$ rpki-client -vvf repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft File: 0BB3D1874063172B5374865233070332233FB7B3.mft (raw, json) Hash identifier: HJTfTz8oBT4uYPT7QgHpKljCz2GTHDVCuepYYSt5dyU= Subject key identifier: 23:A2:42:F2:7F:9F:A2:1D:A6:85:9E:E3:05:3B:85:1D:37:75:47:0C Authority key identifier: 0B:B3:D1:87:40:63:17:2B:53:74:86:52:33:07:03:32:23:3F:B7:B3 Certificate issuer: /CN=0BB3D1874063172B5374865233070332233FB7B3 Certificate serial: 47C9A91D8EBA9C5007271561A081E9C99EFEA432 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB3D1874063172B5374865233070332233FB7B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft Manifest number: 04ED Signing time: Tue 22 Jul 2025 19:12:04 +0000 Manifest this update: Tue 22 Jul 2025 19:07:04 +0000 Manifest next update: Sat 26 Jul 2025 01:42:04 +0000 Files and hashes: 1: 0BB3D1874063172B5374865233070332233FB7B3.crl (hash: /A2XvYnw3ZS3M6S156giGdkV02fk7Ee9mdnowduwXM8=) 2: 3230322e3135332e31362e302f32302d3234203d3e203233363636.roa (hash: 5FOROrvQq+0t+Mk/ACrrEVqg06jInBJCBz0qroNhCeU=) 3: 3131372e3130342e3139322e302f31392d3234203d3e203233363636.roa (hash: zCm8uejNjkpY+DjdGXgrEnekcPvtN86UHanFShqlM6g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.crl rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB3D1874063172B5374865233070332233FB7B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:42:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:c9:a9:1d:8e:ba:9c:50:07:27:15:61:a0:81:e9:c9:9e:fe:a4:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BB3D1874063172B5374865233070332233FB7B3 Validity Not Before: Jul 22 19:07:04 2025 GMT Not After : Jul 26 01:42:04 2025 GMT Subject: CN=23A242F27F9FA21DA6859EE3053B851D3775470C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:81:e1:a1:d8:40:9e:69:90:90:03:ed:6c:1e: dd:1c:ab:88:ae:f7:1f:7a:c1:7a:95:0a:bf:8f:17: 53:5c:f8:9f:c8:a1:4b:c3:8d:a8:cc:6a:66:7b:96: f7:55:95:21:25:e8:53:0e:da:99:79:04:ff:7b:2a: 18:3c:dd:83:c6:18:3c:2a:92:1f:46:4a:b4:2d:4c: b2:59:7a:4a:e6:e6:b8:b7:ff:98:13:2c:61:34:ab: 6b:11:0d:93:89:0b:da:be:8e:1b:27:b5:8a:6a:4e: 32:0b:99:a1:3b:01:01:c0:3f:b3:20:db:7e:db:2c: ad:a4:a4:5d:c1:60:d7:14:0b:be:91:d1:e8:d4:77: 3a:ff:0d:62:e6:c5:f3:d6:bb:78:96:4d:c9:36:ab: 78:3a:94:e2:6a:3c:16:bf:5c:58:b7:8d:7d:56:29: bd:97:1e:5b:97:35:73:37:64:0c:85:6f:b7:05:33: f0:9e:ba:69:b6:11:3b:4e:57:db:af:00:7c:fb:80: a2:9b:8f:d0:7b:d7:fe:ad:96:99:8f:23:89:81:00: 7a:ed:fd:01:01:26:53:58:4d:8f:fa:40:4e:32:33: e1:8e:74:f6:e0:09:e2:cb:e2:af:33:94:ea:70:fc: dd:13:94:9f:c6:0a:7e:9d:ca:ac:42:50:5c:41:ae: 7a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A2:42:F2:7F:9F:A2:1D:A6:85:9E:E3:05:3B:85:1D:37:75:47:0C X509v3 Authority Key Identifier: keyid:0B:B3:D1:87:40:63:17:2B:53:74:86:52:33:07:03:32:23:3F:B7:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB3D1874063172B5374865233070332233FB7B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:87:39:b7:af:cd:af:3d:71:5a:95:ef:ea:0d:fd:f2:16:d5: 32:dc:dc:87:ba:d5:02:5f:fc:38:2c:fe:ec:51:d3:a6:d5:2f: 0d:89:57:51:80:04:50:4d:c7:1c:ac:f1:f0:fe:a5:7c:69:bb: 59:55:a1:c7:f3:57:69:d0:4d:37:4b:39:c2:20:58:55:6f:25: 99:0a:1f:73:47:70:20:41:61:e4:5c:76:f9:98:a5:c0:9d:a6: 26:92:f0:2d:3c:9e:ec:bb:6e:c5:eb:6f:ff:56:65:ca:02:9c: c0:34:8d:ab:ea:44:08:51:84:4f:b6:af:ea:2b:0b:88:85:0f: d6:36:6f:93:09:e7:52:34:54:bb:89:9f:76:44:1d:74:de:9d: 0f:95:83:87:ba:a1:aa:25:ed:be:ee:04:04:99:7a:c8:21:04: 04:22:af:a3:a8:8d:81:62:df:06:80:36:11:84:c8:0d:0c:e0: 52:42:60:dc:b4:b7:ea:d9:47:b7:86:5e:af:2f:8f:94:b9:7f: 6c:9e:75:07:5a:0a:4e:eb:2a:7a:cf:04:0f:07:88:41:5c:32: ef:85:aa:f5:cb:f7:2d:0b:5f:ee:00:c3:8c:a5:a4:2e:d0:60: e8:13:b3:03:c7:40:51:18:b4:e8:a3:90:f9:12:23:6e:f5:e8: fd:42:57:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR8mpHY66nFAHJxVhoIHpyZ7+pDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJCM0QxODc0MDYzMTcyQjUzNzQ4NjUyMzMwNzAzMzIy MzNGQjdCMzAeFw0yNTA3MjIxOTA3MDRaFw0yNTA3MjYwMTQyMDRaMDMxMTAvBgNV BAMTKDIzQTI0MkYyN0Y5RkEyMURBNjg1OUVFMzA1M0I4NTFEMzc3NTQ3MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJgeGh2ECeaZCQA+1sHt0cq4iu 9x96wXqVCr+PF1Nc+J/IoUvDjajMamZ7lvdVlSEl6FMO2pl5BP97Khg83YPGGDwq kh9GSrQtTLJZekrm5ri3/5gTLGE0q2sRDZOJC9q+jhsntYpqTjILmaE7AQHAP7Mg 237bLK2kpF3BYNcUC76R0ejUdzr/DWLmxfPWu3iWTck2q3g6lOJqPBa/XFi3jX1W Kb2XHluXNXM3ZAyFb7cFM/Ceumm2ETtOV9uvAHz7gKKbj9B71/6tlpmPI4mBAHrt /QEBJlNYTY/6QE4yM+GOdPbgCeLL4q8zlOpw/N0TlJ/GCn6dyqxCUFxBrnpnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI6JC8n+foh2mhZ7jBTuFHTd1RwwwHwYDVR0j BBgwFoAUC7PRh0BjFytTdIZSMwcDMiM/t7MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTkwOGI4My03ZjQ0LTQ2ZTAtODUzNS02ZmI4NGI1OWQ1OGEvMC8wQkIzRDE4NzQw NjMxNzJCNTM3NDg2NTIzMzA3MDMzMjIzM0ZCN0IzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEJCM0QxODc0MDYzMTcyQjUzNzQ4NjUyMzMwNzAzMzIyMzNG QjdCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU5MDhiODMtN2Y0NC00NmUwLTg1 MzUtNmZiODRiNTlkNThhLzAvMEJCM0QxODc0MDYzMTcyQjUzNzQ4NjUyMzMwNzAz MzIyMzNGQjdCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFSHObevza89cVqV7+oN/fIW1TLc3Ie61QJf /Dgs/uxR06bVLw2JV1GABFBNxxys8fD+pXxpu1lVocfzV2nQTTdLOcIgWFVvJZkK H3NHcCBBYeRcdvmYpcCdpiaS8C08nuy7bsXrb/9WZcoCnMA0javqRAhRhE+2r+or C4iFD9Y2b5MJ51I0VLuJn3ZEHXTenQ+Vg4e6oaol7b7uBASZesghBAQir6OojYFi 3waANhGEyA0M4FJCYNy0t+rZR7eGXq8vj5S5f2yedQdaCk7rKnrPBA8HiEFcMu+F qvXL9y0LX+4Aw4ylpC7QYOgTswPHQFEYtOijkPkSI2716P1CVyI= -----END CERTIFICATE-----Generated at Thu Jul 24 21:05:50 2025 by rpki-client