$ rpki-client -vvf repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft File: B956E5764D9917A7389654D67836D02779ED9E22.mft (raw, json) Hash identifier: TI7JzFYkYCA2SB15mg59V3E27ud60rjmpHNt5VnR0Xo= Subject key identifier: 23:09:BE:D4:45:78:19:20:C9:C5:9D:BC:9A:F9:E6:F1:88:C1:4A:2A Authority key identifier: B9:56:E5:76:4D:99:17:A7:38:96:54:D6:78:36:D0:27:79:ED:9E:22 Certificate issuer: /CN=B956E5764D9917A7389654D67836D02779ED9E22 Certificate serial: 46E9519FF117CDD46982CD305EC917B3474EA113 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft Manifest number: 01CC Signing time: Sat 28 Jun 2025 19:51:12 +0000 Manifest this update: Sat 28 Jun 2025 19:46:12 +0000 Manifest next update: Tue 01 Jul 2025 19:52:12 +0000 Files and hashes: 1: 3130332e34342e31392e302f32342d3234203d3e20313530313931.roa (hash: xRSXhth5RPLQDUpDjvFyriqelwPeLnjETcyxKSf1xt8=) 2: B956E5764D9917A7389654D67836D02779ED9E22.crl (hash: 6xZAbHuLSl0RkTiQasXKAmBtvJqhzQAsSy7f/NMt5Ok=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.crl rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 19:52:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:e9:51:9f:f1:17:cd:d4:69:82:cd:30:5e:c9:17:b3:47:4e:a1:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B956E5764D9917A7389654D67836D02779ED9E22 Validity Not Before: Jun 28 19:46:12 2025 GMT Not After : Jul 1 19:52:12 2025 GMT Subject: CN=2309BED445781920C9C59DBC9AF9E6F188C14A2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e2:05:e4:98:4b:2a:d3:d9:0f:3b:07:0f:98: 73:57:0d:5a:4a:6b:25:c3:e2:ea:2e:2a:44:08:ad: 44:a7:a4:0a:e5:a4:58:4b:be:25:c4:4d:7b:cb:c9: bc:0c:9b:6c:64:35:b4:47:38:47:a7:48:a5:7f:d8: d3:63:76:72:2c:4d:b6:77:69:18:c6:0e:16:e3:6c: 05:4f:38:2c:ad:72:f1:f5:de:d4:83:17:69:38:dd: 45:89:ad:d9:a8:27:e1:ca:0f:20:f5:97:69:7d:42: ce:5f:16:00:bb:fa:02:f4:89:5c:51:33:48:38:59: 2b:bd:24:fd:47:31:c8:a5:ae:0a:fd:7b:79:29:b7: 6f:b1:99:74:d0:7f:ed:92:72:5b:66:af:81:b8:20: 9b:35:5b:f4:8e:cd:f4:b6:c2:58:12:2a:4d:38:d5: 4f:33:51:43:a6:c7:af:a2:71:0e:f0:51:5a:cc:ff: 22:7a:21:ca:01:2f:02:ef:43:30:a3:21:7d:29:2c: 08:31:0d:17:84:13:9a:52:48:d9:c0:c9:ce:a9:80: c5:3b:01:14:1c:e8:a1:fa:39:37:6a:56:4a:3e:8e: a7:48:44:82:16:12:b0:e9:9e:22:2f:72:bc:73:93: dd:96:ae:4f:4f:2c:ca:9a:f0:87:df:30:52:57:07: ec:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:09:BE:D4:45:78:19:20:C9:C5:9D:BC:9A:F9:E6:F1:88:C1:4A:2A X509v3 Authority Key Identifier: keyid:B9:56:E5:76:4D:99:17:A7:38:96:54:D6:78:36:D0:27:79:ED:9E:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:e7:e6:6e:dc:c0:5a:30:77:1b:10:17:c9:38:ea:be:7a:84: cd:ce:de:ac:9b:3e:dd:2f:66:19:f5:5e:13:ea:bd:c0:78:c4: a2:c7:6b:54:02:60:dc:76:83:0f:4b:e1:4f:0d:a9:24:d4:c9: 70:fb:6b:eb:d0:e2:92:63:f4:fe:97:a9:a7:81:f6:3a:e3:68: 56:06:04:b3:41:ae:53:aa:04:fc:27:88:83:23:0f:77:fc:7a: 9a:58:8d:86:38:82:cc:27:19:de:84:1b:53:46:38:cd:43:15: 1c:b2:f8:ed:21:72:8a:c7:32:0e:9b:54:f0:65:85:2b:ec:f6: 82:1d:71:66:be:fd:74:d4:86:da:f5:c3:60:d8:be:9b:a0:24: 7f:b3:c2:dd:2f:57:67:a4:5d:e9:58:c0:42:40:f5:cd:4c:ee: 12:85:c8:e4:df:e3:de:1f:c9:7d:75:d2:05:68:f8:f3:c4:f0: 4e:df:ad:26:78:28:71:e1:0d:0e:bd:ae:1d:69:e7:aa:59:d7: 4f:d3:ca:95:37:d8:e9:54:43:8c:94:e7:75:36:c5:54:7d:23: a5:0d:d9:9a:1f:98:06:59:20:e1:f0:db:0a:68:48:ec:12:72: d6:d5:28:b4:2b:46:bd:8d:b0:bb:85:11:d6:1c:d7:8e:70:be: 20:a4:f7:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURulRn/EXzdRpgs0wXskXs0dOoRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk1NkU1NzY0RDk5MTdBNzM4OTY1NEQ2NzgzNkQwMjc3 OUVEOUUyMjAeFw0yNTA2MjgxOTQ2MTJaFw0yNTA3MDExOTUyMTJaMDMxMTAvBgNV BAMTKDIzMDlCRUQ0NDU3ODE5MjBDOUM1OURCQzlBRjlFNkYxODhDMTRBMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW4gXkmEsq09kPOwcPmHNXDVpK ayXD4uouKkQIrUSnpArlpFhLviXETXvLybwMm2xkNbRHOEenSKV/2NNjdnIsTbZ3 aRjGDhbjbAVPOCytcvH13tSDF2k43UWJrdmoJ+HKDyD1l2l9Qs5fFgC7+gL0iVxR M0g4WSu9JP1HMcilrgr9e3kpt2+xmXTQf+2Scltmr4G4IJs1W/SOzfS2wlgSKk04 1U8zUUOmx6+icQ7wUVrM/yJ6IcoBLwLvQzCjIX0pLAgxDReEE5pSSNnAyc6pgMU7 ARQc6KH6OTdqVko+jqdIRIIWErDpniIvcrxzk92Wrk9PLMqa8IffMFJXB+ytAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIwm+1EV4GSDJxZ28mvnm8YjBSiowHwYDVR0j BBgwFoAUuVbldk2ZF6c4llTWeDbQJ3ntniIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODExN2NhOC1iNGU1LTQ2N2EtODhhOC1hNGI2M2U0MGMzZWQvMC9COTU2RTU3NjRE OTkxN0E3Mzg5NjU0RDY3ODM2RDAyNzc5RUQ5RTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjk1NkU1NzY0RDk5MTdBNzM4OTY1NEQ2NzgzNkQwMjc3OUVE OUUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjgxMTdjYTgtYjRlNS00NjdhLTg4 YTgtYTRiNjNlNDBjM2VkLzAvQjk1NkU1NzY0RDk5MTdBNzM4OTY1NEQ2NzgzNkQw Mjc3OUVEOUUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABvn5m7cwFowdxsQF8k46r56hM3O3qybPt0v Zhn1XhPqvcB4xKLHa1QCYNx2gw9L4U8NqSTUyXD7a+vQ4pJj9P6XqaeB9jrjaFYG BLNBrlOqBPwniIMjD3f8eppYjYY4gswnGd6EG1NGOM1DFRyy+O0hcorHMg6bVPBl hSvs9oIdcWa+/XTUhtr1w2DYvpugJH+zwt0vV2ekXelYwEJA9c1M7hKFyOTf494f yX110gVo+PPE8E7frSZ4KHHhDQ69rh1p56pZ10/TypU32OlUQ4yU53U2xVR9I6UN 2ZofmAZZIOHw2wpoSOwSctbVKLQrRr2NsLuFEdYc145wviCk99g= -----END CERTIFICATE-----Generated at Mon Jun 30 08:32:34 2025 by rpki-client