$ rpki-client -vvf repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft File: CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft (raw, json) Hash identifier: YrcxUH7tCuC9SVWBlb3bzBaD5rZ7IKBbk+Zayibb07Y= Subject key identifier: EC:0A:B1:6E:6E:91:CD:64:19:6C:C7:B7:0D:8B:6B:94:51:49:2C:8B Authority key identifier: CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8 Certificate issuer: /CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8 Certificate serial: 01A7A1E25932088CD103F843492D752992D94B66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft Manifest number: D6 Signing time: Mon 30 Jun 2025 21:30:39 +0000 Manifest this update: Mon 30 Jun 2025 21:25:39 +0000 Manifest next update: Fri 04 Jul 2025 08:43:39 +0000 Files and hashes: 1: 3135372e31352e36322e302f32332d3233203d3e20313532333733.roa (hash: jXxQ64IynNf9UaROvNwdTvfTlkwJClGyFCLy03gvgpE=) 2: 3135372e31352e36332e302f32342d3234203d3e20313532333733.roa (hash: O3gcBChIby3AdjPp6ABgzZyB6Dva+5HT0HMij4bC+80=) 3: CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl (hash: gLPoR1K4fHOo9u0Z3HYQLg1xr6m7meNqEVpajztTwrc=) 4: 3135372e31352e36322e302f32342d3234203d3e20313532333733.roa (hash: lS5KueYMn8bh5TmvZ4yUXAkTqzodamQRrumfFCdScxY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 08:43:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a7:a1:e2:59:32:08:8c:d1:03:f8:43:49:2d:75:29:92:d9:4b:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8 Validity Not Before: Jun 30 21:25:39 2025 GMT Not After : Jul 4 08:43:39 2025 GMT Subject: CN=EC0AB16E6E91CD64196CC7B70D8B6B9451492C8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:31:bf:ec:2b:7f:24:52:19:16:13:f6:a6:99: d4:58:75:9b:4a:08:df:1b:0e:f0:d4:2a:dd:0a:36: 31:c2:34:d8:cb:e5:7b:11:58:ce:f0:ea:17:13:07: 90:c4:a6:da:db:47:9a:e4:f6:a9:0f:55:6b:6a:f1: 60:c4:5b:87:91:34:83:d5:fb:14:39:5e:5f:58:66: 90:90:db:a4:52:bb:23:34:0f:70:c2:1d:f2:21:7c: 2f:33:02:14:00:62:0c:b3:c2:a2:dc:8a:a4:25:28: 3d:20:b0:93:69:81:82:ad:49:15:7f:a5:80:01:bf: 05:c6:b3:23:25:fb:b5:33:51:37:13:eb:61:b0:c4: c7:fe:ac:1e:fd:b5:14:4f:48:7e:50:9e:e3:24:cf: 64:a0:ea:e2:4a:b9:b0:83:1b:bd:70:e6:95:43:4c: 5e:d6:e1:ee:97:90:c3:27:7e:59:8f:1a:2e:97:81: ba:95:2e:1a:e1:d5:48:6c:22:01:88:95:1d:3e:d0: c2:49:52:18:9a:68:49:59:a7:20:e8:d9:31:03:7c: f5:fc:54:c2:a4:8a:f1:6f:d4:b4:e4:b9:96:1e:d4: e6:32:14:b6:61:96:34:e3:7a:de:be:b8:09:64:97: 7a:46:01:c0:3e:89:11:e8:0b:50:bc:c0:d0:31:f9: ab:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:0A:B1:6E:6E:91:CD:64:19:6C:C7:B7:0D:8B:6B:94:51:49:2C:8B X509v3 Authority Key Identifier: keyid:CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:67:65:79:ee:da:16:fd:12:ea:c0:7b:6c:21:08:c7:97:70: be:6e:a0:26:17:7c:51:d3:5d:60:aa:36:f2:fb:ef:b3:23:45: c6:8a:49:ee:89:a2:be:0f:d8:8f:6e:6a:37:df:bf:13:98:03: b9:c4:fd:43:ac:ed:43:89:ce:5b:e4:9b:39:44:73:3e:aa:c8: f1:0e:f2:b7:43:e2:4a:e4:01:7a:ee:b0:22:d5:db:1d:3e:1d: e3:f7:11:cb:81:f5:9f:1f:2c:00:8c:1e:93:c9:31:ff:9c:22: 2c:83:5e:fd:01:46:81:cb:9f:2e:c8:e0:8b:cb:13:de:3e:77: ab:90:a3:b2:57:f7:35:f2:ab:b3:ee:cc:1b:1d:eb:fa:92:47: e4:76:1f:dd:ca:3c:e1:aa:7b:d0:84:30:17:49:eb:bd:7c:67: f0:07:10:25:38:0d:20:0c:a1:32:69:63:cf:10:5f:75:7b:e0: 96:4b:7c:2e:91:4a:48:b5:17:4e:5b:c4:e0:f6:f1:5e:4f:0b: 49:03:72:e7:55:10:b2:f1:70:4e:9d:de:2f:fb:23:85:d6:f0: d1:1b:42:12:fa:9c:1a:40:0d:38:9b:a5:35:62:50:91:91:6a: 47:1a:b5:92:e7:c5:fc:7b:6c:06:5f:a1:76:5c:d6:a0:00:c1: fe:d2:23:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAaeh4lkyCIzRA/hDSS11KZLZS2YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2QUJF MzlCRjhFODAeFw0yNTA2MzAyMTI1MzlaFw0yNTA3MDQwODQzMzlaMDMxMTAvBgNV BAMTKEVDMEFCMTZFNkU5MUNENjQxOTZDQzdCNzBEOEI2Qjk0NTE0OTJDOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzMb/sK38kUhkWE/ammdRYdZtK CN8bDvDUKt0KNjHCNNjL5XsRWM7w6hcTB5DEptrbR5rk9qkPVWtq8WDEW4eRNIPV +xQ5Xl9YZpCQ26RSuyM0D3DCHfIhfC8zAhQAYgyzwqLciqQlKD0gsJNpgYKtSRV/ pYABvwXGsyMl+7UzUTcT62GwxMf+rB79tRRPSH5QnuMkz2Sg6uJKubCDG71w5pVD TF7W4e6XkMMnflmPGi6XgbqVLhrh1UhsIgGIlR0+0MJJUhiaaElZpyDo2TEDfPX8 VMKkivFv1LTkuZYe1OYyFLZhljTjet6+uAlkl3pGAcA+iRHoC1C8wNAx+aslAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7Aqxbm6RzWQZbMe3DYtrlFFJLIswHwYDVR0j BBgwFoAUy1TcUm+iFPn3NpJuaqoWq+Ob+OgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTIzNGM0YS1hOGZmLTQwMzYtODQyMC1kYTgxNjIxMTE4MDYvMC9DQjU0REM1MjZG QTIxNEY5RjczNjkyNkU2QUFBMTZBQkUzOUJGOEU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2QUJFMzlC RjhFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyMzRjNGEtYThmZi00MDM2LTg0 MjAtZGE4MTYyMTExODA2LzAvQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2 QUJFMzlCRjhFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJtnZXnu2hb9EurAe2whCMeXcL5uoCYXfFHT XWCqNvL777MjRcaKSe6Jor4P2I9uajffvxOYA7nE/UOs7UOJzlvkmzlEcz6qyPEO 8rdD4krkAXrusCLV2x0+HeP3EcuB9Z8fLACMHpPJMf+cIiyDXv0BRoHLny7I4IvL E94+d6uQo7JX9zXyq7PuzBsd6/qSR+R2H93KPOGqe9CEMBdJ6718Z/AHECU4DSAM oTJpY88QX3V74JZLfC6RSki1F05bxOD28V5PC0kDcudVELLxcE6d3i/7I4XW8NEb QhL6nBpADTibpTViUJGRakcatZLnxfx7bAZfoXZc1qAAwf7SI44= -----END CERTIFICATE-----Generated at Thu Jul 3 01:11:09 2025 by rpki-client