$ rpki-client -vvf repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft File: B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft (raw, json) Hash identifier: c7JE83tVzRu9ghtxvpZoYC7gPy6EEoUOT61RUbRLbGc= Subject key identifier: 89:97:6F:4A:D7:BE:3B:4D:04:C7:E7:59:C3:43:5B:47:42:94:7B:F9 Authority key identifier: B9:2F:0F:B3:E1:41:D5:2E:D2:A7:1F:A4:83:ED:3C:6D:72:3F:60:E2 Certificate issuer: /CN=B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2 Certificate serial: 0BEA5F7EEDFA8BE0E2B778DB5BE512FDD3105785 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft Manifest number: 47 Signing time: Mon 05 May 2025 18:21:30 +0000 Manifest this update: Mon 05 May 2025 18:16:30 +0000 Manifest next update: Fri 09 May 2025 05:10:30 +0000 Files and hashes: 1: 323030313a6466343a363463303a3a2f34382d3438203d3e20313533313430.roa (hash: yyzmdDb8FTjdC+THNvwdhgAOOXsuzFTHgJxxHYpFD6k=) 2: B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl (hash: 3Xy2lYGmTJIzjg3hvgTHF3KbGBBrV9f9xEkyfeJecG0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 05:10:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:ea:5f:7e:ed:fa:8b:e0:e2:b7:78:db:5b:e5:12:fd:d3:10:57:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2 Validity Not Before: May 5 18:16:30 2025 GMT Not After : May 9 05:10:30 2025 GMT Subject: CN=89976F4AD7BE3B4D04C7E759C3435B4742947BF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7a:91:00:94:3c:af:7f:ba:22:52:d9:be:93: 63:19:01:4f:fc:da:aa:e3:b0:2d:d7:93:ec:8c:10: 79:8a:6c:45:a8:c9:e8:db:ef:2e:d0:a1:7d:57:79: da:98:7b:0a:84:47:b9:cd:9e:2d:92:72:15:8e:0e: e7:c6:25:5b:73:a9:64:90:26:95:c6:b0:2e:8b:c6: 7b:53:68:a4:4c:93:3f:d7:70:52:89:5d:fa:10:2a: 54:5d:fa:a5:50:60:4b:83:3f:0c:f2:08:7c:94:f2: df:a6:08:96:ce:95:d8:c7:94:38:49:7e:99:d2:e4: 2d:78:b1:58:f6:9b:1a:56:33:cb:68:17:c9:ca:2d: be:94:1a:b9:41:14:c7:23:b1:43:51:5e:3b:e7:b0: 88:6f:05:48:c5:9d:dc:fe:41:2d:07:47:23:9f:b2: 26:b6:41:ec:52:5a:c4:f4:c7:14:6b:c4:1e:17:e6: 72:46:d7:3b:72:90:57:4d:2f:dc:0e:0e:c9:d6:7e: 70:49:18:6f:d4:a4:43:e2:d1:4e:6a:39:b0:fc:7e: 3a:ea:ff:d8:cd:f8:8d:26:21:20:ee:07:1a:b3:b1: 37:ed:aa:99:d2:4e:64:63:8f:2b:0d:98:29:02:f9: 4e:15:ab:e6:76:2d:f2:61:bb:9c:68:18:4b:09:d5: c7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:97:6F:4A:D7:BE:3B:4D:04:C7:E7:59:C3:43:5B:47:42:94:7B:F9 X509v3 Authority Key Identifier: keyid:B9:2F:0F:B3:E1:41:D5:2E:D2:A7:1F:A4:83:ED:3C:6D:72:3F:60:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:80:00:33:d9:fd:42:78:ca:9e:58:f8:2e:95:3c:97:1b:14: fb:06:ad:1a:3b:8a:82:50:40:18:62:f3:cd:6f:09:18:79:9e: 46:44:11:19:d7:83:95:8e:c1:80:3d:0d:0b:06:71:71:80:30: fc:e3:d4:d3:f1:d9:78:73:ab:f9:20:10:5f:89:c4:94:c5:89: 14:8d:1e:2d:0e:1c:cf:21:33:81:25:52:ab:0e:9c:f8:b4:51: c8:d4:75:fc:61:43:f0:31:a2:fa:f9:ae:6d:56:e8:2b:38:f1: a7:58:d7:10:a9:02:2e:48:55:0a:b0:2c:c6:23:62:56:bb:6b: d0:d0:d4:0a:a4:89:59:dc:5c:10:ab:c8:d7:60:56:6c:08:db: 16:87:b7:78:1b:d6:93:f6:cf:59:af:97:2d:4d:bf:c4:f4:bb: 94:b7:6c:1c:e4:00:8c:2c:8f:7b:f1:59:48:0b:34:f8:7a:68: 50:f1:cb:fa:e5:ba:40:52:ef:71:66:c7:60:55:eb:00:b9:c9: 57:c6:30:77:89:53:a9:2a:01:ea:2f:bb:fd:ba:8f:82:4a:96: 20:c9:bd:4d:85:14:37:7a:f4:fb:06:0b:bb:83:84:41:3b:fd: 48:12:34:d9:83:d6:13:70:0e:ec:52:2c:28:ed:01:26:d7:51: a4:8f:f2:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC+pffu36i+Dit3jbW+US/dMQV4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDNDNkQ3 MjNGNjBFMjAeFw0yNTA1MDUxODE2MzBaFw0yNTA1MDkwNTEwMzBaMDMxMTAvBgNV BAMTKDg5OTc2RjRBRDdCRTNCNEQwNEM3RTc1OUMzNDM1QjQ3NDI5NDdCRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbepEAlDyvf7oiUtm+k2MZAU/8 2qrjsC3Xk+yMEHmKbEWoyejb7y7QoX1XedqYewqER7nNni2SchWODufGJVtzqWSQ JpXGsC6LxntTaKRMkz/XcFKJXfoQKlRd+qVQYEuDPwzyCHyU8t+mCJbOldjHlDhJ fpnS5C14sVj2mxpWM8toF8nKLb6UGrlBFMcjsUNRXjvnsIhvBUjFndz+QS0HRyOf sia2QexSWsT0xxRrxB4X5nJG1ztykFdNL9wODsnWfnBJGG/UpEPi0U5qObD8fjrq /9jN+I0mISDuBxqzsTftqpnSTmRjjysNmCkC+U4Vq+Z2LfJhu5xoGEsJ1ceNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiZdvSte+O00Ex+dZw0NbR0KUe/kwHwYDVR0j BBgwFoAUuS8Ps+FB1S7Spx+kg+08bXI/YOIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWZjYmZiYi1iYTNmLTRkNTMtYTA0Zi0xNGQ2ZjRiZTBjYjEvMS9COTJGMEZCM0Ux NDFENTJFRDJBNzFGQTQ4M0VEM0M2RDcyM0Y2MEUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDNDNkQ3MjNG NjBFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzEvQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDND NkQ3MjNGNjBFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+AADPZ/UJ4yp5Y+C6VPJcbFPsGrRo7ioJQ QBhi881vCRh5nkZEERnXg5WOwYA9DQsGcXGAMPzj1NPx2Xhzq/kgEF+JxJTFiRSN Hi0OHM8hM4ElUqsOnPi0UcjUdfxhQ/Axovr5rm1W6Cs48adY1xCpAi5IVQqwLMYj Yla7a9DQ1AqkiVncXBCryNdgVmwI2xaHt3gb1pP2z1mvly1Nv8T0u5S3bBzkAIws j3vxWUgLNPh6aFDxy/rlukBS73Fmx2BV6wC5yVfGMHeJU6kqAeovu/26j4JKliDJ vU2FFDd69PsGC7uDhEE7/UgSNNmD1hNwDuxSLCjtASbXUaSP8uw= -----END CERTIFICATE-----Generated at Wed May 7 20:00:30 2025 by rpki-client