$ rpki-client -vvf repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft File: 94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft (raw, json) Hash identifier: g3rSbLGmFXLO3Hy09qwyF+qGEvJ3h1csJi63ddSS2Mk= Subject key identifier: BE:16:76:F8:3E:BD:C4:ED:04:1D:D2:83:7F:AF:8D:ED:F4:CE:74:3D Authority key identifier: 94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83 Certificate issuer: /CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383 Certificate serial: 09A9D4FD09EA921860178A418E9AEDF37401435A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft Manifest number: 045C Signing time: Sat 28 Jun 2025 10:00:46 +0000 Manifest this update: Sat 28 Jun 2025 09:55:46 +0000 Manifest next update: Tue 01 Jul 2025 15:22:46 +0000 Files and hashes: 1: 323430363a356463303a3a2f33322d3332203d3e20313336313231.roa (hash: Bkimq3Y+FDCpoXrJVzQHrak+YkAyXPLShZBbOm7jcf0=) 2: 3130332e3135342e3233312e302f32342d3234203d3e20313336313231.roa (hash: aKnOKOXrf8WDLTz9lOnMLQ3rz67XYoyw6eEFmfbGG64=) 3: 3130332e3135342e3233302e302f32342d3234203d3e20313336313231.roa (hash: vn/jzJM/u7azecE9ydE9MylwAQT3zN9oIJjnMwqLrw4=) 4: 94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl (hash: rUHakCSDV069EZiLX3Y3Tf185f2u0Fv4YnzJHfXnZ60=) 5: 3130332e3135342e3233302e302f32332d3233203d3e20313336313231.roa (hash: 8Q6Ja4+FBCMVjxp75iktXQMgyvElquVgRng+jWYaUXc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 15:22:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:a9:d4:fd:09:ea:92:18:60:17:8a:41:8e:9a:ed:f3:74:01:43:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383 Validity Not Before: Jun 28 09:55:46 2025 GMT Not After : Jul 1 15:22:46 2025 GMT Subject: CN=BE1676F83EBDC4ED041DD2837FAF8DEDF4CE743D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:66:3e:57:9d:7a:00:80:f6:d2:e6:b6:a7:87: 66:0d:d8:30:cd:a3:0a:a2:07:1b:fd:44:c9:e3:d2: 17:6a:78:d9:4b:9f:7f:2f:7b:ae:05:2f:3b:7a:91: 17:95:a4:ad:b4:3d:d4:1e:2c:ea:7c:42:d4:4d:19: c3:ec:31:45:44:ce:f1:fd:91:d8:00:5b:c0:6e:c3: 25:a0:89:f9:f8:8c:1d:1b:41:96:97:22:6a:34:02: d0:d6:4a:a7:da:e9:e7:9c:27:c3:7c:a6:7f:25:96: 3d:83:b3:43:ca:43:85:b2:65:7d:ec:dc:2f:78:03: 3c:a6:49:f0:1a:e6:72:a6:ac:a4:78:0b:f3:25:3b: 0e:63:63:da:26:27:25:e7:3e:b5:74:a7:e9:72:86: 65:c0:b6:c4:14:0f:87:ff:ec:e8:4d:b0:08:cb:f8: 51:ab:4e:ba:5a:17:24:bd:81:0f:59:94:6f:8a:f5: 28:fe:52:9f:24:6b:f3:58:5f:9f:49:67:2a:69:8a: 59:2a:4f:b7:83:24:17:e5:51:f6:9b:1e:e9:57:3c: c0:31:41:d0:19:aa:6f:5d:0b:06:b3:1f:a7:d8:17: db:d0:bc:d3:d9:cf:7e:04:af:2c:47:5a:ca:1d:d8: 4a:13:d6:db:c1:71:e7:f4:f2:c9:f5:df:5b:2b:29: ac:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:16:76:F8:3E:BD:C4:ED:04:1D:D2:83:7F:AF:8D:ED:F4:CE:74:3D X509v3 Authority Key Identifier: keyid:94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:ff:7d:98:a8:b4:fd:c7:0f:a6:67:a2:2a:db:dd:db:23:26: 2d:71:f4:3c:eb:10:8f:db:96:c5:f9:7a:b5:50:e4:2b:16:65: fd:5e:f2:7b:61:30:0d:18:1c:53:9f:02:e6:3c:8d:5c:83:f9: e6:fe:ba:5c:85:55:21:d6:fc:16:f5:74:31:a4:bf:f0:72:4f: 98:ae:d8:68:ac:7e:66:40:a4:85:c0:ae:1d:6e:dc:fb:4a:95: 4c:3c:6e:75:48:f0:ab:68:70:39:0b:86:c3:a8:46:84:2f:13: 78:79:3d:1e:c1:7a:5c:b3:e6:3f:d1:11:d0:88:e1:a6:5d:9c: c5:2d:73:a7:d5:95:63:ac:dc:b4:f9:b4:8a:ae:77:84:0e:ea: 58:8a:38:e5:85:b6:94:60:da:3a:5c:6c:fe:42:43:39:a4:99: c2:dc:81:57:8e:c6:7f:1e:82:a6:d0:7e:ed:fa:c4:88:62:49: 66:9c:b3:2d:27:bb:80:65:89:e9:2f:01:ae:4a:fe:b3:b1:6d: 06:39:39:d6:28:fc:15:6b:ec:a5:79:54:6e:17:2e:15:6d:07: d2:08:dc:d1:c4:25:b1:4f:6a:7e:8d:3e:df:3d:e9:b6:7f:8a: ba:9a:ea:65:8c:8e:52:83:af:6a:a5:75:c8:52:b5:99:93:af: f8:4c:2b:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCanU/QnqkhhgF4pBjprt83QBQ1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRGNzVCMDRDRUJFMERGMUQwQjkyNEVDRjFBRDlDOUMx Mzk5MjM4MzAeFw0yNTA2MjgwOTU1NDZaFw0yNTA3MDExNTIyNDZaMDMxMTAvBgNV BAMTKEJFMTY3NkY4M0VCREM0RUQwNDFERDI4MzdGQUY4REVERjRDRTc0M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Zj5XnXoAgPbS5ranh2YN2DDN owqiBxv9RMnj0hdqeNlLn38ve64FLzt6kReVpK20PdQeLOp8QtRNGcPsMUVEzvH9 kdgAW8BuwyWgifn4jB0bQZaXImo0AtDWSqfa6eecJ8N8pn8llj2Ds0PKQ4WyZX3s 3C94AzymSfAa5nKmrKR4C/MlOw5jY9omJyXnPrV0p+lyhmXAtsQUD4f/7OhNsAjL +FGrTrpaFyS9gQ9ZlG+K9Sj+Up8ka/NYX59JZyppilkqT7eDJBflUfabHulXPMAx QdAZqm9dCwazH6fYF9vQvNPZz34EryxHWsod2EoT1tvBcef08sn131srKaytAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvhZ2+D69xO0EHdKDf6+N7fTOdD0wHwYDVR0j BBgwFoAUlPdbBM6+DfHQuSTs8a2cnBOZI4MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjEyN2ZlYi05NjE1LTRjNTgtYTNiYi1lZWY3YjdhNjU0N2UvMC85NEY3NUIwNENF QkUwREYxRDBCOTI0RUNGMUFEOUM5QzEzOTkyMzgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTRGNzVCMDRDRUJFMERGMUQwQjkyNEVDRjFBRDlDOUMxMzk5 MjM4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTIxMjdmZWItOTYxNS00YzU4LWEz YmItZWVmN2I3YTY1NDdlLzAvOTRGNzVCMDRDRUJFMERGMUQwQjkyNEVDRjFBRDlD OUMxMzk5MjM4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEL/fZiotP3HD6Znoirb3dsjJi1x9DzrEI/b lsX5erVQ5CsWZf1e8nthMA0YHFOfAuY8jVyD+eb+ulyFVSHW/Bb1dDGkv/ByT5iu 2GisfmZApIXArh1u3PtKlUw8bnVI8KtocDkLhsOoRoQvE3h5PR7Belyz5j/REdCI 4aZdnMUtc6fVlWOs3LT5tIqud4QO6liKOOWFtpRg2jpcbP5CQzmkmcLcgVeOxn8e gqbQfu36xIhiSWacsy0nu4BliekvAa5K/rOxbQY5OdYo/BVr7KV5VG4XLhVtB9II 3NHEJbFPan6NPt896bZ/irqa6mWMjlKDr2qldchStZmTr/hMK3s= -----END CERTIFICATE-----Generated at Mon Jun 30 06:58:26 2025 by rpki-client