$ rpki-client -vvf repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft File: B126A372835801BBB738696C56DCF255D032D42F.mft (raw, json) Hash identifier: aCF8LI05bdhvT6dbqgxFgz4lE+DjaDqoQGIub94lgJ0= Subject key identifier: 97:04:C8:FE:A5:07:0E:8A:7C:A5:B8:94:3D:BA:67:D5:99:5E:C7:D6 Authority key identifier: B1:26:A3:72:83:58:01:BB:B7:38:69:6C:56:DC:F2:55:D0:32:D4:2F Certificate issuer: /CN=B126A372835801BBB738696C56DCF255D032D42F Certificate serial: 7C20BF343BC9A5C303FF146AD2B0850A952A03AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft Manifest number: 035A Signing time: Tue 03 Jun 2025 01:24:14 +0000 Manifest this update: Tue 03 Jun 2025 01:19:14 +0000 Manifest next update: Fri 06 Jun 2025 03:08:14 +0000 Files and hashes: 1: 3130332e3136362e33342e302f32332d3234203d3e203137393935.roa (hash: CQWJwi60gRop4QOS7F0vqvaI5MYRHZka0+yE7SAoHY0=) 2: B126A372835801BBB738696C56DCF255D032D42F.crl (hash: FvfJo72ihBMCIHhH8/AYLUJpmhaH/vQ2MWQoR3V1BrI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.crl rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 03:08:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:20:bf:34:3b:c9:a5:c3:03:ff:14:6a:d2:b0:85:0a:95:2a:03:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B126A372835801BBB738696C56DCF255D032D42F Validity Not Before: Jun 3 01:19:14 2025 GMT Not After : Jun 6 03:08:14 2025 GMT Subject: CN=9704C8FEA5070E8A7CA5B8943DBA67D5995EC7D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:66:51:04:34:02:c4:2a:01:ec:b1:19:c3:01: 58:58:ab:76:80:93:7d:74:b7:3c:9a:71:d0:9c:3e: 0d:66:24:74:99:69:26:35:5d:10:bc:0f:b6:74:30: 7e:8d:b4:34:49:01:55:9a:f2:d0:59:63:e9:01:56: 01:ed:f8:92:a5:59:a1:18:5f:6f:54:32:a5:ab:0c: aa:5b:61:ca:20:4f:87:f5:ed:15:8e:86:70:a2:21: 9b:61:b8:9e:2c:ff:3f:1f:e7:80:66:86:0c:f9:dd: a8:fb:93:e8:48:ff:b7:c7:09:b4:b7:e8:80:47:f7: ed:ef:6d:45:42:e9:59:95:c2:a9:5c:73:49:69:b1: 00:2c:99:f5:81:72:9a:9c:7c:e9:b0:c6:7e:fc:6f: bd:7e:01:1c:a9:aa:17:05:bd:ef:44:25:fa:db:4d: 71:2c:5d:61:36:d1:08:cf:55:d6:8b:50:12:e8:ba: ff:e4:76:1e:94:54:b5:4f:9c:4b:c5:d6:6e:7e:db: 62:88:25:fb:ed:ec:0b:cb:36:80:80:91:15:dd:03: cd:8f:d3:9e:06:ae:76:21:0e:38:f0:3e:92:a9:b0: e6:95:09:d7:16:0d:fe:eb:22:db:b7:14:30:b2:80: 66:ef:df:1e:ca:a8:a4:bb:59:92:36:2c:69:87:52: 32:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:04:C8:FE:A5:07:0E:8A:7C:A5:B8:94:3D:BA:67:D5:99:5E:C7:D6 X509v3 Authority Key Identifier: keyid:B1:26:A3:72:83:58:01:BB:B7:38:69:6C:56:DC:F2:55:D0:32:D4:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:66:8c:13:92:99:38:e4:8a:0e:b6:43:cf:47:de:80:ce:dc: 5f:74:67:af:cf:8f:21:a3:9b:a5:ea:da:be:b1:d9:e2:d3:a7: 98:85:a0:18:e7:39:a7:18:7b:70:83:7d:cd:13:75:7b:56:02: 67:94:01:2d:a0:37:57:25:26:30:3c:da:38:ab:0b:e4:c8:c1: 7d:a3:60:cf:80:69:94:1b:69:6e:d2:5c:b0:b4:76:09:6d:1c: e8:b6:c2:0a:4c:f5:91:25:c4:e4:df:d9:35:0c:82:0e:63:98: 73:fe:bc:60:f2:59:8d:f1:cf:bc:bb:cf:00:12:50:2d:7e:3e: 00:74:5d:d5:9b:1f:5c:39:67:18:8a:18:c1:4b:0b:ef:5e:c1: 64:6c:04:e2:3c:2b:5a:c7:86:cc:18:66:44:02:93:44:5e:6b: 1e:b6:b0:fa:61:d1:7b:6e:c2:c1:74:a0:b0:05:91:63:d8:2d: 7f:f7:84:dc:aa:c5:2d:62:56:7e:63:57:15:92:dc:43:23:b3: 1c:9b:de:3d:c3:29:d0:f6:20:8d:ca:7d:00:30:3c:76:c4:f9: de:14:a3:2b:f8:bd:fe:8f:a2:b1:2a:13:21:2c:0c:56:ac:05: 37:51:11:64:68:5b:4a:ed:74:c7:6c:c1:5b:95:0d:9a:5a:b8: b3:1e:5d:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfCC/NDvJpcMD/xRq0rCFCpUqA68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjEyNkEzNzI4MzU4MDFCQkI3Mzg2OTZDNTZEQ0YyNTVE MDMyRDQyRjAeFw0yNTA2MDMwMTE5MTRaFw0yNTA2MDYwMzA4MTRaMDMxMTAvBgNV BAMTKDk3MDRDOEZFQTUwNzBFOEE3Q0E1Qjg5NDNEQkE2N0Q1OTk1RUM3RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ZlEENALEKgHssRnDAVhYq3aA k310tzyacdCcPg1mJHSZaSY1XRC8D7Z0MH6NtDRJAVWa8tBZY+kBVgHt+JKlWaEY X29UMqWrDKpbYcogT4f17RWOhnCiIZthuJ4s/z8f54Bmhgz53aj7k+hI/7fHCbS3 6IBH9+3vbUVC6VmVwqlcc0lpsQAsmfWBcpqcfOmwxn78b71+ARypqhcFve9EJfrb TXEsXWE20QjPVdaLUBLouv/kdh6UVLVPnEvF1m5+22KIJfvt7AvLNoCAkRXdA82P 054GrnYhDjjwPpKpsOaVCdcWDf7rItu3FDCygGbv3x7KqKS7WZI2LGmHUjJZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlwTI/qUHDop8pbiUPbpn1Zlex9YwHwYDVR0j BBgwFoAUsSajcoNYAbu3OGlsVtzyVdAy1C8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDQ0ZjkxOC05MzMyLTQyNTctYjUxMC0zODFjODU5MGZmNTQvMC9CMTI2QTM3Mjgz NTgwMUJCQjczODY5NkM1NkRDRjI1NUQwMzJENDJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjEyNkEzNzI4MzU4MDFCQkI3Mzg2OTZDNTZEQ0YyNTVEMDMy RDQyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA0NGY5MTgtOTMzMi00MjU3LWI1 MTAtMzgxYzg1OTBmZjU0LzAvQjEyNkEzNzI4MzU4MDFCQkI3Mzg2OTZDNTZEQ0Yy NTVEMDMyRDQyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABtmjBOSmTjkig62Q89H3oDO3F90Z6/PjyGj m6Xq2r6x2eLTp5iFoBjnOacYe3CDfc0TdXtWAmeUAS2gN1clJjA82jirC+TIwX2j YM+AaZQbaW7SXLC0dgltHOi2wgpM9ZElxOTf2TUMgg5jmHP+vGDyWY3xz7y7zwAS UC1+PgB0XdWbH1w5ZxiKGMFLC+9ewWRsBOI8K1rHhswYZkQCk0Reax62sPph0Xtu wsF0oLAFkWPYLX/3hNyqxS1iVn5jVxWS3EMjsxyb3j3DKdD2II3KfQAwPHbE+d4U oyv4vf6PorEqEyEsDFasBTdREWRoW0rtdMdswVuVDZpauLMeXW8= -----END CERTIFICATE-----Generated at Tue Jun 3 23:44:13 2025 by rpki-client