$ rpki-client -vvf repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft File: B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft (raw, json) Hash identifier: eyJxpcEJJa3jvr2XjBeqjnmOyLXcwaoAhlY8dLFQy1s= Subject key identifier: 14:53:45:35:F9:6B:5D:DB:FB:90:FD:BC:29:4D:BD:34:8E:B6:24:7E Authority key identifier: B9:2F:0F:B3:E1:41:D5:2E:D2:A7:1F:A4:83:ED:3C:6D:72:3F:60:E2 Certificate issuer: /CN=B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2 Certificate serial: 7BBFCF527ACC0C964E96DC486B321C0156CD6BE9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft Manifest number: 5F Signing time: Fri 27 Jun 2025 19:31:42 +0000 Manifest this update: Fri 27 Jun 2025 19:26:42 +0000 Manifest next update: Mon 30 Jun 2025 20:10:42 +0000 Files and hashes: 1: 323030313a6466343a363463303a3a2f34382d3438203d3e20313533313430.roa (hash: yyzmdDb8FTjdC+THNvwdhgAOOXsuzFTHgJxxHYpFD6k=) 2: B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl (hash: qGsdseQDVbuRVbEv2LgO3bqHA50lUCOWzU9XyQxkoKk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 20:10:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:bf:cf:52:7a:cc:0c:96:4e:96:dc:48:6b:32:1c:01:56:cd:6b:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2 Validity Not Before: Jun 27 19:26:42 2025 GMT Not After : Jun 30 20:10:42 2025 GMT Subject: CN=14534535F96B5DDBFB90FDBC294DBD348EB6247E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:98:12:49:56:7f:d3:df:f9:ce:12:e8:3d:f0: 95:e2:41:de:81:f5:93:bc:75:99:ca:dc:96:36:fe: 9a:74:ec:23:1d:de:3b:d3:2e:71:53:09:5e:6b:30: 97:c3:ed:e3:dd:4e:3d:ff:54:26:92:98:e7:6c:30: 8f:44:59:23:87:80:ca:e9:35:e3:10:0c:25:9c:ba: ee:25:7b:29:ba:d2:f9:3c:03:96:07:4a:3b:eb:45: ab:f0:e9:82:d0:46:64:06:6e:13:15:5a:d1:27:7c: 7e:da:25:50:fb:f9:db:8f:02:16:30:14:6a:24:4e: b1:ca:23:99:08:ea:78:9b:81:8e:f4:e5:61:23:70: fc:f7:97:9f:eb:1b:93:dd:5e:86:d1:33:21:6a:5e: 3c:69:fa:7e:78:7e:7b:71:27:b2:a1:b6:27:dd:74: ab:8f:48:e4:f4:77:bb:c4:66:fb:12:af:5c:45:e8: 8a:e9:05:6e:bf:ec:ad:86:33:34:e8:2c:af:c9:96: f5:e7:34:9e:bc:82:33:ed:47:73:8b:c4:fb:f2:37: e4:06:1a:f2:da:28:06:13:03:3a:3b:a9:cf:88:dc: 70:46:b1:2f:a9:cf:e2:7f:4f:cf:b5:4d:57:14:9c: 7e:42:5b:b3:4c:c0:9f:99:5f:72:85:a9:2f:7e:03: 21:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:53:45:35:F9:6B:5D:DB:FB:90:FD:BC:29:4D:BD:34:8E:B6:24:7E X509v3 Authority Key Identifier: keyid:B9:2F:0F:B3:E1:41:D5:2E:D2:A7:1F:A4:83:ED:3C:6D:72:3F:60:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:a3:79:cd:5c:79:48:9d:d6:4a:20:56:0f:2c:45:67:1e:d8: 65:56:b0:6c:9a:51:38:9b:38:17:bc:99:d1:b1:40:2c:66:ec: 50:13:62:26:e0:09:1c:f3:a8:62:75:01:31:c3:4f:c7:d2:5d: 4b:c8:56:1d:41:55:95:31:2c:af:10:a2:91:3c:13:00:a1:7a: 1c:65:63:9c:f8:94:6d:4b:7d:fe:30:d9:b6:42:ec:79:a7:88: 76:65:7f:d7:37:8e:7c:71:72:9f:b9:e2:7c:df:73:4b:14:d8: 2d:52:cf:00:7b:31:94:b0:f3:a5:3f:05:db:70:59:2a:0b:6e: d9:d5:07:9b:6d:36:06:27:8c:6a:00:2a:56:51:ce:06:c0:24: 9f:4d:26:2c:e9:b7:6e:a6:81:8c:ff:c5:86:75:82:13:a1:af: 39:32:89:30:be:01:83:fa:00:c8:c3:f9:0f:bc:b1:87:64:3b: 6b:8e:a6:58:5a:01:9d:d1:01:7d:10:3d:99:fe:95:e9:97:7e: 36:99:41:47:a4:2e:58:6f:43:02:76:b8:41:67:1e:a4:f5:69: 36:e9:8f:be:2a:77:45:b7:02:fd:32:69:e9:a8:f8:5e:8e:e2: 24:06:70:e6:fc:4c:b6:06:5b:b6:6c:92:b9:a7:4d:24:52:09: 35:98:eb:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe7/PUnrMDJZOltxIazIcAVbNa+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDNDNkQ3 MjNGNjBFMjAeFw0yNTA2MjcxOTI2NDJaFw0yNTA2MzAyMDEwNDJaMDMxMTAvBgNV BAMTKDE0NTM0NTM1Rjk2QjVEREJGQjkwRkRCQzI5NERCRDM0OEVCNjI0N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtmBJJVn/T3/nOEug98JXiQd6B 9ZO8dZnK3JY2/pp07CMd3jvTLnFTCV5rMJfD7ePdTj3/VCaSmOdsMI9EWSOHgMrp NeMQDCWcuu4leym60vk8A5YHSjvrRavw6YLQRmQGbhMVWtEnfH7aJVD7+duPAhYw FGokTrHKI5kI6nibgY705WEjcPz3l5/rG5PdXobRMyFqXjxp+n54fntxJ7Khtifd dKuPSOT0d7vEZvsSr1xF6IrpBW6/7K2GMzToLK/JlvXnNJ68gjPtR3OLxPvyN+QG GvLaKAYTAzo7qc+I3HBGsS+pz+J/T8+1TVcUnH5CW7NMwJ+ZX3KFqS9+AyFPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFFNFNflrXdv7kP28KU29NI62JH4wHwYDVR0j BBgwFoAUuS8Ps+FB1S7Spx+kg+08bXI/YOIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWZjYmZiYi1iYTNmLTRkNTMtYTA0Zi0xNGQ2ZjRiZTBjYjEvMS9COTJGMEZCM0Ux NDFENTJFRDJBNzFGQTQ4M0VEM0M2RDcyM0Y2MEUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDNDNkQ3MjNG NjBFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzEvQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDND NkQ3MjNGNjBFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEOjec1ceUid1kogVg8sRWce2GVWsGyaUTib OBe8mdGxQCxm7FATYibgCRzzqGJ1ATHDT8fSXUvIVh1BVZUxLK8QopE8EwChehxl Y5z4lG1Lff4w2bZC7HmniHZlf9c3jnxxcp+54nzfc0sU2C1SzwB7MZSw86U/Bdtw WSoLbtnVB5ttNgYnjGoAKlZRzgbAJJ9NJizpt26mgYz/xYZ1ghOhrzkyiTC+AYP6 AMjD+Q+8sYdkO2uOplhaAZ3RAX0QPZn+lemXfjaZQUekLlhvQwJ2uEFnHqT1aTbp j74qd0W3Av0yaemo+F6O4iQGcOb8TLYGW7ZskrmnTSRSCTWY65k= -----END CERTIFICATE-----Generated at Sun Jun 29 18:14:33 2025 by rpki-client