$ rpki-client -vvf repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.mft File: B152586AE46FCAB640629D941147319E05FCF34B.mft (raw, json) Hash identifier: lvCcMMZVkDqVBR9wGQ4umxp1RYBAjw8pCw/wYQ9yvH8= Subject key identifier: 55:03:DF:FE:1B:6D:8B:19:C7:F4:EA:6D:AA:D4:F4:EC:90:A9:B1:64 Authority key identifier: B1:52:58:6A:E4:6F:CA:B6:40:62:9D:94:11:47:31:9E:05:FC:F3:4B Certificate issuer: /CN=B152586AE46FCAB640629D941147319E05FCF34B Certificate serial: 57C49F3B165DCD4524BD227B9FC53051E47BBFD3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B152586AE46FCAB640629D941147319E05FCF34B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.mft Manifest number: 021A Signing time: Thu 03 Jul 2025 04:21:00 +0000 Manifest this update: Thu 03 Jul 2025 04:16:00 +0000 Manifest next update: Sun 06 Jul 2025 09:02:00 +0000 Files and hashes: 1: B152586AE46FCAB640629D941147319E05FCF34B.crl (hash: 712cGhW+/me1lYJpA1PYMulWRrc1o60i1dlDqaEvpoo=) 2: 323030313a6466303a376334303a3a2f34382d3438203d3e20313437313534.roa (hash: y0s8YGn9mHg2T9EeIiu21b9Ye25qY26dsfL13en5ZUs=) 3: 3130332e3137362e3232372e302f32342d3234203d3e20313437313534.roa (hash: 6c26JZWNMMIKbz8QiOgDDGQqpXGJuiNocLMDMSpKyVk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.crl rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B152586AE46FCAB640629D941147319E05FCF34B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 09:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:c4:9f:3b:16:5d:cd:45:24:bd:22:7b:9f:c5:30:51:e4:7b:bf:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B152586AE46FCAB640629D941147319E05FCF34B Validity Not Before: Jul 3 04:16:00 2025 GMT Not After : Jul 6 09:02:00 2025 GMT Subject: CN=5503DFFE1B6D8B19C7F4EA6DAAD4F4EC90A9B164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c0:4d:27:94:33:2b:0d:39:17:41:fa:58:f0: 1f:9c:0c:b6:6b:8d:55:a1:e9:ea:05:f7:63:53:90: 60:a5:2b:6f:f7:e7:ba:a3:3f:57:fa:72:48:08:e7: ab:a5:08:57:f1:72:c6:ca:9e:c7:19:ea:de:c5:e3: 6a:b7:21:93:ed:31:5f:a9:94:d5:05:4d:db:54:3d: a4:ca:14:df:86:8e:98:8b:c8:8c:dc:c6:43:f4:60: e9:c3:5b:45:ed:0d:3a:e8:d3:2a:8e:55:f3:bc:32: ef:60:b8:8b:b1:53:8a:9c:de:12:bf:7f:dc:56:f2: 04:30:f3:ae:92:ec:7c:27:0e:9b:da:c3:16:8e:b4: cf:30:7b:a4:a9:10:5b:a4:ab:f7:00:fa:35:ef:f4: e5:f7:b6:ec:26:63:36:fe:4d:5e:a2:dc:66:e6:fd: 53:62:02:02:6c:e8:70:4f:c9:96:95:f9:ed:b7:e5: 50:0d:87:72:2f:45:37:6a:c5:9b:e7:c6:f4:d6:f5: ad:78:68:79:23:f0:d8:26:19:d3:ea:0f:6e:a9:36: 35:0c:55:ce:76:ff:18:ed:03:e3:5b:a5:50:4f:ba: 9d:b9:5e:68:e6:63:24:ae:f7:35:ba:39:cc:da:49: f3:c5:22:c9:f2:7a:69:a5:28:bb:8a:5b:32:c9:fc: 54:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:03:DF:FE:1B:6D:8B:19:C7:F4:EA:6D:AA:D4:F4:EC:90:A9:B1:64 X509v3 Authority Key Identifier: keyid:B1:52:58:6A:E4:6F:CA:B6:40:62:9D:94:11:47:31:9E:05:FC:F3:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B152586AE46FCAB640629D941147319E05FCF34B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:46:76:02:06:7a:bd:bb:68:12:75:fd:20:a5:b2:48:64:88: ab:3f:b5:1f:23:cc:02:cd:00:10:49:f4:c2:a6:08:24:fc:66: a1:29:70:44:7a:c4:b1:c5:f1:ab:96:09:1b:18:b6:31:c9:e3: a2:bc:bb:78:00:1d:bc:b5:c0:42:81:db:12:92:45:2b:22:b5: 29:86:20:83:2d:2e:f8:50:33:38:60:5d:e3:87:a8:5c:78:eb: 97:9c:79:28:a3:f5:0e:73:b1:bc:91:68:5f:8b:ef:53:51:24: 64:31:e9:69:04:53:40:bf:6c:68:e8:f5:4c:c1:35:7f:0f:2f: 36:35:5c:a2:af:e8:e9:77:34:eb:c0:59:2e:a8:be:ed:b7:85: 64:be:a7:e7:64:4f:1b:0a:73:cb:a3:62:6f:4b:a5:74:8d:17: 1b:36:c9:fe:f0:dd:b1:12:b5:77:14:44:d4:b9:48:18:ff:c0: 83:a0:da:9a:3a:3b:bb:50:03:7a:eb:17:55:6c:1c:3e:23:27: bf:d3:99:da:12:a8:af:c4:52:eb:23:11:2a:08:5f:58:37:e8: 1c:03:1c:a6:d5:55:e4:6f:27:6f:50:5f:cd:61:89:b6:e5:3c: d6:5b:c2:bd:41:8d:d1:9c:44:09:6a:6c:0a:83:de:2e:ee:bb: c3:06:94:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV8SfOxZdzUUkvSJ7n8UwUeR7v9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE1MjU4NkFFNDZGQ0FCNjQwNjI5RDk0MTE0NzMxOUUw NUZDRjM0QjAeFw0yNTA3MDMwNDE2MDBaFw0yNTA3MDYwOTAyMDBaMDMxMTAvBgNV BAMTKDU1MDNERkZFMUI2RDhCMTlDN0Y0RUE2REFBRDRGNEVDOTBBOUIxNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZwE0nlDMrDTkXQfpY8B+cDLZr jVWh6eoF92NTkGClK2/357qjP1f6ckgI56ulCFfxcsbKnscZ6t7F42q3IZPtMV+p lNUFTdtUPaTKFN+GjpiLyIzcxkP0YOnDW0XtDTro0yqOVfO8Mu9guIuxU4qc3hK/ f9xW8gQw866S7HwnDpvawxaOtM8we6SpEFukq/cA+jXv9OX3tuwmYzb+TV6i3Gbm /VNiAgJs6HBPyZaV+e235VANh3IvRTdqxZvnxvTW9a14aHkj8NgmGdPqD26pNjUM Vc52/xjtA+NbpVBPup25XmjmYySu9zW6OczaSfPFIsnyemmlKLuKWzLJ/FQZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVQPf/httixnH9OptqtT07JCpsWQwHwYDVR0j BBgwFoAUsVJYauRvyrZAYp2UEUcxngX880swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YTllMjg5OC0wMjNiLTQ3NDEtODczNS1hMDcxOGNjNmNmMmIvMC9CMTUyNTg2QUU0 NkZDQUI2NDA2MjlEOTQxMTQ3MzE5RTA1RkNGMzRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE1MjU4NkFFNDZGQ0FCNjQwNjI5RDk0MTE0NzMxOUUwNUZD RjM0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmE5ZTI4OTgtMDIzYi00NzQxLTg3 MzUtYTA3MThjYzZjZjJiLzAvQjE1MjU4NkFFNDZGQ0FCNjQwNjI5RDk0MTE0NzMx OUUwNUZDRjM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF5GdgIGer27aBJ1/SClskhkiKs/tR8jzALN ABBJ9MKmCCT8ZqEpcER6xLHF8auWCRsYtjHJ46K8u3gAHby1wEKB2xKSRSsitSmG IIMtLvhQMzhgXeOHqFx465eceSij9Q5zsbyRaF+L71NRJGQx6WkEU0C/bGjo9UzB NX8PLzY1XKKv6Ol3NOvAWS6ovu23hWS+p+dkTxsKc8ujYm9LpXSNFxs2yf7w3bES tXcURNS5SBj/wIOg2po6O7tQA3rrF1VsHD4jJ7/TmdoSqK/EUusjESoIX1g36BwD HKbVVeRvJ29QX81hibblPNZbwr1BjdGcRAlqbAqD3i7uu8MGlOA= -----END CERTIFICATE-----Generated at Thu Jul 3 20:20:53 2025 by rpki-client