$ rpki-client -vvf repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft File: B1F0A7585ED1882783C6AF802B826607ABB92671.mft (raw, json) Hash identifier: SXqZ4rFb1uKbzbryEGca+ohMSZuSOtxNTnWO64rKM14= Subject key identifier: E8:B7:D4:73:74:B9:CF:54:E7:D7:6E:A6:07:12:E7:C3:3A:62:95:F1 Authority key identifier: B1:F0:A7:58:5E:D1:88:27:83:C6:AF:80:2B:82:66:07:AB:B9:26:71 Certificate issuer: /CN=B1F0A7585ED1882783C6AF802B826607ABB92671 Certificate serial: 32C7A57A71B24864AC7FF673990C17D9E1A69CED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft Manifest number: 78 Signing time: Sat 07 Jun 2025 02:12:18 +0000 Manifest this update: Sat 07 Jun 2025 02:07:18 +0000 Manifest next update: Tue 10 Jun 2025 03:36:18 +0000 Files and hashes: 1: 3136302e3138372e33372e302f32342d3234203d3e20313533333237.roa (hash: 2s2hT2RFc51pEXZc8X5XI589aylunZVhY45QaHon1Ao=) 2: B1F0A7585ED1882783C6AF802B826607ABB92671.crl (hash: LTXnU6fq1tuLwhCEbVtFGlVFwp31aNsm7S89LkjzLcY=) 3: 3136302e3138372e33362e302f32342d3234203d3e20313533333237.roa (hash: VqrWW5xSvGuewi8vAHFbQ7GGTuJaYVxqsL6i06spXCU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.crl rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 00:59:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:c7:a5:7a:71:b2:48:64:ac:7f:f6:73:99:0c:17:d9:e1:a6:9c:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1F0A7585ED1882783C6AF802B826607ABB92671 Validity Not Before: Jun 7 02:07:18 2025 GMT Not After : Jun 10 03:36:18 2025 GMT Subject: CN=E8B7D47374B9CF54E7D76EA60712E7C33A6295F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:67:5f:a8:93:36:a1:b4:ee:b7:6b:2a:87:d0: 63:ab:8c:5b:1b:eb:e5:14:62:72:9a:f6:6d:fd:30: a9:66:1f:41:f7:1d:4e:15:92:81:5a:18:1e:b7:1c: 70:69:bc:df:36:e5:3c:92:0b:d8:7e:12:4c:a7:42: aa:25:a8:94:2a:7a:1d:1e:4b:ad:fc:20:2f:21:af: df:ef:74:03:6f:7c:ac:ed:c4:fc:cb:06:0f:6c:e0: 9c:8f:67:d9:cc:fc:fd:8b:f6:b1:de:2f:c7:c6:7d: b0:7b:c1:4b:35:f8:64:f9:43:30:32:ca:35:30:91: 64:86:82:b1:c8:56:18:3f:c7:9c:ac:f4:34:ad:16: d6:57:2b:4b:1d:7c:ca:5d:9f:d9:84:c1:52:ad:96: 49:59:a5:40:a7:d8:aa:6d:d1:a4:22:4e:95:40:cd: 16:8e:84:a4:23:4a:b6:6e:6b:db:c1:86:c3:31:69: af:56:67:3a:cb:8a:b5:09:c0:24:a2:01:38:c9:52: 14:c1:f6:5e:bf:34:cd:d0:d1:50:94:e4:3e:b3:17: d9:d1:f6:59:16:e3:1b:5f:26:7e:6c:c0:0c:80:ac: a1:c4:25:28:e1:12:24:b3:45:80:d2:d7:10:02:ba: 56:fe:2b:dc:6e:7c:fe:19:17:fe:70:89:c2:59:38: 07:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B7:D4:73:74:B9:CF:54:E7:D7:6E:A6:07:12:E7:C3:3A:62:95:F1 X509v3 Authority Key Identifier: keyid:B1:F0:A7:58:5E:D1:88:27:83:C6:AF:80:2B:82:66:07:AB:B9:26:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e6:98:6c:f6:1f:c1:4e:f1:9e:71:a5:18:1d:e6:52:1e:38:85: a3:46:f7:9d:c4:41:2e:2a:0b:2f:f7:fe:ee:e6:78:07:6d:36: a1:c9:9c:0b:57:77:27:eb:c5:5c:f5:49:23:96:87:e7:da:d3: cd:4e:ee:d3:1a:47:fb:eb:ac:6c:d5:3a:30:76:66:fb:ca:f9: b5:58:8b:3e:0a:93:4d:ab:74:51:d9:73:9d:2c:33:38:03:50: 6c:3c:29:4d:3a:35:0c:76:04:d3:c3:2e:5e:a4:3b:35:89:24: 23:b9:42:e9:78:22:52:a4:d3:a9:2a:6d:a9:00:d0:07:14:74: 0f:e2:9d:3c:93:bf:63:bb:46:7c:b6:6a:01:5a:ce:c5:0b:fc: 43:76:3f:15:89:f5:2a:48:58:3d:df:98:2e:92:f1:c5:c2:ab: ab:72:98:33:41:fb:76:4e:45:e3:c5:d0:89:c6:60:b8:20:f6: 57:02:32:9a:ce:d8:98:36:a2:ab:04:c9:d5:c1:01:ac:84:ef: b6:41:fd:78:8a:1d:e9:29:95:13:6c:44:26:89:c6:b9:2a:e3: 3d:2d:c9:d7:e3:93:b9:a5:a8:81:12:0f:71:be:45:6f:4b:9f: 5c:51:0f:62:9a:39:a9:a7:1e:d6:18:f1:76:17:f0:7e:a0:e8: f6:01:94:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMselenGySGSsf/ZzmQwX2eGmnO0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2MDdB QkI5MjY3MTAeFw0yNTA2MDcwMjA3MThaFw0yNTA2MTAwMzM2MThaMDMxMTAvBgNV BAMTKEU4QjdENDczNzRCOUNGNTRFN0Q3NkVBNjA3MTJFN0MzM0E2Mjk1RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Z1+okzahtO63ayqH0GOrjFsb 6+UUYnKa9m39MKlmH0H3HU4VkoFaGB63HHBpvN825TySC9h+EkynQqolqJQqeh0e S638IC8hr9/vdANvfKztxPzLBg9s4JyPZ9nM/P2L9rHeL8fGfbB7wUs1+GT5QzAy yjUwkWSGgrHIVhg/x5ys9DStFtZXK0sdfMpdn9mEwVKtlklZpUCn2Kpt0aQiTpVA zRaOhKQjSrZua9vBhsMxaa9WZzrLirUJwCSiATjJUhTB9l6/NM3Q0VCU5D6zF9nR 9lkW4xtfJn5swAyArKHEJSjhEiSzRYDS1xACulb+K9xufP4ZF/5wicJZOAfxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6LfUc3S5z1Tn126mBxLnwzpilfEwHwYDVR0j BBgwFoAUsfCnWF7RiCeDxq+AK4JmB6u5JnEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODkxMzg5My01ZjY0LTRhNWUtYThkMi01ZDUxZWJkZTQ3M2YvMC9CMUYwQTc1ODVF RDE4ODI3ODNDNkFGODAyQjgyNjYwN0FCQjkyNjcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2MDdBQkI5 MjY3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzg5MTM4OTMtNWY2NC00YTVlLWE4 ZDItNWQ1MWViZGU0NzNmLzAvQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2 MDdBQkI5MjY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOaYbPYfwU7xnnGlGB3mUh44haNG953EQS4q Cy/3/u7meAdtNqHJnAtXdyfrxVz1SSOWh+fa081O7tMaR/vrrGzVOjB2ZvvK+bVY iz4Kk02rdFHZc50sMzgDUGw8KU06NQx2BNPDLl6kOzWJJCO5Qul4IlKk06kqbakA 0AcUdA/inTyTv2O7Rny2agFazsUL/EN2PxWJ9SpIWD3fmC6S8cXCq6tymDNB+3ZO RePF0InGYLgg9lcCMprO2Jg2oqsEydXBAayE77ZB/XiKHekplRNsRCaJxrkq4z0t ydfjk7mlqIESD3G+RW9Ln1xRD2KaOamnHtYY8XYX8H6g6PYBlOk= -----END CERTIFICATE-----Generated at Sat Jun 7 04:09:51 2025 by rpki-client