$ rpki-client -vvf repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.mft File: B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.mft (raw, json) Hash identifier: 43vENMQUbIantM+x6j2WfS4xraGRvqjf8kbzg7sS6Fc= Subject key identifier: D2:0F:B6:9A:87:69:82:7E:BC:E0:20:2B:35:28:6D:BA:F9:44:D4:0B Authority key identifier: B1:01:5F:DC:3A:BD:C9:EC:59:4F:6E:8A:82:A1:16:F7:69:CA:56:65 Certificate issuer: /CN=B1015FDC3ABDC9EC594F6E8A82A116F769CA5665 Certificate serial: 4E3CE28B57EDBDF7E96795A257E46F987EB78E97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.mft Manifest number: 0166 Signing time: Fri 06 Jun 2025 17:10:42 +0000 Manifest this update: Fri 06 Jun 2025 17:05:42 +0000 Manifest next update: Mon 09 Jun 2025 18:13:42 +0000 Files and hashes: 1: 3130332e3134312e3235342e302f32342d3234203d3e20313331373639.roa (hash: 3jV7osfpuzM2RdznZ0/4uwu+i/NyUjZA48yClTEGD1w=) 2: B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.crl (hash: n6SeIeRDHckvMJbc5AwQKZiN+8wA8/ubGTe265sXElk=) 3: 3130332e3134312e3235352e302f32342d3234203d3e20313331373639.roa (hash: UaQ/mjwTv+b6NTjX6YdQwkzBFAEMayy8kKSUdpdv01Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.crl rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 18:13:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:3c:e2:8b:57:ed:bd:f7:e9:67:95:a2:57:e4:6f:98:7e:b7:8e:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1015FDC3ABDC9EC594F6E8A82A116F769CA5665 Validity Not Before: Jun 6 17:05:42 2025 GMT Not After : Jun 9 18:13:42 2025 GMT Subject: CN=D20FB69A8769827EBCE0202B35286DBAF944D40B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:01:8a:50:e9:7e:3f:74:ec:71:15:60:80:a8: 32:08:82:d0:4b:69:6c:ee:9b:a9:3f:0b:f7:d6:9c: 90:70:98:fa:0e:69:b5:3d:33:c8:b1:8d:b6:44:1b: a0:3f:37:bb:f2:1b:fd:1d:c7:e9:a5:a8:73:f6:57: b0:23:c7:c7:10:32:c1:8a:01:b3:ce:c7:cb:0a:17: 6e:6b:fd:aa:a5:a7:63:e8:2b:e5:5b:67:23:6a:bc: c5:8d:07:ea:be:7e:a5:24:31:62:62:35:1a:b3:ac: 8f:42:dc:98:9b:c8:7a:c1:d5:5f:df:45:26:0b:53: ae:52:52:00:02:37:39:3e:38:38:54:41:77:77:56: 99:22:8f:d9:3f:e8:26:17:85:f0:30:db:a0:ec:7f: 8c:d4:3b:a3:ab:c0:3d:a9:1e:65:05:4f:1a:3c:23: ea:98:45:c1:2b:eb:e8:76:b0:41:c6:ad:c7:4b:7a: f8:96:7d:4f:c3:8c:23:e2:1d:b9:c7:d2:fb:f8:fa: ce:1a:0b:03:54:4c:96:c0:56:55:ae:79:27:ee:3f: f4:03:fd:0b:ff:db:9a:15:f0:71:1b:83:4c:fe:fc: 9a:dd:65:0b:30:8a:0f:01:f3:d7:8d:2f:5a:57:49: a5:79:0d:7d:f1:4c:19:72:d5:41:58:3c:91:27:e5: 14:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:0F:B6:9A:87:69:82:7E:BC:E0:20:2B:35:28:6D:BA:F9:44:D4:0B X509v3 Authority Key Identifier: keyid:B1:01:5F:DC:3A:BD:C9:EC:59:4F:6E:8A:82:A1:16:F7:69:CA:56:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:73:33:c2:b8:c4:30:28:c7:7f:00:c3:25:91:62:5c:b2:be: 29:8d:21:00:f0:2a:dc:75:c5:62:46:85:25:b6:d7:eb:17:26: 15:46:1a:5f:06:ff:ee:dd:25:48:2a:3d:70:9a:7e:3a:b4:5a: 91:1c:e1:01:f2:90:17:de:39:17:3e:9d:02:02:a0:06:eb:30: 83:d0:a0:12:1c:83:7e:42:5d:e6:e6:57:67:0f:4a:e9:2f:40: ab:1a:61:b2:41:15:e6:34:59:e2:77:c8:e9:a9:f7:c2:05:f8: 06:64:52:e7:14:2c:a8:ab:64:fc:3d:44:a2:e1:0e:f0:25:c1: 38:02:b6:5a:d6:53:ea:cb:01:06:6c:ab:53:46:4b:d1:eb:a0: de:81:a5:d9:95:c7:a7:68:40:13:cb:f8:87:a8:62:40:6a:44: b0:f7:c2:55:b2:dd:bb:18:8d:cc:54:ad:78:e9:aa:0d:40:3c: 77:96:51:7b:ea:89:70:6a:ef:f0:13:41:f2:c6:b2:b4:db:4a: ad:4c:42:7f:aa:05:81:aa:f2:04:f3:a1:5a:97:b0:b5:7f:2a: 8b:43:89:8f:d3:0f:0e:68:0d:bf:9f:37:41:cf:f8:c3:89:5f: d9:65:75:b9:f8:04:0b:15:87:67:dd:03:ee:f4:98:bf:bf:66: 9b:84:a1:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTjzii1ftvffpZ5WiV+RvmH63jpcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjEwMTVGREMzQUJEQzlFQzU5NEY2RThBODJBMTE2Rjc2 OUNBNTY2NTAeFw0yNTA2MDYxNzA1NDJaFw0yNTA2MDkxODEzNDJaMDMxMTAvBgNV BAMTKEQyMEZCNjlBODc2OTgyN0VCQ0UwMjAyQjM1Mjg2REJBRjk0NEQ0MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnAYpQ6X4/dOxxFWCAqDIIgtBL aWzum6k/C/fWnJBwmPoOabU9M8ixjbZEG6A/N7vyG/0dx+mlqHP2V7Ajx8cQMsGK AbPOx8sKF25r/aqlp2PoK+VbZyNqvMWNB+q+fqUkMWJiNRqzrI9C3JibyHrB1V/f RSYLU65SUgACNzk+ODhUQXd3Vpkij9k/6CYXhfAw26Dsf4zUO6OrwD2pHmUFTxo8 I+qYRcEr6+h2sEHGrcdLeviWfU/DjCPiHbnH0vv4+s4aCwNUTJbAVlWueSfuP/QD /Qv/25oV8HEbg0z+/JrdZQswig8B89eNL1pXSaV5DX3xTBly1UFYPJEn5RQPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0g+2modpgn684CArNShtuvlE1AswHwYDVR0j BBgwFoAUsQFf3Dq9yexZT26KgqEW92nKVmUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWQ4NTBhOC1hYmI5LTQ0ODItYTViYy01NGQ3OWViN2YzMjMvMC9CMTAxNUZEQzNB QkRDOUVDNTk0RjZFOEE4MkExMTZGNzY5Q0E1NjY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjEwMTVGREMzQUJEQzlFQzU5NEY2RThBODJBMTE2Rjc2OUNB NTY2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVkODUwYTgtYWJiOS00NDgyLWE1 YmMtNTRkNzllYjdmMzIzLzAvQjEwMTVGREMzQUJEQzlFQzU5NEY2RThBODJBMTE2 Rjc2OUNBNTY2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC9zM8K4xDAox38AwyWRYlyyvimNIQDwKtx1 xWJGhSW21+sXJhVGGl8G/+7dJUgqPXCafjq0WpEc4QHykBfeORc+nQICoAbrMIPQ oBIcg35CXebmV2cPSukvQKsaYbJBFeY0WeJ3yOmp98IF+AZkUucULKirZPw9RKLh DvAlwTgCtlrWU+rLAQZsq1NGS9HroN6BpdmVx6doQBPL+IeoYkBqRLD3wlWy3bsY jcxUrXjpqg1APHeWUXvqiXBq7/ATQfLGsrTbSq1MQn+qBYGq8gTzoVqXsLV/KotD iY/TDw5oDb+fN0HP+MOJX9lldbn4BAsVh2fdA+70mL+/ZpuEoZo= -----END CERTIFICATE-----Generated at Sun Jun 8 13:32:44 2025 by rpki-client