$ rpki-client -vvf repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft File: 94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft (raw, json) Hash identifier: YzJu30sGGh4d9OuL3wNSwWIVs6JQAG6DdgHPeZ1Nn74= Subject key identifier: F1:A2:61:1B:9B:75:97:D3:D6:E0:13:02:4B:1C:00:5B:E5:CF:63:6E Authority key identifier: 94:ED:A4:B2:36:0B:47:DC:65:38:6E:3E:7E:BA:E3:5B:99:7F:2A:42 Certificate issuer: /CN=94EDA4B2360B47DC65386E3E7EBAE35B997F2A42 Certificate serial: 7B621234CA46AC642FAF5125C14FD8B429A5E260 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft Manifest number: 04E3 Signing time: Fri 27 Jun 2025 17:20:49 +0000 Manifest this update: Fri 27 Jun 2025 17:15:49 +0000 Manifest next update: Tue 01 Jul 2025 00:35:49 +0000 Files and hashes: 1: 94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.crl (hash: iIH4RuTPvVWSjdlOnV/Cu4cng0TXIkPLF6uj6McyNCg=) 2: 3130332e3134342e3235302e302f32332d3234203d3e20313339343335.roa (hash: JjtMSSCssV5HqQAouXYm4WHr16DMfc7UE3Z2A9weGck=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.crl rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 00:35:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:62:12:34:ca:46:ac:64:2f:af:51:25:c1:4f:d8:b4:29:a5:e2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94EDA4B2360B47DC65386E3E7EBAE35B997F2A42 Validity Not Before: Jun 27 17:15:49 2025 GMT Not After : Jul 1 00:35:49 2025 GMT Subject: CN=F1A2611B9B7597D3D6E013024B1C005BE5CF636E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bf:49:d1:ea:3c:28:1a:70:6e:d8:47:3b:27: 1d:13:3f:95:21:c5:07:58:21:ef:53:02:db:6d:fe: 28:99:39:ad:bd:e5:c5:b6:69:27:ff:62:ee:ca:4d: a5:4d:0d:4a:d6:15:77:69:56:1f:8c:af:e0:77:53: 03:75:b7:f1:2f:02:a8:a5:0d:8a:40:bf:03:92:df: fd:4b:28:05:08:8d:4e:83:ce:18:57:db:b0:55:69: d5:97:45:22:b8:f9:b3:aa:cb:e9:a1:05:96:62:6e: d4:ed:a9:e0:bf:22:b9:f0:ce:07:26:1d:23:72:c3: 3e:06:8d:6c:27:e4:a9:5a:e5:53:ae:a5:f0:2c:cf: 69:ee:41:d0:ee:32:fd:ff:87:ed:3a:0e:f0:9a:9a: f6:d9:67:20:61:d8:9b:8d:db:48:a5:a0:13:bc:5f: b9:75:14:e9:c5:4c:ba:d3:57:d9:8e:64:2c:f8:a8: aa:f6:ee:b1:d5:e8:d5:7b:6a:f5:fd:9e:f4:bd:ef: ef:8b:7a:89:af:7e:b4:6b:7a:18:b1:70:01:b8:d8: 69:b1:57:51:9c:6f:d9:ea:d3:b6:03:30:7d:ed:f9: 70:57:98:db:f6:45:3f:0d:c9:08:54:f5:aa:26:4c: 96:b2:67:1a:db:91:f5:20:9d:3e:80:1e:05:0d:16: 9a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A2:61:1B:9B:75:97:D3:D6:E0:13:02:4B:1C:00:5B:E5:CF:63:6E X509v3 Authority Key Identifier: keyid:94:ED:A4:B2:36:0B:47:DC:65:38:6E:3E:7E:BA:E3:5B:99:7F:2A:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:34:23:b9:0e:9f:84:82:c1:80:43:da:0e:92:69:33:dc:4e: 6e:67:99:74:dd:d7:f1:40:20:52:b5:5a:7d:e9:c9:03:85:4e: a1:92:9e:38:bb:3d:67:b0:7c:8c:72:98:d1:4c:f4:4e:9b:8f: b5:cf:87:6e:fb:d1:9b:ef:c3:d0:db:7a:a6:24:e3:89:5e:31: 6b:4b:06:2e:4d:35:cc:87:5a:be:24:fc:38:7b:33:a5:c5:6f: 80:70:0d:2a:4f:af:1a:02:f6:f5:90:38:13:88:d3:9b:f0:50: a5:8f:11:c3:b1:db:c3:01:6b:85:ce:98:30:04:cd:ac:9e:20: e3:c7:ca:b6:fa:cd:14:0c:13:4d:8d:2d:18:4c:51:e0:93:74: 23:d3:71:7a:f2:41:81:d8:75:43:48:2b:d4:7f:14:50:d7:47: e1:8d:d6:b1:b0:32:86:ef:e6:5c:81:f9:b1:e4:1a:2e:5a:83: 0f:0c:b7:17:fd:9e:cb:ef:ba:b2:cf:11:76:f7:97:43:81:03: 3e:7a:ae:47:f5:15:a4:b8:32:a5:43:ee:2f:af:7d:37:79:3a: 3f:91:68:08:7f:9b:bd:56:12:c0:e2:bf:18:94:3f:10:6a:91: 5a:40:e5:5d:cd:3c:6f:02:3e:ed:bc:f4:75:33:4b:fe:b6:01: 2e:28:d6:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe2ISNMpGrGQvr1ElwU/YtCml4mAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRFREE0QjIzNjBCNDdEQzY1Mzg2RTNFN0VCQUUzNUI5 OTdGMkE0MjAeFw0yNTA2MjcxNzE1NDlaFw0yNTA3MDEwMDM1NDlaMDMxMTAvBgNV BAMTKEYxQTI2MTFCOUI3NTk3RDNENkUwMTMwMjRCMUMwMDVCRTVDRjYzNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClv0nR6jwoGnBu2Ec7Jx0TP5Uh xQdYIe9TAttt/iiZOa295cW2aSf/Yu7KTaVNDUrWFXdpVh+Mr+B3UwN1t/EvAqil DYpAvwOS3/1LKAUIjU6DzhhX27BVadWXRSK4+bOqy+mhBZZibtTtqeC/Irnwzgcm HSNywz4GjWwn5Kla5VOupfAsz2nuQdDuMv3/h+06DvCamvbZZyBh2JuN20iloBO8 X7l1FOnFTLrTV9mOZCz4qKr27rHV6NV7avX9nvS97++LeomvfrRrehixcAG42Gmx V1Gcb9nq07YDMH3t+XBXmNv2RT8NyQhU9aomTJayZxrbkfUgnT6AHgUNFpr5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8aJhG5t1l9PW4BMCSxwAW+XPY24wHwYDVR0j BBgwFoAUlO2ksjYLR9xlOG4+frrjW5l/KkIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NWJmNzE4ZC05MTFlLTQzZDYtOGUzYy0wZDFiMzY0NmUyNzYvMC85NEVEQTRCMjM2 MEI0N0RDNjUzODZFM0U3RUJBRTM1Qjk5N0YyQTQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTRFREE0QjIzNjBCNDdEQzY1Mzg2RTNFN0VCQUUzNUI5OTdG MkE0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTViZjcxOGQtOTExZS00M2Q2LThl M2MtMGQxYjM2NDZlMjc2LzAvOTRFREE0QjIzNjBCNDdEQzY1Mzg2RTNFN0VCQUUz NUI5OTdGMkE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD40I7kOn4SCwYBD2g6SaTPcTm5nmXTd1/FA IFK1Wn3pyQOFTqGSnji7PWewfIxymNFM9E6bj7XPh2770Zvvw9DbeqYk44leMWtL Bi5NNcyHWr4k/Dh7M6XFb4BwDSpPrxoC9vWQOBOI05vwUKWPEcOx28MBa4XOmDAE zayeIOPHyrb6zRQME02NLRhMUeCTdCPTcXryQYHYdUNIK9R/FFDXR+GN1rGwMobv 5lyB+bHkGi5agw8Mtxf9nsvvurLPEXb3l0OBAz56rkf1FaS4MqVD7i+vfTd5Oj+R aAh/m71WEsDivxiUPxBqkVpA5V3NPG8CPu289HUzS/62AS4o1iw= -----END CERTIFICATE-----Generated at Sun Jun 29 23:19:34 2025 by rpki-client