$ rpki-client -vvf repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft File: B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft (raw, json) Hash identifier: nIAQSaeSd9hDBdAzKk0rQeQq6o6fXRCeOvFKUva/928= Subject key identifier: A5:44:89:2B:CE:B4:99:CE:C1:70:88:B5:56:ED:5A:6A:6D:13:D8:E6 Authority key identifier: B5:CE:42:E3:87:51:41:D1:0E:D7:AD:1D:D1:8D:ED:DC:C4:E1:07:1E Certificate issuer: /CN=B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E Certificate serial: 11D05A37466CC7B40EC93785EBC1849E0C1F635D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft Manifest number: 04E8 Signing time: Sat 28 Jun 2025 16:32:06 +0000 Manifest this update: Sat 28 Jun 2025 16:27:06 +0000 Manifest next update: Wed 02 Jul 2025 04:04:06 +0000 Files and hashes: 1: B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl (hash: 1EhqilO/BVcTv5zEQLRFZj9GrD4ZDmQo+cYPkRY3B+A=) 2: 3130332e38372e3230312e302f32342d3234203d3e203538333639.roa (hash: +T3Pt96JdYaCjZwslFQEnLh95PR6Wr1CkWYzNuxLhQk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 04:04:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:d0:5a:37:46:6c:c7:b4:0e:c9:37:85:eb:c1:84:9e:0c:1f:63:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E Validity Not Before: Jun 28 16:27:06 2025 GMT Not After : Jul 2 04:04:06 2025 GMT Subject: CN=A544892BCEB499CEC17088B556ED5A6A6D13D8E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4a:ed:58:e8:a8:72:10:8f:1e:d9:84:56:60: 85:2b:16:8c:00:73:c1:6b:0f:c7:39:26:53:44:d2: e0:11:51:8e:50:1a:f9:3f:a9:cc:8c:bc:32:cd:19: 21:e2:6c:b8:51:ac:e5:30:f3:e8:b6:aa:42:24:19: bc:db:07:76:5c:74:fa:83:24:46:84:ab:b2:89:05: 63:a5:c1:48:0b:ef:e3:d3:78:ee:81:93:4f:38:4a: d8:68:cb:e9:c6:26:56:47:47:ad:71:1e:c1:1e:80: 2f:75:7c:a3:1e:3f:48:01:a8:ed:a2:d0:50:0a:69: 3f:7c:3d:e0:1e:ed:52:5d:d7:04:32:14:b1:5b:a1: 38:ff:dc:fa:31:e9:4a:11:a7:ab:4b:14:fc:b9:0c: 49:e6:d9:b3:53:e7:15:ac:94:3c:26:a1:18:97:35: 13:4f:d7:04:e3:50:00:53:a8:be:47:6f:90:79:5d: c9:e3:5d:9c:7b:32:6f:7d:9e:ea:55:d5:b0:c5:c3: a2:29:ed:f7:a9:de:04:3a:98:24:e4:57:37:49:d4: 04:ed:11:c5:fe:68:4f:bd:24:87:33:bd:ed:98:19: 15:b5:2f:df:27:15:5e:f0:01:a3:c4:37:c7:bd:a2: c1:95:7b:78:2e:ba:c4:2b:e7:c1:a8:2e:1c:4d:a2: 87:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:44:89:2B:CE:B4:99:CE:C1:70:88:B5:56:ED:5A:6A:6D:13:D8:E6 X509v3 Authority Key Identifier: keyid:B5:CE:42:E3:87:51:41:D1:0E:D7:AD:1D:D1:8D:ED:DC:C4:E1:07:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:53:f5:a9:b4:4f:72:d4:7f:d8:49:de:a5:b9:1e:10:08:1e: eb:10:5e:8c:45:97:e2:5a:45:10:03:19:fd:9d:7a:17:00:cf: e3:1c:dd:71:99:d7:67:24:12:f9:13:fc:d0:c6:3f:59:71:c3: 92:aa:cf:a2:bb:85:93:ea:ba:f9:58:7e:49:4f:5c:49:ad:a0: 98:19:45:92:17:27:f2:3c:66:fe:2a:ea:61:7a:2d:eb:d2:49: 47:2c:ed:93:b0:69:e4:1e:21:c5:7a:f6:3a:50:ff:dd:8f:79: 90:6d:f8:92:93:a3:89:3d:89:04:45:79:03:9a:df:a4:9b:b4: a4:be:3d:ea:2a:9c:af:9e:58:6b:32:a5:56:ee:95:1b:b8:93: 48:fd:8e:1c:5c:79:dd:a4:2d:fe:2a:37:f6:73:93:50:c4:fe: 73:bd:a8:f9:78:78:c1:3e:0d:f9:fc:31:4d:18:64:e4:9c:88: 04:fb:7f:de:0d:7b:00:81:05:c9:66:4d:63:0d:7f:f2:ac:a2: 75:c6:71:12:4e:15:2b:50:36:ef:ee:74:08:ca:03:0a:7f:f7: e1:c0:b8:6a:af:8a:20:48:3b:ea:8f:0e:c2:1f:b8:e4:2c:d6: 26:44:9c:7c:f1:40:3e:fd:4d:14:42:9d:ed:d7:08:7c:1c:44: 6a:43:90:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEdBaN0Zsx7QOyTeF68GEngwfY10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVDRTQyRTM4NzUxNDFEMTBFRDdBRDFERDE4REVEREND NEUxMDcxRTAeFw0yNTA2MjgxNjI3MDZaFw0yNTA3MDIwNDA0MDZaMDMxMTAvBgNV BAMTKEE1NDQ4OTJCQ0VCNDk5Q0VDMTcwODhCNTU2RUQ1QTZBNkQxM0Q4RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTSu1Y6KhyEI8e2YRWYIUrFowA c8FrD8c5JlNE0uARUY5QGvk/qcyMvDLNGSHibLhRrOUw8+i2qkIkGbzbB3ZcdPqD JEaEq7KJBWOlwUgL7+PTeO6Bk084Sthoy+nGJlZHR61xHsEegC91fKMeP0gBqO2i 0FAKaT98PeAe7VJd1wQyFLFboTj/3Pox6UoRp6tLFPy5DEnm2bNT5xWslDwmoRiX NRNP1wTjUABTqL5Hb5B5XcnjXZx7Mm99nupV1bDFw6Ip7fep3gQ6mCTkVzdJ1ATt EcX+aE+9JIczve2YGRW1L98nFV7wAaPEN8e9osGVe3guusQr58GoLhxNoofdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpUSJK860mc7BcIi1Vu1aam0T2OYwHwYDVR0j BBgwFoAUtc5C44dRQdEO160d0Y3t3MThBx4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NGFjYzBkOC1iMGM0LTQ3MzctOWY0NC0yOWZmMzI0MWM3OWIvMC9CNUNFNDJFMzg3 NTE0MUQxMEVEN0FEMUREMThERUREQ0M0RTEwNzFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjVDRTQyRTM4NzUxNDFEMTBFRDdBRDFERDE4REVERENDNEUx MDcxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzRhY2MwZDgtYjBjNC00NzM3LTlm NDQtMjlmZjMyNDFjNzliLzAvQjVDRTQyRTM4NzUxNDFEMTBFRDdBRDFERDE4REVE RENDNEUxMDcxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFxT9am0T3LUf9hJ3qW5HhAIHusQXoxFl+Ja RRADGf2dehcAz+Mc3XGZ12ckEvkT/NDGP1lxw5Kqz6K7hZPquvlYfklPXEmtoJgZ RZIXJ/I8Zv4q6mF6LevSSUcs7ZOwaeQeIcV69jpQ/92PeZBt+JKTo4k9iQRFeQOa 36SbtKS+PeoqnK+eWGsypVbulRu4k0j9jhxced2kLf4qN/Zzk1DE/nO9qPl4eME+ Dfn8MU0YZOSciAT7f94NewCBBclmTWMNf/KsonXGcRJOFStQNu/udAjKAwp/9+HA uGqviiBIO+qPDsIfuOQs1iZEnHzxQD79TRRCne3XCHwcRGpDkLI= -----END CERTIFICATE-----Generated at Sun Jun 29 19:37:23 2025 by rpki-client