$ rpki-client -vvf repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft File: B0928A45D014D8D5FAD50314E828086F12B15610.mft (raw, json) Hash identifier: RXPPM7uDQMExN4PcinGF3cnc/YJlUSAHlpEVmHLGz5c= Subject key identifier: D2:BB:F1:60:4B:14:56:AE:3D:66:34:CC:E7:C3:0D:81:3D:ED:6B:44 Authority key identifier: B0:92:8A:45:D0:14:D8:D5:FA:D5:03:14:E8:28:08:6F:12:B1:56:10 Certificate issuer: /CN=B0928A45D014D8D5FAD50314E828086F12B15610 Certificate serial: 168ACCD25F4F3E468061249824BAA1FEE4D55AF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft Manifest number: 02DD Signing time: Tue 03 Jun 2025 13:12:08 +0000 Manifest this update: Tue 03 Jun 2025 13:07:08 +0000 Manifest next update: Fri 06 Jun 2025 22:15:08 +0000 Files and hashes: 1: 3230322e3132352e38322e302f32342d3234203d3e20313430343433.roa (hash: svi5IuXnIA+13Wc0eQrV3WQdaOBiVClli1PIWM+ewGc=) 2: 3230322e37302e3133322e302f32332d3233203d3e20313430343433.roa (hash: zemQSZcrisUT3ypYGuVnD0HgXPjCIaBTMHzTcVM9um8=) 3: B0928A45D014D8D5FAD50314E828086F12B15610.crl (hash: TARtD8c2xmODOE88XVRNx+m2kLcScZwtQv4O9i0wWkU=) 4: 3230322e3132352e38322e302f32332d3233203d3e20313430343433.roa (hash: g4b6/Xa0b41J+1gc8Xz+JaVY6mTt5QNosbt82K9ZCLY=) 5: 3230322e3132352e38332e302f32342d3234203d3e20313430343433.roa (hash: Ky8MrLU9AvVMvZfrLkoaRO/9X/2qSweH3weFbcGoV3c=) 6: 3230322e37302e3133322e302f32342d3234203d3e20313430343433.roa (hash: t5xXiyHWAYUMNFYe6N3ZJ/nwbkXPClS4KSSDztJ55tw=) 7: 3230322e37302e3133332e302f32342d3234203d3e20313430343433.roa (hash: wdtK/qmLPSYK98usl8We2OAmclE1Y5QskILTtOqsrh0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.crl rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:15:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:8a:cc:d2:5f:4f:3e:46:80:61:24:98:24:ba:a1:fe:e4:d5:5a:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0928A45D014D8D5FAD50314E828086F12B15610 Validity Not Before: Jun 3 13:07:08 2025 GMT Not After : Jun 6 22:15:08 2025 GMT Subject: CN=D2BBF1604B1456AE3D6634CCE7C30D813DED6B44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:01:22:70:bd:28:8b:a4:56:bf:5e:9a:41:ad: 3b:ef:63:e8:cc:0d:bc:54:33:11:a1:c0:4c:3e:a6: b4:3b:62:61:80:63:56:1b:7f:6c:f9:f0:1a:ba:60: 6e:d6:55:d5:91:df:aa:bd:3e:a8:c7:6a:e6:23:0a: 78:0a:7b:48:8e:78:80:43:8a:26:25:42:e5:fd:d1: cd:8c:83:d8:cc:4a:f5:51:db:b0:ef:41:54:46:1b: e6:bf:b5:0b:18:e5:ea:d5:b6:20:8f:44:be:ca:d0: c8:e6:69:b7:90:27:39:09:c3:73:20:ad:85:6c:40: fa:b6:d1:15:d9:ee:c0:30:5a:95:c0:25:86:2c:b9: bf:da:9f:ff:73:fe:99:f5:12:bd:02:34:f3:4e:f0: 1f:30:d0:b6:28:b0:c2:5c:11:16:73:57:51:aa:b5: c0:8a:c3:b0:69:57:8d:8e:86:1c:56:0a:a9:b5:99: db:8e:65:c9:e2:ea:2c:bb:ce:8f:14:fd:2c:3a:e4: ba:7f:1c:b6:94:ba:83:ef:d1:2e:f7:22:62:76:b7: 1b:f4:b5:0a:b8:7f:01:42:62:2d:64:d2:5e:b0:cd: 7f:e0:38:78:6c:4a:58:f1:23:42:09:ce:67:6d:13: d5:f9:c7:02:88:28:a2:3c:83:58:d5:31:75:49:7c: a7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:BB:F1:60:4B:14:56:AE:3D:66:34:CC:E7:C3:0D:81:3D:ED:6B:44 X509v3 Authority Key Identifier: keyid:B0:92:8A:45:D0:14:D8:D5:FA:D5:03:14:E8:28:08:6F:12:B1:56:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:ed:39:f3:91:55:ec:3a:be:22:0b:3f:49:8c:26:c5:55:57: 06:96:92:29:7c:0f:9d:7c:70:e7:e1:9a:ad:f0:ee:46:f9:13: 3b:28:e9:8d:52:bc:aa:b6:85:51:66:7d:54:ef:01:47:3b:ec: bd:2a:35:7d:c5:a2:f0:11:57:56:bf:2c:2b:c9:2e:89:58:a1: 4d:61:8c:24:38:4e:08:f8:bd:c7:0a:b1:fe:bb:92:65:05:67: 32:87:0b:75:00:cd:b9:7a:10:b2:be:98:cb:f2:4c:cb:1d:9e: a0:0b:b5:be:d8:a2:49:1f:3f:66:c6:10:97:ac:6a:e7:9d:1e: ba:34:46:7c:77:2c:69:2b:78:84:17:e3:48:54:26:20:11:8d: a6:3a:f8:f2:c5:70:c8:fa:bf:64:53:85:98:a9:43:ac:97:f8: 4a:69:89:48:56:14:de:39:cf:5f:e3:92:64:4c:29:5c:77:f3: 2b:d6:36:39:89:c1:39:f3:8f:c3:ca:e3:9d:05:ab:cd:10:2b: 20:83:87:18:50:78:27:af:40:43:8f:83:5d:30:16:e8:c5:e6: 7a:00:9c:9a:d4:fa:bf:1f:de:7c:a6:f1:de:4a:df:41:8e:a0: 53:b7:d9:86:fe:64:50:fd:90:87:b1:76:9e:f7:92:b7:22:7a: fe:8d:83:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUForM0l9PPkaAYSSYJLqh/uTVWvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4NkYx MkIxNTYxMDAeFw0yNTA2MDMxMzA3MDhaFw0yNTA2MDYyMjE1MDhaMDMxMTAvBgNV BAMTKEQyQkJGMTYwNEIxNDU2QUUzRDY2MzRDQ0U3QzMwRDgxM0RFRDZCNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuASJwvSiLpFa/XppBrTvvY+jM DbxUMxGhwEw+prQ7YmGAY1Ybf2z58Bq6YG7WVdWR36q9PqjHauYjCngKe0iOeIBD iiYlQuX90c2Mg9jMSvVR27DvQVRGG+a/tQsY5erVtiCPRL7K0MjmabeQJzkJw3Mg rYVsQPq20RXZ7sAwWpXAJYYsub/an/9z/pn1Er0CNPNO8B8w0LYosMJcERZzV1Gq tcCKw7BpV42OhhxWCqm1mduOZcni6iy7zo8U/Sw65Lp/HLaUuoPv0S73ImJ2txv0 tQq4fwFCYi1k0l6wzX/gOHhsSljxI0IJzmdtE9X5xwKIKKI8g1jVMXVJfKc5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0rvxYEsUVq49ZjTM58MNgT3ta0QwHwYDVR0j BBgwFoAUsJKKRdAU2NX61QMU6CgIbxKxVhAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2QzMjNiZS04MzdkLTQyNDQtODQ2Yy03ZDIzOTNhOWEwMDkvMC9CMDkyOEE0NUQw MTREOEQ1RkFENTAzMTRFODI4MDg2RjEyQjE1NjEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4NkYxMkIx NTYxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NkMzIzYmUtODM3ZC00MjQ0LTg0 NmMtN2QyMzkzYTlhMDA5LzAvQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4 NkYxMkIxNTYxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACHtOfORVew6viILP0mMJsVVVwaWkil8D518 cOfhmq3w7kb5Ezso6Y1SvKq2hVFmfVTvAUc77L0qNX3FovARV1a/LCvJLolYoU1h jCQ4Tgj4vccKsf67kmUFZzKHC3UAzbl6ELK+mMvyTMsdnqALtb7YokkfP2bGEJes auedHro0Rnx3LGkreIQX40hUJiARjaY6+PLFcMj6v2RThZipQ6yX+EppiUhWFN45 z1/jkmRMKVx38yvWNjmJwTnzj8PK450Fq80QKyCDhxhQeCevQEOPg10wFujF5noA nJrU+r8f3nym8d5K30GOoFO32Yb+ZFD9kIexdp73krciev6Ng40= -----END CERTIFICATE-----Generated at Tue Jun 3 23:38:40 2025 by rpki-client