$ rpki-client -vvf repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft File: 94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft (raw, json) Hash identifier: 1FhFvSEv7eBoPldlUkimVNm6/2qiDpOyUgqO9OhoGYw= Subject key identifier: D7:23:A3:A5:BD:C3:55:7C:24:9F:BB:B8:D1:C2:82:D0:F2:BE:5D:FF Authority key identifier: 94:15:9F:AF:0A:97:95:02:CA:B6:C5:AD:DC:AE:4C:FD:EC:DE:ED:EF Certificate issuer: /CN=94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF Certificate serial: 28E7B141713ECCB6EF8DE8739D7AD5D3DB0CE1E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft Manifest number: 93 Signing time: Wed 02 Jul 2025 07:20:35 +0000 Manifest this update: Wed 02 Jul 2025 07:15:35 +0000 Manifest next update: Sat 05 Jul 2025 17:01:35 +0000 Files and hashes: 1: 3130332e3135322e3233322e302f32332d3234203d3e20313430343436.roa (hash: w8USKPwJWUmAD2EnMdpXJB1C3F3hUfqedwFlox0zn3A=) 2: 323030313a6466343a323038303a3a2f34382d3438203d3e20313430343436.roa (hash: /sVHS2YVPGN4I7pjlv0CumuB8iSOyLfbW32z22cHMqg=) 3: 94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl (hash: iYN4QfbINprGGA6NJgXkfNEx1qBtGB+VdytxEs/5ugk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 17:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:e7:b1:41:71:3e:cc:b6:ef:8d:e8:73:9d:7a:d5:d3:db:0c:e1:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF Validity Not Before: Jul 2 07:15:35 2025 GMT Not After : Jul 5 17:01:35 2025 GMT Subject: CN=D723A3A5BDC3557C249FBBB8D1C282D0F2BE5DFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b9:94:ae:07:87:87:8c:b6:51:68:43:b2:dc: 44:42:4a:0b:8d:e9:f6:f9:1a:c3:56:79:7b:3a:6b: e2:97:76:5d:bf:29:1c:c8:ea:b2:fd:9f:6b:37:f7: 6b:14:a5:85:9a:3b:f4:68:46:c2:0b:ad:d6:69:c0: 55:dd:a8:95:f7:b7:78:d2:16:c4:90:7e:d4:3a:0a: d5:16:bc:90:29:da:21:e8:c2:f0:24:1f:8a:e5:00: 8e:0d:b6:5a:1f:29:c7:ed:f7:c5:f3:a5:b6:02:6b: eb:f4:ea:5c:c5:d5:fb:89:7d:88:8b:f3:58:52:f6: 86:43:14:42:d5:72:e8:a4:26:92:9c:c5:b2:af:d0: 5e:69:c9:e0:71:43:ec:ea:c7:b1:85:d4:c3:3f:41: b1:59:41:d2:7f:9c:7a:10:88:63:92:0d:10:30:54: c7:22:b5:e0:63:43:94:59:bc:70:35:dd:74:8b:93: 2e:53:53:fa:86:00:30:69:f3:22:20:47:e0:5b:36: d5:ae:bf:c4:ec:4d:73:50:00:4c:40:a4:2b:7e:2f: e9:72:54:8f:ab:71:1e:4e:9d:5c:ea:f5:01:6f:0a: fc:c0:1a:f5:25:9b:39:c2:89:19:82:d0:9a:d4:67: c2:64:de:d7:df:64:65:fb:de:b3:ac:35:d4:38:9a: 40:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:23:A3:A5:BD:C3:55:7C:24:9F:BB:B8:D1:C2:82:D0:F2:BE:5D:FF X509v3 Authority Key Identifier: keyid:94:15:9F:AF:0A:97:95:02:CA:B6:C5:AD:DC:AE:4C:FD:EC:DE:ED:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:7e:92:35:b1:ea:53:34:f2:02:c9:be:43:94:ed:24:79:67: 9a:51:3e:95:03:cb:1f:01:45:de:0d:dd:5d:08:99:a5:cb:47: 00:21:cf:e1:67:42:5f:4b:f7:ea:5d:be:5a:72:f1:b4:88:ff: f9:c3:b0:34:38:08:40:78:6b:13:cd:ab:9b:81:9f:67:c5:71: 44:43:c3:52:7c:8f:39:5b:f4:26:cc:df:6f:bd:5d:5d:5e:ad: cf:bf:45:35:6d:ac:5f:60:76:17:5e:78:88:19:b4:25:9b:23: e7:ee:55:d0:3b:d3:09:d0:ab:2a:f9:ba:e8:13:0c:03:d6:fe: 78:79:3e:cf:e3:15:86:e6:cb:8d:f1:1d:ef:51:a9:59:cd:99: f6:b4:47:85:c4:57:97:42:53:bc:a3:a8:28:81:85:5a:96:1b: 05:b5:7a:b2:8a:1f:82:72:61:b0:b0:77:52:9a:a2:18:08:69: ae:0d:34:9e:74:48:ae:de:fe:3c:06:31:2d:e2:03:bd:b8:af: 24:b3:30:7f:2f:01:ee:56:31:7e:70:97:d0:25:3a:b6:f5:87: 20:ac:8d:a6:46:c7:13:fe:05:b8:17:86:d0:5c:77:9f:03:f2: b7:b4:b8:88:fd:76:a8:69:c5:90:53:2c:18:00:de:57:35:9c: 04:43:a7:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKOexQXE+zLbvjehznXrV09sM4eIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRDRkRF Q0RFRURFRjAeFw0yNTA3MDIwNzE1MzVaFw0yNTA3MDUxNzAxMzVaMDMxMTAvBgNV BAMTKEQ3MjNBM0E1QkRDMzU1N0MyNDlGQkJCOEQxQzI4MkQwRjJCRTVERkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1uZSuB4eHjLZRaEOy3ERCSguN 6fb5GsNWeXs6a+KXdl2/KRzI6rL9n2s392sUpYWaO/RoRsILrdZpwFXdqJX3t3jS FsSQftQ6CtUWvJAp2iHowvAkH4rlAI4NtlofKcft98XzpbYCa+v06lzF1fuJfYiL 81hS9oZDFELVcuikJpKcxbKv0F5pyeBxQ+zqx7GF1MM/QbFZQdJ/nHoQiGOSDRAw VMciteBjQ5RZvHA13XSLky5TU/qGADBp8yIgR+BbNtWuv8TsTXNQAExApCt+L+ly VI+rcR5OnVzq9QFvCvzAGvUlmznCiRmC0JrUZ8Jk3tffZGX73rOsNdQ4mkAVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1yOjpb3DVXwkn7u40cKC0PK+Xf8wHwYDVR0j BBgwFoAUlBWfrwqXlQLKtsWt3K5M/eze7e8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NGYwNzk4Ny1iOGVjLTQ0NGEtOWI0NC0yOTEwMTFmZjQ2YTYvMC85NDE1OUZBRjBB OTc5NTAyQ0FCNkM1QUREQ0FFNENGREVDREVFREVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRDRkRFQ0RF RURFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzRmMDc5ODctYjhlYy00NDRhLTli NDQtMjkxMDExZmY0NmE2LzAvOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRD RkRFQ0RFRURFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJ+kjWx6lM08gLJvkOU7SR5Z5pRPpUDyx8B Rd4N3V0ImaXLRwAhz+FnQl9L9+pdvlpy8bSI//nDsDQ4CEB4axPNq5uBn2fFcURD w1J8jzlb9CbM32+9XV1erc+/RTVtrF9gdhdeeIgZtCWbI+fuVdA70wnQqyr5uugT DAPW/nh5Ps/jFYbmy43xHe9RqVnNmfa0R4XEV5dCU7yjqCiBhVqWGwW1erKKH4Jy YbCwd1KaohgIaa4NNJ50SK7e/jwGMS3iA724rySzMH8vAe5WMX5wl9AlOrb1hyCs jaZGxxP+BbgXhtBcd58D8re0uIj9dqhpxZBTLBgA3lc1nARDp98= -----END CERTIFICATE-----Generated at Fri Jul 4 06:30:25 2025 by rpki-client