$ rpki-client -vvf repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft File: B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft (raw, json) Hash identifier: K6VMrv2143yp0RuLj2DvDQ/fBaKtXGEfktAtQs4eiVc= Subject key identifier: CD:B9:7E:07:FE:E8:7A:3A:5E:AA:84:6C:8F:18:F0:2D:E5:15:DB:6C Authority key identifier: B4:15:3D:CE:E8:7E:15:F9:2A:AB:AC:0D:F6:72:9C:9A:5D:E5:CF:CC Certificate issuer: /CN=B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC Certificate serial: 2D73F52A0068EF99933958281299621687EDB916 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft Manifest number: 04E6 Signing time: Sun 29 Jun 2025 06:51:10 +0000 Manifest this update: Sun 29 Jun 2025 06:46:10 +0000 Manifest next update: Wed 02 Jul 2025 13:28:10 +0000 Files and hashes: 1: 323030313a6466363a643730303a3a2f34382d3438203d3e20313338303738.roa (hash: wfDpnHqmUN+eXihzqBSKr7BZajQvwRQ5W0edcS/2fRk=) 2: B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.crl (hash: N23MgmwrS6QGaTWdNbVuLvsY2wp1ri9K4EEO+cOqYHA=) 3: 3130332e3132332e3233362e302f32342d3234203d3e20313338303738.roa (hash: RmlnKYQXWGOfP+UEgb2aQ4Zckhx5L2Ib8Jbz3UBAKro=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.crl rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:73:f5:2a:00:68:ef:99:93:39:58:28:12:99:62:16:87:ed:b9:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC Validity Not Before: Jun 29 06:46:10 2025 GMT Not After : Jul 2 13:28:10 2025 GMT Subject: CN=CDB97E07FEE87A3A5EAA846C8F18F02DE515DB6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b3:6b:83:b8:d3:eb:46:61:bc:e6:f8:70:e7: 63:59:fa:16:78:cb:d9:f6:da:f6:b5:04:7a:ba:0e: 4d:63:d0:08:cb:43:99:e2:cd:14:9f:da:63:84:5c: 81:2a:f7:4a:26:41:53:36:71:3d:17:2f:2d:ec:0f: 19:ee:1d:60:23:d2:b4:39:7a:2b:97:dd:b9:83:ad: 60:72:fb:9f:19:f0:78:19:dc:a4:a1:e5:6d:05:90: f0:91:91:0e:d1:83:96:4c:3e:6d:09:3f:0f:96:e2: 22:5b:69:22:fd:26:8a:6e:1a:8d:1d:76:7b:c6:42: c2:44:e8:9d:f8:f4:e0:1b:d8:36:94:df:29:1f:14: 19:4a:a9:19:db:b8:2e:17:0d:f4:20:a4:5c:9b:c4: 36:40:ec:fb:e5:ff:2f:8b:46:ac:e2:7c:b1:15:e1: 5a:37:78:a5:d4:5a:fe:58:54:6f:09:74:4f:20:b9: 05:d6:4e:a4:9b:d7:dd:3d:e9:21:ec:40:1e:1c:57: bb:c3:54:b9:30:c0:0a:49:85:d2:65:5b:8d:57:7d: b2:8f:e0:62:83:88:b5:3f:3e:0d:42:68:8e:c8:7f: 13:71:e1:63:e7:1e:44:93:61:1a:f4:ee:8c:3d:05: 7d:cd:d0:28:a5:ca:7f:c0:65:ec:cc:0b:e9:77:4a: 2b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B9:7E:07:FE:E8:7A:3A:5E:AA:84:6C:8F:18:F0:2D:E5:15:DB:6C X509v3 Authority Key Identifier: keyid:B4:15:3D:CE:E8:7E:15:F9:2A:AB:AC:0D:F6:72:9C:9A:5D:E5:CF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:67:fb:73:c0:e9:14:a8:1e:d1:ae:27:a6:dc:3e:a8:07:57: e0:cc:86:5c:68:33:f5:e2:a8:ce:45:00:43:04:35:1c:a1:0d: d7:06:20:b7:12:36:06:ff:be:84:45:4c:50:1d:99:6c:e5:a6: 7f:da:3a:72:f8:c5:a9:37:da:98:a7:d7:95:0e:ad:37:67:a9: 38:7d:55:b8:3f:98:02:0a:f9:92:dc:f9:69:85:d8:da:59:c8: ab:c9:04:b3:96:eb:75:e6:39:3e:15:f2:92:6d:02:2e:01:e1: a3:f5:ee:0f:49:e3:db:56:16:06:b3:0c:b8:41:2c:2f:d0:e2: 65:e5:5c:90:74:62:f5:e1:60:7e:f2:6e:5e:55:2a:67:e1:02: cb:f4:4b:c1:ea:d5:82:bc:1b:9a:98:5f:27:44:ed:13:4e:0a: 11:c3:75:b6:3c:1d:ae:35:4c:48:05:88:7e:b8:06:c5:67:b0: 4e:da:be:81:cf:a9:12:07:e1:6f:4e:6d:cb:99:4c:f7:a5:17: a3:4f:cf:bc:dd:15:07:70:07:46:81:b2:56:cb:30:64:57:65: ec:37:bf:5e:7f:30:e2:25:4c:d0:9a:a6:18:6b:f2:da:3d:2f: c7:33:b0:2c:73:30:c3:fa:90:a9:53:1b:8f:95:7a:51:35:4d: 34:f3:db:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULXP1KgBo75mTOVgoEpliFoftuRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQxNTNEQ0VFODdFMTVGOTJBQUJBQzBERjY3MjlDOUE1 REU1Q0ZDQzAeFw0yNTA2MjkwNjQ2MTBaFw0yNTA3MDIxMzI4MTBaMDMxMTAvBgNV BAMTKENEQjk3RTA3RkVFODdBM0E1RUFBODQ2QzhGMThGMDJERTUxNURCNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDos2uDuNPrRmG85vhw52NZ+hZ4 y9n22va1BHq6Dk1j0AjLQ5nizRSf2mOEXIEq90omQVM2cT0XLy3sDxnuHWAj0rQ5 eiuX3bmDrWBy+58Z8HgZ3KSh5W0FkPCRkQ7Rg5ZMPm0JPw+W4iJbaSL9JopuGo0d dnvGQsJE6J349OAb2DaU3ykfFBlKqRnbuC4XDfQgpFybxDZA7Pvl/y+LRqzifLEV 4Vo3eKXUWv5YVG8JdE8guQXWTqSb19096SHsQB4cV7vDVLkwwApJhdJlW41XfbKP 4GKDiLU/Pg1CaI7IfxNx4WPnHkSTYRr07ow9BX3N0Cilyn/AZezMC+l3SitbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzbl+B/7oejpeqoRsjxjwLeUV22wwHwYDVR0j BBgwFoAUtBU9zuh+Ffkqq6wN9nKcml3lz8wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NWM5YzM5NC1mY2QwLTRiNGItYmIxYS04MjQ3NzBmNDAzNDIvMC9CNDE1M0RDRUU4 N0UxNUY5MkFBQkFDMERGNjcyOUM5QTVERTVDRkNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQxNTNEQ0VFODdFMTVGOTJBQUJBQzBERjY3MjlDOUE1REU1 Q0ZDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjVjOWMzOTQtZmNkMC00YjRiLWJi MWEtODI0NzcwZjQwMzQyLzAvQjQxNTNEQ0VFODdFMTVGOTJBQUJBQzBERjY3MjlD OUE1REU1Q0ZDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKNn+3PA6RSoHtGuJ6bcPqgHV+DMhlxoM/Xi qM5FAEMENRyhDdcGILcSNgb/voRFTFAdmWzlpn/aOnL4xak32pin15UOrTdnqTh9 Vbg/mAIK+ZLc+WmF2NpZyKvJBLOW63XmOT4V8pJtAi4B4aP17g9J49tWFgazDLhB LC/Q4mXlXJB0YvXhYH7ybl5VKmfhAsv0S8Hq1YK8G5qYXydE7RNOChHDdbY8Ha41 TEgFiH64BsVnsE7avoHPqRIH4W9ObcuZTPelF6NPz7zdFQdwB0aBslbLMGRXZew3 v15/MOIlTNCaphhr8to9L8czsCxzMMP6kKlTG4+VelE1TTTz2+c= -----END CERTIFICATE-----Generated at Sun Jun 29 19:50:04 2025 by rpki-client