$ rpki-client -vvf repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft File: B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft (raw, json) Hash identifier: F4m+rQbKs41QtvnKK22w89yTSTosBPb/T5tsLiVTSBQ= Subject key identifier: F8:6A:79:86:00:50:BE:6A:A4:C6:CC:16:63:50:F9:C1:0A:47:B0:CC Authority key identifier: B4:38:1C:63:67:4B:5D:9A:9B:8C:44:C1:3C:F1:9E:7D:D3:21:F7:C0 Certificate issuer: /CN=B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0 Certificate serial: 3B7418FDD2F5D6F83FE789BA83CCC0E060A65669 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft Manifest number: 0178 Signing time: Wed 04 Jun 2025 18:41:27 +0000 Manifest this update: Wed 04 Jun 2025 18:36:27 +0000 Manifest next update: Sun 08 Jun 2025 00:32:27 +0000 Files and hashes: 1: 3130332e32302e3231392e302f32342d3234203d3e20313439393638.roa (hash: O7tUFKX21rX6gYwZ1ZrwxitGOTUDY0G4VWaDfkWzuZ4=) 2: B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.crl (hash: zL2tc3CFUoouddIlf5TQmvCIJT+gHnHy76p5JjJ6psM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.crl rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 00:32:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:74:18:fd:d2:f5:d6:f8:3f:e7:89:ba:83:cc:c0:e0:60:a6:56:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0 Validity Not Before: Jun 4 18:36:27 2025 GMT Not After : Jun 8 00:32:27 2025 GMT Subject: CN=F86A79860050BE6AA4C6CC166350F9C10A47B0CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:5d:f4:ad:5f:ff:11:81:27:3c:4f:55:a4:1d: 0c:42:d9:93:b6:99:6e:88:1b:56:24:b5:24:0c:ae: 31:72:56:80:3d:5f:1a:f5:7b:a9:01:96:0a:ec:16: 01:04:ce:79:f5:c8:70:a3:36:73:ce:aa:41:9b:48: 89:80:91:0a:47:b9:04:ce:7e:60:66:e8:36:86:c2: 0f:33:b4:36:e9:82:ed:6e:fa:78:ef:65:e7:c9:cb: d0:cd:5f:97:3a:2e:d7:dd:6a:37:71:fc:20:0e:9f: 0f:10:86:66:09:76:2b:2f:c2:46:3c:8f:a8:8a:23: 33:6f:0b:36:07:27:24:35:63:b6:2a:6d:64:87:6d: 85:6e:24:c3:42:dc:e7:7b:68:00:ed:b8:8f:3c:0a: 9e:d6:e1:e2:c1:e3:d2:8b:a2:c1:cd:f6:d9:82:86: f9:ca:2a:eb:fb:90:cd:13:86:83:7f:53:29:b6:12: f4:70:6d:a6:c3:d2:47:71:bf:32:ff:c2:ee:29:ab: 69:75:1f:f2:4b:de:e0:81:fb:7a:95:13:6c:ee:ac: 79:b7:2b:70:87:41:f0:87:99:59:03:30:c9:6f:da: 29:f7:74:57:b6:19:0a:9b:03:8e:23:12:9d:d2:aa: bf:f0:dd:8b:73:b9:01:7b:d9:8d:1a:a0:03:f1:db: e5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:6A:79:86:00:50:BE:6A:A4:C6:CC:16:63:50:F9:C1:0A:47:B0:CC X509v3 Authority Key Identifier: keyid:B4:38:1C:63:67:4B:5D:9A:9B:8C:44:C1:3C:F1:9E:7D:D3:21:F7:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:05:0d:58:70:e3:1f:ef:f3:45:5d:b6:2e:bd:6a:3b:b6:ca: e1:66:7f:16:0f:76:3d:1f:d2:18:53:fa:ac:ea:1c:6e:7a:fa: a1:43:3f:61:be:c5:e7:d1:11:27:74:4b:b5:42:94:e9:be:83: 37:a4:90:15:77:62:73:a7:5c:68:40:dc:4f:0a:69:53:6d:79: 50:15:e0:5f:b3:89:46:f6:a4:8e:3f:bc:31:da:e5:24:1d:1e: 65:f8:13:ff:83:bf:6b:bc:df:cd:bd:02:ba:79:e7:0b:85:fa: fb:9b:e8:27:e7:7a:e7:3b:65:82:8c:c6:77:ed:3e:02:8d:91: cc:88:20:d6:c3:24:66:70:8c:01:4a:8c:fe:70:5c:e7:f2:47: da:e9:23:c6:24:54:d2:f9:91:b3:f8:01:a4:dd:f9:1c:b9:19: 53:b9:7f:b3:a0:71:b5:83:de:fc:97:f5:6e:b8:53:d4:df:8c: 22:09:24:5e:47:79:16:ff:55:10:e0:45:a0:a1:4b:08:d7:fc: 72:3c:7d:8b:b0:9c:35:a5:2b:81:e4:90:53:92:57:21:1b:b9: 6f:02:80:f5:6c:19:ec:09:28:d6:37:75:ee:7c:b0:2b:22:b3: 83:f9:fb:ec:36:a9:a8:b8:4a:7a:6c:dd:31:37:01:7a:be:4d: b0:f8:f2:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO3QY/dL11vg/54m6g8zA4GCmVmkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQzODFDNjM2NzRCNUQ5QTlCOEM0NEMxM0NGMTlFN0RE MzIxRjdDMDAeFw0yNTA2MDQxODM2MjdaFw0yNTA2MDgwMDMyMjdaMDMxMTAvBgNV BAMTKEY4NkE3OTg2MDA1MEJFNkFBNEM2Q0MxNjYzNTBGOUMxMEE0N0IwQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxXfStX/8RgSc8T1WkHQxC2ZO2 mW6IG1YktSQMrjFyVoA9Xxr1e6kBlgrsFgEEznn1yHCjNnPOqkGbSImAkQpHuQTO fmBm6DaGwg8ztDbpgu1u+njvZefJy9DNX5c6Ltfdajdx/CAOnw8QhmYJdisvwkY8 j6iKIzNvCzYHJyQ1Y7YqbWSHbYVuJMNC3Od7aADtuI88Cp7W4eLB49KLosHN9tmC hvnKKuv7kM0ThoN/Uym2EvRwbabD0kdxvzL/wu4pq2l1H/JL3uCB+3qVE2zurHm3 K3CHQfCHmVkDMMlv2in3dFe2GQqbA44jEp3Sqr/w3YtzuQF72Y0aoAPx2+UhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+Gp5hgBQvmqkxswWY1D5wQpHsMwwHwYDVR0j BBgwFoAUtDgcY2dLXZqbjETBPPGefdMh98AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWIzYmU2Mi0zNTk3LTRmZTgtYTc5NS1mYzliYTEyMDIzNDQvMC9CNDM4MUM2MzY3 NEI1RDlBOUI4QzQ0QzEzQ0YxOUU3REQzMjFGN0MwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQzODFDNjM2NzRCNUQ5QTlCOEM0NEMxM0NGMTlFN0REMzIx RjdDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjliM2JlNjItMzU5Ny00ZmU4LWE3 OTUtZmM5YmExMjAyMzQ0LzAvQjQzODFDNjM2NzRCNUQ5QTlCOEM0NEMxM0NGMTlF N0REMzIxRjdDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI4FDVhw4x/v80Vdti69aju2yuFmfxYPdj0f 0hhT+qzqHG56+qFDP2G+xefRESd0S7VClOm+gzekkBV3YnOnXGhA3E8KaVNteVAV 4F+ziUb2pI4/vDHa5SQdHmX4E/+Dv2u83829Arp55wuF+vub6Cfneuc7ZYKMxnft PgKNkcyIINbDJGZwjAFKjP5wXOfyR9rpI8YkVNL5kbP4AaTd+Ry5GVO5f7OgcbWD 3vyX9W64U9TfjCIJJF5HeRb/VRDgRaChSwjX/HI8fYuwnDWlK4HkkFOSVyEbuW8C gPVsGewJKNY3de58sCsis4P5++w2qai4Snps3TE3AXq+TbD48vQ= -----END CERTIFICATE-----Generated at Thu Jun 5 18:38:52 2025 by rpki-client