$ rpki-client -vvf repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft File: B605E2C01C5BDC6CEE49545C80501360234DC910.mft (raw, json) Hash identifier: oe2R9O6g7BBgfaqq3VNiNGVJCSUhWaHInHAB5A5y7XI= Subject key identifier: 78:95:C3:5F:22:71:27:E8:A3:39:86:9B:2D:D3:19:0E:5B:37:6F:F0 Authority key identifier: B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10 Certificate issuer: /CN=B605E2C01C5BDC6CEE49545C80501360234DC910 Certificate serial: 3B2749004DF8198B26CF72A29186CC322EE5B2BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer Subject info access: rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft Manifest number: 04EE Signing time: Sun 29 Jun 2025 09:30:04 +0000 Manifest this update: Sun 29 Jun 2025 09:25:04 +0000 Manifest next update: Wed 02 Jul 2025 21:16:04 +0000 Files and hashes: 1: 3131352e3137382e35312e302f32342d3234203d3e20313331373137.roa (hash: FpCRPN3/sh87yKc8VhdJ2zd+tYzqklLo+UKit0tTGBI=) 2: 3131352e3137382e35352e302f32342d3234203d3e203338373833.roa (hash: L3ZzIiAydRdMLY3ej77+q1So7IkWU5tA3zvtMa14wvQ=) 3: 3131352e3137382e35342e302f32342d3234203d3e20313331373137.roa (hash: 4R3cIWzWFlBnUOjDtKgjITkNYaOCw4Tx4+7Vb5ietQo=) 4: 3131352e3137382e35322e302f32342d3234203d3e20313331373137.roa (hash: QNOScV9kvLXfJ4ZvrZSU6WwTkajrzvaS7q6+eyoaI+A=) 5: 3131352e3137382e35332e302f32342d3234203d3e20313331373137.roa (hash: 5Br8jzUfiBL0O6Kopm71gWMUaniCVXm/uXqyIID9rs0=) 6: 3131352e3137382e35302e302f32342d3234203d3e203338373833.roa (hash: AVHUuCu/pWOfGEGbs7pgdGUZzNAVfi/HDMj4JakhRSI=) 7: 3131352e3137382e34382e302f32342d3234203d3e203338373833.roa (hash: /bgLX80Id13xkunC59CvIZtu8KOfj3mxVa1lG5ZXF/0=) 8: B605E2C01C5BDC6CEE49545C80501360234DC910.crl (hash: g2P8I0e6e2DNTeCUstVsyDeZ0YWTS3JBRPBZsNJ2pKk=) 9: 3131352e3137382e34392e302f32342d3234203d3e203338373833.roa (hash: isINXQLKIC1dEiiAoWDEseWdjl997XY6+RtHzF8UKMk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 21:16:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:27:49:00:4d:f8:19:8b:26:cf:72:a2:91:86:cc:32:2e:e5:b2:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B605E2C01C5BDC6CEE49545C80501360234DC910 Validity Not Before: Jun 29 09:25:04 2025 GMT Not After : Jul 2 21:16:04 2025 GMT Subject: CN=7895C35F227127E8A339869B2DD3190E5B376FF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:f1:93:b5:16:ea:a6:7d:da:33:28:53:e6:65: 55:06:3c:3c:74:39:b0:42:14:44:16:2b:de:33:2e: e8:33:da:f1:ef:e7:da:36:c4:1d:8c:d4:0c:9c:ff: 57:f3:46:d0:63:9c:2c:14:29:4b:dd:74:bf:7d:09: 74:86:05:03:f0:38:b9:cd:bf:9f:b5:ca:3e:52:56: bd:6f:9c:5f:d9:de:e4:e0:98:d8:c3:41:9a:52:bb: 3c:bd:76:24:9a:b9:72:e2:8a:ba:18:9d:d9:bf:c5: 8d:a2:a9:81:44:a8:3e:d0:2a:b9:b7:5f:e6:3b:4c: 6d:ef:5a:31:03:e1:3c:2c:54:af:f2:2c:8e:3d:b5: b2:38:d8:4b:21:c5:29:05:fc:29:3b:fd:06:aa:78: 24:a4:d3:6a:72:20:56:8f:06:66:f4:a3:e6:a3:d9: a6:6a:07:da:7a:7c:01:87:bc:d5:a8:fb:df:b8:5d: 56:ac:dd:c7:fc:92:de:63:eb:bc:41:0f:ce:45:9d: b3:a3:13:6b:7a:52:3b:f4:4d:a3:97:0e:e7:f6:6c: c3:96:fa:8c:41:ca:ce:bf:5a:a8:72:42:d0:60:27: 58:0f:57:ff:46:1e:9b:6c:ac:42:dd:eb:53:c8:00: 51:bb:b8:4d:09:b1:7d:81:27:8e:43:0b:8a:25:46: 96:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:95:C3:5F:22:71:27:E8:A3:39:86:9B:2D:D3:19:0E:5B:37:6F:F0 X509v3 Authority Key Identifier: keyid:B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:0c:9a:0f:84:bf:dd:4b:6c:8c:b2:6e:d3:eb:da:2a:be:6e: 1b:a2:9b:70:df:a0:91:82:85:e6:22:5c:be:fc:ac:42:2c:9a: 79:ba:9b:34:19:a7:b0:64:bd:57:f6:1f:3e:60:63:52:08:ee: d3:86:24:d4:69:d3:c1:2a:17:7b:71:d9:33:3e:f8:71:f9:5e: d8:ab:c3:b0:12:75:c0:53:30:28:55:ab:4f:32:f7:9a:f8:d5: d2:54:ed:ae:0f:39:60:90:35:fa:63:cc:59:5d:3d:77:cd:b7: ac:36:c9:d1:96:7c:5d:b4:8c:c1:3a:5c:97:fa:ff:26:51:b6: c3:3b:6d:93:25:6a:71:c7:c2:1a:50:4b:fc:57:a7:1e:1d:83: c8:c4:f7:0a:87:11:ca:c5:e9:14:f6:f5:79:7a:f4:82:b2:fa: 2f:e5:b2:c1:3a:d5:03:c0:66:15:61:a3:a7:9d:2b:24:e2:0c: b4:c9:90:54:0a:e0:79:1a:ac:44:05:72:88:a8:9a:4d:fb:00: 11:e8:88:ab:46:3a:cc:fb:84:e8:6a:fe:1a:22:8e:37:18:a0: 35:fb:d0:93:f5:99:cf:ed:20:23:75:2e:2b:23:d7:3c:ab:a1: 60:d7:63:c3:c8:e1:6b:a3:37:9b:fc:10:62:a1:bb:83:6c:c9: 99:3a:7c:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOydJAE34GYsmz3KikYbMMi7lsr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEzNjAy MzREQzkxMDAeFw0yNTA2MjkwOTI1MDRaFw0yNTA3MDIyMTE2MDRaMDMxMTAvBgNV BAMTKDc4OTVDMzVGMjI3MTI3RThBMzM5ODY5QjJERDMxOTBFNUIzNzZGRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu8ZO1FuqmfdozKFPmZVUGPDx0 ObBCFEQWK94zLugz2vHv59o2xB2M1Ayc/1fzRtBjnCwUKUvddL99CXSGBQPwOLnN v5+1yj5SVr1vnF/Z3uTgmNjDQZpSuzy9diSauXLiiroYndm/xY2iqYFEqD7QKrm3 X+Y7TG3vWjED4TwsVK/yLI49tbI42EshxSkF/Ck7/QaqeCSk02pyIFaPBmb0o+aj 2aZqB9p6fAGHvNWo+9+4XVas3cf8kt5j67xBD85FnbOjE2t6Ujv0TaOXDuf2bMOW +oxBys6/WqhyQtBgJ1gPV/9GHptsrELd61PIAFG7uE0JsX2BJ45DC4olRpbzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeJXDXyJxJ+ijOYabLdMZDls3b/AwHwYDVR0j BBgwFoAUtgXiwBxb3GzuSVRcgFATYCNNyRAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWZlOGY5Yi04YzM0LTQzNDItYTBmZS1jYTEwNzVmYmE1ZmYvMC9CNjA1RTJDMDFD NUJEQzZDRUU0OTU0NUM4MDUwMTM2MDIzNERDOTEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEzNjAyMzRE QzkxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGVmZThmOWItOGMzNC00MzQyLWEw ZmUtY2ExMDc1ZmJhNWZmLzAvQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEz NjAyMzREQzkxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABYMmg+Ev91LbIyybtPr2iq+bhuim3DfoJGC heYiXL78rEIsmnm6mzQZp7BkvVf2Hz5gY1II7tOGJNRp08EqF3tx2TM++HH5Xtir w7ASdcBTMChVq08y95r41dJU7a4POWCQNfpjzFldPXfNt6w2ydGWfF20jME6XJf6 /yZRtsM7bZMlanHHwhpQS/xXpx4dg8jE9wqHEcrF6RT29Xl69IKy+i/lssE61QPA ZhVho6edKyTiDLTJkFQK4HkarEQFcoiomk37ABHoiKtGOsz7hOhq/hoijjcYoDX7 0JP1mc/tICN1Lisj1zyroWDXY8PI4WujN5v8EGKhu4NsyZk6fJY= -----END CERTIFICATE-----Generated at Mon Jun 30 08:47:23 2025 by rpki-client