$ rpki-client -vvf repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft File: B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft (raw, json) Hash identifier: xg4S1iPYpgpEIBJoLvuDPrXMnNumR75mwq5POakMYxs= Subject key identifier: AA:FC:19:FB:9A:B3:8D:1D:41:C1:4E:DD:32:4F:CC:D3:BA:34:5F:F3 Authority key identifier: B2:FA:6D:D6:2C:0D:60:EA:AD:64:F6:B4:71:D2:2D:29:44:32:B7:B8 Certificate issuer: /CN=B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8 Certificate serial: 445B73D4ACEDDE03692674F2A3E929C654D4C072 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft Manifest number: 04DF Signing time: Fri 06 Jun 2025 12:50:40 +0000 Manifest this update: Fri 06 Jun 2025 12:45:40 +0000 Manifest next update: Mon 09 Jun 2025 19:01:40 +0000 Files and hashes: 1: 3130332e3130362e3137322e302f32332d3234203d3e20313336383838.roa (hash: DZlWR7tuLnpwDkeYEthZYN05oc1IXglcFF75rJ6G2+c=) 2: B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl (hash: umFIN+PnNaKF0tKkZXp8ftjV1at5Q5cQ3+5ujbOf6zM=) 3: 3130332e3130362e3137342e302f32342d3234203d3e20313336383838.roa (hash: gCxomhlXPqJzdF7SJ3iSXnHHdDE1CzdM3fX39z9NSbw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 19:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:5b:73:d4:ac:ed:de:03:69:26:74:f2:a3:e9:29:c6:54:d4:c0:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8 Validity Not Before: Jun 6 12:45:40 2025 GMT Not After : Jun 9 19:01:40 2025 GMT Subject: CN=AAFC19FB9AB38D1D41C14EDD324FCCD3BA345FF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:33:5e:cf:d9:fc:3d:34:3b:a3:0c:b2:25:8e: 3e:bf:e2:95:d3:e5:54:dc:01:ff:87:1f:9a:51:29: 09:b2:1c:46:9b:4d:c8:47:a2:84:d3:22:77:c5:e0: 9f:78:6d:d0:51:43:cd:b2:f0:0e:d5:32:c7:e3:6b: 52:3d:cf:91:d1:a7:7a:2f:e5:67:6b:47:06:4c:41: 5e:dc:ef:c0:64:97:f8:d9:be:43:06:0e:08:54:5e: 8b:85:e4:c9:ab:b3:74:82:9b:8a:fa:52:a4:dc:fe: 48:3a:3a:53:d2:fc:4e:a0:ef:e3:85:5b:02:ec:a7: 88:92:c4:8d:a7:e2:38:ab:3a:03:d5:06:a1:28:0b: 36:36:ea:bc:5c:81:c4:74:24:50:d6:2b:85:10:17: 19:50:0c:69:1f:52:39:48:b8:50:4f:8b:80:49:f1: 71:5c:59:04:b2:f7:e7:02:8b:c1:a4:36:e0:5a:b9: b0:93:ea:6b:1d:79:58:ce:b3:5a:68:96:6c:c2:08: 6d:b4:11:92:22:8f:a2:6e:72:63:40:30:c5:eb:de: b5:ef:59:01:11:de:c9:15:be:4d:5a:53:d2:fb:d7: c9:b8:5c:fe:c0:ec:61:2a:b1:0f:40:db:57:48:d2: 07:af:47:a5:c0:b1:c2:0a:7b:5c:2b:64:bf:c1:5d: 0a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:FC:19:FB:9A:B3:8D:1D:41:C1:4E:DD:32:4F:CC:D3:BA:34:5F:F3 X509v3 Authority Key Identifier: keyid:B2:FA:6D:D6:2C:0D:60:EA:AD:64:F6:B4:71:D2:2D:29:44:32:B7:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:77:50:94:11:8d:c5:97:93:ba:fd:a0:fa:42:ff:78:5e:d4: a5:38:b8:58:b1:3f:42:2d:2e:a1:47:ce:89:b9:27:14:5a:53: b5:41:2f:8d:39:4b:c7:9d:00:d2:ee:55:d9:0f:fe:48:7d:6e: 6c:71:45:61:38:f6:c0:d9:ee:31:f6:95:4b:1a:ed:79:b6:49: 2a:a7:59:69:ad:52:22:18:9e:d9:ed:4d:f4:bf:1e:8d:23:55: 85:82:ce:af:a6:96:ee:cf:1c:e7:0a:4c:98:da:00:ad:9d:bb: 58:a8:6d:5b:16:94:97:fd:bc:c3:53:d7:dc:0d:a6:a3:34:3b: b1:74:42:58:e7:d0:1a:2a:bf:9c:08:1a:69:5b:cc:2d:46:37: 13:85:51:1b:c8:75:25:0d:35:fc:7c:26:17:06:1f:be:58:db: 86:55:e8:0a:6b:ef:b7:b9:b1:aa:14:67:ad:9a:7c:cc:63:2a: 96:e0:c3:92:a7:fa:a6:f9:8a:30:22:4f:2e:f2:4d:f0:4a:d0: ba:53:d6:51:ea:29:21:f1:02:0d:50:69:05:71:d0:a6:0d:9f: 1d:d8:fd:67:f3:89:08:59:6e:6c:50:6f:e7:c1:fa:bb:b6:b5: 5d:62:04:d0:21:f0:63:36:c4:36:d2:1b:19:80:b4:68:c9:97: 6b:71:65:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURFtz1Kzt3gNpJnTyo+kpxlTUwHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJGQTZERDYyQzBENjBFQUFENjRGNkI0NzFEMjJEMjk0 NDMyQjdCODAeFw0yNTA2MDYxMjQ1NDBaFw0yNTA2MDkxOTAxNDBaMDMxMTAvBgNV BAMTKEFBRkMxOUZCOUFCMzhEMUQ0MUMxNEVERDMyNEZDQ0QzQkEzNDVGRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+M17P2fw9NDujDLIljj6/4pXT 5VTcAf+HH5pRKQmyHEabTchHooTTInfF4J94bdBRQ82y8A7VMsfja1I9z5HRp3ov 5WdrRwZMQV7c78Bkl/jZvkMGDghUXouF5Mmrs3SCm4r6UqTc/kg6OlPS/E6g7+OF WwLsp4iSxI2n4jirOgPVBqEoCzY26rxcgcR0JFDWK4UQFxlQDGkfUjlIuFBPi4BJ 8XFcWQSy9+cCi8GkNuBaubCT6msdeVjOs1polmzCCG20EZIij6JucmNAMMXr3rXv WQER3skVvk1aU9L718m4XP7A7GEqsQ9A21dI0gevR6XAscIKe1wrZL/BXQqdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqvwZ+5qzjR1BwU7dMk/M07o0X/MwHwYDVR0j BBgwFoAUsvpt1iwNYOqtZPa0cdItKUQyt7gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmJkN2NmNi1mNTVhLTRiNzgtYTU4OC1kOTI2MWYxNWY3NjMvMC9CMkZBNkRENjJD MEQ2MEVBQUQ2NEY2QjQ3MUQyMkQyOTQ0MzJCN0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJGQTZERDYyQzBENjBFQUFENjRGNkI0NzFEMjJEMjk0NDMy QjdCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZiZDdjZjYtZjU1YS00Yjc4LWE1 ODgtZDkyNjFmMTVmNzYzLzAvQjJGQTZERDYyQzBENjBFQUFENjRGNkI0NzFEMjJE Mjk0NDMyQjdCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZ3UJQRjcWXk7r9oPpC/3he1KU4uFixP0It LqFHzom5JxRaU7VBL405S8edANLuVdkP/kh9bmxxRWE49sDZ7jH2lUsa7Xm2SSqn WWmtUiIYntntTfS/Ho0jVYWCzq+mlu7PHOcKTJjaAK2du1iobVsWlJf9vMNT19wN pqM0O7F0Qljn0Boqv5wIGmlbzC1GNxOFURvIdSUNNfx8JhcGH75Y24ZV6Apr77e5 saoUZ62afMxjKpbgw5Kn+qb5ijAiTy7yTfBK0LpT1lHqKSHxAg1QaQVx0KYNnx3Y /WfziQhZbmxQb+fB+ru2tV1iBNAh8GM2xDbSGxmAtGjJl2txZVo= -----END CERTIFICATE-----Generated at Sat Jun 7 22:05:22 2025 by rpki-client