$ rpki-client -vvf repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft File: B0AAB728B88975526C1741CCA8673CBC88F7697C.mft (raw, json) Hash identifier: +ol3sOef4wvHKwm4jeg6rjtjc7RpHZNM4XP53meDQDk= Subject key identifier: 00:37:44:71:00:B2:41:A8:1B:98:F6:A9:5B:0B:E2:93:C8:19:66:55 Authority key identifier: B0:AA:B7:28:B8:89:75:52:6C:17:41:CC:A8:67:3C:BC:88:F7:69:7C Certificate issuer: /CN=B0AAB728B88975526C1741CCA8673CBC88F7697C Certificate serial: 4E5532A123AB247502E1300FFD7C3F4A4D42D42C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft Manifest number: 0387 Signing time: Sat 06 Sep 2025 09:11:12 +0000 Manifest this update: Sat 06 Sep 2025 09:06:12 +0000 Manifest next update: Tue 09 Sep 2025 14:23:12 +0000 Files and hashes: 1: B0AAB728B88975526C1741CCA8673CBC88F7697C.crl (hash: wYQkNuspD1unCktvY2c1PzRFLgtR6ajut0v4OsUsfVQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.crl rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 14:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:55:32:a1:23:ab:24:75:02:e1:30:0f:fd:7c:3f:4a:4d:42:d4:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0AAB728B88975526C1741CCA8673CBC88F7697C Validity Not Before: Sep 6 09:06:12 2025 GMT Not After : Sep 9 14:23:12 2025 GMT Subject: CN=0037447100B241A81B98F6A95B0BE293C8196655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e1:d2:e3:db:d3:7e:d1:bb:6c:68:ad:0a:25: ad:a5:53:d2:13:b1:a8:7e:92:53:8a:91:b7:41:f6: 54:a3:3f:8e:6a:97:d5:63:ce:19:79:2a:38:38:ad: 3f:b3:cd:72:3f:bd:df:fb:43:00:76:43:52:79:ad: ab:cf:bb:62:a8:81:9e:c0:96:e4:37:30:c7:7b:f2: 79:7b:38:36:21:d2:be:7b:0b:b4:cb:8e:29:db:24: cb:a5:ac:b0:6b:3e:3e:62:06:79:f7:ea:0c:56:c5: 8c:57:a6:e6:72:00:75:ee:ad:55:a4:b6:54:e3:8a: 9a:ce:8b:24:13:9f:ab:8c:76:02:c6:08:69:ca:85: 52:9f:6b:03:f9:d8:94:7c:d5:3a:cd:27:e5:03:6b: a0:ab:2b:30:75:eb:be:c8:97:3a:a9:66:5c:b8:91: ba:c2:f0:bd:76:6a:dd:ed:23:96:bc:1a:71:f0:83: 9c:d5:a9:53:e8:77:26:d4:b2:d6:03:46:34:4f:0b: 09:45:18:4c:d1:7c:a4:96:03:74:d3:a5:83:53:dd: 20:c1:15:ed:44:e4:70:e1:6d:55:71:00:0b:5e:4d: 71:93:13:13:15:04:53:64:47:30:d4:4e:f3:f5:71: bd:25:7a:4a:61:99:de:0b:60:78:93:9a:15:7b:fc: ae:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:37:44:71:00:B2:41:A8:1B:98:F6:A9:5B:0B:E2:93:C8:19:66:55 X509v3 Authority Key Identifier: keyid:B0:AA:B7:28:B8:89:75:52:6C:17:41:CC:A8:67:3C:BC:88:F7:69:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:18:e3:15:83:4b:e1:64:63:c2:c5:24:43:6e:c4:83:4b:75: 79:f3:e6:23:5f:f9:f0:fc:e1:8c:b6:f5:6e:2d:1b:5c:0a:a6: bf:ee:33:fe:b2:33:4f:84:81:c4:f5:a9:07:8d:f7:9d:41:54: a1:07:1d:bd:b5:d0:73:b8:6f:f1:41:fb:37:76:36:3f:4a:2e: 75:69:1d:5c:4c:13:6b:33:6c:ba:63:9d:0c:02:00:75:81:23: f3:c8:34:38:ae:7e:0e:99:92:d0:4d:5c:43:9d:98:bc:b7:a2: ae:ca:c3:07:83:8e:fe:fc:c7:b9:be:30:1b:87:fe:b4:7a:56: 03:bb:89:de:ee:e3:da:3b:c4:c7:5a:db:a9:35:c5:93:d1:9e: 15:09:dc:f1:f7:c6:e4:46:b9:01:2d:31:a3:f8:c4:b4:4d:a3: cd:bd:af:69:fe:16:a4:e5:17:f9:28:71:78:48:1a:10:f5:7c: 96:d6:29:b8:72:41:fc:b2:93:ad:29:5b:65:cf:bd:fe:d9:ab: 97:fd:45:67:a7:b4:99:93:20:bc:29:0f:5b:3d:21:23:c8:c8: 71:3c:c8:e1:f8:6f:8b:1d:d1:36:5c:57:a6:e1:c6:95:c3:27: ec:57:f2:14:f6:ca:00:a0:07:85:1d:a8:79:b6:42:b6:13:91: e9:21:86:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTlUyoSOrJHUC4TAP/Xw/Sk1C1CwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBBQUI3MjhCODg5NzU1MjZDMTc0MUNDQTg2NzNDQkM4 OEY3Njk3QzAeFw0yNTA5MDYwOTA2MTJaFw0yNTA5MDkxNDIzMTJaMDMxMTAvBgNV BAMTKDAwMzc0NDcxMDBCMjQxQTgxQjk4RjZBOTVCMEJFMjkzQzgxOTY2NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN4dLj29N+0btsaK0KJa2lU9IT sah+klOKkbdB9lSjP45ql9Vjzhl5Kjg4rT+zzXI/vd/7QwB2Q1J5ravPu2KogZ7A luQ3MMd78nl7ODYh0r57C7TLjinbJMulrLBrPj5iBnn36gxWxYxXpuZyAHXurVWk tlTjiprOiyQTn6uMdgLGCGnKhVKfawP52JR81TrNJ+UDa6CrKzB1677IlzqpZly4 kbrC8L12at3tI5a8GnHwg5zVqVPodybUstYDRjRPCwlFGEzRfKSWA3TTpYNT3SDB Fe1E5HDhbVVxAAteTXGTExMVBFNkRzDUTvP1cb0lekphmd4LYHiTmhV7/K5DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUADdEcQCyQagbmPapWwvik8gZZlUwHwYDVR0j BBgwFoAUsKq3KLiJdVJsF0HMqGc8vIj3aXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTA1YTFjZS04NDlmLTQxN2MtYjY3My1mZGQzM2YwZDc0NDcvMC9CMEFBQjcyOEI4 ODk3NTUyNkMxNzQxQ0NBODY3M0NCQzg4Rjc2OTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjBBQUI3MjhCODg5NzU1MjZDMTc0MUNDQTg2NzNDQkM4OEY3 Njk3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGUwNWExY2UtODQ5Zi00MTdjLWI2 NzMtZmRkMzNmMGQ3NDQ3LzAvQjBBQUI3MjhCODg5NzU1MjZDMTc0MUNDQTg2NzND QkM4OEY3Njk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFEY4xWDS+FkY8LFJENuxINLdXnz5iNf+fD8 4Yy29W4tG1wKpr/uM/6yM0+EgcT1qQeN951BVKEHHb210HO4b/FB+zd2Nj9KLnVp HVxME2szbLpjnQwCAHWBI/PINDiufg6ZktBNXEOdmLy3oq7KwweDjv78x7m+MBuH /rR6VgO7id7u49o7xMda26k1xZPRnhUJ3PH3xuRGuQEtMaP4xLRNo829r2n+FqTl F/kocXhIGhD1fJbWKbhyQfyyk60pW2XPvf7Zq5f9RWentJmTILwpD1s9ISPIyHE8 yOH4b4sd0TZcV6bhxpXDJ+xX8hT2ygCgB4UdqHm2QrYTkekhhlY= -----END CERTIFICATE-----Generated at Sun Sep 7 15:14:46 2025 by rpki-client