$ rpki-client -vvf repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft File: B0AAB728B88975526C1741CCA8673CBC88F7697C.mft (raw, json) Hash identifier: pCDhhbM/tSxw//rBzOcMe21OA3+Oj61PuVYKSQljaSY= Subject key identifier: F2:5E:6E:86:82:80:0A:53:57:DD:D9:A6:F3:76:9B:F6:18:02:5E:7C Authority key identifier: B0:AA:B7:28:B8:89:75:52:6C:17:41:CC:A8:67:3C:BC:88:F7:69:7C Certificate issuer: /CN=B0AAB728B88975526C1741CCA8673CBC88F7697C Certificate serial: 449643AC2C2FF123BB1CC2AD1253AAF253331045 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft Manifest number: 035D Signing time: Wed 04 Jun 2025 02:13:39 +0000 Manifest this update: Wed 04 Jun 2025 02:08:39 +0000 Manifest next update: Sat 07 Jun 2025 14:01:39 +0000 Files and hashes: 1: B0AAB728B88975526C1741CCA8673CBC88F7697C.crl (hash: 1EXz/pB+h65KUX/Cl+WVHu32a45oM5kuZfcBQzs1ePM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.crl rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:96:43:ac:2c:2f:f1:23:bb:1c:c2:ad:12:53:aa:f2:53:33:10:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0AAB728B88975526C1741CCA8673CBC88F7697C Validity Not Before: Jun 4 02:08:39 2025 GMT Not After : Jun 7 14:01:39 2025 GMT Subject: CN=F25E6E8682800A5357DDD9A6F3769BF618025E7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:25:4c:7f:dd:38:6d:3a:29:8d:72:2e:44:fc: 37:4c:d9:b9:ae:6d:5b:d5:44:aa:c9:80:93:03:d4: c3:ba:00:ca:bd:ef:b0:fc:a2:66:83:ce:c8:17:28: f1:39:26:bf:e6:30:c3:35:2c:b7:76:09:5d:82:b3: e6:fe:6a:9e:9c:0a:71:b0:9b:07:bc:89:28:85:d0: 1e:65:f8:92:e1:a4:09:c6:5f:bd:f2:6a:72:7f:b1: a9:ff:fb:dc:2e:b7:a8:41:a1:6c:15:0c:78:1e:d6: d3:f2:91:f5:fa:5f:b4:30:62:4b:c7:3a:26:fd:f0: d2:27:b8:44:62:a6:71:3d:cb:d4:6f:7d:da:18:a8: 7f:bd:ee:a1:70:8f:95:3b:18:f7:83:c1:c3:0a:a5: b5:33:00:49:8f:ad:65:54:93:9e:09:07:b8:59:49: 5e:6e:67:91:d2:85:b7:64:1b:3d:72:34:28:cf:45: 6c:2f:58:9f:6e:fe:2c:8c:45:b7:34:03:bb:66:68: 55:86:94:58:81:b6:73:d7:7b:b7:10:16:a2:bb:17: 99:4d:56:6e:3f:16:8a:7f:0c:55:ac:b5:52:e7:2e: fd:84:89:e0:fe:18:fe:65:2f:94:0b:e7:77:99:c1: 82:23:35:06:f4:3b:0e:aa:12:65:22:be:5c:43:5a: 9c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:5E:6E:86:82:80:0A:53:57:DD:D9:A6:F3:76:9B:F6:18:02:5E:7C X509v3 Authority Key Identifier: keyid:B0:AA:B7:28:B8:89:75:52:6C:17:41:CC:A8:67:3C:BC:88:F7:69:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:d0:74:97:75:2f:93:c2:04:a4:d4:87:54:c5:f1:8f:30:0b: 7c:7a:42:29:e9:91:7d:15:f2:75:fe:90:bd:dc:bb:34:9c:1d: 51:7e:8d:7e:2c:0a:84:b8:22:e7:35:32:08:15:fd:a4:3e:61: ae:39:de:4f:d7:e6:a1:6d:52:fa:d5:0d:3e:b1:d1:93:ed:1c: ef:e0:07:aa:e2:32:86:7e:11:26:67:5c:af:83:f8:73:fa:35: 40:41:ee:27:ac:a1:6f:9e:27:be:36:0a:32:c4:4f:0d:7c:09: 47:12:ae:18:fc:13:ac:ce:ab:eb:ba:0c:bf:f2:62:f2:b5:29: 14:d7:9b:fc:55:5b:0b:c6:e0:2a:db:49:b0:a3:2e:1a:32:98: 84:e9:f5:a8:1e:e7:ac:c8:30:7f:78:93:83:c3:20:11:cc:92: 17:4f:bf:e8:30:ae:5d:1a:62:52:00:4e:41:75:68:a8:e7:1c: 47:22:26:23:ed:49:50:75:2f:9f:37:fb:75:15:36:e9:56:f1: 29:b4:01:2e:f0:a1:f5:29:c0:1a:0f:3d:fa:aa:55:92:2b:2b: 6d:6a:a1:61:9b:ff:76:41:7c:d8:eb:eb:d6:a3:55:0a:0b:0d: f8:cc:87:a2:2e:43:b9:ae:46:25:f7:19:82:57:a3:2a:b8:1d: 68:76:67:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURJZDrCwv8SO7HMKtElOq8lMzEEUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBBQUI3MjhCODg5NzU1MjZDMTc0MUNDQTg2NzNDQkM4 OEY3Njk3QzAeFw0yNTA2MDQwMjA4MzlaFw0yNTA2MDcxNDAxMzlaMDMxMTAvBgNV BAMTKEYyNUU2RTg2ODI4MDBBNTM1N0RERDlBNkYzNzY5QkY2MTgwMjVFN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvJUx/3ThtOimNci5E/DdM2bmu bVvVRKrJgJMD1MO6AMq977D8omaDzsgXKPE5Jr/mMMM1LLd2CV2Cs+b+ap6cCnGw mwe8iSiF0B5l+JLhpAnGX73yanJ/san/+9wut6hBoWwVDHge1tPykfX6X7QwYkvH Oib98NInuERipnE9y9RvfdoYqH+97qFwj5U7GPeDwcMKpbUzAEmPrWVUk54JB7hZ SV5uZ5HShbdkGz1yNCjPRWwvWJ9u/iyMRbc0A7tmaFWGlFiBtnPXe7cQFqK7F5lN Vm4/Fop/DFWstVLnLv2EieD+GP5lL5QL53eZwYIjNQb0Ow6qEmUivlxDWpxZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8l5uhoKAClNX3dmm83ab9hgCXnwwHwYDVR0j BBgwFoAUsKq3KLiJdVJsF0HMqGc8vIj3aXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTA1YTFjZS04NDlmLTQxN2MtYjY3My1mZGQzM2YwZDc0NDcvMC9CMEFBQjcyOEI4 ODk3NTUyNkMxNzQxQ0NBODY3M0NCQzg4Rjc2OTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjBBQUI3MjhCODg5NzU1MjZDMTc0MUNDQTg2NzNDQkM4OEY3 Njk3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGUwNWExY2UtODQ5Zi00MTdjLWI2 NzMtZmRkMzNmMGQ3NDQ3LzAvQjBBQUI3MjhCODg5NzU1MjZDMTc0MUNDQTg2NzND QkM4OEY3Njk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD7QdJd1L5PCBKTUh1TF8Y8wC3x6QinpkX0V 8nX+kL3cuzScHVF+jX4sCoS4Iuc1MggV/aQ+Ya453k/X5qFtUvrVDT6x0ZPtHO/g B6riMoZ+ESZnXK+D+HP6NUBB7iesoW+eJ742CjLETw18CUcSrhj8E6zOq+u6DL/y YvK1KRTXm/xVWwvG4CrbSbCjLhoymITp9age56zIMH94k4PDIBHMkhdPv+gwrl0a YlIATkF1aKjnHEciJiPtSVB1L583+3UVNulW8Sm0AS7wofUpwBoPPfqqVZIrK21q oWGb/3ZBfNjr69ajVQoLDfjMh6IuQ7muRiX3GYJXoyq4HWh2Zwo= -----END CERTIFICATE-----Generated at Thu Jun 5 18:13:11 2025 by rpki-client