$ rpki-client -vvf repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft File: B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft (raw, json) Hash identifier: C51KPowYoS5WNELGXl7JgcYCRvgyPD5p7P85klfoR5U= Subject key identifier: 35:57:C8:CC:75:DE:85:29:EF:D4:B1:4B:FE:84:ED:C5:C5:D4:1B:A3 Authority key identifier: B2:07:7B:9B:AF:0B:F3:E5:FC:B8:45:13:B1:D7:44:5E:30:CE:65:82 Certificate issuer: /CN=B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582 Certificate serial: 055AE5ADDE9E911B0A40AD2A044ECEEBC88F8954 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft Manifest number: 0451 Signing time: Tue 03 Jun 2025 21:26:34 +0000 Manifest this update: Tue 03 Jun 2025 21:21:34 +0000 Manifest next update: Fri 06 Jun 2025 22:24:34 +0000 Files and hashes: 1: B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl (hash: A8I1L7wNfUlktwIP+ckwcP3D4t59G7yXoR3JQJc9Tso=) 2: 3130332e3135372e362e302f32342d3234203d3e20313431313036.roa (hash: /7z2+JC7qoPzUqAK7WiZ8hM8Bf1dEmgOqji6pvEw+hI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:24:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:5a:e5:ad:de:9e:91:1b:0a:40:ad:2a:04:4e:ce:eb:c8:8f:89:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582 Validity Not Before: Jun 3 21:21:34 2025 GMT Not After : Jun 6 22:24:34 2025 GMT Subject: CN=3557C8CC75DE8529EFD4B14BFE84EDC5C5D41BA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4c:ae:f7:fa:90:ec:51:e9:69:23:da:87:f9: 52:04:86:37:a2:67:fa:4b:6f:1d:d6:a9:a8:1b:6a: 43:85:52:df:48:f8:ba:ec:49:4e:eb:b2:bc:72:c7: 28:41:b5:ba:87:cd:8f:1c:50:3a:e7:23:88:1c:b0: 04:62:bf:14:38:30:e5:db:9e:8e:49:20:a8:42:13: 52:71:89:9d:d2:8b:44:d3:07:2d:38:ff:bf:53:14: 63:d1:40:7a:c3:a0:4a:a4:17:99:44:37:62:98:75: 3f:e8:29:67:92:85:f4:d6:15:b8:45:e3:72:90:7f: 92:6a:6e:b3:b2:0b:6a:45:96:27:49:2c:50:32:73: 7b:54:40:05:2b:87:85:9d:41:cc:14:78:65:ac:0d: 49:23:45:5e:27:4b:e4:f1:c5:23:f8:68:cc:00:48: fc:f7:1e:61:9c:ba:77:cb:cb:7c:1d:79:ea:d0:4d: e5:fa:fd:d1:50:f0:47:a5:16:bf:b7:29:ca:7d:da: c0:34:22:8e:90:4b:8b:18:de:9e:e6:87:94:63:34: 4a:69:da:91:0b:98:e4:53:41:ec:57:fd:05:bc:f1: 6a:60:15:b5:5d:f2:18:56:75:83:7b:c2:af:c2:0b: 3c:9d:9e:54:68:3e:57:dc:00:ab:0e:f3:c8:df:a2: aa:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:57:C8:CC:75:DE:85:29:EF:D4:B1:4B:FE:84:ED:C5:C5:D4:1B:A3 X509v3 Authority Key Identifier: keyid:B2:07:7B:9B:AF:0B:F3:E5:FC:B8:45:13:B1:D7:44:5E:30:CE:65:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:83:7d:cf:db:44:d1:a6:50:c4:f1:06:f5:d6:9b:94:cb:1c: 23:1b:08:f6:ee:bb:74:b9:06:95:d8:c9:2c:df:1d:02:a8:e8: e8:7a:84:28:21:f5:47:b6:54:ef:be:fd:8f:8f:bd:9f:a2:18: ab:11:9e:a3:d5:69:7a:5a:df:86:89:e1:8c:a1:f8:69:bc:4f: e3:ff:9d:05:e6:e6:5c:38:0b:ef:57:82:e0:58:b2:5d:4c:7c: 98:a0:77:e3:62:3a:ba:35:09:0f:58:cd:8f:cb:76:b9:ce:e3: 2c:46:60:84:f5:f0:d9:fc:85:31:f6:24:ea:c6:ea:1c:1d:dd: 9c:c9:dc:46:47:e8:cc:ea:f8:3c:af:1a:1e:f3:e9:51:81:2f: 29:9e:20:2e:72:ab:f9:12:c3:4c:e0:fa:92:bd:d5:a5:35:40: 41:12:ed:92:df:ea:74:e3:8a:41:9a:d0:e2:b0:00:34:9a:65: 3c:cc:7d:9e:9f:26:d7:b6:f7:1f:5f:5a:ed:80:2c:f5:78:e2: 18:31:8f:71:45:40:42:6e:19:22:ff:50:4a:f8:7f:81:14:4a: 99:cd:e1:c9:cb:d2:55:8b:02:12:11:cd:c6:3f:4c:21:54:cb: 72:e4:67:4d:30:b7:89:27:5d:5a:65:91:37:94:7d:bb:8f:ce: 3b:98:3a:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBVrlrd6ekRsKQK0qBE7O68iPiVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0NUUz MENFNjU4MjAeFw0yNTA2MDMyMTIxMzRaFw0yNTA2MDYyMjI0MzRaMDMxMTAvBgNV BAMTKDM1NTdDOENDNzVERTg1MjlFRkQ0QjE0QkZFODRFREM1QzVENDFCQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnTK73+pDsUelpI9qH+VIEhjei Z/pLbx3WqagbakOFUt9I+LrsSU7rsrxyxyhBtbqHzY8cUDrnI4gcsARivxQ4MOXb no5JIKhCE1JxiZ3Si0TTBy04/79TFGPRQHrDoEqkF5lEN2KYdT/oKWeShfTWFbhF 43KQf5JqbrOyC2pFlidJLFAyc3tUQAUrh4WdQcwUeGWsDUkjRV4nS+TxxSP4aMwA SPz3HmGcunfLy3wdeerQTeX6/dFQ8EelFr+3Kcp92sA0Io6QS4sY3p7mh5RjNEpp 2pELmORTQexX/QW88WpgFbVd8hhWdYN7wq/CCzydnlRoPlfcAKsO88jfoqqxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNVfIzHXehSnv1LFL/oTtxcXUG6MwHwYDVR0j BBgwFoAUsgd7m68L8+X8uEUTsddEXjDOZYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWRkNGYxNi01NzBlLTRjOGMtYTk5Mi1kYjg5ZWEzYmFkMzYvMC9CMjA3N0I5QkFG MEJGM0U1RkNCODQ1MTNCMUQ3NDQ1RTMwQ0U2NTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0NUUzMENF NjU4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVkZDRmMTYtNTcwZS00YzhjLWE5 OTItZGI4OWVhM2JhZDM2LzAvQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0 NUUzMENFNjU4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEaDfc/bRNGmUMTxBvXWm5TLHCMbCPbuu3S5 BpXYySzfHQKo6Oh6hCgh9Ue2VO++/Y+PvZ+iGKsRnqPVaXpa34aJ4Yyh+Gm8T+P/ nQXm5lw4C+9XguBYsl1MfJigd+NiOro1CQ9YzY/LdrnO4yxGYIT18Nn8hTH2JOrG 6hwd3ZzJ3EZH6Mzq+DyvGh7z6VGBLymeIC5yq/kSw0zg+pK91aU1QEES7ZLf6nTj ikGa0OKwADSaZTzMfZ6fJte29x9fWu2ALPV44hgxj3FFQEJuGSL/UEr4f4EUSpnN 4cnL0lWLAhIRzcY/TCFUy3LkZ00wt4knXVplkTeUfbuPzjuYOrs= -----END CERTIFICATE-----Generated at Thu Jun 5 18:11:40 2025 by rpki-client