$ rpki-client -vvf repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft File: B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft (raw, json) Hash identifier: N2xYPR/ceQkcxoW6EBketma5DsL2MFUOhPPE4pB8dvw= Subject key identifier: D3:2A:5A:96:A1:6F:F9:05:0E:BD:4B:CE:FD:4E:20:58:63:93:E4:44 Authority key identifier: B0:D6:73:B7:8D:BE:21:9F:1E:EE:F0:56:E3:E4:9F:B6:D5:8A:55:50 Certificate issuer: /CN=B0D673B78DBE219F1EEEF056E3E49FB6D58A5550 Certificate serial: 0C05F0D3E1DE54CE76EE979D4F4DC42297C0855A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft Manifest number: 88 Signing time: Wed 09 Apr 2025 07:50:50 +0000 Manifest this update: Wed 09 Apr 2025 07:45:50 +0000 Manifest next update: Sat 12 Apr 2025 13:25:50 +0000 Files and hashes: 1: B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl (hash: XR3QHMS/pWq8Tc43gwCrQ3CzEMPGUpI3MNlhVoEBgWg=) 2: 3136302e32322e32322e302f32332d3234203d3e20313532383032.roa (hash: 4aCs8l8XWq0PXApi4k476buA+52M0VZn+FhA4QRTZLQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 12:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:05:f0:d3:e1:de:54:ce:76:ee:97:9d:4f:4d:c4:22:97:c0:85:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0D673B78DBE219F1EEEF056E3E49FB6D58A5550 Validity Not Before: Apr 9 07:45:50 2025 GMT Not After : Apr 12 13:25:50 2025 GMT Subject: CN=D32A5A96A16FF9050EBD4BCEFD4E20586393E444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:af:3b:99:5e:41:a6:c2:65:f3:ea:a7:a9:cf: 33:1a:42:46:70:03:49:fb:73:5a:05:e8:07:19:2e: 66:20:97:04:3d:7b:5e:72:c6:2b:25:a8:05:b5:73: 68:ed:be:cc:d2:9b:51:43:60:2b:9f:95:b6:06:48: e1:a5:b9:da:b2:e3:c7:77:50:5f:ad:c8:ff:67:39: d7:ba:a4:51:95:1b:6b:39:b8:3b:16:65:55:8f:1f: eb:73:bd:d3:66:b4:6e:1f:d9:15:88:b4:f2:c0:f1: 57:f1:f9:be:4a:7e:b5:1b:da:94:49:fc:07:1d:7a: e3:9f:41:ae:ea:44:a5:ee:3b:f0:de:82:36:41:3f: 56:3a:f9:45:63:a4:e4:87:d9:51:2b:11:76:8e:8d: ca:71:8b:02:70:da:8d:7d:40:6d:d3:43:5d:d6:4e: e6:28:54:b0:c7:a7:2b:ca:87:cc:d0:0d:19:5a:49: db:55:ba:5f:cf:d0:8b:29:0e:4b:75:0c:bb:b0:89: 40:b8:cf:75:72:4a:b0:b7:01:0c:05:eb:d4:b3:fd: d0:a9:07:0c:c6:bd:a0:e5:ce:48:74:d9:14:03:7a: 67:fa:35:60:0a:6e:58:c1:07:f4:24:6f:f0:e1:fe: 29:81:1a:92:95:eb:84:a7:a3:3d:e8:c3:01:b9:15: e1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:2A:5A:96:A1:6F:F9:05:0E:BD:4B:CE:FD:4E:20:58:63:93:E4:44 X509v3 Authority Key Identifier: keyid:B0:D6:73:B7:8D:BE:21:9F:1E:EE:F0:56:E3:E4:9F:B6:D5:8A:55:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:3c:99:33:df:ba:17:b5:3c:49:88:55:1e:e0:f4:e7:43:24: 68:f9:81:69:48:2a:02:31:ff:7c:90:ce:b8:fe:13:2c:d5:be: 50:62:d2:43:e6:50:37:3e:ca:d3:17:1d:a1:1b:bb:9e:60:e8: ab:f3:41:91:23:b9:cf:5a:3c:40:d4:b8:58:09:43:e5:0b:9c: 49:dc:60:e6:47:3d:f4:26:3e:d5:a6:33:8e:a5:5c:30:70:52: 67:d7:d2:92:ef:27:d0:6c:04:41:97:fc:2c:de:fd:6a:fc:08: aa:8c:ac:eb:44:9f:f4:32:32:ea:72:e5:54:f2:22:56:ba:f7: b3:f5:51:47:93:96:7c:a9:bb:de:2e:93:af:db:03:29:cd:86: 3d:21:ad:4c:0d:d9:65:5c:22:a9:d9:8f:59:cc:46:81:30:72: 27:5f:14:8a:8b:0b:47:c4:81:35:d7:90:d1:25:d8:f8:a1:5f: c9:00:ae:d3:78:e7:56:68:b7:c3:1e:62:61:c2:bc:f3:2d:eb: e0:24:9e:a9:24:e0:f5:93:27:a3:96:eb:6a:e3:54:d0:65:b7: 86:8d:52:88:d8:9d:09:e1:ee:50:7e:85:0c:4c:29:08:9a:90: ef:98:13:53:57:0a:01:58:fc:f5:c7:c0:8a:27:a6:d2:0f:02: 28:cf:d4:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDAXw0+HeVM527pedT03EIpfAhVowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBENjczQjc4REJFMjE5RjFFRUVGMDU2RTNFNDlGQjZE NThBNTU1MDAeFw0yNTA0MDkwNzQ1NTBaFw0yNTA0MTIxMzI1NTBaMDMxMTAvBgNV BAMTKEQzMkE1QTk2QTE2RkY5MDUwRUJENEJDRUZENEUyMDU4NjM5M0U0NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDarzuZXkGmwmXz6qepzzMaQkZw A0n7c1oF6AcZLmYglwQ9e15yxislqAW1c2jtvszSm1FDYCuflbYGSOGludqy48d3 UF+tyP9nOde6pFGVG2s5uDsWZVWPH+tzvdNmtG4f2RWItPLA8Vfx+b5KfrUb2pRJ /AcdeuOfQa7qRKXuO/DegjZBP1Y6+UVjpOSH2VErEXaOjcpxiwJw2o19QG3TQ13W TuYoVLDHpyvKh8zQDRlaSdtVul/P0IspDkt1DLuwiUC4z3VySrC3AQwF69Sz/dCp BwzGvaDlzkh02RQDemf6NWAKbljBB/Qkb/Dh/imBGpKV64Snoz3owwG5FeHzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0ypalqFv+QUOvUvO/U4gWGOT5EQwHwYDVR0j BBgwFoAUsNZzt42+IZ8e7vBW4+SfttWKVVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjdkMjg5NC1jMDc3LTQyMWMtYmMxZC0zN2Q2ZjlkOTg5N2QvMC9CMEQ2NzNCNzhE QkUyMTlGMUVFRUYwNTZFM0U0OUZCNkQ1OEE1NTUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjBENjczQjc4REJFMjE5RjFFRUVGMDU2RTNFNDlGQjZENThB NTU1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY3ZDI4OTQtYzA3Ny00MjFjLWJj MWQtMzdkNmY5ZDk4OTdkLzAvQjBENjczQjc4REJFMjE5RjFFRUVGMDU2RTNFNDlG QjZENThBNTU1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADU8mTPfuhe1PEmIVR7g9OdDJGj5gWlIKgIx /3yQzrj+EyzVvlBi0kPmUDc+ytMXHaEbu55g6KvzQZEjuc9aPEDUuFgJQ+ULnEnc YOZHPfQmPtWmM46lXDBwUmfX0pLvJ9BsBEGX/Cze/Wr8CKqMrOtEn/QyMupy5VTy Ila697P1UUeTlnypu94uk6/bAynNhj0hrUwN2WVcIqnZj1nMRoEwcidfFIqLC0fE gTXXkNEl2PihX8kArtN451Zot8MeYmHCvPMt6+Aknqkk4PWTJ6OW62rjVNBlt4aN UojYnQnh7lB+hQxMKQiakO+YE1NXCgFY/PXHwIonptIPAijP1H8= -----END CERTIFICATE-----Generated at Wed Apr 9 16:38:32 2025 by rpki-client