$ rpki-client -vvf repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft File: B605E2C01C5BDC6CEE49545C80501360234DC910.mft (raw, json) Hash identifier: 5LSjIDaNZDjxAXvzFPqE0iIPLyxkrPPXZxceazLUmeU= Subject key identifier: 01:E2:B0:69:A6:FF:C4:45:91:8B:80:E1:8F:F9:93:44:F1:02:52:22 Authority key identifier: B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10 Certificate issuer: /CN=B605E2C01C5BDC6CEE49545C80501360234DC910 Certificate serial: 203C39C011FAA82E0BFDC787EEF27BC7C1B128C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer Subject info access: rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft Manifest number: 04D8 Signing time: Mon 12 May 2025 09:00:04 +0000 Manifest this update: Mon 12 May 2025 08:55:04 +0000 Manifest next update: Thu 15 May 2025 11:10:04 +0000 Files and hashes: 1: 3131352e3137382e35332e302f32342d3234203d3e20313331373137.roa (hash: b93+pZQmU5PXevCIV8/I+UyyjNhwLNY58iZkuI8/DZY=) 2: 3131352e3137382e35342e302f32342d3234203d3e20313331373137.roa (hash: MSzljIuYQfz1eIyPrxVgE2dh+zA9wOeElTFbm36ZtIg=) 3: 3131352e3137382e34392e302f32342d3234203d3e203338373833.roa (hash: s2Z9bMWQLiKwFbH9doRdyOIOSB0aQByVuaUp9ml9odE=) 4: 3131352e3137382e35352e302f32342d3234203d3e203338373833.roa (hash: jKlwcNnnsnial+/jneL8P/DEDv++vIkR3WSchUhE9yQ=) 5: B605E2C01C5BDC6CEE49545C80501360234DC910.crl (hash: QtPmpkrFj3fs+4FticHsC1+ZEkzrf6qh9mSmJ5yCcQI=) 6: 3131352e3137382e35312e302f32342d3234203d3e20313331373137.roa (hash: FpCRPN3/sh87yKc8VhdJ2zd+tYzqklLo+UKit0tTGBI=) 7: 3131352e3137382e35302e302f32342d3234203d3e203338373833.roa (hash: ns9PXtaKxgZQCJ0YDRzg3/HGZ6g5Dvk9tgk4KVeFibk=) 8: 3131352e3137382e34382e302f32342d3234203d3e203338373833.roa (hash: AfAE6Sq3DQxMPZ3iNsBxgnE3MeI91A5NdzSsH6qy25c=) 9: 3131352e3137382e35322e302f32342d3234203d3e20313331373137.roa (hash: QNOScV9kvLXfJ4ZvrZSU6WwTkajrzvaS7q6+eyoaI+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 11:10:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:3c:39:c0:11:fa:a8:2e:0b:fd:c7:87:ee:f2:7b:c7:c1:b1:28:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B605E2C01C5BDC6CEE49545C80501360234DC910 Validity Not Before: May 12 08:55:04 2025 GMT Not After : May 15 11:10:04 2025 GMT Subject: CN=01E2B069A6FFC445918B80E18FF99344F1025222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e6:83:a0:48:92:7a:b8:03:cd:f2:2b:24:17: 9c:fe:0a:58:6a:97:93:f9:14:b4:98:4a:e5:38:1d: 10:b2:86:11:98:16:e2:02:6b:2e:54:30:aa:0b:6c: dc:bb:27:f9:22:23:0c:e2:aa:77:b7:ad:6d:a8:c8: 8b:55:2c:2d:c2:53:ca:c9:a3:5b:c2:67:df:f3:0a: a7:db:86:01:db:b9:f3:e0:48:ea:8c:62:fc:bb:dc: 22:8a:03:11:42:48:87:ac:85:93:4b:6e:b9:eb:13: 74:18:5d:d2:e1:f4:97:41:9b:70:45:1f:8b:f2:bf: 67:c3:c1:e7:88:ae:4b:43:04:a5:af:cb:bd:98:ae: 89:af:65:a1:89:7f:22:7b:2d:bb:68:0a:13:f3:ea: 3e:3e:aa:59:05:7e:25:be:ac:4a:f9:d0:63:36:e2: 66:a5:df:0d:c6:1b:c5:6e:38:ed:c6:51:2f:77:32: d7:cd:52:41:5f:6a:27:b4:58:25:f6:30:dd:5b:bf: 98:d6:44:32:25:15:16:c1:a5:a5:fd:0f:e4:99:75: b4:70:7c:f5:4a:7d:b2:18:c2:e3:70:05:59:35:82: aa:37:ac:63:f2:76:21:d4:6f:3c:8c:0a:fd:4f:6f: 52:d1:58:7a:c0:c0:47:24:fe:5b:4f:88:81:8b:d3: c3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E2:B0:69:A6:FF:C4:45:91:8B:80:E1:8F:F9:93:44:F1:02:52:22 X509v3 Authority Key Identifier: keyid:B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:e8:98:1d:03:1f:70:2b:60:b2:0f:86:f0:47:15:8c:b0:3f: cb:fc:1e:e4:1a:d7:e0:36:9b:32:19:ec:70:7a:4d:72:40:cd: f2:a5:a1:cd:f8:4f:ba:21:a8:ec:66:67:d4:e5:6c:86:8b:2d: 61:5c:09:47:c6:51:28:01:85:eb:a4:23:84:a7:da:6a:45:e4: 89:84:1f:ea:13:ab:8b:58:94:03:36:4f:2e:13:f8:bb:e6:3d: cd:d3:55:11:96:7b:6a:b5:55:e0:a6:8d:fe:de:9d:a1:c9:04: 5b:8b:08:6d:8e:3b:da:64:d3:68:ac:fc:c5:f7:61:3f:4d:d3: dd:82:31:db:f9:89:e4:66:49:3e:2d:2a:b6:be:ba:95:18:99: a7:c4:b1:fe:ef:72:64:3f:b2:95:8c:e2:71:bc:e7:3d:9c:0e: c1:ea:e8:7f:3e:df:03:1c:81:70:2f:9a:23:86:25:69:a0:25: fc:7b:ed:f1:be:dc:4d:90:e1:aa:64:4c:d7:71:91:17:e4:e8: 40:f5:ac:f7:cd:02:f1:dc:51:eb:1d:37:83:a1:2c:83:20:2d: bd:77:c1:15:b8:45:5d:4a:dc:5b:72:0e:4e:1e:64:be:a9:47: d2:c8:98:18:4a:9e:42:cb:86:6c:87:65:ce:ee:8c:63:7b:9e: b5:aa:79:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIDw5wBH6qC4L/ceH7vJ7x8GxKMkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEzNjAy MzREQzkxMDAeFw0yNTA1MTIwODU1MDRaFw0yNTA1MTUxMTEwMDRaMDMxMTAvBgNV BAMTKDAxRTJCMDY5QTZGRkM0NDU5MThCODBFMThGRjk5MzQ0RjEwMjUyMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL5oOgSJJ6uAPN8iskF5z+Clhq l5P5FLSYSuU4HRCyhhGYFuICay5UMKoLbNy7J/kiIwziqne3rW2oyItVLC3CU8rJ o1vCZ9/zCqfbhgHbufPgSOqMYvy73CKKAxFCSIeshZNLbrnrE3QYXdLh9JdBm3BF H4vyv2fDweeIrktDBKWvy72YromvZaGJfyJ7LbtoChPz6j4+qlkFfiW+rEr50GM2 4mal3w3GG8VuOO3GUS93MtfNUkFfaie0WCX2MN1bv5jWRDIlFRbBpaX9D+SZdbRw fPVKfbIYwuNwBVk1gqo3rGPydiHUbzyMCv1Pb1LRWHrAwEck/ltPiIGL08PXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAeKwaab/xEWRi4Dhj/mTRPECUiIwHwYDVR0j BBgwFoAUtgXiwBxb3GzuSVRcgFATYCNNyRAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWZlOGY5Yi04YzM0LTQzNDItYTBmZS1jYTEwNzVmYmE1ZmYvMC9CNjA1RTJDMDFD NUJEQzZDRUU0OTU0NUM4MDUwMTM2MDIzNERDOTEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEzNjAyMzRE QzkxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGVmZThmOWItOGMzNC00MzQyLWEw ZmUtY2ExMDc1ZmJhNWZmLzAvQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEz NjAyMzREQzkxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMjomB0DH3ArYLIPhvBHFYywP8v8HuQa1+A2 mzIZ7HB6TXJAzfKloc34T7ohqOxmZ9TlbIaLLWFcCUfGUSgBheukI4Sn2mpF5ImE H+oTq4tYlAM2Ty4T+LvmPc3TVRGWe2q1VeCmjf7enaHJBFuLCG2OO9pk02is/MX3 YT9N092CMdv5ieRmST4tKra+upUYmafEsf7vcmQ/spWM4nG85z2cDsHq6H8+3wMc gXAvmiOGJWmgJfx77fG+3E2Q4apkTNdxkRfk6ED1rPfNAvHcUesdN4OhLIMgLb13 wRW4RV1K3FtyDk4eZL6pR9LImBhKnkLLhmyHZc7ujGN7nrWqeQk= -----END CERTIFICATE-----Generated at Tue May 13 06:21:43 2025 by rpki-client