$ rpki-client -vvf repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft File: B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft (raw, json) Hash identifier: nOjJlsLO6uJ5LxVdb3uuh6MhuQOjYOhjCIutfqfxvHA= Subject key identifier: D4:8F:9D:05:A1:6A:80:4E:2F:C8:21:E7:C9:62:B8:A4:7E:FE:99:63 Authority key identifier: B7:6C:EE:66:CD:32:9E:4E:DD:33:E6:D3:45:2A:33:FB:BE:00:D7:41 Certificate issuer: /CN=B76CEE66CD329E4EDD33E6D3452A33FBBE00D741 Certificate serial: 198487D8FB0C867ECF40CA60AFB5030969D04C27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft Manifest number: 01F6 Signing time: Mon 02 Jun 2025 03:10:51 +0000 Manifest this update: Mon 02 Jun 2025 03:05:51 +0000 Manifest next update: Thu 05 Jun 2025 14:16:51 +0000 Files and hashes: 1: B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.crl (hash: BovSCRSwrlzGO/O7OmsTVZlaY5PUhpW4hQEnnmPvQPw=) 2: 3130332e3138362e39342e302f32332d3234203d3e20313439373430.roa (hash: 36f1oVCDIma5/edGeBmPtM2U4zeHtnBlVDsNRr5sez8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.crl rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 14:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:84:87:d8:fb:0c:86:7e:cf:40:ca:60:af:b5:03:09:69:d0:4c:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B76CEE66CD329E4EDD33E6D3452A33FBBE00D741 Validity Not Before: Jun 2 03:05:51 2025 GMT Not After : Jun 5 14:16:51 2025 GMT Subject: CN=D48F9D05A16A804E2FC821E7C962B8A47EFE9963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1b:2e:6c:4d:18:db:e5:4a:3a:1e:b0:88:50: b9:c0:de:22:31:c6:e4:d0:e7:b4:26:54:3f:b0:b2: f8:42:82:2c:83:35:00:01:02:86:5e:90:b7:ce:bc: 78:76:ff:eb:dc:96:d0:10:f2:5a:cd:81:12:33:1c: af:bf:48:2a:9a:87:ef:fe:fd:f8:f8:32:fb:85:73: 91:98:bc:e3:db:01:be:aa:bc:13:48:63:ec:47:d0: 07:10:3d:99:95:45:68:57:c7:1c:30:a0:d0:c2:40: 88:49:22:38:9c:a1:fe:8b:b8:3e:0e:21:99:49:1d: 9d:ff:f8:32:f8:1c:a5:1e:ef:01:8c:10:35:ad:f2: c3:1e:a1:9b:58:67:24:2a:ab:d4:b8:32:b2:81:fd: 4b:2d:70:67:5a:2c:26:83:f6:6e:bc:8c:75:e0:da: f8:5f:7e:02:f3:47:20:5b:36:71:0f:6a:a2:a6:74: 85:60:1b:7d:5e:e1:e5:46:fa:14:15:a8:dd:b0:ea: 42:32:7a:b6:16:82:c9:8f:bc:fb:0a:01:76:04:17: 1a:21:4c:3d:9e:ac:0f:09:1d:63:38:c1:54:92:77: a3:bd:ec:d6:2e:01:60:aa:74:53:77:62:a5:e7:a0: 76:b7:29:4c:d2:4d:7f:59:ea:e1:5e:b7:f0:53:40: 19:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:8F:9D:05:A1:6A:80:4E:2F:C8:21:E7:C9:62:B8:A4:7E:FE:99:63 X509v3 Authority Key Identifier: keyid:B7:6C:EE:66:CD:32:9E:4E:DD:33:E6:D3:45:2A:33:FB:BE:00:D7:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:5d:41:ad:1e:95:9f:89:e1:0c:94:6a:4a:e4:44:6a:70:a8: 38:e2:36:d7:03:41:a9:3d:65:aa:b4:73:e8:d3:45:6a:a1:dd: c8:ad:c5:d6:97:39:c3:f0:10:8d:fd:e7:f7:59:c7:c8:af:6f: 1f:c5:0e:a4:57:e0:1a:9d:62:fd:08:5c:fe:b2:d9:bd:dd:f4: 57:ee:80:c9:0d:ca:ad:3b:29:c0:34:7f:06:94:61:65:08:f6: f3:9b:a5:dc:a3:9a:79:92:09:11:a8:8d:47:8d:8e:1b:59:ff: 4a:b1:71:2e:81:33:98:7d:21:b2:f8:fa:20:a3:e8:91:47:7d: 74:d3:04:9a:e8:fc:b0:2d:a6:2d:4c:62:99:2a:67:04:f4:3f: 30:27:c3:0e:71:aa:ab:4c:ee:b1:cb:e7:61:75:ab:5f:bf:02: 8d:33:77:6d:86:39:ca:cd:9e:d1:1e:1f:4a:29:62:fd:98:d2: 3e:43:8a:d0:01:cd:11:2d:c1:ee:d6:fb:d4:c9:3d:30:d2:3c: 3e:32:2a:42:d6:e2:11:dc:ac:00:23:cd:33:7c:8f:a6:ea:3d: 3f:cc:c9:53:a2:ec:79:ce:ab:8e:03:12:93:18:db:68:b5:4b: d3:f0:4c:ba:d2:9f:26:d0:66:95:89:72:0b:2d:eb:e0:7d:a4: a5:0b:8f:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGYSH2PsMhn7PQMpgr7UDCWnQTCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc2Q0VFNjZDRDMyOUU0RUREMzNFNkQzNDUyQTMzRkJC RTAwRDc0MTAeFw0yNTA2MDIwMzA1NTFaFw0yNTA2MDUxNDE2NTFaMDMxMTAvBgNV BAMTKEQ0OEY5RDA1QTE2QTgwNEUyRkM4MjFFN0M5NjJCOEE0N0VGRTk5NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Gy5sTRjb5Uo6HrCIULnA3iIx xuTQ57QmVD+wsvhCgiyDNQABAoZekLfOvHh2/+vcltAQ8lrNgRIzHK+/SCqah+/+ /fj4MvuFc5GYvOPbAb6qvBNIY+xH0AcQPZmVRWhXxxwwoNDCQIhJIjicof6LuD4O IZlJHZ3/+DL4HKUe7wGMEDWt8sMeoZtYZyQqq9S4MrKB/UstcGdaLCaD9m68jHXg 2vhffgLzRyBbNnEPaqKmdIVgG31e4eVG+hQVqN2w6kIyerYWgsmPvPsKAXYEFxoh TD2erA8JHWM4wVSSd6O97NYuAWCqdFN3YqXnoHa3KUzSTX9Z6uFet/BTQBmfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1I+dBaFqgE4vyCHnyWK4pH7+mWMwHwYDVR0j BBgwFoAUt2zuZs0ynk7dM+bTRSoz+74A10EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjdiNzY3Ny02MjA0LTQwNWYtOGJhMi1lNzE0MzI0YzE1ZDcvMC9CNzZDRUU2NkNE MzI5RTRFREQzM0U2RDM0NTJBMzNGQkJFMDBENzQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjc2Q0VFNjZDRDMyOUU0RUREMzNFNkQzNDUyQTMzRkJCRTAw RDc0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y3Yjc2NzctNjIwNC00MDVmLThi YTItZTcxNDMyNGMxNWQ3LzAvQjc2Q0VFNjZDRDMyOUU0RUREMzNFNkQzNDUyQTMz RkJCRTAwRDc0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHddQa0elZ+J4QyUakrkRGpwqDjiNtcDQak9 Zaq0c+jTRWqh3citxdaXOcPwEI395/dZx8ivbx/FDqRX4BqdYv0IXP6y2b3d9Ffu gMkNyq07KcA0fwaUYWUI9vObpdyjmnmSCRGojUeNjhtZ/0qxcS6BM5h9IbL4+iCj 6JFHfXTTBJro/LAtpi1MYpkqZwT0PzAnww5xqqtM7rHL52F1q1+/Ao0zd22GOcrN ntEeH0opYv2Y0j5DitABzREtwe7W+9TJPTDSPD4yKkLW4hHcrAAjzTN8j6bqPT/M yVOi7HnOq44DEpMY22i1S9PwTLrSnybQZpWJcgst6+B9pKULj0E= -----END CERTIFICATE-----Generated at Tue Jun 3 23:17:53 2025 by rpki-client