$ rpki-client -vvf repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft File: B956E5764D9917A7389654D67836D02779ED9E22.mft (raw, json) Hash identifier: i0JrbUllkIsWCxZk7HaJsJwVuyi6HHO4IO++v5LNHok= Subject key identifier: 89:8F:01:0E:3B:05:98:8B:78:01:C5:F1:F2:30:D1:87:25:75:44:F7 Authority key identifier: B9:56:E5:76:4D:99:17:A7:38:96:54:D6:78:36:D0:27:79:ED:9E:22 Certificate issuer: /CN=B956E5764D9917A7389654D67836D02779ED9E22 Certificate serial: 4BB419606F8FDE91E313590973E8815369E9D4E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft Manifest number: 01B4 Signing time: Tue 06 May 2025 02:01:08 +0000 Manifest this update: Tue 06 May 2025 01:56:08 +0000 Manifest next update: Fri 09 May 2025 05:06:08 +0000 Files and hashes: 1: 3130332e34342e31392e302f32342d3234203d3e20313530313931.roa (hash: yZTOcXBkGCXgKprLwFpmf211S49vRO43pg0K+2x6c9c=) 2: B956E5764D9917A7389654D67836D02779ED9E22.crl (hash: wVAi5MlfzLknpiz2hb5EXiRIrApabP9iLXyWoGaN7yQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.crl rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 05:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:b4:19:60:6f:8f:de:91:e3:13:59:09:73:e8:81:53:69:e9:d4:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B956E5764D9917A7389654D67836D02779ED9E22 Validity Not Before: May 6 01:56:08 2025 GMT Not After : May 9 05:06:08 2025 GMT Subject: CN=898F010E3B05988B7801C5F1F230D187257544F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:bd:1f:7b:c3:28:9e:05:7f:52:f0:26:23:50: ed:e3:b3:1c:77:fb:1a:d9:99:76:69:72:34:95:b2: d5:4c:9d:13:84:41:86:74:d0:62:b7:34:39:bd:4d: 30:a4:b0:08:b2:1f:e7:20:b7:34:20:95:ee:cf:52: 5f:c2:21:7e:e1:0b:55:7b:f8:16:ae:b4:a9:2d:64: b4:55:e9:b5:d4:4b:09:73:70:db:b4:fc:14:26:7b: a0:88:d2:a2:ca:e6:fc:fa:27:4b:27:9b:75:fd:63: 54:c2:77:36:ad:cd:6e:6a:99:1e:7f:36:e1:9e:bf: 76:b3:3e:2b:54:ed:56:d0:87:73:2d:f3:8f:46:8c: 19:97:5c:cf:b3:a1:ef:1d:79:bb:53:e5:0b:cc:f1: 8f:83:c4:d3:05:3d:e7:17:43:21:c8:40:71:24:f0: cc:59:8f:56:16:a8:ed:3d:3d:b6:85:7c:2d:fe:87: c9:99:56:0d:05:29:db:26:93:52:0f:e8:dc:ff:99: 39:b8:1f:48:05:a9:b0:83:c2:12:ce:d8:1c:1b:ac: 67:34:a0:30:ee:a6:9d:45:75:ac:31:f8:8f:01:9e: 85:45:d3:27:79:18:73:41:a7:41:13:8b:8b:57:6c: c6:5f:8c:6d:5b:81:fa:5b:b8:96:d4:3c:ea:d2:e8: ee:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:8F:01:0E:3B:05:98:8B:78:01:C5:F1:F2:30:D1:87:25:75:44:F7 X509v3 Authority Key Identifier: keyid:B9:56:E5:76:4D:99:17:A7:38:96:54:D6:78:36:D0:27:79:ED:9E:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:21:d0:37:d2:8d:75:43:48:68:60:d9:34:56:cd:69:8d:8b: ac:a5:12:b7:cb:d7:aa:f9:5e:80:cf:f8:7c:4d:75:99:09:4f: c2:f0:c3:7b:e7:44:3c:ef:36:e1:f8:23:6d:e4:a5:9a:3b:44: 2d:33:6c:e8:f9:b8:c2:a1:1f:84:1f:fc:91:84:48:c4:4e:b9: ae:c0:b0:6d:52:9d:c1:9a:4d:fa:ba:78:f0:85:8d:4f:6c:d2: bd:f0:ad:2c:b2:84:a2:99:af:23:b8:71:22:63:a2:01:0b:d9: 4a:44:77:c1:25:96:eb:06:b2:07:e8:e7:bf:9a:e5:8c:09:cb: 90:1a:ed:98:7e:42:2c:0d:05:f2:a7:02:65:2b:ed:88:4a:22: 5e:22:93:85:8f:06:7c:40:4f:4d:64:91:e0:5a:e9:46:a7:d8: 56:cc:fa:27:43:ef:63:12:4f:68:59:a0:08:20:01:cc:c7:81: f6:15:6f:e0:3a:cc:06:97:30:aa:6f:06:ce:76:d3:24:22:00: 43:e4:27:b7:08:b4:5a:ab:f0:a8:fe:83:37:77:63:e6:22:37: 13:9e:24:d1:3d:3e:1c:d9:13:77:09:75:06:4c:3e:af:fb:b0: b1:e2:7d:fc:8e:ab:bc:63:ea:cf:3f:73:02:8e:7b:8a:9f:8e: 8b:94:e4:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS7QZYG+P3pHjE1kJc+iBU2np1OcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk1NkU1NzY0RDk5MTdBNzM4OTY1NEQ2NzgzNkQwMjc3 OUVEOUUyMjAeFw0yNTA1MDYwMTU2MDhaFw0yNTA1MDkwNTA2MDhaMDMxMTAvBgNV BAMTKDg5OEYwMTBFM0IwNTk4OEI3ODAxQzVGMUYyMzBEMTg3MjU3NTQ0RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYvR97wyieBX9S8CYjUO3jsxx3 +xrZmXZpcjSVstVMnROEQYZ00GK3NDm9TTCksAiyH+cgtzQgle7PUl/CIX7hC1V7 +BautKktZLRV6bXUSwlzcNu0/BQme6CI0qLK5vz6J0snm3X9Y1TCdzatzW5qmR5/ NuGev3azPitU7VbQh3Mt849GjBmXXM+zoe8debtT5QvM8Y+DxNMFPecXQyHIQHEk 8MxZj1YWqO09PbaFfC3+h8mZVg0FKdsmk1IP6Nz/mTm4H0gFqbCDwhLO2BwbrGc0 oDDupp1Fdawx+I8BnoVF0yd5GHNBp0ETi4tXbMZfjG1bgfpbuJbUPOrS6O7vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiY8BDjsFmIt4AcXx8jDRhyV1RPcwHwYDVR0j BBgwFoAUuVbldk2ZF6c4llTWeDbQJ3ntniIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODExN2NhOC1iNGU1LTQ2N2EtODhhOC1hNGI2M2U0MGMzZWQvMC9COTU2RTU3NjRE OTkxN0E3Mzg5NjU0RDY3ODM2RDAyNzc5RUQ5RTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjk1NkU1NzY0RDk5MTdBNzM4OTY1NEQ2NzgzNkQwMjc3OUVE OUUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjgxMTdjYTgtYjRlNS00NjdhLTg4 YTgtYTRiNjNlNDBjM2VkLzAvQjk1NkU1NzY0RDk5MTdBNzM4OTY1NEQ2NzgzNkQw Mjc3OUVEOUUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGAh0DfSjXVDSGhg2TRWzWmNi6ylErfL16r5 XoDP+HxNdZkJT8Lww3vnRDzvNuH4I23kpZo7RC0zbOj5uMKhH4Qf/JGESMROua7A sG1SncGaTfq6ePCFjU9s0r3wrSyyhKKZryO4cSJjogEL2UpEd8EllusGsgfo57+a 5YwJy5Aa7Zh+QiwNBfKnAmUr7YhKIl4ik4WPBnxAT01kkeBa6Uan2FbM+idD72MS T2hZoAggAczHgfYVb+A6zAaXMKpvBs520yQiAEPkJ7cItFqr8Kj+gzd3Y+YiNxOe JNE9PhzZE3cJdQZMPq/7sLHiffyOq7xj6s8/cwKOe4qfjouU5Ek= -----END CERTIFICATE-----Generated at Wed May 7 19:04:24 2025 by rpki-client