$ rpki-client -vvf repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft File: B0AAB728B88975526C1741CCA8673CBC88F7697C.mft (raw, json) Hash identifier: MoFPYzkvzjl0XdAm3sT+B1C5PkgGnclYMexrPqezFj0= Subject key identifier: 35:0B:43:88:BD:97:5D:BF:D5:F5:6A:73:79:02:FA:F0:71:05:7C:E6 Authority key identifier: B0:AA:B7:28:B8:89:75:52:6C:17:41:CC:A8:67:3C:BC:88:F7:69:7C Certificate issuer: /CN=B0AAB728B88975526C1741CCA8673CBC88F7697C Certificate serial: 04E2D3B3C1F18DECFA924D3BAEC4DBB54C3D4271 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft Manifest number: 0371 Signing time: Fri 18 Jul 2025 21:21:11 +0000 Manifest this update: Fri 18 Jul 2025 21:16:11 +0000 Manifest next update: Tue 22 Jul 2025 06:07:11 +0000 Files and hashes: 1: B0AAB728B88975526C1741CCA8673CBC88F7697C.crl (hash: BCyy3nBsjwCwSwUgHS08VOBxGITDxykjNNVSxwRqP7k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.crl rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 06:07:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:e2:d3:b3:c1:f1:8d:ec:fa:92:4d:3b:ae:c4:db:b5:4c:3d:42:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0AAB728B88975526C1741CCA8673CBC88F7697C Validity Not Before: Jul 18 21:16:11 2025 GMT Not After : Jul 22 06:07:11 2025 GMT Subject: CN=350B4388BD975DBFD5F56A737902FAF071057CE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:72:51:fe:0d:bb:c5:d3:d0:81:cf:5d:7b:d2: 4e:fc:18:28:84:31:ac:8f:15:c7:d6:2e:ed:e7:c7: ee:75:21:7e:41:49:a3:b7:85:91:22:56:a0:1b:f9: b4:c2:4f:bc:28:47:6c:10:77:cc:b6:4f:05:50:eb: 4e:a3:48:00:f1:ee:79:c4:62:27:15:13:4f:83:33: 50:4e:d9:6d:ed:d8:39:5d:31:71:c5:fc:b7:39:9d: f4:e8:b9:c8:0e:65:05:53:e4:41:24:50:16:71:a4: e3:ed:91:13:70:69:b5:88:99:2b:94:35:1b:81:bc: 7b:1b:cb:11:12:08:39:09:d7:c4:a0:49:49:48:0e: bd:1e:d6:23:3d:6b:36:48:d9:bb:2c:4e:01:c4:ed: 7e:8e:2b:4b:31:4c:eb:4d:ea:61:fa:d5:6e:c1:ec: 35:61:49:f6:3f:a0:c7:21:2a:f0:be:3e:ad:f9:f0: fe:eb:d3:20:89:89:cc:2a:a7:bf:de:ff:d5:a0:5f: 31:b3:02:53:bc:05:47:31:59:3f:54:f3:c9:ce:d7: 39:3f:b9:93:92:93:2c:9b:a5:1c:6d:20:02:0a:71: 29:e9:61:bf:3c:24:de:ac:3b:71:5d:e7:18:5c:46: 42:57:e1:7c:17:ed:9b:7e:5c:40:8c:c0:99:c9:0c: a6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:0B:43:88:BD:97:5D:BF:D5:F5:6A:73:79:02:FA:F0:71:05:7C:E6 X509v3 Authority Key Identifier: keyid:B0:AA:B7:28:B8:89:75:52:6C:17:41:CC:A8:67:3C:BC:88:F7:69:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:44:b1:bc:46:a4:c0:7c:82:6e:62:33:45:e9:ce:ef:94:c7: d6:ce:0d:22:8f:33:59:06:72:a4:ea:f6:6c:35:07:8b:55:b5: 31:84:52:9b:45:2e:fd:d1:04:49:9e:1a:3a:7c:08:d4:e3:44: 1c:fb:ba:92:18:cc:c6:72:e6:82:9c:97:f5:1a:9f:9e:72:0c: 24:e1:8b:82:92:ed:42:c3:a1:38:c6:9d:d8:19:5b:74:f5:a7: 97:f8:e5:16:ff:95:1f:c0:75:61:77:e1:7d:a4:06:a8:ce:6a: 03:d7:50:19:80:52:02:b3:d9:25:74:3c:d0:06:a9:39:95:a7: e1:b1:1f:67:51:c4:0f:c2:ca:26:4e:a5:45:e0:77:14:31:a3: cc:b7:a7:0b:90:a7:0c:25:0e:4b:1b:16:b8:62:04:8c:aa:cd: c7:51:b9:fa:16:b2:0f:33:e3:0e:5a:5a:fe:2d:26:c4:a7:a3: a2:ff:a9:e3:f3:25:09:2d:21:1d:e4:d2:98:4d:c0:63:cb:08: f6:62:ff:68:fb:b0:9d:66:38:43:36:ef:f4:92:c5:15:c3:0e: 2b:cd:9c:af:0e:8f:a9:7c:3d:50:56:bd:69:61:b5:98:a7:73: 9b:0b:14:c4:ab:18:6c:ec:15:c3:25:d7:da:b6:f1:99:d4:85: 97:c2:a6:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBOLTs8Hxjez6kk07rsTbtUw9QnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBBQUI3MjhCODg5NzU1MjZDMTc0MUNDQTg2NzNDQkM4 OEY3Njk3QzAeFw0yNTA3MTgyMTE2MTFaFw0yNTA3MjIwNjA3MTFaMDMxMTAvBgNV BAMTKDM1MEI0Mzg4QkQ5NzVEQkZENUY1NkE3Mzc5MDJGQUYwNzEwNTdDRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJclH+DbvF09CBz1170k78GCiE MayPFcfWLu3nx+51IX5BSaO3hZEiVqAb+bTCT7woR2wQd8y2TwVQ606jSADx7nnE YicVE0+DM1BO2W3t2DldMXHF/Lc5nfToucgOZQVT5EEkUBZxpOPtkRNwabWImSuU NRuBvHsbyxESCDkJ18SgSUlIDr0e1iM9azZI2bssTgHE7X6OK0sxTOtN6mH61W7B 7DVhSfY/oMchKvC+Pq358P7r0yCJicwqp7/e/9WgXzGzAlO8BUcxWT9U88nO1zk/ uZOSkyybpRxtIAIKcSnpYb88JN6sO3Fd5xhcRkJX4XwX7Zt+XECMwJnJDKalAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNQtDiL2XXb/V9WpzeQL68HEFfOYwHwYDVR0j BBgwFoAUsKq3KLiJdVJsF0HMqGc8vIj3aXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTA1YTFjZS04NDlmLTQxN2MtYjY3My1mZGQzM2YwZDc0NDcvMC9CMEFBQjcyOEI4 ODk3NTUyNkMxNzQxQ0NBODY3M0NCQzg4Rjc2OTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjBBQUI3MjhCODg5NzU1MjZDMTc0MUNDQTg2NzNDQkM4OEY3 Njk3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGUwNWExY2UtODQ5Zi00MTdjLWI2 NzMtZmRkMzNmMGQ3NDQ3LzAvQjBBQUI3MjhCODg5NzU1MjZDMTc0MUNDQTg2NzND QkM4OEY3Njk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAlEsbxGpMB8gm5iM0Xpzu+Ux9bODSKPM1kG cqTq9mw1B4tVtTGEUptFLv3RBEmeGjp8CNTjRBz7upIYzMZy5oKcl/Uan55yDCTh i4KS7ULDoTjGndgZW3T1p5f45Rb/lR/AdWF34X2kBqjOagPXUBmAUgKz2SV0PNAG qTmVp+GxH2dRxA/CyiZOpUXgdxQxo8y3pwuQpwwlDksbFrhiBIyqzcdRufoWsg8z 4w5aWv4tJsSno6L/qePzJQktIR3k0phNwGPLCPZi/2j7sJ1mOEM27/SSxRXDDivN nK8Oj6l8PVBWvWlhtZinc5sLFMSrGGzsFcMl19q28ZnUhZfCpuA= -----END CERTIFICATE-----Generated at Mon Jul 21 01:32:08 2025 by rpki-client