$ rpki-client -vvf repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft File: B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft (raw, json) Hash identifier: 8nDHiYsuD85tioaeJsrcdHq7KczkUFonVZpuPIdgA6k= Subject key identifier: D8:1C:42:A2:8E:3D:83:44:9A:73:78:92:18:9F:8E:78:A2:AB:05:22 Authority key identifier: B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7 Certificate issuer: /CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7 Certificate serial: 4D3AEB5A45823018395A95170ADBF2F77D23EB08 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft Manifest number: 015B Signing time: Mon 05 May 2025 05:50:35 +0000 Manifest this update: Mon 05 May 2025 05:45:35 +0000 Manifest next update: Thu 08 May 2025 11:40:35 +0000 Files and hashes: 1: B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl (hash: M+eZkeBYDbiWPdv6FlmOUVPf9ci5ynnVleaMe2lUzHo=) 2: 3130332e3138352e3139372e302f32342d3234203d3e20313333333535.roa (hash: PjJ5xaEmVECnvYiFxtFmdeDestY/+54rJNs+3F7mqcY=) 3: 3130332e3230392e3133312e302f32342d3234203d3e20313333333535.roa (hash: j+U4AErtYzwumrbJ7yEuFWr2i7wA+4c75xZyRtRhbQ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 11:40:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:3a:eb:5a:45:82:30:18:39:5a:95:17:0a:db:f2:f7:7d:23:eb:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7 Validity Not Before: May 5 05:45:35 2025 GMT Not After : May 8 11:40:35 2025 GMT Subject: CN=D81C42A28E3D83449A737892189F8E78A2AB0522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:45:4b:42:80:31:f8:aa:d5:8b:c4:eb:36:5c: d6:3e:fd:d8:d1:ad:d7:ac:5b:7e:52:c4:d9:5c:94: 8b:c9:68:db:80:21:61:15:a5:16:d4:07:75:cb:e8: 73:83:16:f9:0e:64:30:a8:3b:45:d6:e7:4a:80:73: 7e:cf:45:ec:4a:6e:09:4f:f7:58:8f:d8:bd:b0:f9: d6:f4:74:ca:68:4c:c1:67:4a:7a:de:8d:b0:47:15: 26:33:af:60:39:0d:c5:66:ba:a7:b0:d7:8c:12:92: 59:3c:d5:f9:76:42:7f:22:88:f9:51:2d:37:b0:67: 93:d8:db:4d:f0:31:4a:38:9f:25:2e:a8:a4:b2:72: 99:41:67:d5:00:c3:75:11:b4:7a:78:55:4d:c3:2f: 87:03:d3:e1:fe:34:a1:f4:99:35:01:ba:7f:2d:c4: e4:12:25:30:8c:89:89:77:1c:00:51:fd:b6:1a:03: 89:c3:ab:f4:af:8d:27:d4:b1:f3:38:4e:35:ba:ca: 29:63:f7:0c:a1:e1:22:f8:37:6d:cb:76:f9:a6:40: 85:be:d4:6c:a6:d5:6b:9d:e7:69:96:45:d1:60:56: 78:0e:6a:5d:ea:77:f7:bd:97:8f:8c:91:fa:8f:d9: e7:6c:5f:e6:00:80:90:3f:4d:01:3a:d8:2b:0a:2a: ec:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:1C:42:A2:8E:3D:83:44:9A:73:78:92:18:9F:8E:78:A2:AB:05:22 X509v3 Authority Key Identifier: keyid:B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:89:9f:ff:06:65:a9:08:52:cf:62:23:16:ec:4c:10:44:b5: 63:eb:e1:ef:74:ae:1d:b8:99:b1:f9:3f:67:ce:0f:b3:81:a1: dc:6e:f3:d6:a5:45:4b:ba:a1:18:f5:a1:3f:70:88:af:69:a1: bc:26:ae:49:f4:1a:c0:b0:e5:a1:d7:1d:41:85:53:df:20:8d: 95:47:d5:04:ac:49:13:e3:ad:93:f0:08:92:79:eb:9d:92:51: 59:b8:2e:31:4b:65:cc:f6:2e:de:d9:e9:27:7d:2c:22:86:66: 16:5e:28:45:f2:c6:19:90:09:32:11:c8:15:ae:51:05:c9:cd: 69:47:94:9a:22:09:e0:b9:fa:7a:09:8b:e6:cb:ca:f0:da:0c: d9:59:f2:71:c3:de:a4:92:f5:56:91:c6:c8:41:2a:95:c3:22: 86:19:84:b5:6b:48:5e:2c:7b:b4:b0:27:88:d5:38:31:2f:35: fd:ee:29:b0:f9:c1:23:d8:9f:0d:8b:74:61:21:0b:71:02:08: 14:ae:fa:ae:54:72:6b:69:6e:31:07:c0:89:8c:c4:23:63:61: 10:4a:d0:ca:cf:d4:73:d1:28:ef:2d:71:1f:a0:ec:96:c6:c8: 0e:1d:2c:7a:4e:85:e2:61:6f:22:80:f9:22:2d:29:ce:3b:d4: bd:e9:59:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTTrrWkWCMBg5WpUXCtvy930j6wgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYwQUYz QTgxRkZGNzAeFw0yNTA1MDUwNTQ1MzVaFw0yNTA1MDgxMTQwMzVaMDMxMTAvBgNV BAMTKEQ4MUM0MkEyOEUzRDgzNDQ5QTczNzg5MjE4OUY4RTc4QTJBQjA1MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwRUtCgDH4qtWLxOs2XNY+/djR rdesW35SxNlclIvJaNuAIWEVpRbUB3XL6HODFvkOZDCoO0XW50qAc37PRexKbglP 91iP2L2w+db0dMpoTMFnSnrejbBHFSYzr2A5DcVmuqew14wSklk81fl2Qn8iiPlR LTewZ5PY203wMUo4nyUuqKSycplBZ9UAw3URtHp4VU3DL4cD0+H+NKH0mTUBun8t xOQSJTCMiYl3HABR/bYaA4nDq/SvjSfUsfM4TjW6yilj9wyh4SL4N23LdvmmQIW+ 1Gym1Wud52mWRdFgVngOal3qd/e9l4+MkfqP2edsX+YAgJA/TQE62CsKKuzLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2BxCoo49g0Sac3iSGJ+OeKKrBSIwHwYDVR0j BBgwFoAUub62DNYiTUHzM6B+GCDwrzqB//cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MWY4N2Y1YS1mNmY5LTQ2OGQtODk1ZS0zMTQ0ODdmNWUyNWUvMC9COUJFQjYwQ0Q2 MjI0RDQxRjMzM0EwN0UxODIwRjBBRjNBODFGRkY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYwQUYzQTgx RkZGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjFmODdmNWEtZjZmOS00NjhkLTg5 NWUtMzE0NDg3ZjVlMjVlLzAvQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYw QUYzQTgxRkZGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6Jn/8GZakIUs9iIxbsTBBEtWPr4e90rh24 mbH5P2fOD7OBodxu89alRUu6oRj1oT9wiK9pobwmrkn0GsCw5aHXHUGFU98gjZVH 1QSsSRPjrZPwCJJ5652SUVm4LjFLZcz2Lt7Z6Sd9LCKGZhZeKEXyxhmQCTIRyBWu UQXJzWlHlJoiCeC5+noJi+bLyvDaDNlZ8nHD3qSS9VaRxshBKpXDIoYZhLVrSF4s e7SwJ4jVODEvNf3uKbD5wSPYnw2LdGEhC3ECCBSu+q5UcmtpbjEHwImMxCNjYRBK 0MrP1HPRKO8tcR+g7JbGyA4dLHpOheJhbyKA+SItKc471L3pWRc= -----END CERTIFICATE-----Generated at Wed May 7 01:55:51 2025 by rpki-client