$ rpki-client -vvf repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft File: B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft (raw, json) Hash identifier: P5rHkElCEqmcFW3gyUvxM+j/A/8OW3w4PnBNsfZQdtU= Subject key identifier: DF:FE:7D:9C:89:38:87:AE:3E:8A:15:92:67:FC:54:A7:4D:84:F2:E6 Authority key identifier: B0:D6:73:B7:8D:BE:21:9F:1E:EE:F0:56:E3:E4:9F:B6:D5:8A:55:50 Certificate issuer: /CN=B0D673B78DBE219F1EEEF056E3E49FB6D58A5550 Certificate serial: 5BAF19CF367DC39C7050549A4BE1FEEF5015186D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft Manifest number: A2 Signing time: Wed 04 Jun 2025 22:30:52 +0000 Manifest this update: Wed 04 Jun 2025 22:25:52 +0000 Manifest next update: Sun 08 Jun 2025 05:12:52 +0000 Files and hashes: 1: B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl (hash: wzFZZROo/1Q+TAiCiItJKWxU4eDDGu5GDs7y7i4a+/k=) 2: 3136302e32322e32322e302f32332d3234203d3e20313532383032.roa (hash: 1cb+dRF1cCmzlK2LUqHDHTpgVi9SG86amprY/lPnWU4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 05:12:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:af:19:cf:36:7d:c3:9c:70:50:54:9a:4b:e1:fe:ef:50:15:18:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0D673B78DBE219F1EEEF056E3E49FB6D58A5550 Validity Not Before: Jun 4 22:25:52 2025 GMT Not After : Jun 8 05:12:52 2025 GMT Subject: CN=DFFE7D9C893887AE3E8A159267FC54A74D84F2E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:39:79:89:b1:98:0a:b2:79:f9:6b:cd:70:54: b4:11:2c:70:0e:18:dd:45:56:fa:7b:0f:97:96:2d: af:c1:e2:d5:48:e3:54:ee:6c:00:e1:7b:10:ea:74: 05:34:30:98:89:23:16:92:b5:33:87:63:4e:9a:eb: de:17:00:d5:c2:6d:f4:0a:8b:f4:ec:4d:64:7f:b6: 3d:7f:36:30:7e:73:d7:d4:e0:70:cd:62:e2:0e:c3: e0:6b:1d:f2:aa:4a:b3:64:ee:b5:05:40:8a:ad:93: 5f:91:d4:3d:7b:6d:2a:c1:bd:fe:59:a8:65:3e:62: 7d:07:d4:e6:5e:76:7e:05:e9:eb:8e:06:a0:91:95: 26:ab:db:93:5f:f9:e6:a8:fa:ff:d0:92:59:35:1a: 7b:01:8f:0d:f8:0a:bd:68:6c:ec:c0:36:95:68:38: 72:42:27:75:29:7c:c0:81:1b:b5:d5:c8:53:06:dc: 7b:d7:d3:c8:9d:61:fd:83:cd:5b:c2:9f:03:e7:b1: 80:09:38:5f:c4:8a:f0:b5:84:35:bf:49:3f:b3:86: 6b:22:d1:e0:b3:72:64:74:8b:70:5b:ed:5e:8c:24: ff:65:8e:72:9d:10:50:7c:57:34:42:7a:b0:ac:36: c2:b3:96:c1:c8:05:78:44:e5:a3:21:10:4d:54:4a: 3f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:FE:7D:9C:89:38:87:AE:3E:8A:15:92:67:FC:54:A7:4D:84:F2:E6 X509v3 Authority Key Identifier: keyid:B0:D6:73:B7:8D:BE:21:9F:1E:EE:F0:56:E3:E4:9F:B6:D5:8A:55:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:cf:e5:4f:a4:5f:05:de:af:d6:13:cb:13:00:94:70:3e:b3: 5d:2b:24:bc:fe:bc:e7:3d:02:ca:c2:c9:8b:38:e9:21:d3:ac: 5e:d2:95:6a:79:4c:d8:ef:bf:4b:fd:f3:8b:65:1a:7b:85:87: 2d:7b:33:84:0d:0f:40:2b:f0:84:79:f4:93:61:7b:86:25:58: 86:86:0c:e8:8f:c3:75:ce:48:c7:c6:74:c3:38:34:d3:7f:bb: 1c:d8:07:1d:04:ab:38:da:b6:f7:1b:1d:94:2e:3f:49:8e:96: 84:95:22:c7:f0:44:5b:96:8b:9a:b2:b6:68:d9:8f:99:94:25: ea:3f:8c:0b:b3:f0:a4:ce:f4:4f:93:35:b5:1b:34:26:0d:cb: d6:3b:09:fe:36:27:5a:c9:0a:b2:40:28:2a:ec:bc:7e:8d:33: 40:98:e1:d2:35:1e:9c:96:8c:f3:c2:fb:a7:5b:3c:f1:9b:98: 81:be:3a:97:85:b5:6d:7e:e5:3e:e3:7c:18:49:06:db:93:e0: 40:9b:6d:f3:24:49:41:b0:7c:f6:82:92:51:f8:4e:2b:24:f6: de:4a:ff:11:09:6f:11:40:f3:b9:53:17:fe:66:41:85:18:1a: 74:33:0f:cb:8a:30:4c:88:ce:b9:fc:e0:92:98:8f:fe:ba:fd: b6:fa:44:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW68ZzzZ9w5xwUFSaS+H+71AVGG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBENjczQjc4REJFMjE5RjFFRUVGMDU2RTNFNDlGQjZE NThBNTU1MDAeFw0yNTA2MDQyMjI1NTJaFw0yNTA2MDgwNTEyNTJaMDMxMTAvBgNV BAMTKERGRkU3RDlDODkzODg3QUUzRThBMTU5MjY3RkM1NEE3NEQ4NEYyRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfOXmJsZgKsnn5a81wVLQRLHAO GN1FVvp7D5eWLa/B4tVI41TubADhexDqdAU0MJiJIxaStTOHY06a694XANXCbfQK i/TsTWR/tj1/NjB+c9fU4HDNYuIOw+BrHfKqSrNk7rUFQIqtk1+R1D17bSrBvf5Z qGU+Yn0H1OZedn4F6euOBqCRlSar25Nf+eao+v/Qklk1GnsBjw34Cr1obOzANpVo OHJCJ3UpfMCBG7XVyFMG3HvX08idYf2DzVvCnwPnsYAJOF/EivC1hDW/ST+zhmsi 0eCzcmR0i3Bb7V6MJP9ljnKdEFB8VzRCerCsNsKzlsHIBXhE5aMhEE1USj9dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3/59nIk4h64+ihWSZ/xUp02E8uYwHwYDVR0j BBgwFoAUsNZzt42+IZ8e7vBW4+SfttWKVVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjdkMjg5NC1jMDc3LTQyMWMtYmMxZC0zN2Q2ZjlkOTg5N2QvMC9CMEQ2NzNCNzhE QkUyMTlGMUVFRUYwNTZFM0U0OUZCNkQ1OEE1NTUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjBENjczQjc4REJFMjE5RjFFRUVGMDU2RTNFNDlGQjZENThB NTU1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY3ZDI4OTQtYzA3Ny00MjFjLWJj MWQtMzdkNmY5ZDk4OTdkLzAvQjBENjczQjc4REJFMjE5RjFFRUVGMDU2RTNFNDlG QjZENThBNTU1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3P5U+kXwXer9YTyxMAlHA+s10rJLz+vOc9 AsrCyYs46SHTrF7SlWp5TNjvv0v984tlGnuFhy17M4QND0Ar8IR59JNhe4YlWIaG DOiPw3XOSMfGdMM4NNN/uxzYBx0EqzjatvcbHZQuP0mOloSVIsfwRFuWi5qytmjZ j5mUJeo/jAuz8KTO9E+TNbUbNCYNy9Y7Cf42J1rJCrJAKCrsvH6NM0CY4dI1HpyW jPPC+6dbPPGbmIG+OpeFtW1+5T7jfBhJBtuT4ECbbfMkSUGwfPaCklH4Tisk9t5K /xEJbxFA87lTF/5mQYUYGnQzD8uKMEyIzrn84JKYj/66/bb6REg= -----END CERTIFICATE-----Generated at Fri Jun 6 04:57:09 2025 by rpki-client