$ rpki-client -vvf repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft File: B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft (raw, json) Hash identifier: VAxwlF68TZlHMCtEbk+vsojWhkvhS/DpW4crlkw/Uuk= Subject key identifier: 9E:DB:6B:04:A5:26:A3:92:FE:C2:FB:94:D8:4F:06:78:66:38:19:74 Authority key identifier: B9:72:F0:73:B8:AF:26:B8:53:3E:97:AA:FB:AE:C1:7F:CE:FD:6F:8C Certificate issuer: /CN=B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C Certificate serial: 60959BD6D538E63D48FF6AB4AF8413DA4183934E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft Manifest number: 0351 Signing time: Tue 03 Jun 2025 14:52:51 +0000 Manifest this update: Tue 03 Jun 2025 14:47:51 +0000 Manifest next update: Fri 06 Jun 2025 21:34:51 +0000 Files and hashes: 1: B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl (hash: d/lslP+47me7pX0IujMqV3OafIvW3S/VN+yRvD5VFyo=) 2: 3130332e3135352e3135362e302f32342d3234203d3e20313431303632.roa (hash: neE3zrlksOzJV8H0qe9TgTIuCvuChMBCqnrQKxlvrQU=) 3: 3130332e3135352e3135372e302f32342d3234203d3e20313431303632.roa (hash: 0/uMdmxlRYv0BxLj1kLNukE06046JVFdcxHugW59xeM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:95:9b:d6:d5:38:e6:3d:48:ff:6a:b4:af:84:13:da:41:83:93:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C Validity Not Before: Jun 3 14:47:51 2025 GMT Not After : Jun 6 21:34:51 2025 GMT Subject: CN=9EDB6B04A526A392FEC2FB94D84F067866381974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f4:cd:97:b2:c2:a9:9a:e2:68:1e:9e:40:ac: bc:81:e8:6d:4a:7f:70:12:85:41:1a:4e:c4:d5:96: 8c:ed:de:55:62:ca:09:68:00:e9:79:99:fe:7a:df: 1b:54:32:e9:b1:ef:b3:1a:87:c7:7e:ff:c0:29:a0: d3:04:c5:fa:37:03:65:21:a9:6f:d9:09:a9:8e:e2: 84:cf:dd:7c:a7:a7:ec:99:69:b8:a1:d2:27:4c:e1: 49:b5:2c:d6:a0:78:02:b9:d6:9e:37:98:e1:d9:6c: b2:37:31:53:c8:c6:85:66:9c:31:10:fa:f1:01:86: 05:67:e8:b7:d0:db:f2:14:37:73:98:48:33:e0:63: 48:d2:b9:bb:25:b7:43:c8:58:72:a2:a4:09:76:00: 66:e3:3c:0f:4c:b7:54:1a:ac:c7:c2:11:e0:0f:a3: 49:78:d1:93:23:ba:89:ea:b9:f8:89:b4:1c:cb:03: 61:a9:ae:33:c0:ee:12:3a:64:5f:60:6c:32:a9:1e: 58:1f:c9:9a:05:92:de:aa:3e:83:d7:c6:99:b6:53: 2d:34:2b:f7:f5:aa:cb:bf:1f:f2:16:0d:f2:3f:cb: b4:ca:49:fc:32:5b:7a:ca:30:b9:cc:36:3e:0c:54: 65:57:e4:1b:b8:e3:d4:7b:bf:7c:10:44:60:d0:10: 5c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:DB:6B:04:A5:26:A3:92:FE:C2:FB:94:D8:4F:06:78:66:38:19:74 X509v3 Authority Key Identifier: keyid:B9:72:F0:73:B8:AF:26:B8:53:3E:97:AA:FB:AE:C1:7F:CE:FD:6F:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:39:79:c9:d5:23:e6:88:e9:bb:ce:35:cf:88:e8:4f:fc:80: fa:4a:ef:1b:2c:7d:ab:af:00:52:bb:0a:b8:19:bc:2d:d1:12: f2:76:c7:b6:21:cd:0c:d9:e5:c5:80:66:33:7b:05:9a:fb:d4: 98:d2:9f:01:c8:26:2f:c2:fa:82:36:b2:07:cf:0c:d2:16:1c: 6b:fe:8f:17:39:5f:17:94:d0:de:19:dc:c0:22:e1:29:bf:df: 97:a3:17:90:25:1b:c9:01:20:9d:d3:26:78:d6:a7:44:00:fd: a5:73:cf:96:df:1e:89:a7:92:31:b6:9c:6b:59:5a:99:a3:46: d4:eb:ad:e1:d4:da:c2:24:82:79:31:50:5d:3b:4a:df:37:69: 44:7c:ae:ac:95:e1:ae:04:86:c3:3c:41:21:07:08:18:09:db: 6d:ea:3f:c2:1c:5a:5a:9a:7f:33:2c:be:00:cb:5f:3d:c8:32: 51:24:82:dd:38:17:98:ce:be:d5:e1:f9:20:c5:cb:6a:e8:7b: 38:f4:80:15:52:87:31:9f:d7:f7:10:bf:2f:f4:78:7a:63:bc: da:a9:e6:49:68:a8:d6:a7:1f:ec:57:8c:f0:9b:f7:63:56:a1: 9f:97:89:f2:8f:76:f2:3c:31:fa:62:9b:46:f5:6e:08:96:34: 9d:55:30:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYJWb1tU45j1I/2q0r4QT2kGDk04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMxN0ZD RUZENkY4QzAeFw0yNTA2MDMxNDQ3NTFaFw0yNTA2MDYyMTM0NTFaMDMxMTAvBgNV BAMTKDlFREI2QjA0QTUyNkEzOTJGRUMyRkI5NEQ4NEYwNjc4NjYzODE5NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN9M2XssKpmuJoHp5ArLyB6G1K f3AShUEaTsTVlozt3lViygloAOl5mf563xtUMumx77Mah8d+/8ApoNMExfo3A2Uh qW/ZCamO4oTP3Xynp+yZabih0idM4Um1LNageAK51p43mOHZbLI3MVPIxoVmnDEQ +vEBhgVn6LfQ2/IUN3OYSDPgY0jSubslt0PIWHKipAl2AGbjPA9Mt1QarMfCEeAP o0l40ZMjuonqufiJtBzLA2GprjPA7hI6ZF9gbDKpHlgfyZoFkt6qPoPXxpm2Uy00 K/f1qsu/H/IWDfI/y7TKSfwyW3rKMLnMNj4MVGVX5Bu449R7v3wQRGDQEFxPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnttrBKUmo5L+wvuU2E8GeGY4GXQwHwYDVR0j BBgwFoAUuXLwc7ivJrhTPpeq+67Bf879b4wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZDE2MTljYi1jMDFjLTQ2MTQtODYzZS1jZTI4OGQ3YmE3NjUvMC9COTcyRjA3M0I4 QUYyNkI4NTMzRTk3QUFGQkFFQzE3RkNFRkQ2RjhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMxN0ZDRUZE NkY4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWQxNjE5Y2ItYzAxYy00NjE0LTg2 M2UtY2UyODhkN2JhNzY1LzAvQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMx N0ZDRUZENkY4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABA5ecnVI+aI6bvONc+I6E/8gPpK7xssfauv AFK7CrgZvC3REvJ2x7YhzQzZ5cWAZjN7BZr71JjSnwHIJi/C+oI2sgfPDNIWHGv+ jxc5XxeU0N4Z3MAi4Sm/35ejF5AlG8kBIJ3TJnjWp0QA/aVzz5bfHomnkjG2nGtZ WpmjRtTrreHU2sIkgnkxUF07St83aUR8rqyV4a4EhsM8QSEHCBgJ223qP8IcWlqa fzMsvgDLXz3IMlEkgt04F5jOvtXh+SDFy2roezj0gBVShzGf1/cQvy/0eHpjvNqp 5kloqNanH+xXjPCb92NWoZ+XifKPdvI8Mfpim0b1bgiWNJ1VMDc= -----END CERTIFICATE-----Generated at Thu Jun 5 18:19:04 2025 by rpki-client