$ rpki-client -vvf repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft File: B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft (raw, json) Hash identifier: X0WldEs4PXcwn7EaGFSZGVPnan8dLz2rGzhluRF4B1o= Subject key identifier: 14:6A:C9:F1:52:C5:69:5D:DA:0A:2F:FE:D8:96:56:26:A7:C7:63:49 Authority key identifier: B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7 Certificate issuer: /CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7 Certificate serial: 37DE7DE7FFE30F9083B02BAA94AEC67468672155 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft Manifest number: 016A Signing time: Sat 07 Jun 2025 19:40:41 +0000 Manifest this update: Sat 07 Jun 2025 19:35:41 +0000 Manifest next update: Tue 10 Jun 2025 22:43:41 +0000 Files and hashes: 1: 3130332e3138352e3139372e302f32342d3234203d3e20313333333535.roa (hash: PjJ5xaEmVECnvYiFxtFmdeDestY/+54rJNs+3F7mqcY=) 2: 3130332e3230392e3133312e302f32342d3234203d3e20313333333535.roa (hash: j+U4AErtYzwumrbJ7yEuFWr2i7wA+4c75xZyRtRhbQ4=) 3: B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl (hash: 2AoK3xZPaze9eHUSAHlDgq9x9bbw97rAuV8vCgdrvpA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 22:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:de:7d:e7:ff:e3:0f:90:83:b0:2b:aa:94:ae:c6:74:68:67:21:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7 Validity Not Before: Jun 7 19:35:41 2025 GMT Not After : Jun 10 22:43:41 2025 GMT Subject: CN=146AC9F152C5695DDA0A2FFED8965626A7C76349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:19:4c:12:1b:f8:25:b6:a4:43:d3:d6:9e:01: 52:d4:95:f9:3b:90:c1:13:71:be:8b:2a:5d:83:b1: 2e:c1:2a:d5:8a:e6:09:22:34:7d:ad:23:2c:80:3f: 76:d1:a2:bb:78:3f:16:5f:b6:d5:df:ec:1e:e5:e6: 9f:97:26:f6:15:72:20:7b:9b:b3:26:8c:53:61:4f: 4e:98:0c:a9:1a:b2:6e:23:58:2c:88:d2:6e:db:ac: 7d:14:6d:53:06:f3:05:76:56:df:17:ac:92:36:ac: 19:c6:57:a2:2d:56:0e:e8:79:62:6c:10:7b:55:a8: 4e:dc:76:86:98:a1:bf:f1:f7:61:57:44:7f:62:05: 52:19:9c:d7:8e:a5:91:a6:56:ac:3e:44:5b:8e:4f: 6c:33:57:9b:8f:97:98:a9:c0:e3:e8:c0:d3:66:85: 2d:89:16:a9:07:76:2a:a9:84:1a:12:4c:77:d0:a7: 59:67:7c:bf:34:ec:f7:be:4e:18:81:f2:2b:f3:97: 6c:b0:e9:17:13:4f:c5:a3:1d:fe:0c:9c:ec:4e:2c: e9:b6:79:87:1f:49:5b:d5:ab:bc:6c:b4:89:fb:fd: 79:de:ca:23:e4:52:85:4d:22:84:fb:58:45:fe:15: 8b:d8:e1:ed:aa:37:bc:14:93:e1:c1:d4:57:6a:d2: ec:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:6A:C9:F1:52:C5:69:5D:DA:0A:2F:FE:D8:96:56:26:A7:C7:63:49 X509v3 Authority Key Identifier: keyid:B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c0:4b:62:b0:30:01:9b:96:b0:6f:ae:6f:32:51:09:19:ad: 9b:3e:bf:c3:db:e1:bd:1c:30:61:11:09:ba:d3:8f:6c:7e:53: 5e:51:ab:5d:d1:f3:1b:e8:57:da:8a:47:36:63:ed:e9:b9:20: b6:b2:0d:6e:42:db:55:7f:6c:b1:29:f7:e7:f3:ab:77:5c:58: e7:84:c8:ba:66:e2:28:5d:10:87:60:4b:5d:f1:26:cc:30:cf: 8d:e1:19:24:b6:6e:7d:bc:9d:8a:5b:b3:cb:7a:60:01:81:ab: 94:1f:8b:40:07:87:3a:88:84:c6:cf:87:33:82:ad:36:16:27: 6c:01:3d:65:d5:f8:d2:a5:6e:24:5f:00:70:92:e3:5c:8e:24: 4e:33:cf:41:4b:b1:27:3a:4e:83:b3:07:c3:e2:0d:38:a2:66: 89:27:16:ec:7d:18:a1:b5:c8:06:3f:4c:15:a2:26:c3:ca:4e: 12:cd:42:dc:0c:a1:4f:d8:58:90:48:18:d2:fd:d1:46:11:b1: 39:fe:37:f9:2b:96:97:be:58:32:37:de:ee:2f:ac:43:31:8b: 89:01:95:47:52:95:b1:5c:89:85:49:70:e8:58:f7:86:57:f1: d0:ce:3e:2d:4a:38:1b:7d:c9:5c:85:4b:ae:44:3d:e1:09:83: e5:f4:aa:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN9595//jD5CDsCuqlK7GdGhnIVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYwQUYz QTgxRkZGNzAeFw0yNTA2MDcxOTM1NDFaFw0yNTA2MTAyMjQzNDFaMDMxMTAvBgNV BAMTKDE0NkFDOUYxNTJDNTY5NUREQTBBMkZGRUQ4OTY1NjI2QTdDNzYzNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeGUwSG/gltqRD09aeAVLUlfk7 kMETcb6LKl2DsS7BKtWK5gkiNH2tIyyAP3bRort4PxZfttXf7B7l5p+XJvYVciB7 m7MmjFNhT06YDKkasm4jWCyI0m7brH0UbVMG8wV2Vt8XrJI2rBnGV6ItVg7oeWJs EHtVqE7cdoaYob/x92FXRH9iBVIZnNeOpZGmVqw+RFuOT2wzV5uPl5ipwOPowNNm hS2JFqkHdiqphBoSTHfQp1lnfL807Pe+ThiB8ivzl2yw6RcTT8WjHf4MnOxOLOm2 eYcfSVvVq7xstIn7/XneyiPkUoVNIoT7WEX+FYvY4e2qN7wUk+HB1Fdq0uynAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFGrJ8VLFaV3aCi/+2JZWJqfHY0kwHwYDVR0j BBgwFoAUub62DNYiTUHzM6B+GCDwrzqB//cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MWY4N2Y1YS1mNmY5LTQ2OGQtODk1ZS0zMTQ0ODdmNWUyNWUvMC9COUJFQjYwQ0Q2 MjI0RDQxRjMzM0EwN0UxODIwRjBBRjNBODFGRkY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYwQUYzQTgx RkZGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjFmODdmNWEtZjZmOS00NjhkLTg5 NWUtMzE0NDg3ZjVlMjVlLzAvQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYw QUYzQTgxRkZGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzAS2KwMAGblrBvrm8yUQkZrZs+v8Pb4b0c MGERCbrTj2x+U15Rq13R8xvoV9qKRzZj7em5ILayDW5C21V/bLEp9+fzq3dcWOeE yLpm4ihdEIdgS13xJswwz43hGSS2bn28nYpbs8t6YAGBq5Qfi0AHhzqIhMbPhzOC rTYWJ2wBPWXV+NKlbiRfAHCS41yOJE4zz0FLsSc6ToOzB8PiDTiiZoknFux9GKG1 yAY/TBWiJsPKThLNQtwMoU/YWJBIGNL90UYRsTn+N/krlpe+WDI33u4vrEMxi4kB lUdSlbFciYVJcOhY94ZX8dDOPi1KOBt9yVyFS65EPeEJg+X0qgA= -----END CERTIFICATE-----Generated at Sun Jun 8 03:56:47 2025 by rpki-client