$ rpki-client -vvf repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft File: B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft (raw, json) Hash identifier: bcSxXAEVgIKuqnY+XuN2kHGS5qUGJyLoBsv7hZlVWHU= Subject key identifier: EE:7D:31:74:F2:CF:9A:42:4B:8A:5B:07:9C:53:17:EF:96:EE:CD:EA Authority key identifier: B0:73:4A:32:D1:3A:96:FC:B3:FD:F9:82:C2:EE:C5:00:15:04:11:CA Certificate issuer: /CN=B0734A32D13A96FCB3FDF982C2EEC500150411CA Certificate serial: 3AF3592BB1B3BAD945874B5EB762A75BD88C5161 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft Manifest number: 01E7 Signing time: Mon 02 Jun 2025 21:21:09 +0000 Manifest this update: Mon 02 Jun 2025 21:16:09 +0000 Manifest next update: Fri 06 Jun 2025 04:06:09 +0000 Files and hashes: 1: 3130332e3138372e3232362e302f32332d3234203d3e20313439373238.roa (hash: fcX6dDB/6jZr5p1excLhOSLezwfpNz/DNvOt6VHyTLo=) 2: B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl (hash: U5ZFMMMnQii2F38d0YUs2mWl0LRanuBmXnIMrM/OTd4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 04:06:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:f3:59:2b:b1:b3:ba:d9:45:87:4b:5e:b7:62:a7:5b:d8:8c:51:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0734A32D13A96FCB3FDF982C2EEC500150411CA Validity Not Before: Jun 2 21:16:09 2025 GMT Not After : Jun 6 04:06:09 2025 GMT Subject: CN=EE7D3174F2CF9A424B8A5B079C5317EF96EECDEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e0:45:67:c8:a4:b1:eb:03:20:18:37:d3:4b: c8:7d:e7:4a:c8:a1:48:75:ff:f6:22:da:c5:a7:f9: 7a:3f:b5:39:fa:45:45:80:9c:0a:94:75:51:df:de: 65:ec:2f:68:49:be:52:23:d2:34:86:d6:ea:c4:54: 02:8b:4a:b4:d4:5e:d3:8a:d7:70:5f:ea:90:75:d5: 39:3b:7c:22:d1:16:00:73:f1:dc:43:7b:f9:3c:89: bf:2c:2e:86:a0:81:9e:d3:2c:7b:9e:eb:d7:c6:c8: f8:c8:04:7d:f4:e1:1a:c3:13:12:7d:40:5c:a1:7e: 10:7c:93:f5:1c:65:29:76:a5:49:b0:ba:8a:06:7e: 02:60:86:e8:ee:03:25:1f:36:04:06:7b:09:5b:d1: 96:af:84:81:9b:30:95:46:c1:59:b7:55:c4:af:b0: ab:75:b1:c4:69:c8:08:08:d6:87:77:74:e2:28:6b: 27:b1:79:e2:da:42:dd:97:31:70:4f:52:0f:2b:cb: d2:8c:b4:20:75:a7:86:3f:59:66:71:c5:d6:13:89: bb:06:a9:68:8d:c4:09:5a:5c:56:6c:36:16:73:c5: 8f:f7:b1:27:c4:50:c0:84:32:e2:14:d1:c7:4c:a6: 18:93:a4:15:0f:96:ef:29:9d:d2:ca:5e:0f:f5:b4: ef:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:7D:31:74:F2:CF:9A:42:4B:8A:5B:07:9C:53:17:EF:96:EE:CD:EA X509v3 Authority Key Identifier: keyid:B0:73:4A:32:D1:3A:96:FC:B3:FD:F9:82:C2:EE:C5:00:15:04:11:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:11:3a:c6:f7:2f:c6:50:a3:b1:52:e6:14:df:4c:90:06:d0: 43:5b:73:14:60:96:d7:4f:90:cc:18:00:ef:dc:37:2a:85:81: c1:9e:d1:4e:8e:33:1c:dd:b4:a0:bf:35:8c:88:ae:6b:78:bb: 6f:ad:62:54:a5:61:0a:74:f3:e1:11:2b:c9:81:b7:1c:74:97: 0e:0c:d7:40:19:25:d3:e5:cd:d8:7f:44:ff:00:cf:0e:ed:5d: e4:5c:17:9d:95:f0:5c:9e:75:68:fe:7b:29:7c:8d:cd:27:dc: 83:f2:29:91:5d:bb:26:d8:27:13:ac:cb:cf:d0:f7:52:6f:20: 6e:6d:57:6e:49:6c:ef:71:89:1c:1d:40:5f:52:5b:ff:8d:8a: bb:8e:56:f1:ac:2e:ba:57:8b:b8:42:b7:73:bf:2e:a0:d1:1b: 9e:39:43:2a:de:f3:11:1d:94:ac:d8:59:cb:02:79:03:99:99: 5e:62:88:1b:d7:ce:9b:ba:3c:13:59:9b:85:62:94:23:0f:ef: 83:e1:43:44:5d:aa:1e:23:5d:ef:40:34:f0:f9:df:87:ae:7b: 0c:0c:8d:b1:3e:47:28:a7:95:ed:61:c3:80:86:b3:06:7c:24: fa:37:50:dc:39:2b:d2:d4:9f:3e:f5:63:56:e3:0d:d7:79:01: 9d:0b:41:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOvNZK7GzutlFh0tet2KnW9iMUWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1MDAx NTA0MTFDQTAeFw0yNTA2MDIyMTE2MDlaFw0yNTA2MDYwNDA2MDlaMDMxMTAvBgNV BAMTKEVFN0QzMTc0RjJDRjlBNDI0QjhBNUIwNzlDNTMxN0VGOTZFRUNERUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk4EVnyKSx6wMgGDfTS8h950rI oUh1//Yi2sWn+Xo/tTn6RUWAnAqUdVHf3mXsL2hJvlIj0jSG1urEVAKLSrTUXtOK 13Bf6pB11Tk7fCLRFgBz8dxDe/k8ib8sLoaggZ7TLHue69fGyPjIBH304RrDExJ9 QFyhfhB8k/UcZSl2pUmwuooGfgJghujuAyUfNgQGewlb0ZavhIGbMJVGwVm3VcSv sKt1scRpyAgI1od3dOIoayexeeLaQt2XMXBPUg8ry9KMtCB1p4Y/WWZxxdYTibsG qWiNxAlaXFZsNhZzxY/3sSfEUMCEMuIU0cdMphiTpBUPlu8pndLKXg/1tO/tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7n0xdPLPmkJLilsHnFMX75buzeowHwYDVR0j BBgwFoAUsHNKMtE6lvyz/fmCwu7FABUEEcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjMwOTdmMC0zOTc4LTQ5Y2UtYjY5Yy00YjIwYjRkY2ZiN2UvMC9CMDczNEEzMkQx M0E5NkZDQjNGREY5ODJDMkVFQzUwMDE1MDQxMUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1MDAxNTA0 MTFDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzMDk3ZjAtMzk3OC00OWNlLWI2 OWMtNGIyMGI0ZGNmYjdlLzAvQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1 MDAxNTA0MTFDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMkROsb3L8ZQo7FS5hTfTJAG0ENbcxRgltdP kMwYAO/cNyqFgcGe0U6OMxzdtKC/NYyIrmt4u2+tYlSlYQp08+ERK8mBtxx0lw4M 10AZJdPlzdh/RP8Azw7tXeRcF52V8FyedWj+eyl8jc0n3IPyKZFduybYJxOsy8/Q 91JvIG5tV25JbO9xiRwdQF9SW/+NiruOVvGsLrpXi7hCt3O/LqDRG545Qyre8xEd lKzYWcsCeQOZmV5iiBvXzpu6PBNZm4VilCMP74PhQ0Rdqh4jXe9ANPD534euewwM jbE+Ryinle1hw4CGswZ8JPo3UNw5K9LUnz71Y1bjDdd5AZ0LQaI= -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:08 2025 by rpki-client