$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft File: B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft (raw, json) Hash identifier: ctd9FZPG92qEEa8ZtW4sZlQxpDWqGPw5R95HxO09wd4= Subject key identifier: 4B:7C:16:12:54:E0:E7:EC:32:07:C9:C3:76:73:83:55:1D:6E:C0:D0 Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA Certificate serial: 03B523D5C7EC5442A51D8352F16D6B72F0082959 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft Manifest number: 05BB Signing time: Mon 30 Jun 2025 03:27:13 +0000 Manifest this update: Mon 30 Jun 2025 03:22:13 +0000 Manifest next update: Thu 03 Jul 2025 07:31:13 +0000 Files and hashes: 1: B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl (hash: b5uKdd0YcSS1xwTQTsBFFhnFKxqZgSzNXBsxKz5G4dc=) 2: AS139994.roa (hash: F7hIwzPI2Ea9gB0Xp4Xk6YhQEbDGp6jagSlzZiZywSc=) 3: AS24203.roa (hash: PiioCRun01W3USZE21jLudCAK52GzKjTWQkIrQ39VD0=) 4: AS17885.roa (hash: +GO2dMXskkTZVI0G/x5c/tJuemAtakjNsz3wmOidFEQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 07:31:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:b5:23:d5:c7:ec:54:42:a5:1d:83:52:f1:6d:6b:72:f0:08:29:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA Validity Not Before: Jun 30 03:22:13 2025 GMT Not After : Jul 3 07:31:13 2025 GMT Subject: CN=4B7C161254E0E7EC3207C9C3767383551D6EC0D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:83:6a:1f:1c:4d:0c:94:d3:91:76:cc:84:34: 66:b9:e1:08:22:3d:af:2b:6d:64:59:89:b6:bf:04: c4:45:02:da:28:67:62:87:e0:ce:51:e2:a1:48:c3: ba:9e:51:8e:b1:aa:6c:31:b1:ee:32:0e:39:a1:19: f1:19:d5:23:15:3c:69:79:2e:2c:54:ce:ca:7e:eb: 6d:08:c0:94:a9:e9:48:a9:f9:2b:ad:e9:a5:a8:9c: ce:4c:4c:62:58:1e:fa:cc:23:00:da:6b:83:d7:bb: ab:cc:49:1c:7b:d6:2e:37:04:ad:c8:69:47:71:89: bb:98:09:cf:e4:8c:3f:29:77:5e:54:8a:65:cb:7b: 3e:3c:a2:34:4e:eb:17:e9:c5:db:ef:54:7c:80:09: c7:18:19:65:3a:21:51:99:ad:33:67:f1:ce:e1:10: 8b:7e:5d:1d:65:67:6d:d6:3c:cf:61:d1:0a:83:7d: 1c:e9:d9:d4:2f:df:d4:5f:09:8a:4e:78:6a:cc:a0: 7e:00:cc:92:6a:73:ec:2c:37:ef:a8:49:f5:4c:30: 00:cd:b2:f9:41:79:12:ee:cd:b8:08:10:74:7a:c6: 4c:70:00:cb:b3:34:f7:56:68:52:f9:dc:a9:af:17: 3d:05:1e:76:82:49:68:48:23:76:bc:69:11:38:55: 12:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:7C:16:12:54:E0:E7:EC:32:07:C9:C3:76:73:83:55:1D:6E:C0:D0 X509v3 Authority Key Identifier: keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:80:75:dc:75:dc:84:61:96:ed:a6:2b:79:09:71:87:db:91: d7:6d:b1:1c:11:d1:84:9a:d8:74:ea:03:90:cd:b5:93:19:a1: 51:a1:b9:67:d2:e2:62:fc:53:6b:ea:f5:97:93:e5:9a:04:30: 59:59:55:0a:63:c1:5b:f8:ea:87:cf:54:1a:64:ef:ee:4c:9b: 49:84:11:35:69:d1:b5:e7:32:7d:2d:af:e7:da:12:e5:cf:e3: 60:1e:2e:39:db:f6:7a:41:f0:09:2e:73:e0:4f:d8:fa:f6:fc: 47:dd:f4:31:fa:0d:3a:32:62:a5:26:c2:db:15:bf:9c:0e:16: f9:bd:06:03:86:b3:74:47:a8:0a:d2:b7:a8:74:93:fa:26:8d: c2:b0:5e:26:49:5b:fd:ce:62:44:47:ea:de:02:65:c1:13:82: cc:1d:e3:8a:a0:65:20:2b:d8:39:44:2f:fd:fc:1f:63:49:22: 6a:bd:b7:22:46:59:e4:fb:33:2c:4b:84:33:48:e9:6d:b2:8f: ca:10:99:85:b3:6b:59:25:95:29:c2:16:40:4b:ab:eb:f8:ee: 9c:7d:82:8f:bf:87:6f:f2:8e:19:23:78:b5:21:e3:b0:ed:4d: 12:73:35:fd:2f:1f:e4:f0:90:04:15:41:d9:c3:04:f9:d4:35: 0d:51:97:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA7Uj1cfsVEKlHYNS8W1rcvAIKVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIw OTU2ODdEQTAeFw0yNTA2MzAwMzIyMTNaFw0yNTA3MDMwNzMxMTNaMDMxMTAvBgNV BAMTKDRCN0MxNjEyNTRFMEU3RUMzMjA3QzlDMzc2NzM4MzU1MUQ2RUMwRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCng2ofHE0MlNORdsyENGa54Qgi Pa8rbWRZiba/BMRFAtooZ2KH4M5R4qFIw7qeUY6xqmwxse4yDjmhGfEZ1SMVPGl5 LixUzsp+620IwJSp6Uip+Sut6aWonM5MTGJYHvrMIwDaa4PXu6vMSRx71i43BK3I aUdxibuYCc/kjD8pd15UimXLez48ojRO6xfpxdvvVHyACccYGWU6IVGZrTNn8c7h EIt+XR1lZ23WPM9h0QqDfRzp2dQv39RfCYpOeGrMoH4AzJJqc+wsN++oSfVMMADN svlBeRLuzbgIEHR6xkxwAMuzNPdWaFL53KmvFz0FHnaCSWhII3a8aRE4VRIxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS3wWElTg5+wyB8nDdnODVR1uwNAwHwYDVR0j BBgwFoAUtJOlzr8J4QvDXZrCIR2v0glWh9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMC9CNDkzQTVDRUJG MDlFMTBCQzM1RDlBQzIyMTFEQUZEMjA5NTY4N0RBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIwOTU2 ODdEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzAvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFG RDIwOTU2ODdEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK2Addx13IRhlu2mK3kJcYfbkddtsRwR0YSa 2HTqA5DNtZMZoVGhuWfS4mL8U2vq9ZeT5ZoEMFlZVQpjwVv46ofPVBpk7+5Mm0mE ETVp0bXnMn0tr+faEuXP42AeLjnb9npB8Akuc+BP2Pr2/Efd9DH6DToyYqUmwtsV v5wOFvm9BgOGs3RHqArSt6h0k/omjcKwXiZJW/3OYkRH6t4CZcETgswd44qgZSAr 2DlEL/38H2NJImq9tyJGWeT7MyxLhDNI6W2yj8oQmYWza1kllSnCFkBLq+v47px9 go+/h2/yjhkjeLUh47DtTRJzNf0vH+TwkAQVQdnDBPnUNQ1Rl/c= -----END CERTIFICATE-----Generated at Mon Jun 30 05:30:20 2025 by rpki-client