$ rpki-client -vvf repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft File: B1F0A7585ED1882783C6AF802B826607ABB92671.mft (raw, json) Hash identifier: LVX+IMXqL9LSeZ7CGPSGjpxLTS5DLeTt1yhoaH6MXEw= Subject key identifier: DD:4C:8B:CE:5A:D1:82:91:39:1D:F2:55:67:09:A0:33:F4:20:7A:0C Authority key identifier: B1:F0:A7:58:5E:D1:88:27:83:C6:AF:80:2B:82:66:07:AB:B9:26:71 Certificate issuer: /CN=B1F0A7585ED1882783C6AF802B826607ABB92671 Certificate serial: 63A9F3CBDC2C4535564EAA768AAFC58488A1889A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft Manifest number: 6B Signing time: Thu 08 May 2025 16:52:20 +0000 Manifest this update: Thu 08 May 2025 16:47:20 +0000 Manifest next update: Sun 11 May 2025 19:07:20 +0000 Files and hashes: 1: 3136302e3138372e33362e302f32342d3234203d3e20313533333237.roa (hash: VqrWW5xSvGuewi8vAHFbQ7GGTuJaYVxqsL6i06spXCU=) 2: B1F0A7585ED1882783C6AF802B826607ABB92671.crl (hash: uzPUoVY78S54dmO65sq4IycUvf+gM7E1Re8FfJSazT4=) 3: 3136302e3138372e33372e302f32342d3234203d3e20313533333237.roa (hash: 2s2hT2RFc51pEXZc8X5XI589aylunZVhY45QaHon1Ao=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.crl rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 19:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:a9:f3:cb:dc:2c:45:35:56:4e:aa:76:8a:af:c5:84:88:a1:88:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1F0A7585ED1882783C6AF802B826607ABB92671 Validity Not Before: May 8 16:47:20 2025 GMT Not After : May 11 19:07:20 2025 GMT Subject: CN=DD4C8BCE5AD18291391DF2556709A033F4207A0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:23:ac:80:1d:2b:3e:53:3e:bf:15:1e:1c:53: 61:c6:fd:18:6e:1e:f5:88:09:17:8b:5a:c8:50:53: 10:a1:1b:b9:81:53:3c:5b:06:8e:dc:7d:9e:73:ae: c9:a1:52:ec:4a:44:7d:90:00:15:bc:32:c6:18:74: 1c:a2:a9:02:27:46:d4:63:5f:d2:c5:2f:bf:a4:f0: 8f:ec:7b:64:be:c5:bc:fa:09:40:95:fb:1a:28:9b: 9e:c8:03:f9:dc:04:26:80:a1:4f:b8:a0:64:b5:a9: 2d:de:91:1a:42:54:da:8f:1d:da:dc:5c:d6:28:9d: 3d:5a:6e:0f:b3:d1:8e:ea:bb:f8:01:f5:9e:36:cc: 2b:aa:d1:ff:ae:ea:59:97:64:a7:3c:e4:e2:a9:b9: 2e:d0:65:52:ca:52:ac:51:9b:98:8c:d1:df:50:83: a0:c2:ac:9d:ac:dd:d3:48:50:91:10:33:bb:00:00: ce:12:d3:82:23:61:a2:c8:b1:85:05:d1:1f:5a:08: b1:97:7e:57:7f:2c:2e:49:fa:09:87:ae:b3:18:1a: 4c:49:99:60:3f:ab:5a:dc:41:07:8f:1c:df:36:55: 5c:f8:4d:bf:e1:78:d8:8a:d4:e5:6b:05:ed:e6:90: 82:eb:58:85:b3:97:14:d4:3e:d9:01:2f:75:77:35: af:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:4C:8B:CE:5A:D1:82:91:39:1D:F2:55:67:09:A0:33:F4:20:7A:0C X509v3 Authority Key Identifier: keyid:B1:F0:A7:58:5E:D1:88:27:83:C6:AF:80:2B:82:66:07:AB:B9:26:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:3d:9f:dc:ba:f0:5d:8f:0f:7f:18:36:59:0e:a0:9f:cd:d2: 61:a2:c3:36:69:db:88:37:a8:f2:4b:d4:9f:08:5f:f0:8b:6b: d3:ef:8d:85:99:10:04:36:1c:27:36:5d:cc:02:bb:a5:f2:e4: ab:8c:47:05:e1:64:1d:e3:91:fc:5d:e8:e4:a0:fb:b6:d1:5b: 27:a9:14:93:21:47:d1:77:92:5b:95:15:95:26:23:8d:00:d7: a5:ed:30:60:63:e6:18:9f:6e:a6:f1:28:9f:22:f9:26:f4:3f: 4e:dc:72:d6:8f:a1:a9:75:07:ba:40:31:0d:04:4f:0a:86:dd: 40:4d:96:00:8f:dd:b8:ca:0d:93:3c:a3:69:93:81:47:8b:0c: ca:03:89:6e:b8:66:6a:18:96:0b:cf:82:9d:bb:be:5a:fb:a9: 78:7f:ad:8a:d5:03:e8:ca:56:c9:68:da:f1:8c:28:71:48:4c: 0e:c2:70:31:fe:25:3c:91:3c:69:77:f2:7a:09:35:2b:7a:ab: 70:ab:98:3e:0b:73:36:3d:b5:89:c8:c4:09:22:fb:60:a7:b8: ff:d9:4d:05:56:44:1c:57:07:49:a0:e2:56:1e:a6:57:5d:d0: 2a:64:ce:43:df:79:a2:ec:b9:9a:48:d8:ca:6e:d0:f0:29:ae: a7:5d:f4:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY6nzy9wsRTVWTqp2iq/FhIihiJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2MDdB QkI5MjY3MTAeFw0yNTA1MDgxNjQ3MjBaFw0yNTA1MTExOTA3MjBaMDMxMTAvBgNV BAMTKERENEM4QkNFNUFEMTgyOTEzOTFERjI1NTY3MDlBMDMzRjQyMDdBMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkI6yAHSs+Uz6/FR4cU2HG/Rhu HvWICReLWshQUxChG7mBUzxbBo7cfZ5zrsmhUuxKRH2QABW8MsYYdByiqQInRtRj X9LFL7+k8I/se2S+xbz6CUCV+xoom57IA/ncBCaAoU+4oGS1qS3ekRpCVNqPHdrc XNYonT1abg+z0Y7qu/gB9Z42zCuq0f+u6lmXZKc85OKpuS7QZVLKUqxRm5iM0d9Q g6DCrJ2s3dNIUJEQM7sAAM4S04IjYaLIsYUF0R9aCLGXfld/LC5J+gmHrrMYGkxJ mWA/q1rcQQePHN82VVz4Tb/heNiK1OVrBe3mkILrWIWzlxTUPtkBL3V3Na/vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3UyLzlrRgpE5HfJVZwmgM/QgegwwHwYDVR0j BBgwFoAUsfCnWF7RiCeDxq+AK4JmB6u5JnEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODkxMzg5My01ZjY0LTRhNWUtYThkMi01ZDUxZWJkZTQ3M2YvMC9CMUYwQTc1ODVF RDE4ODI3ODNDNkFGODAyQjgyNjYwN0FCQjkyNjcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2MDdBQkI5 MjY3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzg5MTM4OTMtNWY2NC00YTVlLWE4 ZDItNWQ1MWViZGU0NzNmLzAvQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2 MDdBQkI5MjY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKM9n9y68F2PD38YNlkOoJ/N0mGiwzZp24g3 qPJL1J8IX/CLa9PvjYWZEAQ2HCc2XcwCu6Xy5KuMRwXhZB3jkfxd6OSg+7bRWyep FJMhR9F3kluVFZUmI40A16XtMGBj5hifbqbxKJ8i+Sb0P07cctaPoal1B7pAMQ0E TwqG3UBNlgCP3bjKDZM8o2mTgUeLDMoDiW64ZmoYlgvPgp27vlr7qXh/rYrVA+jK Vslo2vGMKHFITA7CcDH+JTyRPGl38noJNSt6q3CrmD4LczY9tYnIxAki+2CnuP/Z TQVWRBxXB0mg4lYepldd0CpkzkPfeaLsuZpI2Mpu0PAprqdd9EY= -----END CERTIFICATE-----Generated at Thu May 8 20:44:27 2025 by rpki-client