$ rpki-client -vvf repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft File: B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft (raw, json) Hash identifier: EzKOTFdlc0eUcHDCkh6mW53M3fmNJ88onj/DrHHa+PQ= Subject key identifier: 03:1B:07:B4:94:01:9E:38:63:5F:EA:CA:B6:C0:F2:F4:24:57:1D:A5 Authority key identifier: B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6 Certificate issuer: /CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6 Certificate serial: 5EF296A4E893123A3907B7BA3968608B2CF978D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft Manifest number: B0 Signing time: Fri 06 Jun 2025 21:01:56 +0000 Manifest this update: Fri 06 Jun 2025 20:56:56 +0000 Manifest next update: Mon 09 Jun 2025 23:51:56 +0000 Files and hashes: 1: 3130332e372e3130362e302f32342d3234203d3e20313531353939.roa (hash: 0rbZlrsZPTaqVhI90ea5Mcg8UbhZvU1fUTVZXNAKo74=) 2: B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl (hash: 939Q0tALynSIopNF4pDvmzmliVKOPEX9ESFwvvI+wUY=) 3: 3130332e372e3130372e302f32342d3234203d3e20313531353939.roa (hash: ZOp7UUJVVpn+HE+2CW6AOz2wc15ptx3FxJXIlhX1FTo=) 4: 3130332e372e3130362e302f32332d3233203d3e20313531353939.roa (hash: gKuzS0cjEmgd3PQlr3qETih9wH6v1uECgkfmF5qpn9s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 23:51:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:f2:96:a4:e8:93:12:3a:39:07:b7:ba:39:68:60:8b:2c:f9:78:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6 Validity Not Before: Jun 6 20:56:56 2025 GMT Not After : Jun 9 23:51:56 2025 GMT Subject: CN=031B07B494019E38635FEACAB6C0F2F424571DA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:88:a4:d4:89:7f:9c:c4:a9:1e:95:e3:2d:1e: 64:62:a5:b5:f1:c9:5e:4b:e8:ed:b2:a3:c8:63:a1: ff:55:dc:77:a2:b3:8c:eb:45:ca:3d:26:b7:6f:27: 75:d9:4e:94:8e:39:a7:23:58:5e:ce:ea:a0:56:a2: 2c:7f:6c:89:a1:a6:4a:02:30:04:33:cf:d8:8c:fc: f0:b4:2c:10:5a:cd:27:96:36:dd:bf:0e:6a:79:f0: 64:b2:1a:13:5d:83:a7:cd:3f:bc:90:0d:c0:78:28: 7e:f4:86:4b:90:5f:8a:d4:b5:6f:8d:4f:c4:d1:f1: 17:0f:7b:91:62:77:a8:ed:b2:91:19:c7:05:a1:1e: 2f:79:b0:69:91:76:19:a7:37:50:4c:0a:0e:0d:0e: f9:b8:67:29:aa:81:4c:0c:6b:c7:a5:cd:0e:27:d2: 3e:e4:94:63:6b:be:53:47:d5:1c:ab:ca:a9:29:2b: 99:b4:b4:5c:3f:8c:64:47:d9:67:15:18:3e:65:f0: 71:36:7c:16:b6:47:5c:bf:a2:01:9e:a7:2a:c3:63: 28:a4:d5:94:31:00:2e:09:73:cb:32:fe:07:29:e0: 3e:a2:a0:cf:88:90:f2:cc:82:c7:86:c4:0a:13:c3: 43:7b:f6:68:ae:08:dd:2c:1c:a0:95:06:2d:d2:ed: 15:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:1B:07:B4:94:01:9E:38:63:5F:EA:CA:B6:C0:F2:F4:24:57:1D:A5 X509v3 Authority Key Identifier: keyid:B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:0e:a1:ad:b5:57:27:d6:33:ca:8e:cc:9d:b6:26:64:9e:2a: ca:04:58:b0:04:ff:d0:10:dd:df:09:18:2a:00:eb:21:c6:da: bc:65:70:b4:44:7c:e5:14:5f:58:3d:2b:56:23:58:d7:8e:2f: e0:b2:22:cf:c3:e3:91:db:84:1f:6b:21:4a:ea:94:73:1e:85: e1:bc:a7:f9:bf:b3:d0:3b:ea:12:a4:01:0f:78:8d:34:4e:fb: de:f0:82:d8:c3:ee:95:6b:fe:3e:e1:65:dc:19:dc:89:a4:d0: 8c:c2:98:4d:d4:77:fe:aa:ab:53:53:57:f4:e7:69:e6:58:e1: 6d:d9:83:d5:4c:97:3b:ee:55:74:5d:2c:ff:71:72:49:c7:21: 54:0a:0a:19:de:59:82:0e:0d:0e:0f:05:b7:18:51:e3:66:63: da:2b:de:a4:49:4f:8a:77:f7:6c:15:1e:66:50:b9:31:71:ad: 47:ec:e9:25:be:70:ae:51:17:61:c8:4d:5c:0a:68:6b:1d:40: 4e:24:a0:db:e2:18:86:6c:74:c2:0f:80:f9:d3:48:8f:d4:5a: ed:13:0b:79:16:d0:1a:95:9d:0b:93:4c:53:b7:a9:29:e0:d6: 6e:a5:f9:2e:44:16:11:70:8a:a6:f6:2c:3d:e6:5f:fe:6a:f6: 63:00:b7:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXvKWpOiTEjo5B7e6OWhgiyz5eNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZBMTM2 MEMwNkFGNjAeFw0yNTA2MDYyMDU2NTZaFw0yNTA2MDkyMzUxNTZaMDMxMTAvBgNV BAMTKDAzMUIwN0I0OTQwMTlFMzg2MzVGRUFDQUI2QzBGMkY0MjQ1NzFEQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXiKTUiX+cxKkeleMtHmRipbXx yV5L6O2yo8hjof9V3Heis4zrRco9JrdvJ3XZTpSOOacjWF7O6qBWoix/bImhpkoC MAQzz9iM/PC0LBBazSeWNt2/Dmp58GSyGhNdg6fNP7yQDcB4KH70hkuQX4rUtW+N T8TR8RcPe5Fid6jtspEZxwWhHi95sGmRdhmnN1BMCg4NDvm4ZymqgUwMa8elzQ4n 0j7klGNrvlNH1RyryqkpK5m0tFw/jGRH2WcVGD5l8HE2fBa2R1y/ogGepyrDYyik 1ZQxAC4Jc8sy/gcp4D6ioM+IkPLMgseGxAoTw0N79miuCN0sHKCVBi3S7RVjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAxsHtJQBnjhjX+rKtsDy9CRXHaUwHwYDVR0j BBgwFoAUsXhAK+3j7Fpe4uDnH3NqE2DAavYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTEyNGU2YS1mNTFiLTQ2ZDAtOGVhMy03NmIyNzQ0NTU4YTYvMC9CMTc4NDAyQkVE RTNFQzVBNUVFMkUwRTcxRjczNkExMzYwQzA2QUY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZBMTM2MEMw NkFGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ExMjRlNmEtZjUxYi00NmQwLThl YTMtNzZiMjc0NDU1OGE2LzAvQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZB MTM2MEMwNkFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHsOoa21VyfWM8qOzJ22JmSeKsoEWLAE/9AQ 3d8JGCoA6yHG2rxlcLREfOUUX1g9K1YjWNeOL+CyIs/D45HbhB9rIUrqlHMeheG8 p/m/s9A76hKkAQ94jTRO+97wgtjD7pVr/j7hZdwZ3Imk0IzCmE3Ud/6qq1NTV/Tn aeZY4W3Zg9VMlzvuVXRdLP9xcknHIVQKChneWYIODQ4PBbcYUeNmY9or3qRJT4p3 92wVHmZQuTFxrUfs6SW+cK5RF2HITVwKaGsdQE4koNviGIZsdMIPgPnTSI/UWu0T C3kW0BqVnQuTTFO3qSng1m6l+S5EFhFwiqb2LD3mX/5q9mMAt3w= -----END CERTIFICATE-----Generated at Sat Jun 7 23:59:50 2025 by rpki-client