$ rpki-client -vvf repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft File: B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft (raw, json) Hash identifier: w6uREeUEMkJ4opS08+JPViL1UWcr8BaBAKHXXc2t8h4= Subject key identifier: 41:DB:80:78:58:20:DC:51:F3:D0:91:06:04:EB:EB:44:23:F1:61:B0 Authority key identifier: B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4 Certificate issuer: /CN=B877CD1C542C3DE2CBB8EF151F179B857E9376E4 Certificate serial: 50FC718D3464ED9D3CA5F6F58E94773D2A62C446 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft Manifest number: 0157 Signing time: Fri 06 Jun 2025 07:12:17 +0000 Manifest this update: Fri 06 Jun 2025 07:07:17 +0000 Manifest next update: Mon 09 Jun 2025 09:48:17 +0000 Files and hashes: 1: 3130332e3133302e3139382e302f32332d3234203d3e20313338303737.roa (hash: Mwvu/CaE5deApG/isN7cjUZhnbfHoZ3qdsbJEM4tty0=) 2: 3131372e3130332e3131362e302f32342d3234203d3e20313338303737.roa (hash: OXNX1WpnGEvTtG2QVsXYBr1o3UirT2JM9Lg+MbGiddU=) 3: 3136302e32302e3232322e302f32342d3234203d3e20313338303737.roa (hash: Khtj9hE0U7S7GxsTQLAztRkAFMW84uHyWmMZ0EjXpnw=) 4: B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl (hash: USOkmo7kXPKd0v1CYDukKx26dYzIVx2Kk3WLfrNT/1I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 09:48:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:fc:71:8d:34:64:ed:9d:3c:a5:f6:f5:8e:94:77:3d:2a:62:c4:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B877CD1C542C3DE2CBB8EF151F179B857E9376E4 Validity Not Before: Jun 6 07:07:17 2025 GMT Not After : Jun 9 09:48:17 2025 GMT Subject: CN=41DB80785820DC51F3D0910604EBEB4423F161B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6e:4b:d4:5e:cf:a9:e8:c8:9d:18:9f:42:b0: 2e:7b:5d:87:47:c9:fd:17:a1:57:49:1d:fe:a8:8b: 08:65:89:29:4c:e7:e5:9c:95:cc:f6:a1:24:30:ae: 3c:6e:30:42:59:fe:f7:04:b8:55:c0:b7:9a:cd:91: 24:95:ed:85:53:13:e6:e3:af:21:ca:5b:03:17:c6: b1:53:e6:ae:8c:f3:49:d0:2d:ca:41:47:9b:bb:8c: 99:09:9f:b7:00:40:dc:0f:0c:23:85:45:c4:0d:ca: 79:78:9e:44:0f:ee:28:69:e2:44:e7:ff:38:b5:37: 31:eb:51:b9:d6:b9:c4:98:05:27:ad:e2:68:a3:89: 12:32:df:2c:a4:7d:be:b6:13:f5:31:2e:1b:7b:a5: 2b:57:a3:61:69:b8:f2:36:dd:8b:c7:01:96:96:74: 89:2a:f6:1c:38:1a:81:1d:a0:7e:13:15:39:70:b4: 8c:d7:ea:89:8d:5c:d9:b7:54:aa:d0:62:4c:d3:98: ad:b5:f2:65:f6:85:b7:f4:1e:14:4f:8e:e7:05:52: 53:e4:b7:9b:33:82:14:77:09:0c:14:18:9e:df:c7: 62:38:f6:e2:9b:7e:07:3f:dc:27:5c:f0:5f:b9:fd: 5f:fc:61:f5:49:3d:02:9e:6a:37:6c:03:9a:fa:4a: 20:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:DB:80:78:58:20:DC:51:F3:D0:91:06:04:EB:EB:44:23:F1:61:B0 X509v3 Authority Key Identifier: keyid:B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:84:50:5f:fb:33:17:5f:f0:c8:23:54:7b:c8:55:50:cc:ae: ea:da:7c:ff:10:92:9b:e5:98:c2:b4:4f:24:60:05:60:8f:39: 9f:e6:c6:bf:c5:6a:db:b7:65:72:fc:93:65:db:ca:02:67:9e: 8c:47:20:3e:57:99:8c:ad:86:3f:15:a1:48:e2:89:b8:94:b7: fd:37:c7:93:89:00:3f:6f:21:c5:12:e7:e0:29:7d:51:46:37: a7:03:62:45:32:f3:1c:37:23:cb:7b:83:b9:74:c1:1c:f9:38: a0:f5:ed:26:26:d3:58:96:1e:84:e8:09:5a:a3:d9:92:fe:10: 26:e2:49:e7:d1:16:0e:22:a0:6f:a5:49:1d:49:4f:bb:13:71: 93:9d:15:a7:81:6b:5b:b4:5f:a1:d2:35:2b:f9:08:fd:28:48: ce:b1:d4:6e:e2:73:75:39:cc:b7:d9:27:82:c8:56:a8:ba:c4: 11:92:ea:93:25:77:01:cc:89:44:88:30:87:41:38:66:de:fe: 38:59:61:37:e2:f9:1d:59:44:aa:9e:75:91:a2:f3:83:4c:ce: 56:64:3b:a2:77:f1:02:58:60:ad:ac:81:04:01:0f:77:34:9e: 96:c9:e2:23:6f:c4:e2:c2:2a:16:d7:7f:9e:2d:2f:3d:ef:6d: b9:6a:f6:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUPxxjTRk7Z08pfb1jpR3PSpixEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg3N0NEMUM1NDJDM0RFMkNCQjhFRjE1MUYxNzlCODU3 RTkzNzZFNDAeFw0yNTA2MDYwNzA3MTdaFw0yNTA2MDkwOTQ4MTdaMDMxMTAvBgNV BAMTKDQxREI4MDc4NTgyMERDNTFGM0QwOTEwNjA0RUJFQjQ0MjNGMTYxQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCobkvUXs+p6MidGJ9CsC57XYdH yf0XoVdJHf6oiwhliSlM5+Wclcz2oSQwrjxuMEJZ/vcEuFXAt5rNkSSV7YVTE+bj ryHKWwMXxrFT5q6M80nQLcpBR5u7jJkJn7cAQNwPDCOFRcQNynl4nkQP7ihp4kTn /zi1NzHrUbnWucSYBSet4mijiRIy3yykfb62E/UxLht7pStXo2FpuPI23YvHAZaW dIkq9hw4GoEdoH4TFTlwtIzX6omNXNm3VKrQYkzTmK218mX2hbf0HhRPjucFUlPk t5szghR3CQwUGJ7fx2I49uKbfgc/3Cdc8F+5/V/8YfVJPQKeajdsA5r6SiBTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQduAeFgg3FHz0JEGBOvrRCPxYbAwHwYDVR0j BBgwFoAUuHfNHFQsPeLLuO8VHxebhX6TduQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjZkMTg1ZS1kNGY0LTQ4MjAtYjRiNi03OThjMzA3YWQ3ZTUvMC9CODc3Q0QxQzU0 MkMzREUyQ0JCOEVGMTUxRjE3OUI4NTdFOTM3NkU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg3N0NEMUM1NDJDM0RFMkNCQjhFRjE1MUYxNzlCODU3RTkz NzZFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWY2ZDE4NWUtZDRmNC00ODIwLWI0 YjYtNzk4YzMwN2FkN2U1LzAvQjg3N0NEMUM1NDJDM0RFMkNCQjhFRjE1MUYxNzlC ODU3RTkzNzZFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCEUF/7Mxdf8MgjVHvIVVDMrurafP8Qkpvl mMK0TyRgBWCPOZ/mxr/Fatu3ZXL8k2XbygJnnoxHID5XmYythj8VoUjiibiUt/03 x5OJAD9vIcUS5+ApfVFGN6cDYkUy8xw3I8t7g7l0wRz5OKD17SYm01iWHoToCVqj 2ZL+ECbiSefRFg4ioG+lSR1JT7sTcZOdFaeBa1u0X6HSNSv5CP0oSM6x1G7ic3U5 zLfZJ4LIVqi6xBGS6pMldwHMiUSIMIdBOGbe/jhZYTfi+R1ZRKqedZGi84NMzlZk O6J38QJYYK2sgQQBD3c0npbJ4iNvxOLCKhbXf54tLz3vbblq9vs= -----END CERTIFICATE-----Generated at Sat Jun 7 04:28:30 2025 by rpki-client