$ rpki-client -vvf repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft File: B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft (raw, json) Hash identifier: q6FANUuTr93eYk0VN/NlhD8tE4Ul02Axh0bruWkV3fo= Subject key identifier: 84:94:A5:CC:10:61:3A:A6:7A:C4:3A:5E:25:C1:04:EA:41:FD:E6:DA Authority key identifier: B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1 Certificate issuer: /CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1 Certificate serial: 7340B0B2947407934B412D50135F49847ED83C67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft Manifest number: 020D Signing time: Mon 12 May 2025 07:32:17 +0000 Manifest this update: Mon 12 May 2025 07:27:17 +0000 Manifest next update: Thu 15 May 2025 11:59:17 +0000 Files and hashes: 1: 3130332e3136382e3138352e302f32342d3234203d3e20313432333231.roa (hash: KAd16ldutYh48OLbDnroVNt1O/HTzAA/aCmbtAP1Odw=) 2: 3130332e3136382e3138342e302f32342d3234203d3e20313432333231.roa (hash: YwiS5nlm2sACVNb5Xfq0EOTBtueDgKIv6RAnbgfUwRk=) 3: 3130332e3136382e3138342e302f32342d3234203d3e203438343635.roa (hash: as7KtFlD4iKysyXSKxxgu8y4XOhRCjKWFwK+lMzj6oQ=) 4: 3130332e3136382e3138342e302f32332d3233203d3e20313432333231.roa (hash: WwW9nUa1rmjUn7BCAW+1oX9KPadjU43XCXkkj1toOfQ=) 5: B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl (hash: o5pucSRRbobFZ/KhOFXIGlCT9WJMTVfyUHeIArQp//I=) 6: 3130332e3136382e3138352e302f32342d3234203d3e203438343635.roa (hash: yFLtXZhv4icStZGluIXSTKiVb7PeS6C1hGZnyhQ1yqo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 11:59:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:40:b0:b2:94:74:07:93:4b:41:2d:50:13:5f:49:84:7e:d8:3c:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1 Validity Not Before: May 12 07:27:17 2025 GMT Not After : May 15 11:59:17 2025 GMT Subject: CN=8494A5CC10613AA67AC43A5E25C104EA41FDE6DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:23:10:d4:3b:f4:b4:b7:de:de:cf:df:d2:c7: 2e:91:c7:7f:89:88:50:f7:53:72:d7:36:1a:9b:08: d7:9d:3d:b7:84:09:36:6e:37:95:bd:ca:27:b2:3d: ad:75:64:1d:1a:bc:57:e9:dc:88:24:b0:46:65:dd: fc:65:3d:33:f1:04:80:f5:e8:44:68:c6:b8:3e:2b: c3:c7:5f:62:0c:96:7b:79:79:e4:93:79:95:64:84: 41:78:91:4c:c1:4d:5a:ae:e7:f3:90:82:94:1e:1c: 32:2c:40:05:85:c7:96:19:ad:7d:fc:76:bc:aa:b3: 40:de:b4:fb:e8:b2:b5:1d:76:6c:17:6e:99:d5:6b: d7:fe:f0:4d:b3:eb:f1:ae:7f:8c:04:87:c0:90:82: 77:53:9e:fb:98:58:75:bf:bc:e7:e5:ba:5c:65:cf: f8:9a:bb:7e:01:5c:b6:09:a7:42:91:64:ab:c4:7d: a6:b3:32:6c:78:63:57:ec:ef:f2:93:f8:66:b3:d1: c5:87:25:03:02:70:e6:89:58:b1:17:52:50:f5:96: 8c:6c:85:55:7c:cd:df:32:88:43:ea:7a:29:a1:0c: 46:fa:76:8d:15:07:f0:a0:25:01:89:a4:48:b3:02: 23:47:a9:4c:f7:c2:53:86:1c:e2:ae:d2:85:8d:17: 3e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:94:A5:CC:10:61:3A:A6:7A:C4:3A:5E:25:C1:04:EA:41:FD:E6:DA X509v3 Authority Key Identifier: keyid:B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:39:1f:58:8b:8d:ae:43:96:a8:02:1f:b4:88:30:8b:8b:88: 8d:5e:b5:40:5f:85:bf:5c:28:43:9e:36:ef:22:78:fb:24:73: 0f:02:fe:77:88:ac:31:cc:59:44:cf:f8:23:b0:77:f5:7e:80: aa:19:9c:2e:f5:c9:8e:a5:0b:3d:99:81:42:4d:60:67:9c:85: 7d:34:fa:00:f9:a5:1f:40:5f:c7:ef:c9:8d:6e:2c:3a:77:e6: 29:15:34:a1:85:83:f7:f4:28:df:b7:ad:ca:fc:0e:77:d2:a8: 24:a3:ff:9c:71:e3:ff:e7:08:60:91:40:55:37:b6:0e:aa:bd: 66:18:34:2e:ee:cd:30:31:fb:89:ef:a6:18:d3:1a:a9:f1:2e: 21:9a:09:21:49:4a:a7:bf:7a:d4:2c:15:58:e2:e5:4e:14:3e: 3d:c0:74:e3:6b:19:da:49:bd:33:2e:56:5a:c9:06:a0:a7:07: d1:06:83:43:5b:78:05:79:bf:14:90:e3:02:b8:69:07:54:2b: 95:12:8c:fa:16:b4:eb:d0:87:9a:d7:86:65:7f:88:39:75:6f: fe:bd:d8:50:f8:27:0e:8e:8a:97:07:d6:7f:dc:68:f5:14:48: b2:f7:08:e6:dd:7f:47:12:20:70:83:1a:71:8b:31:4e:73:04: 65:92:9d:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc0CwspR0B5NLQS1QE19JhH7YPGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFENEY1NDk1QkU0RjlEOTk1RUE5QzE1NDU0NjlDQTJC OTgzMzRGMTAeFw0yNTA1MTIwNzI3MTdaFw0yNTA1MTUxMTU5MTdaMDMxMTAvBgNV BAMTKDg0OTRBNUNDMTA2MTNBQTY3QUM0M0E1RTI1QzEwNEVBNDFGREU2REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvIxDUO/S0t97ez9/Sxy6Rx3+J iFD3U3LXNhqbCNedPbeECTZuN5W9yieyPa11ZB0avFfp3IgksEZl3fxlPTPxBID1 6ERoxrg+K8PHX2IMlnt5eeSTeZVkhEF4kUzBTVqu5/OQgpQeHDIsQAWFx5YZrX38 dryqs0DetPvosrUddmwXbpnVa9f+8E2z6/Guf4wEh8CQgndTnvuYWHW/vOflulxl z/iau34BXLYJp0KRZKvEfaazMmx4Y1fs7/KT+Gaz0cWHJQMCcOaJWLEXUlD1loxs hVV8zd8yiEPqeimhDEb6do0VB/CgJQGJpEizAiNHqUz3wlOGHOKu0oWNFz4BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhJSlzBBhOqZ6xDpeJcEE6kH95towHwYDVR0j BBgwFoAUsdT1SVvk+dmV6pwVRUacormDNPEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OGU3OGVlMC0wMDAyLTRhNjctYTczOS0zMDMzZDViNWJhNjEvMC9CMUQ0RjU0OTVC RTRGOUQ5OTVFQTlDMTU0NTQ2OUNBMkI5ODMzNEYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjFENEY1NDk1QkU0RjlEOTk1RUE5QzE1NDU0NjlDQTJCOTgz MzRGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzhlNzhlZTAtMDAwMi00YTY3LWE3 MzktMzAzM2Q1YjViYTYxLzAvQjFENEY1NDk1QkU0RjlEOTk1RUE5QzE1NDU0NjlD QTJCOTgzMzRGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADc5H1iLja5DlqgCH7SIMIuLiI1etUBfhb9c KEOeNu8iePskcw8C/neIrDHMWUTP+COwd/V+gKoZnC71yY6lCz2ZgUJNYGechX00 +gD5pR9AX8fvyY1uLDp35ikVNKGFg/f0KN+3rcr8DnfSqCSj/5xx4//nCGCRQFU3 tg6qvWYYNC7uzTAx+4nvphjTGqnxLiGaCSFJSqe/etQsFVji5U4UPj3AdONrGdpJ vTMuVlrJBqCnB9EGg0NbeAV5vxSQ4wK4aQdUK5USjPoWtOvQh5rXhmV/iDl1b/69 2FD4Jw6OipcH1n/caPUUSLL3CObdf0cSIHCDGnGLMU5zBGWSnZk= -----END CERTIFICATE-----Generated at Tue May 13 00:09:37 2025 by rpki-client