$ rpki-client -vvf repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.mft File: 92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.mft (raw, json) Hash identifier: Pa2xdvbgVgKruwqhIhZOPDNVa2lwxaAPqQsnzFuWTGs= Subject key identifier: 3E:BA:C5:B3:FD:92:B1:7A:4D:44:E9:3F:F8:33:6F:88:3A:44:62:A7 Authority key identifier: 92:E6:CA:68:3A:FA:18:EA:03:19:DE:C1:7D:DF:53:E0:DE:14:FD:89 Certificate issuer: /CN=92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89 Certificate serial: 2147D411BD978814B058A570428D61C0C41FE8DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.mft Manifest number: 04EE Signing time: Sat 28 Jun 2025 19:30:46 +0000 Manifest this update: Sat 28 Jun 2025 19:25:46 +0000 Manifest next update: Wed 02 Jul 2025 02:40:46 +0000 Files and hashes: 1: 323430363a343563303a3a2f33332d3438203d3e203634333030.roa (hash: 5TAHWOIN003fsG8ycbo1mXpMVA4osDGLXqixgvxFexI=) 2: 323430363a343563303a383030303a3a2f33332d3438203d3e203634333030.roa (hash: VFU5DB8dG4nbadxLuF1q/tdYpIsYXQE4+EO3tI62s+c=) 3: 323430363a343563303a3a2f33322d3332203d3e203634333030.roa (hash: bUSsrxVSpx0QU4u2uNBA7y70+DlmrDl9YAKqMzKuk/Y=) 4: 3130332e3135332e3134382e302f32332d3233203d3e203634333030.roa (hash: hlIP+MRQ5Nc1S7Ft5ZfPefr9DGR/+EoZGD9rJ2XoFDc=) 5: 92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.crl (hash: G9zzWRxgTZ00k013GCv71EjcxlFB9P58+DPnasVBc7A=) 6: 3130332e3135332e3134382e302f32342d3234203d3e203634333030.roa (hash: 3A9aXUT5ZliAMgJstYpcWHFTfUmMESodAfeb3G4B9tY=) 7: 3130332e3135332e3134392e302f32342d3234203d3e203634333030.roa (hash: gsHZwZaZZrGPSnKeaXQwKe0du+uegJ+SJ020XW50DPw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.crl rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 02:40:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:47:d4:11:bd:97:88:14:b0:58:a5:70:42:8d:61:c0:c4:1f:e8:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89 Validity Not Before: Jun 28 19:25:46 2025 GMT Not After : Jul 2 02:40:46 2025 GMT Subject: CN=3EBAC5B3FD92B17A4D44E93FF8336F883A4462A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:87:52:43:91:b7:ad:a7:91:f8:2d:24:82:2a: ea:ce:29:b8:68:90:2e:3a:0d:e6:3c:07:f1:77:99: 56:1d:f1:cc:26:98:3b:5b:44:0b:53:10:eb:99:f6: b5:36:84:dd:79:fa:ef:ed:5c:e6:b7:79:39:f8:f7: 8a:56:04:5e:d7:dc:7c:46:c5:d2:81:48:2b:92:c1: 4f:28:97:10:1f:8e:7d:c9:f6:2d:16:76:a8:2b:ee: e2:cd:b2:ed:e0:3f:65:1b:7f:f5:7a:b0:00:38:6d: 5e:93:42:83:b8:12:75:af:d2:72:33:52:6a:e6:e6: 98:19:0f:92:67:b5:60:05:5f:a9:9c:17:26:b4:1e: 3e:00:1b:0d:b3:c5:0e:a2:39:ed:29:8a:fc:a8:1a: 99:76:82:02:17:1c:ef:03:37:93:c1:73:d7:81:0b: c0:b1:b3:b3:22:84:95:90:2a:90:f9:47:79:f3:4e: b4:13:0e:51:d3:34:46:62:b8:02:d4:71:ed:23:16: 3c:f7:8c:b9:b4:e6:10:3b:39:8a:99:3e:fc:a8:7c: 84:cb:5a:54:94:f4:ea:df:ce:d7:c7:d0:d3:b4:54: da:4f:bb:91:1e:f7:18:ee:c0:e0:d6:c8:34:1a:86: 4c:97:b1:84:41:32:b1:fe:61:19:92:66:f5:c8:0a: 5f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:BA:C5:B3:FD:92:B1:7A:4D:44:E9:3F:F8:33:6F:88:3A:44:62:A7 X509v3 Authority Key Identifier: keyid:92:E6:CA:68:3A:FA:18:EA:03:19:DE:C1:7D:DF:53:E0:DE:14:FD:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:fb:69:f9:03:42:b4:e0:ae:c1:48:22:63:b8:a0:ac:c2:65: fc:9f:07:6a:cf:3a:5d:87:f5:d3:37:a5:80:99:36:a7:38:26: 02:c1:1a:ca:1c:50:9f:88:5b:7c:64:09:7f:1e:d2:0d:2d:0f: 2a:9f:c3:05:6b:14:d0:09:c3:fb:9a:e7:79:17:7e:c9:dd:67: 4f:da:4b:7e:16:9d:74:49:bc:b6:86:95:e6:13:c7:62:b9:30: c1:3f:ff:61:b4:ec:51:5b:5b:a0:26:b7:76:81:2d:f9:2d:a4: 0e:46:e0:9d:16:b1:db:c3:fb:20:d0:6c:5d:1a:a1:8f:6f:1e: d7:e0:3b:eb:8f:b3:59:0c:91:94:17:e6:92:3c:09:61:26:90: 7a:2a:8b:cf:6e:94:8b:da:a4:b6:00:15:bf:a8:f5:49:95:5c: 4b:c6:b3:47:5a:5d:4b:c8:0d:e0:ec:03:98:78:ca:86:83:b8: 55:53:e4:67:1d:aa:d6:d1:6f:2f:94:00:1c:33:49:01:f0:c9: 65:66:ad:7d:fb:90:1e:f1:e9:a2:ca:c3:71:cb:4d:40:f1:15: a7:a8:f0:ca:ff:68:17:22:6d:21:33:82:53:e9:fc:a5:9a:2f: f4:bb:91:7c:75:ae:5d:1d:4c:f9:51:7d:49:c1:e9:bc:e1:e2: e9:80:3d:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIUfUEb2XiBSwWKVwQo1hwMQf6N8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJFNkNBNjgzQUZBMThFQTAzMTlERUMxN0RERjUzRTBE RTE0RkQ4OTAeFw0yNTA2MjgxOTI1NDZaFw0yNTA3MDIwMjQwNDZaMDMxMTAvBgNV BAMTKDNFQkFDNUIzRkQ5MkIxN0E0RDQ0RTkzRkY4MzM2Rjg4M0E0NDYyQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyh1JDkbetp5H4LSSCKurOKbho kC46DeY8B/F3mVYd8cwmmDtbRAtTEOuZ9rU2hN15+u/tXOa3eTn494pWBF7X3HxG xdKBSCuSwU8olxAfjn3J9i0Wdqgr7uLNsu3gP2Ubf/V6sAA4bV6TQoO4EnWv0nIz Umrm5pgZD5JntWAFX6mcFya0Hj4AGw2zxQ6iOe0pivyoGpl2ggIXHO8DN5PBc9eB C8Cxs7MihJWQKpD5R3nzTrQTDlHTNEZiuALUce0jFjz3jLm05hA7OYqZPvyofITL WlSU9OrfztfH0NO0VNpPu5Ee9xjuwODWyDQahkyXsYRBMrH+YRmSZvXICl/NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPrrFs/2SsXpNROk/+DNviDpEYqcwHwYDVR0j BBgwFoAUkubKaDr6GOoDGd7Bfd9T4N4U/YkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDMwNGI2NC0yODk5LTQ4MzAtOWMzYy0zNzU4NGEzMjdlMWUvMC85MkU2Q0E2ODNB RkExOEVBMDMxOURFQzE3RERGNTNFMERFMTRGRDg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTJFNkNBNjgzQUZBMThFQTAzMTlERUMxN0RERjUzRTBERTE0 RkQ4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQzMDRiNjQtMjg5OS00ODMwLTlj M2MtMzc1ODRhMzI3ZTFlLzAvOTJFNkNBNjgzQUZBMThFQTAzMTlERUMxN0RERjUz RTBERTE0RkQ4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABf7afkDQrTgrsFIImO4oKzCZfyfB2rPOl2H 9dM3pYCZNqc4JgLBGsocUJ+IW3xkCX8e0g0tDyqfwwVrFNAJw/ua53kXfsndZ0/a S34WnXRJvLaGleYTx2K5MME//2G07FFbW6Amt3aBLfktpA5G4J0WsdvD+yDQbF0a oY9vHtfgO+uPs1kMkZQX5pI8CWEmkHoqi89ulIvapLYAFb+o9UmVXEvGs0daXUvI DeDsA5h4yoaDuFVT5GcdqtbRby+UABwzSQHwyWVmrX37kB7x6aLKw3HLTUDxFaeo 8Mr/aBcibSEzglPp/KWaL/S7kXx1rl0dTPlRfUnB6bzh4umAPYw= -----END CERTIFICATE-----Generated at Tue Jul 1 00:47:11 2025 by rpki-client