$ rpki-client -vvf repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft File: B392381083372148D0977D0066CFF38FD5A32CDB.mft (raw, json) Hash identifier: 82SnT2mDmcuOkNRGoHAzr9o3LdrFEpGaSuuBe8D7j80= Subject key identifier: 65:6E:46:B1:26:91:C4:AD:E6:D2:76:4A:94:57:BC:22:08:42:D7:E4 Authority key identifier: B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB Certificate issuer: /CN=B392381083372148D0977D0066CFF38FD5A32CDB Certificate serial: 1B865A48A81F66E09692016F67E6232AB9953164 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft Manifest number: 0210 Signing time: Sat 28 Jun 2025 00:31:56 +0000 Manifest this update: Sat 28 Jun 2025 00:26:56 +0000 Manifest next update: Tue 01 Jul 2025 01:47:56 +0000 Files and hashes: 1: B392381083372148D0977D0066CFF38FD5A32CDB.crl (hash: R70RuuPWJ0HR9w8TNCviliTxVzOD/5ydA+f632shQvg=) 2: 3130332e3138352e38322e302f32332d3234203d3e203538383230.roa (hash: HSEFfxxLTR9pPfTqUIYx4lI4vavTZEpGUjc26Y26XRA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.crl rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 01:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:86:5a:48:a8:1f:66:e0:96:92:01:6f:67:e6:23:2a:b9:95:31:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B392381083372148D0977D0066CFF38FD5A32CDB Validity Not Before: Jun 28 00:26:56 2025 GMT Not After : Jul 1 01:47:56 2025 GMT Subject: CN=656E46B12691C4ADE6D2764A9457BC220842D7E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:78:25:4d:b6:73:70:15:9f:74:81:08:09:7f: 8f:56:0a:ea:a5:05:87:4f:86:c3:2e:c1:96:9f:0e: 2d:49:3b:20:09:c2:0f:3c:99:24:00:08:4a:de:88: f2:89:15:2f:bd:57:73:7a:ef:47:93:09:b4:a6:42: ee:7d:c5:f9:42:07:ae:3b:8f:6c:2f:59:49:be:11: 60:fb:35:83:0b:a0:d7:4f:31:60:df:26:4e:21:ef: 04:68:1e:88:2f:3a:f3:2d:25:ec:63:0a:93:78:21: dd:c6:12:c4:6b:5e:61:22:d8:04:ae:0c:61:56:60: cc:ac:8a:fd:94:7e:b3:a8:cf:8f:c3:b0:0b:59:59: f9:eb:d2:ce:3e:58:4a:0f:ca:35:f9:a6:f7:3c:82: 64:b1:97:eb:b1:bf:06:2f:d7:05:60:06:cc:f8:b4: 38:93:4f:db:1e:b9:a7:ef:b2:f2:f1:26:1f:e7:81: b6:0b:00:22:de:2d:02:45:b2:2b:30:e9:d9:f0:c1: 57:79:17:74:66:37:37:d1:be:cc:1b:e2:48:c5:ac: 1d:18:f2:8d:7c:73:d4:65:d3:aa:63:05:04:1b:47: 35:77:3b:f8:d1:68:77:a5:8d:dd:43:4f:f9:80:61: 36:69:0a:86:59:77:2d:38:e1:27:07:40:29:0b:14: a8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6E:46:B1:26:91:C4:AD:E6:D2:76:4A:94:57:BC:22:08:42:D7:E4 X509v3 Authority Key Identifier: keyid:B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:ca:1e:c2:3b:32:10:30:ad:bb:be:e4:4d:1a:e8:03:75:54: e7:9d:b1:71:ce:c2:16:11:7c:1b:81:86:4e:a5:1b:54:3e:7d: 80:99:d6:8c:f8:7d:03:a3:a4:76:da:a4:3a:69:24:8f:b2:d8: 8e:dc:db:88:25:8b:b5:48:e0:ba:b7:d4:b9:80:9c:c2:e9:8f: 38:27:f3:fd:0b:78:8c:9f:51:6f:5e:28:db:f0:8c:7b:45:b9: da:bc:b3:18:e6:6e:09:d7:5a:cf:c2:bb:42:f5:49:59:fb:44: e9:24:be:89:e2:4d:45:43:27:89:f0:1a:1c:4c:e4:b6:0e:aa: 5e:4c:63:3c:40:14:7c:71:51:5f:30:0e:6a:6c:ff:2c:20:1d: 20:46:7c:fd:69:13:16:5b:28:fe:8a:f1:3a:11:59:e9:53:0e: 32:e1:3e:68:d7:89:e7:95:fc:d3:4d:cc:82:66:60:de:d5:2d: 93:10:ec:2e:4b:87:a9:e0:be:95:1f:77:da:11:ff:5e:08:76: 8d:0c:42:10:fa:17:58:bf:29:9a:21:32:6e:5d:68:4f:3c:85: ca:27:0b:71:c6:b5:ed:f4:3a:0e:52:29:20:31:bc:6d:7b:93: 95:2d:f9:81:da:95:92:b7:60:78:c1:fc:00:bf:25:d0:39:b2: a4:c9:52:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG4ZaSKgfZuCWkgFvZ+YjKrmVMWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM5MjM4MTA4MzM3MjE0OEQwOTc3RDAwNjZDRkYzOEZE NUEzMkNEQjAeFw0yNTA2MjgwMDI2NTZaFw0yNTA3MDEwMTQ3NTZaMDMxMTAvBgNV BAMTKDY1NkU0NkIxMjY5MUM0QURFNkQyNzY0QTk0NTdCQzIyMDg0MkQ3RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBeCVNtnNwFZ90gQgJf49WCuql BYdPhsMuwZafDi1JOyAJwg88mSQACEreiPKJFS+9V3N670eTCbSmQu59xflCB647 j2wvWUm+EWD7NYMLoNdPMWDfJk4h7wRoHogvOvMtJexjCpN4Id3GEsRrXmEi2ASu DGFWYMysiv2UfrOoz4/DsAtZWfnr0s4+WEoPyjX5pvc8gmSxl+uxvwYv1wVgBsz4 tDiTT9seuafvsvLxJh/ngbYLACLeLQJFsisw6dnwwVd5F3RmNzfRvswb4kjFrB0Y 8o18c9Rl06pjBQQbRzV3O/jRaHeljd1DT/mAYTZpCoZZdy044ScHQCkLFKh1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZW5GsSaRxK3m0nZKlFe8IghC1+QwHwYDVR0j BBgwFoAUs5I4EIM3IUjQl30AZs/zj9WjLNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmYyY2YwMy1mOWY5LTRiY2EtOGMyYy02MDczMjgwZGZlYTgvMC9CMzkyMzgxMDgz MzcyMTQ4RDA5NzdEMDA2NkNGRjM4RkQ1QTMyQ0RCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjM5MjM4MTA4MzM3MjE0OEQwOTc3RDAwNjZDRkYzOEZENUEz MkNEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJmMmNmMDMtZjlmOS00YmNhLThj MmMtNjA3MzI4MGRmZWE4LzAvQjM5MjM4MTA4MzM3MjE0OEQwOTc3RDAwNjZDRkYz OEZENUEzMkNEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALHKHsI7MhAwrbu+5E0a6AN1VOedsXHOwhYR fBuBhk6lG1Q+fYCZ1oz4fQOjpHbapDppJI+y2I7c24gli7VI4Lq31LmAnMLpjzgn 8/0LeIyfUW9eKNvwjHtFudq8sxjmbgnXWs/Cu0L1SVn7ROkkvoniTUVDJ4nwGhxM 5LYOql5MYzxAFHxxUV8wDmps/ywgHSBGfP1pExZbKP6K8ToRWelTDjLhPmjXieeV /NNNzIJmYN7VLZMQ7C5Lh6ngvpUfd9oR/14Ido0MQhD6F1i/KZohMm5daE88hcon C3HGte30Og5SKSAxvG17k5Ut+YHalZK3YHjB/AC/JdA5sqTJUn4= -----END CERTIFICATE-----Generated at Sun Jun 29 18:52:35 2025 by rpki-client