$ rpki-client -vvf repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft File: B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft (raw, json) Hash identifier: SHGYfHWfLAcSd30EUjnXlWSszYXYDVle1+DWTzrjPDE= Subject key identifier: 0E:B6:A5:D8:ED:36:39:E7:1C:AE:B8:25:71:8E:1A:F6:47:3A:6D:49 Authority key identifier: B0:FA:6C:3E:D4:78:0E:03:2B:0A:3F:16:1E:01:8A:7C:8F:A8:2B:45 Certificate issuer: /CN=B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45 Certificate serial: 072017E17AFAF8D43D39E1DEBE6B1029DF57E8E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft Manifest number: 01F5 Signing time: Tue 03 Jun 2025 21:26:42 +0000 Manifest this update: Tue 03 Jun 2025 21:21:42 +0000 Manifest next update: Sat 07 Jun 2025 07:24:42 +0000 Files and hashes: 1: 3130332e3138362e3136392e302f32342d3234203d3e20313439333135.roa (hash: k0YtTjCvRfHkKBkEOTB9msrr0NImtoiaOd/b0Un02oI=) 2: 3130332e3138362e3136382e302f32342d3234203d3e20313439333135.roa (hash: cA/IXkQfExxLqkZklRIGA4Iq/8wfMruGPEzuyZnNgNM=) 3: B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.crl (hash: 5OGFCgD6dS7sBhOvsGcJ7qh8TDWJi71GJqEz3iQb4zU=) 4: 3130332e3138362e3136382e302f32332d3233203d3e20313439333135.roa (hash: 0o9IBgjEwrH3ZJGqMXSmtJgW+TONR3n1c/K3AjhSCz0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.crl rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:20:17:e1:7a:fa:f8:d4:3d:39:e1:de:be:6b:10:29:df:57:e8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45 Validity Not Before: Jun 3 21:21:42 2025 GMT Not After : Jun 7 07:24:42 2025 GMT Subject: CN=0EB6A5D8ED3639E71CAEB825718E1AF6473A6D49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:4c:34:24:09:87:80:0b:3a:22:f0:11:51:e0: 3f:8e:bd:f9:15:2d:a4:d3:ba:a9:2f:74:45:98:4b: 48:15:c5:91:df:f3:cb:9c:2b:48:10:ae:c1:fc:64: 7f:86:1c:2c:a9:f8:ea:82:7e:f3:19:0a:cb:5f:91: 92:a2:bc:6d:49:c7:e6:b8:47:63:78:09:2e:2f:fa: da:a5:58:8a:bf:6c:ba:2b:4e:2a:1c:bf:8e:d9:27: 8e:af:18:fa:af:02:e6:4a:69:e0:16:fb:58:9e:55: dc:74:18:7b:59:30:aa:4b:3d:96:a3:5e:ba:f3:38: 6c:f0:d3:f2:32:15:b3:b5:6f:82:eb:62:6d:72:53: 9b:06:0d:76:c9:8c:31:f8:75:71:c7:a9:42:77:95: 77:70:62:41:80:b1:f6:c1:90:e5:92:86:62:23:c3: 9c:99:be:29:54:29:fb:10:58:f4:6d:38:aa:18:9a: f0:cd:ab:fe:e7:51:43:cc:38:7f:f7:eb:a3:19:06: d1:31:5b:01:b8:6f:30:d6:a4:0a:17:87:bb:f3:c5: d3:a6:b5:d3:2c:b8:eb:fc:76:1f:a4:1e:b9:a0:3f: 80:99:11:6f:eb:aa:d5:1f:d2:ee:3d:37:e4:fa:5b: 1c:72:b2:ad:62:a9:60:6c:a9:fc:b9:bf:7a:29:e7: af:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B6:A5:D8:ED:36:39:E7:1C:AE:B8:25:71:8E:1A:F6:47:3A:6D:49 X509v3 Authority Key Identifier: keyid:B0:FA:6C:3E:D4:78:0E:03:2B:0A:3F:16:1E:01:8A:7C:8F:A8:2B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:d8:bd:d4:70:93:d3:d4:c1:51:1f:2c:de:57:a6:2e:5e:9e: 30:cc:48:9d:0b:d1:3d:07:da:3c:db:61:c2:0b:35:84:be:d9: 77:57:8d:41:bd:45:69:66:0e:3d:30:6a:a6:27:d3:96:13:c8: f7:62:2f:c7:15:0d:90:46:4b:14:0d:2e:7b:b5:4c:cc:26:85: 1c:c5:f3:f2:9b:66:50:ef:be:d8:4b:60:2f:bd:76:34:39:3d: 2a:72:f7:0b:3f:c2:4f:5f:aa:c6:ca:da:91:2d:d9:74:ae:02: b7:25:79:a3:f6:9f:f7:05:1c:88:d9:13:40:32:95:95:c6:2a: 58:85:e8:62:fc:94:ec:e5:0c:b9:35:29:98:84:53:09:a7:02: f8:87:a4:43:49:35:2e:c9:5e:4e:1f:d9:36:df:03:dd:0c:b6: 98:17:f3:11:07:99:4f:fb:4a:2e:dd:f1:0f:7e:8e:45:3c:6a: 04:06:1f:00:de:1e:1e:f3:60:a0:ea:c8:9e:e5:f0:2f:2e:22: 0d:97:c6:46:3f:cc:de:e6:bc:e5:52:3a:ed:f0:fb:cd:a2:56: f0:7a:75:06:9c:fb:e9:4f:f9:3e:9f:2b:be:a9:e4:57:d1:6f: 65:0d:b3:b7:95:19:4d:a5:64:de:65:a1:fa:38:23:ec:b1:a0: 85:4d:4e:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUByAX4Xr6+NQ9OeHevmsQKd9X6OAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBGQTZDM0VENDc4MEUwMzJCMEEzRjE2MUUwMThBN0M4 RkE4MkI0NTAeFw0yNTA2MDMyMTIxNDJaFw0yNTA2MDcwNzI0NDJaMDMxMTAvBgNV BAMTKDBFQjZBNUQ4RUQzNjM5RTcxQ0FFQjgyNTcxOEUxQUY2NDczQTZENDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmTDQkCYeACzoi8BFR4D+OvfkV LaTTuqkvdEWYS0gVxZHf88ucK0gQrsH8ZH+GHCyp+OqCfvMZCstfkZKivG1Jx+a4 R2N4CS4v+tqlWIq/bLorTiocv47ZJ46vGPqvAuZKaeAW+1ieVdx0GHtZMKpLPZaj XrrzOGzw0/IyFbO1b4LrYm1yU5sGDXbJjDH4dXHHqUJ3lXdwYkGAsfbBkOWShmIj w5yZvilUKfsQWPRtOKoYmvDNq/7nUUPMOH/366MZBtExWwG4bzDWpAoXh7vzxdOm tdMsuOv8dh+kHrmgP4CZEW/rqtUf0u49N+T6Wxxysq1iqWBsqfy5v3op56+bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDral2O02OeccrrglcY4a9kc6bUkwHwYDVR0j BBgwFoAUsPpsPtR4DgMrCj8WHgGKfI+oK0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjcxM2EzMi1mYWRhLTQ4NGUtYTY4ZC0wY2FjMGZmZmEzM2MvMC9CMEZBNkMzRUQ0 NzgwRTAzMkIwQTNGMTYxRTAxOEE3QzhGQTgyQjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjBGQTZDM0VENDc4MEUwMzJCMEEzRjE2MUUwMThBN0M4RkE4 MkI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI3MTNhMzItZmFkYS00ODRlLWE2 OGQtMGNhYzBmZmZhMzNjLzAvQjBGQTZDM0VENDc4MEUwMzJCMEEzRjE2MUUwMThB N0M4RkE4MkI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGTYvdRwk9PUwVEfLN5Xpi5enjDMSJ0L0T0H 2jzbYcILNYS+2XdXjUG9RWlmDj0waqYn05YTyPdiL8cVDZBGSxQNLnu1TMwmhRzF 8/KbZlDvvthLYC+9djQ5PSpy9ws/wk9fqsbK2pEt2XSuArcleaP2n/cFHIjZE0Ay lZXGKliF6GL8lOzlDLk1KZiEUwmnAviHpENJNS7JXk4f2TbfA90MtpgX8xEHmU/7 Si7d8Q9+jkU8agQGHwDeHh7zYKDqyJ7l8C8uIg2XxkY/zN7mvOVSOu3w+82iVvB6 dQac++lP+T6fK76p5FfRb2UNs7eVGU2lZN5lofo4I+yxoIVNTks= -----END CERTIFICATE-----Generated at Thu Jun 5 18:19:28 2025 by rpki-client