$ rpki-client -vvf repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft File: B0928A45D014D8D5FAD50314E828086F12B15610.mft (raw, json) Hash identifier: T5/+i9bxMdnzGy6p3EPSfFPELRSRPtSRmeEQdpiKHmY= Subject key identifier: E0:B5:A0:61:49:0F:03:EC:5F:A0:95:F9:48:C3:D4:78:9D:C4:08:20 Authority key identifier: B0:92:8A:45:D0:14:D8:D5:FA:D5:03:14:E8:28:08:6F:12:B1:56:10 Certificate issuer: /CN=B0928A45D014D8D5FAD50314E828086F12B15610 Certificate serial: 4EDF55CCE8C28EF4D12783DAD65F1610A77609F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft Manifest number: 02D2 Signing time: Fri 09 May 2025 20:01:13 +0000 Manifest this update: Fri 09 May 2025 19:56:13 +0000 Manifest next update: Tue 13 May 2025 03:20:13 +0000 Files and hashes: 1: 3230322e37302e3133332e302f32342d3234203d3e20313430343433.roa (hash: wdtK/qmLPSYK98usl8We2OAmclE1Y5QskILTtOqsrh0=) 2: B0928A45D014D8D5FAD50314E828086F12B15610.crl (hash: HOWcyG5BEj5iQN15jEwhFBNpMofnAyWc3m0t+QrDDbQ=) 3: 3230322e3132352e38332e302f32342d3234203d3e20313430343433.roa (hash: Ky8MrLU9AvVMvZfrLkoaRO/9X/2qSweH3weFbcGoV3c=) 4: 3230322e3132352e38322e302f32342d3234203d3e20313430343433.roa (hash: svi5IuXnIA+13Wc0eQrV3WQdaOBiVClli1PIWM+ewGc=) 5: 3230322e37302e3133322e302f32332d3233203d3e20313430343433.roa (hash: zemQSZcrisUT3ypYGuVnD0HgXPjCIaBTMHzTcVM9um8=) 6: 3230322e37302e3133322e302f32342d3234203d3e20313430343433.roa (hash: t5xXiyHWAYUMNFYe6N3ZJ/nwbkXPClS4KSSDztJ55tw=) 7: 3230322e3132352e38322e302f32332d3233203d3e20313430343433.roa (hash: g4b6/Xa0b41J+1gc8Xz+JaVY6mTt5QNosbt82K9ZCLY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.crl rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 03:20:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:df:55:cc:e8:c2:8e:f4:d1:27:83:da:d6:5f:16:10:a7:76:09:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0928A45D014D8D5FAD50314E828086F12B15610 Validity Not Before: May 9 19:56:13 2025 GMT Not After : May 13 03:20:13 2025 GMT Subject: CN=E0B5A061490F03EC5FA095F948C3D4789DC40820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:eb:27:56:53:e6:59:35:4e:68:55:2e:5e:ff: 3f:e8:ff:38:b9:2d:52:4d:0f:62:a5:f6:0d:43:84: a4:11:bf:78:24:e0:b6:eb:e9:e0:c0:6d:a0:05:c3: f2:c8:0c:1f:a7:66:85:09:cd:86:67:16:40:ac:19: 90:49:e1:4f:74:bd:5b:41:47:36:77:93:46:ca:c2: 1c:8b:63:39:9a:84:16:6f:1a:a1:e8:83:f6:a1:c7: 2c:16:70:1f:4d:39:da:c3:18:12:2e:9e:2c:d3:49: 87:7c:33:d4:bf:cc:92:26:24:6b:0f:22:31:dc:02: ac:ea:47:e0:f7:c1:26:44:72:78:2e:e2:c2:ea:29: 76:76:4c:41:7c:b5:da:ff:d8:e8:b8:af:be:fc:6b: c3:63:3c:8a:f8:98:2a:5e:01:6b:7d:f0:52:53:1a: b0:ac:bf:b6:6e:0b:8c:13:67:6e:e2:45:dd:ff:fd: 2a:ff:ef:36:d4:9f:f0:0e:ca:98:58:4f:e0:88:d0: ce:7d:6f:1a:a5:1b:8c:67:1b:40:61:8c:7e:a0:6f: b9:14:b1:72:00:85:dc:bb:00:be:ef:bb:b6:84:49: c1:81:6b:44:84:22:77:7f:9f:10:83:67:2a:15:7d: 59:94:62:e5:73:de:42:0d:64:94:f5:c9:7e:8c:af: 28:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B5:A0:61:49:0F:03:EC:5F:A0:95:F9:48:C3:D4:78:9D:C4:08:20 X509v3 Authority Key Identifier: keyid:B0:92:8A:45:D0:14:D8:D5:FA:D5:03:14:E8:28:08:6F:12:B1:56:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:ac:b7:a2:01:97:a3:2d:d9:90:6c:4f:b5:5e:fb:3c:7c:b4: fe:cf:40:2c:e3:53:42:e9:41:c7:ad:25:6d:8a:d2:f0:96:88: 14:61:fb:6a:77:d2:d9:8d:29:2c:16:e9:cd:cc:c3:9f:3d:b5: 80:9e:80:e3:d6:c9:05:e3:f1:71:71:74:a5:fd:91:87:df:cb: 62:8a:5d:23:48:f4:b8:4e:8d:43:07:e9:72:6a:70:e5:d1:21: 9a:fd:3f:19:02:6b:dc:18:fe:28:86:88:dc:ba:eb:6a:f4:24: 55:2f:f4:f1:c4:b9:77:e9:03:ba:b3:a0:98:92:4e:74:74:03: f9:11:ab:e9:d5:d5:b7:df:b1:3d:d0:da:b3:03:e7:cc:cf:e9: b5:c5:f8:45:43:3f:ba:43:9f:d4:46:18:30:39:e6:ca:ae:f2: b6:4c:df:6c:70:b9:a6:c6:07:bc:57:19:07:70:e8:fb:15:7d: 0a:b9:f2:43:35:7b:2d:7d:71:07:5e:5c:54:97:14:e6:7b:fa: 76:7e:5f:19:eb:5f:ae:f5:21:6e:35:e8:dc:ed:f7:74:2c:aa: 8e:9a:f6:41:94:3c:5e:17:11:b4:f5:75:c2:39:4e:b0:8a:95: 48:ea:31:63:3a:ec:60:17:7d:db:79:1f:32:9b:12:d1:34:6a: dd:18:30:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTt9VzOjCjvTRJ4Pa1l8WEKd2CfkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4NkYx MkIxNTYxMDAeFw0yNTA1MDkxOTU2MTNaFw0yNTA1MTMwMzIwMTNaMDMxMTAvBgNV BAMTKEUwQjVBMDYxNDkwRjAzRUM1RkEwOTVGOTQ4QzNENDc4OURDNDA4MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ6ydWU+ZZNU5oVS5e/z/o/zi5 LVJND2Kl9g1DhKQRv3gk4Lbr6eDAbaAFw/LIDB+nZoUJzYZnFkCsGZBJ4U90vVtB RzZ3k0bKwhyLYzmahBZvGqHog/ahxywWcB9NOdrDGBIunizTSYd8M9S/zJImJGsP IjHcAqzqR+D3wSZEcngu4sLqKXZ2TEF8tdr/2Oi4r778a8NjPIr4mCpeAWt98FJT GrCsv7ZuC4wTZ27iRd3//Sr/7zbUn/AOyphYT+CI0M59bxqlG4xnG0BhjH6gb7kU sXIAhdy7AL7vu7aEScGBa0SEInd/nxCDZyoVfVmUYuVz3kINZJT1yX6MryihAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4LWgYUkPA+xfoJX5SMPUeJ3ECCAwHwYDVR0j BBgwFoAUsJKKRdAU2NX61QMU6CgIbxKxVhAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2QzMjNiZS04MzdkLTQyNDQtODQ2Yy03ZDIzOTNhOWEwMDkvMC9CMDkyOEE0NUQw MTREOEQ1RkFENTAzMTRFODI4MDg2RjEyQjE1NjEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4NkYxMkIx NTYxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NkMzIzYmUtODM3ZC00MjQ0LTg0 NmMtN2QyMzkzYTlhMDA5LzAvQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4 NkYxMkIxNTYxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ6st6IBl6Mt2ZBsT7Ve+zx8tP7PQCzjU0Lp QcetJW2K0vCWiBRh+2p30tmNKSwW6c3Mw589tYCegOPWyQXj8XFxdKX9kYffy2KK XSNI9LhOjUMH6XJqcOXRIZr9PxkCa9wY/iiGiNy662r0JFUv9PHEuXfpA7qzoJiS TnR0A/kRq+nV1bffsT3Q2rMD58zP6bXF+EVDP7pDn9RGGDA55squ8rZM32xwuabG B7xXGQdw6PsVfQq58kM1ey19cQdeXFSXFOZ7+nZ+XxnrX671IW416Nzt93Qsqo6a 9kGUPF4XEbT1dcI5TrCKlUjqMWM67GAXfdt5HzKbEtE0at0YMJQ= -----END CERTIFICATE-----Generated at Fri May 9 23:15:22 2025 by rpki-client