$ rpki-client -vvf repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft File: B7959E04EF090801395CE53E099D09F7AF2EF81B.mft (raw, json) Hash identifier: omUrqzDM5nsojFM5iUej1OMCfCq0IqLx7xDBNLV6bFs= Subject key identifier: B9:78:F8:B0:F1:1E:ED:32:A2:95:F5:6E:B7:38:7B:9C:3F:67:97:B3 Authority key identifier: B7:95:9E:04:EF:09:08:01:39:5C:E5:3E:09:9D:09:F7:AF:2E:F8:1B Certificate issuer: /CN=B7959E04EF090801395CE53E099D09F7AF2EF81B Certificate serial: 3C02179EF93E66AFB5B9776ADD1DEC70C1AA1159 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft Manifest number: 01CD Signing time: Tue 03 Jun 2025 18:01:55 +0000 Manifest this update: Tue 03 Jun 2025 17:56:55 +0000 Manifest next update: Fri 06 Jun 2025 22:57:55 +0000 Files and hashes: 1: 3230332e3131342e3232362e302f32342d3234203d3e203435373033.roa (hash: 1cX8i6kVHz142LzobmEyC/+1K1VM1wldny1qyaPLfIA=) 2: 3230332e3131342e3232372e302f32342d3234203d3e203435373033.roa (hash: S8koCw5Zpdz9WUfwrWHvdyG3BqQzOLzzd7o5WN4coH4=) 3: B7959E04EF090801395CE53E099D09F7AF2EF81B.crl (hash: QT0aODkYqALm3MfZV014EhLlbDlekFAF2jvw5aJjhMY=) 4: 3230332e3131342e3232362e302f32332d3233203d3e203435373033.roa (hash: 6Ec3PjRbQ83AgMPSDqdSdFcRTMZUzCno6pS4ublkNCA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.crl rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:02:17:9e:f9:3e:66:af:b5:b9:77:6a:dd:1d:ec:70:c1:aa:11:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7959E04EF090801395CE53E099D09F7AF2EF81B Validity Not Before: Jun 3 17:56:55 2025 GMT Not After : Jun 6 22:57:55 2025 GMT Subject: CN=B978F8B0F11EED32A295F56EB7387B9C3F6797B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b3:32:0d:ef:bc:ef:45:1c:1a:06:c4:c5:2d: 87:f6:66:f0:87:e1:63:91:aa:e1:01:3d:f1:72:e2: 5e:3a:21:4f:86:ac:6e:08:16:ff:c9:6a:93:f2:d8: aa:33:aa:17:45:47:94:73:28:3b:a1:78:c4:68:ba: 45:1b:0a:b6:88:75:a8:c6:68:f2:35:b5:06:0d:04: 8e:c2:1e:8c:ee:93:38:c8:ee:7e:f2:6c:8a:fc:ea: b7:f1:ea:04:58:52:50:47:65:a1:65:41:c5:26:60: 07:32:04:18:fd:d5:7d:30:79:b8:0f:bb:8a:d3:fc: ed:c7:cc:f2:5b:a3:96:48:9d:bd:86:be:6f:c6:8c: 75:67:6b:27:9d:90:cb:e7:e3:88:60:5e:6e:93:d2: 96:21:bd:3a:49:7d:e6:9c:16:b6:dc:c5:ee:a1:7a: cb:41:66:5d:a1:c8:09:68:36:b2:55:82:71:9b:f4: 03:87:9a:25:ce:9d:67:01:84:e9:37:47:6f:01:2b: aa:02:a1:05:3b:cd:26:a6:d0:75:cc:9d:f9:1e:fd: e6:55:0a:a3:94:d0:24:bb:7e:44:a8:7c:79:4b:09: f1:9c:bf:f1:ab:20:6e:ae:37:4d:6c:ea:2b:7f:a6: c3:ea:e4:bc:1d:e4:e5:e5:27:ed:fd:d3:93:18:3a: 21:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:78:F8:B0:F1:1E:ED:32:A2:95:F5:6E:B7:38:7B:9C:3F:67:97:B3 X509v3 Authority Key Identifier: keyid:B7:95:9E:04:EF:09:08:01:39:5C:E5:3E:09:9D:09:F7:AF:2E:F8:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:b3:48:ee:f2:08:67:48:c1:1d:70:cb:35:f8:0d:fb:a2:72: 18:ba:72:5e:1d:62:72:62:32:8c:5c:83:a2:68:9b:1f:f0:0c: bf:99:3c:81:b0:51:b4:ce:35:91:b2:b5:35:f2:2f:57:12:c1: cd:ce:ca:ce:bc:d1:e4:4b:f6:0f:8e:3c:71:4b:5f:0d:ca:90: a7:64:93:1f:39:98:2b:0c:bd:a7:27:42:e5:77:23:19:2d:eb: d8:c8:6e:2f:32:97:a8:f7:63:51:3e:36:49:c7:ec:fa:e6:91: 27:f5:20:03:bb:63:3b:10:a4:00:2d:fd:9a:51:4f:93:9f:12: d1:47:10:f8:e9:25:ce:2d:0f:23:53:87:e1:43:d3:11:42:42: 96:75:cb:07:14:c2:4e:a5:3a:40:d9:de:5d:bb:98:fe:45:31: 02:50:75:1a:d3:42:f2:38:ae:7b:e5:f6:54:ce:8f:ea:46:7f: 69:ce:21:e3:22:55:36:da:ae:cd:3f:ea:84:5c:f6:99:cc:1b: f7:b6:2d:db:f1:fc:bd:37:21:a1:80:de:7f:83:e8:da:78:a7: 41:3f:2a:15:e7:d2:b5:56:a2:0d:56:d7:9e:b2:ad:0c:b0:11: 82:9a:34:f1:77:e7:8c:54:d3:02:2f:82:09:81:78:c5:74:14: f3:9b:ac:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPAIXnvk+Zq+1uXdq3R3scMGqEVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc5NTlFMDRFRjA5MDgwMTM5NUNFNTNFMDk5RDA5RjdB RjJFRjgxQjAeFw0yNTA2MDMxNzU2NTVaFw0yNTA2MDYyMjU3NTVaMDMxMTAvBgNV BAMTKEI5NzhGOEIwRjExRUVEMzJBMjk1RjU2RUI3Mzg3QjlDM0Y2Nzk3QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuszIN77zvRRwaBsTFLYf2ZvCH 4WORquEBPfFy4l46IU+GrG4IFv/JapPy2KozqhdFR5RzKDuheMRoukUbCraIdajG aPI1tQYNBI7CHozukzjI7n7ybIr86rfx6gRYUlBHZaFlQcUmYAcyBBj91X0webgP u4rT/O3HzPJbo5ZInb2Gvm/GjHVnayedkMvn44hgXm6T0pYhvTpJfeacFrbcxe6h estBZl2hyAloNrJVgnGb9AOHmiXOnWcBhOk3R28BK6oCoQU7zSam0HXMnfke/eZV CqOU0CS7fkSofHlLCfGcv/GrIG6uN01s6it/psPq5Lwd5OXlJ+3905MYOiHxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuXj4sPEe7TKilfVutzh7nD9nl7MwHwYDVR0j BBgwFoAUt5WeBO8JCAE5XOU+CZ0J968u+BswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDYzYWU3Yy1hNmZmLTRmZDgtOTZmMi0wYmExODgwMTMzYzcvMC9CNzk1OUUwNEVG MDkwODAxMzk1Q0U1M0UwOTlEMDlGN0FGMkVGODFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjc5NTlFMDRFRjA5MDgwMTM5NUNFNTNFMDk5RDA5RjdBRjJF RjgxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ2M2FlN2MtYTZmZi00ZmQ4LTk2 ZjItMGJhMTg4MDEzM2M3LzAvQjc5NTlFMDRFRjA5MDgwMTM5NUNFNTNFMDk5RDA5 RjdBRjJFRjgxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFazSO7yCGdIwR1wyzX4Dfuichi6cl4dYnJi Moxcg6Jomx/wDL+ZPIGwUbTONZGytTXyL1cSwc3Oys680eRL9g+OPHFLXw3KkKdk kx85mCsMvacnQuV3Ixkt69jIbi8yl6j3Y1E+NknH7PrmkSf1IAO7YzsQpAAt/ZpR T5OfEtFHEPjpJc4tDyNTh+FD0xFCQpZ1ywcUwk6lOkDZ3l27mP5FMQJQdRrTQvI4 rnvl9lTOj+pGf2nOIeMiVTbars0/6oRc9pnMG/e2Ldvx/L03IaGA3n+D6Np4p0E/ KhXn0rVWog1W156yrQywEYKaNPF354xU0wIvggmBeMV0FPObrJI= -----END CERTIFICATE-----Generated at Thu Jun 5 18:23:08 2025 by rpki-client