$ rpki-client -vvf repo-rpki.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/0BB4E952789AC502FA0CFB95C2E03F434497BFE3.mft File: 0BB4E952789AC502FA0CFB95C2E03F434497BFE3.mft (raw, json) Hash identifier: Dlfh3FMIHR2WdtZnVVqONo/po0eLRROSS7ap8xr9cEE= Subject key identifier: A4:A9:0C:9D:91:21:EF:C4:8C:5B:27:86:97:F8:1A:B0:CA:9C:15:89 Authority key identifier: 0B:B4:E9:52:78:9A:C5:02:FA:0C:FB:95:C2:E0:3F:43:44:97:BF:E3 Certificate issuer: /CN=0BB4E952789AC502FA0CFB95C2E03F434497BFE3 Certificate serial: 77299CFBC6DE13F71F2323EC9005F849C379BC64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB4E952789AC502FA0CFB95C2E03F434497BFE3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/0BB4E952789AC502FA0CFB95C2E03F434497BFE3.mft Manifest number: 8A Signing time: Mon 02 Jun 2025 13:31:59 +0000 Manifest this update: Mon 02 Jun 2025 13:26:59 +0000 Manifest next update: Fri 06 Jun 2025 01:20:59 +0000 Files and hashes: 1: 3130332e3134382e38382e302f32342d3234203d3e20313430343231.roa (hash: W7WMatvzYXuALvuTzGQVbHotqWD0nd56JaqQ7uT/XBU=) 2: 3130332e3134382e38382e302f32332d3233203d3e20313430343231.roa (hash: i5RZxjcZhVQvmnAc/gMhyUIUY8n5jdbL7g9L8hbgD/Y=) 3: 0BB4E952789AC502FA0CFB95C2E03F434497BFE3.crl (hash: xYtZ+6xwQcCqHKVvS6JZ9GLw+no52TN4a2xwvab7gOA=) 4: 3130332e3134382e38392e302f32342d3234203d3e20313430343231.roa (hash: 9LNgGVv86zEnKjQNsGSTYEvVvGQkNogYzW1V+EdhwJM=) 5: 323030313a6466323a633938303a3a2f34382d3438203d3e20313430343231.roa (hash: 68fT/6O+GQIrkXJcp+Dg6OpaZLLbbrSI6G1YMP9fXt0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/0BB4E952789AC502FA0CFB95C2E03F434497BFE3.crl rsync://repo-rpki.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/0BB4E952789AC502FA0CFB95C2E03F434497BFE3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB4E952789AC502FA0CFB95C2E03F434497BFE3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 01:20:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:29:9c:fb:c6:de:13:f7:1f:23:23:ec:90:05:f8:49:c3:79:bc:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BB4E952789AC502FA0CFB95C2E03F434497BFE3 Validity Not Before: Jun 2 13:26:59 2025 GMT Not After : Jun 6 01:20:59 2025 GMT Subject: CN=A4A90C9D9121EFC48C5B278697F81AB0CA9C1589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2c:63:c0:f1:11:9e:23:5d:88:ba:36:a2:40: 6c:9f:93:d8:c3:70:91:ff:7c:23:65:2d:f0:72:3e: bf:cc:76:51:e1:3a:ec:34:d5:28:c2:1a:72:74:52: 0e:af:d1:f8:a4:de:50:29:d2:3e:7e:22:0d:be:df: c9:5d:e8:dc:45:93:1c:ee:84:c6:33:1e:76:32:e3: 6a:c5:a5:d2:25:5b:9f:e3:21:32:59:9f:31:dd:00: cc:31:4f:75:8e:57:ec:e0:27:ff:46:b4:ab:98:5d: ab:b3:03:9b:1c:ff:0e:47:61:a2:56:47:1e:4f:d0: 4f:18:8e:a9:84:b5:12:78:02:94:29:2c:a1:2e:26: ae:78:d9:e1:bb:8c:10:0d:e3:8e:c7:5b:d8:5a:7d: 9b:a2:07:be:b8:1e:8f:30:c9:15:c9:26:d6:7b:43: 69:d8:23:68:2b:59:f2:e3:7e:52:3b:60:a5:3a:7d: 60:77:4f:70:da:3d:40:d4:97:87:78:ec:ca:79:f0: 3b:cc:62:68:46:38:83:a0:26:d3:43:ad:9c:b3:f4: 7c:8b:ec:37:1b:51:cf:f6:f9:25:dd:b4:e9:4d:84: b9:ed:b3:cf:aa:7c:61:62:af:a1:bf:90:90:6e:d9: e6:31:2d:81:83:10:f9:d0:35:3c:02:96:be:46:06: a8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A9:0C:9D:91:21:EF:C4:8C:5B:27:86:97:F8:1A:B0:CA:9C:15:89 X509v3 Authority Key Identifier: keyid:0B:B4:E9:52:78:9A:C5:02:FA:0C:FB:95:C2:E0:3F:43:44:97:BF:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/0BB4E952789AC502FA0CFB95C2E03F434497BFE3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB4E952789AC502FA0CFB95C2E03F434497BFE3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/0BB4E952789AC502FA0CFB95C2E03F434497BFE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:ac:db:d0:15:43:d5:c8:e2:07:81:d6:55:df:63:27:d4:2a: c4:bd:a3:b0:f2:de:05:7b:63:98:89:0a:6d:33:75:24:62:80: ce:15:88:03:1d:47:19:9d:45:7c:44:4f:8a:36:d8:00:23:91: 7e:0f:3a:d4:ab:4f:80:e9:2b:d4:2f:bb:22:51:41:de:0f:69: 59:0c:f1:17:b6:91:44:c4:c3:91:e2:2d:62:d0:df:bc:1f:67: a2:6d:4c:9e:03:1b:cc:64:4f:08:28:c1:b1:f3:15:76:ac:68: 6e:d5:e2:75:4f:bf:67:08:09:64:77:60:ae:0d:37:ec:4f:8e: 7c:93:e0:1c:1a:de:9b:c9:12:97:33:4f:21:d7:3e:77:30:d3: 1f:36:e9:e0:b0:74:43:fe:f2:fe:e0:7b:60:8f:18:b8:23:fb: 05:8a:5a:0f:de:ef:73:8e:eb:b4:be:f6:fa:8b:e4:0c:58:d3: 09:b9:89:ad:87:12:9d:1e:68:fa:5b:98:38:84:6d:26:20:6b: 50:22:ab:3d:e6:e0:4a:c4:c6:9e:9d:eb:2c:a7:77:86:c3:ce: ad:f4:ba:f5:70:5c:34:ed:f9:58:6c:91:58:e0:ce:ba:23:50: 61:cf:d5:f2:86:af:47:f2:98:81:ae:d7:7e:a0:d5:62:56:62: 23:d9:f6:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdymc+8beE/cfIyPskAX4ScN5vGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJCNEU5NTI3ODlBQzUwMkZBMENGQjk1QzJFMDNGNDM0 NDk3QkZFMzAeFw0yNTA2MDIxMzI2NTlaFw0yNTA2MDYwMTIwNTlaMDMxMTAvBgNV BAMTKEE0QTkwQzlEOTEyMUVGQzQ4QzVCMjc4Njk3RjgxQUIwQ0E5QzE1ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1LGPA8RGeI12IujaiQGyfk9jD cJH/fCNlLfByPr/MdlHhOuw01SjCGnJ0Ug6v0fik3lAp0j5+Ig2+38ld6NxFkxzu hMYzHnYy42rFpdIlW5/jITJZnzHdAMwxT3WOV+zgJ/9GtKuYXauzA5sc/w5HYaJW Rx5P0E8YjqmEtRJ4ApQpLKEuJq542eG7jBAN447HW9hafZuiB764Ho8wyRXJJtZ7 Q2nYI2grWfLjflI7YKU6fWB3T3DaPUDUl4d47Mp58DvMYmhGOIOgJtNDrZyz9HyL 7DcbUc/2+SXdtOlNhLnts8+qfGFir6G/kJBu2eYxLYGDEPnQNTwClr5GBqh5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpKkMnZEh78SMWyeGl/gasMqcFYkwHwYDVR0j BBgwFoAUC7TpUniaxQL6DPuVwuA/Q0SXv+MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjcyZWNhNC03M2FkLTRlMGItYTZhNi03YTY1Njk4YjczYmUvMC8wQkI0RTk1Mjc4 OUFDNTAyRkEwQ0ZCOTVDMkUwM0Y0MzQ0OTdCRkUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEJCNEU5NTI3ODlBQzUwMkZBMENGQjk1QzJFMDNGNDM0NDk3 QkZFMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGI3MmVjYTQtNzNhZC00ZTBiLWE2 YTYtN2E2NTY5OGI3M2JlLzAvMEJCNEU5NTI3ODlBQzUwMkZBMENGQjk1QzJFMDNG NDM0NDk3QkZFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKs29AVQ9XI4geB1lXfYyfUKsS9o7Dy3gV7 Y5iJCm0zdSRigM4ViAMdRxmdRXxET4o22AAjkX4POtSrT4DpK9QvuyJRQd4PaVkM 8Re2kUTEw5HiLWLQ37wfZ6JtTJ4DG8xkTwgowbHzFXasaG7V4nVPv2cICWR3YK4N N+xPjnyT4Bwa3pvJEpczTyHXPncw0x826eCwdEP+8v7ge2CPGLgj+wWKWg/e73OO 67S+9vqL5AxY0wm5ia2HEp0eaPpbmDiEbSYga1Aiqz3m4ErExp6d6yynd4bDzq30 uvVwXDTt+VhskVjgzrojUGHP1fKGr0fymIGu136g1WJWYiPZ9o8= -----END CERTIFICATE-----Generated at Tue Jun 3 23:40:30 2025 by rpki-client