$ rpki-client -vvf repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft File: B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft (raw, json) Hash identifier: A5f1eMKGMFlDR7qszXC4zUMxk/CXE8a9ztYMWrR53Dg= Subject key identifier: 95:64:DA:16:CE:72:1C:30:8E:68:27:F0:A2:73:08:88:32:0A:F8:BB Authority key identifier: B0:D7:26:41:9F:BF:35:E7:C6:EB:43:7E:23:8F:3D:2A:3F:06:3B:4C Certificate issuer: /CN=B0D726419FBF35E7C6EB437E238F3D2A3F063B4C Certificate serial: 095984478EED00863EA76B8BD6B9451B1CBD037A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft Manifest number: 91 Signing time: Sat 07 Jun 2025 05:30:05 +0000 Manifest this update: Sat 07 Jun 2025 05:25:05 +0000 Manifest next update: Tue 10 Jun 2025 13:11:05 +0000 Files and hashes: 1: 3136302e32352e35382e302f32332d3234203d3e20313532383333.roa (hash: bHOi5SjHU/IA6uuARi1jDeG/5P34ORp+Y9sD3zlRQV0=) 2: B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.crl (hash: 5NQErcoQA/JvYQOHGxYtdGxr1HK9GZWSwdSVNyTc1Q0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.crl rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 13:11:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:59:84:47:8e:ed:00:86:3e:a7:6b:8b:d6:b9:45:1b:1c:bd:03:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0D726419FBF35E7C6EB437E238F3D2A3F063B4C Validity Not Before: Jun 7 05:25:05 2025 GMT Not After : Jun 10 13:11:05 2025 GMT Subject: CN=9564DA16CE721C308E6827F0A2730888320AF8BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:35:2f:5b:cb:9f:e9:38:b9:51:1c:4c:b5:c8: 7d:65:a9:89:ca:be:65:a9:47:3b:74:52:96:0e:24: c0:28:df:b3:4d:40:da:c7:85:89:14:c0:d8:10:2c: 2a:cc:9b:72:0c:cc:29:06:c5:09:15:00:6c:15:a8: a2:f0:d8:12:f7:65:c6:14:7a:3c:f2:fa:86:29:90: 27:a1:9b:24:c5:35:3f:cd:2b:55:4c:8d:7c:94:96: b7:be:2b:86:fb:42:ea:03:9b:05:73:29:26:7c:09: 2a:27:ed:22:36:a6:c1:bd:84:c6:81:f6:f6:73:ed: 1a:50:ee:69:49:ae:b8:4a:68:93:b6:a5:56:2d:31: c3:91:f8:26:95:6a:4c:3a:6c:3e:85:80:26:50:1a: 28:a7:ae:90:cf:e7:11:98:de:b8:58:fd:a7:40:65: e3:19:7b:d1:43:51:4a:f9:0f:35:f7:5a:52:11:d4: 6a:d3:a5:87:04:05:25:02:70:bf:f1:2f:7e:80:b5: 5d:c8:55:eb:dc:89:55:a5:64:76:a3:1f:13:3f:3e: 5b:d2:6e:0c:68:a0:c6:61:f5:ca:cc:6e:19:f4:f8: d8:d0:38:b8:28:13:5b:4e:ba:2c:0e:aa:c2:ae:09: ff:b1:d2:68:36:58:25:27:3f:7d:a1:0e:90:3f:8c: 6b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:64:DA:16:CE:72:1C:30:8E:68:27:F0:A2:73:08:88:32:0A:F8:BB X509v3 Authority Key Identifier: keyid:B0:D7:26:41:9F:BF:35:E7:C6:EB:43:7E:23:8F:3D:2A:3F:06:3B:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:92:03:03:1d:52:35:c2:61:99:c3:64:3e:08:41:11:60:24: eb:87:1a:c3:44:69:11:73:fd:a9:90:aa:d5:45:f9:5d:f4:f9: 8a:7a:c6:85:66:f9:84:e7:0a:97:49:8d:e9:50:3e:4f:25:72: 55:77:b4:8d:47:08:83:15:3f:4c:68:b2:39:71:df:84:8e:89: 33:22:67:40:56:62:8f:ae:05:c9:7b:50:e6:f4:a5:3a:47:71: 3e:d3:f7:5b:d0:c4:a7:b2:7e:8e:ee:9d:fd:c6:ba:ce:c0:49: 30:5b:94:a2:8b:be:72:44:6b:7d:20:eb:6d:b7:e1:cc:05:e6: c8:0c:e6:67:81:e1:e0:8d:76:6c:61:a7:20:a4:4a:57:91:c2: 07:ca:24:c0:3f:0f:7e:fc:25:97:c0:28:df:0d:bd:55:24:53: 53:e5:55:c2:75:4a:4d:fd:6f:c5:e0:c3:1d:d2:07:99:24:cd: 92:58:79:b6:e4:85:80:19:e7:2e:07:4c:f4:30:2e:74:ec:29: 80:7f:fc:9a:1d:10:2c:3c:16:9f:3d:0b:8d:bb:3e:23:51:18: bb:ee:ee:5f:e9:95:74:85:a1:4d:08:13:ba:8c:3b:cb:5a:e6: a9:a6:12:05:98:0f:67:20:52:44:da:2f:26:50:be:f6:30:ec: 89:a0:8c:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCVmER47tAIY+p2uL1rlFGxy9A3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBENzI2NDE5RkJGMzVFN0M2RUI0MzdFMjM4RjNEMkEz RjA2M0I0QzAeFw0yNTA2MDcwNTI1MDVaFw0yNTA2MTAxMzExMDVaMDMxMTAvBgNV BAMTKDk1NjREQTE2Q0U3MjFDMzA4RTY4MjdGMEEyNzMwODg4MzIwQUY4QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDINS9by5/pOLlRHEy1yH1lqYnK vmWpRzt0UpYOJMAo37NNQNrHhYkUwNgQLCrMm3IMzCkGxQkVAGwVqKLw2BL3ZcYU ejzy+oYpkCehmyTFNT/NK1VMjXyUlre+K4b7QuoDmwVzKSZ8CSon7SI2psG9hMaB 9vZz7RpQ7mlJrrhKaJO2pVYtMcOR+CaVakw6bD6FgCZQGiinrpDP5xGY3rhY/adA ZeMZe9FDUUr5DzX3WlIR1GrTpYcEBSUCcL/xL36AtV3IVevciVWlZHajHxM/PlvS bgxooMZh9crMbhn0+NjQOLgoE1tOuiwOqsKuCf+x0mg2WCUnP32hDpA/jGtVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlWTaFs5yHDCOaCfwonMIiDIK+LswHwYDVR0j BBgwFoAUsNcmQZ+/NefG60N+I489Kj8GO0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MmRhYjQ2YS0wODVlLTQ0MzItOTgzMy03MWI4ZGIxNDRkOTQvMC9CMEQ3MjY0MTlG QkYzNUU3QzZFQjQzN0UyMzhGM0QyQTNGMDYzQjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjBENzI2NDE5RkJGMzVFN0M2RUI0MzdFMjM4RjNEMkEzRjA2 M0I0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDJkYWI0NmEtMDg1ZS00NDMyLTk4 MzMtNzFiOGRiMTQ0ZDk0LzAvQjBENzI2NDE5RkJGMzVFN0M2RUI0MzdFMjM4RjNE MkEzRjA2M0I0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKySAwMdUjXCYZnDZD4IQRFgJOuHGsNEaRFz /amQqtVF+V30+Yp6xoVm+YTnCpdJjelQPk8lclV3tI1HCIMVP0xosjlx34SOiTMi Z0BWYo+uBcl7UOb0pTpHcT7T91vQxKeyfo7unf3Gus7ASTBblKKLvnJEa30g6223 4cwF5sgM5meB4eCNdmxhpyCkSleRwgfKJMA/D378JZfAKN8NvVUkU1PlVcJ1Sk39 b8Xgwx3SB5kkzZJYebbkhYAZ5y4HTPQwLnTsKYB//JodECw8Fp89C427PiNRGLvu 7l/plXSFoU0IE7qMO8ta5qmmEgWYD2cgUkTaLyZQvvYw7ImgjLE= -----END CERTIFICATE-----Generated at Mon Jun 9 10:00:58 2025 by rpki-client