$ rpki-client -vvf repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft File: B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft (raw, json) Hash identifier: Ed0r4Ma7WOH3MNCrxexc60rVVAiId7mBtfIJz37GIeE= Subject key identifier: 94:83:6A:BC:91:46:96:A3:40:AD:37:D2:69:AD:D6:4A:C3:3E:9D:00 Authority key identifier: B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94 Certificate issuer: /CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094 Certificate serial: 1C94D91E6E6699BE2299DA77C788381B809F1CD8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft Manifest number: 0186 Signing time: Fri 09 May 2025 19:30:04 +0000 Manifest this update: Fri 09 May 2025 19:25:04 +0000 Manifest next update: Mon 12 May 2025 21:06:04 +0000 Files and hashes: 1: 3130332e312e35312e302f32342d3234203d3e20313432333532.roa (hash: Lx6mbXqTbsqqqJEaZ6Ptl1cSIXULA4hNI34A7lM8ago=) 2: 3130332e312e35302e302f32332d3233203d3e20313432333532.roa (hash: Pk+CfBb09D2NLm+w/mIdTLsk/cAe1V1lpiWgoIeGFHc=) 3: 3130332e312e35302e302f32342d3234203d3e20313432333532.roa (hash: 13a296YbpXPKiDroOx9RoYtV5Gqcvos+cOx12thufiw=) 4: B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl (hash: HPHJzQzp2dNGGksUy6TCet+bxAspkWXvSzCj4xgbywM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 21:06:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:94:d9:1e:6e:66:99:be:22:99:da:77:c7:88:38:1b:80:9f:1c:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094 Validity Not Before: May 9 19:25:04 2025 GMT Not After : May 12 21:06:04 2025 GMT Subject: CN=94836ABC914696A340AD37D269ADD64AC33E9D00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ad:ef:ed:4a:d5:2b:1f:a6:8d:7c:fe:c1:86: dc:5a:b1:42:af:12:e7:71:7c:d3:52:c4:67:65:7d: 5d:f0:9f:64:bf:45:6a:ef:c7:58:60:c6:dc:33:ea: 3c:18:0a:cb:c0:a6:00:d9:10:04:86:4b:a5:54:0c: 91:a7:64:bb:69:18:da:fa:57:7d:97:57:fb:6b:f7: b6:f4:97:f1:72:09:2f:be:2b:ad:ed:0b:bc:36:f2: 18:c9:b0:d6:a5:bb:bf:60:9f:33:89:74:e4:a4:7a: e7:60:8e:d4:0d:ab:00:69:26:bb:08:23:74:e1:3f: a8:25:e5:c6:38:41:01:aa:16:76:55:7f:ae:9d:41: 55:c6:ee:19:68:c5:e2:cc:90:be:da:e6:24:ac:dd: f3:24:f3:75:a7:11:4c:29:3d:0b:7b:2b:bc:e9:bd: e2:02:11:44:a4:ae:aa:2f:a8:27:56:eb:50:6f:a2: 99:4f:34:27:75:f1:19:52:02:08:89:ea:70:3f:30: 28:f8:c3:49:f7:7d:d4:ac:20:eb:5d:0f:f1:8a:dc: b7:e9:3d:42:56:8c:74:0b:5d:8b:d3:39:39:22:7e: 4d:30:6c:53:01:37:ef:b0:bc:ac:85:8e:fa:5b:17: 50:99:b0:25:46:72:27:32:6f:12:dc:3f:ab:01:89: 73:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:83:6A:BC:91:46:96:A3:40:AD:37:D2:69:AD:D6:4A:C3:3E:9D:00 X509v3 Authority Key Identifier: keyid:B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:01:b7:1e:22:da:da:71:6c:ba:2f:90:a0:39:64:7e:74:27: ff:dc:1f:60:98:51:a7:66:8c:ec:e0:83:0d:e2:69:eb:f6:6f: bc:51:55:6b:5c:96:e1:02:0b:21:45:35:1e:a5:8b:cd:ac:fb: bd:1d:25:62:d1:6c:6d:43:96:34:d3:6d:a2:3c:06:da:b4:ef: 11:d9:46:38:60:75:52:a6:ce:21:f6:c7:8c:41:32:7f:ef:81: 47:44:9c:36:70:3e:da:b6:f9:61:86:a2:36:0c:a7:d2:bc:64: f2:06:f8:fe:ff:73:45:55:b2:7b:49:66:9a:02:13:fb:1e:14: 47:50:18:4b:74:f9:e1:1f:2b:90:4a:f0:36:12:ac:eb:96:94: ca:65:3c:ec:bb:9c:bc:3c:d2:7a:20:24:7e:66:a1:4c:db:9a: f8:0a:d2:ea:5a:66:c3:bb:35:f5:b5:5d:8e:62:b9:cd:96:74: 78:46:b7:b7:65:f4:d4:ec:7f:d7:d5:c7:6a:3e:3f:cc:d4:8e: 43:f1:e5:ce:cc:ec:6f:69:16:ba:84:e8:93:10:8e:48:ce:3c: fe:0c:30:88:1d:6c:a6:41:9e:99:8e:69:fd:4b:c1:28:43:45: 24:e8:49:b1:32:07:68:45:bf:a6:7f:e3:2c:d5:07:3d:ea:13: 44:29:bd:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHJTZHm5mmb4imdp3x4g4G4CfHNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1RDJB MDk5MzA5NDAeFw0yNTA1MDkxOTI1MDRaFw0yNTA1MTIyMTA2MDRaMDMxMTAvBgNV BAMTKDk0ODM2QUJDOTE0Njk2QTM0MEFEMzdEMjY5QURENjRBQzMzRTlEMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRre/tStUrH6aNfP7BhtxasUKv EudxfNNSxGdlfV3wn2S/RWrvx1hgxtwz6jwYCsvApgDZEASGS6VUDJGnZLtpGNr6 V32XV/tr97b0l/FyCS++K63tC7w28hjJsNalu79gnzOJdOSkeudgjtQNqwBpJrsI I3ThP6gl5cY4QQGqFnZVf66dQVXG7hloxeLMkL7a5iSs3fMk83WnEUwpPQt7K7zp veICEUSkrqovqCdW61BvoplPNCd18RlSAgiJ6nA/MCj4w0n3fdSsIOtdD/GK3Lfp PUJWjHQLXYvTOTkifk0wbFMBN++wvKyFjvpbF1CZsCVGcicybxLcP6sBiXM1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlINqvJFGlqNArTfSaa3WSsM+nQAwHwYDVR0j BBgwFoAUtINF9/n7TxT//ovFt0aF0qCZMJQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjUyYmY5Yy02MzRiLTQwYjktYWMwYy1hODdiNDdkNTlmOTEvMC9CNDgzNDVGN0Y5 RkI0RjE0RkZGRThCQzVCNzQ2ODVEMkEwOTkzMDk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1RDJBMDk5 MzA5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY1MmJmOWMtNjM0Yi00MGI5LWFj MGMtYTg3YjQ3ZDU5ZjkxLzAvQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1 RDJBMDk5MzA5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAYBtx4i2tpxbLovkKA5ZH50J//cH2CYUadm jOzggw3iaev2b7xRVWtcluECCyFFNR6li82s+70dJWLRbG1DljTTbaI8Btq07xHZ RjhgdVKmziH2x4xBMn/vgUdEnDZwPtq2+WGGojYMp9K8ZPIG+P7/c0VVsntJZpoC E/seFEdQGEt0+eEfK5BK8DYSrOuWlMplPOy7nLw80nogJH5moUzbmvgK0upaZsO7 NfW1XY5iuc2WdHhGt7dl9NTsf9fVx2o+P8zUjkPx5c7M7G9pFrqE6JMQjkjOPP4M MIgdbKZBnpmOaf1LwShDRSToSbEyB2hFv6Z/4yzVBz3qE0QpvcQ= -----END CERTIFICATE-----Generated at Sun May 11 05:12:24 2025 by rpki-client