55:6b:33:05:a7:d7:b5:5c:a9:1c:0c:1f:83:c3:21:81:16:52: 5d:4a:cf:ed:72:4b:7b:8f:16:1a:2b:30:bf:a0:90:d7:c7:42: aa:7e:4a:25:ab:23:99:5d:b5:cf:96:3f:df:af:c3:1a:9d:25: ce:10:e1:78:24:1b:a1:63:e1:36:a3:cf:2b:49:fc:4a:61:81: 82:4a:32:bc:5a:72:47:7b:d9:64:4f:34:23:72:a8:97:d1:97: 7e:3e:07:c0:df:0c:81:3a:c6:3b:01:3f:fe:35:49:87:f5:52: 37:f3:52:63:30:1d:e6:08:8f:c5:22:cd:ac:e6:87:47:f9:95: 63:5c:2e:58:e5:1e:fd:28:df:cf:44:6c:63:ad:b9:45:b1:cc: fa:16:2a:e7:19:b7:f2:78:c9:a3:e5:12:97:66:0f:b2:b8:f8: f6:6a:58:a9:dc:ee:60:ab:f2:d2:4d:aa:d5:fe:fb:48:b3:23: 28:7e:7d:21:bb:cc:63:2e:72:eb:5e:aa:ca:b4:dc:23:cc:df: e8:1c:76:44:89:f4:74:9b:04:33:c8:1c:ce:20:90:d9:71:cb: 9e:cc:b1:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcHos0J17KEkc3CV0QGN0otEy2uIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdCM0VD NTAzRUYzRTAeFw0yNTA2MDQxMTA1NDNaFw0yNTA2MDcxOTMwNDNaMDMxMTAvBgNV BAMTKDMwQTFCQ0UxNjkzREVDMTdFNzIwODNCODVDRDMzMEQ4QkY4OTAxRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBAp6evFDal10TVbURel19VPI7 miSrSGjVznsRBI+AewuK0yFEb6eQCbOOnVqSQVI3JBFq/ko267aCGQP5vapNFSD4 hu3vA5dlbpby58RstyIvNn0gUWITHKsyRzEiJlI+Y8Z6SFI3DlWaL1LwjVcj7Lts OzMiJvc9a3kAoxVEC36TdlVb8yypAMoFnB0K0k/RW6mbq7VbzdAFtH0hhqpYHHkq j3O2clZ6UnfKzKl/1BDNt11CpwPfjAxg68y3Mrh8Qno2Kwys/815WYMxEgLoDp9n ehMSkfraC9+rp+Acdwz4KF2vn77DZQQ4QgS5sJU0LIJV42jT3tTScBgQ9H0vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMKG84Wk97BfnIIO4XNMw2L+JAfQwHwYDVR0j BBgwFoAUsUTk6yj2nZt2wMJJm/17PsUD7z4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m N2Y0OTA2OC1jMGNhLTRhMjEtOWE4YS1lZWQyNmZjZGQxYWEvMC9CMTQ0RTRFQjI4 RjY5RDlCNzZDMEMyNDk5QkZEN0IzRUM1MDNFRjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdCM0VDNTAz RUYzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjdmNDkwNjgtYzBjYS00YTIxLTlh OGEtZWVkMjZmY2RkMWFhLzAvQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdC M0VDNTAzRUYzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAEPvWWF/2iokJFEh1+Qxf5D1mZVquLNUG3a f1I/xeGWcLADIlVrMwWn17VcqRwMH4PDIYEWUl1Kz+1yS3uPFhorML+gkNfHQqp+ SiWrI5ldtc+WP9+vwxqdJc4Q4XgkG6Fj4TajzytJ/EphgYJKMrxackd72WRPNCNy qJfRl34+B8DfDIE6xjsBP/41SYf1UjfzUmMwHeYIj8Uizazmh0f5lWNcLljlHv0o 389EbGOtuUWxzPoWKucZt/J4yaPlEpdmD7K4+PZqWKnc7mCr8tJNqtX++0izIyh+ fSG7zGMucuteqsq03CPM3+gcdkSJ9HSbBDPIHM4gkNlxy57MsVI= -----END CERTIFICATE-----Generated at Thu Jun 5 18:14:20 2025 by rpki-client