$ rpki-client -vvf repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft File: 0BB3D1874063172B5374865233070332233FB7B3.mft (raw, json) Hash identifier: C92d9eCdcKucl8bXZfbCovzlIepE2jA7+LDboJCqxpU= Subject key identifier: B6:EA:85:1A:F6:71:5F:A6:C9:87:9D:A4:E6:D5:AE:8B:A1:A4:82:AA Authority key identifier: 0B:B3:D1:87:40:63:17:2B:53:74:86:52:33:07:03:32:23:3F:B7:B3 Certificate issuer: /CN=0BB3D1874063172B5374865233070332233FB7B3 Certificate serial: 1549024A299CEEA8A8211A8463B3EE456EC281AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB3D1874063172B5374865233070332233FB7B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft Manifest number: 04BC Signing time: Sat 05 Apr 2025 06:41:24 +0000 Manifest this update: Sat 05 Apr 2025 06:36:23 +0000 Manifest next update: Tue 08 Apr 2025 13:13:23 +0000 Files and hashes: 1: 3131372e3130342e3139322e302f31392d3234203d3e203233363636.roa (hash: deuwaG7mQV3WigL7u2AYxi8J4Q7QOGG4WxOsWxSJZyY=) 2: 0BB3D1874063172B5374865233070332233FB7B3.crl (hash: CH9+agjZlM2eqwwEMPLqkccm+U6JAVsBhs73KLXa4OU=) 3: 3230322e3135332e31362e302f32302d3234203d3e203233363636.roa (hash: lIHJiBrhgAwGzmgzYvKE6r/2yrga6HsryWNAwmBg8SQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.crl rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB3D1874063172B5374865233070332233FB7B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 13:13:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:49:02:4a:29:9c:ee:a8:a8:21:1a:84:63:b3:ee:45:6e:c2:81:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BB3D1874063172B5374865233070332233FB7B3 Validity Not Before: Apr 5 06:36:23 2025 GMT Not After : Apr 8 13:13:23 2025 GMT Subject: CN=B6EA851AF6715FA6C9879DA4E6D5AE8BA1A482AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:87:d1:7b:3e:c9:8e:b1:3e:ec:77:93:02:82: a6:f9:35:30:b1:9c:34:42:78:89:75:5b:cd:b3:ce: 70:f8:f2:ae:02:42:2c:1d:64:16:85:47:b4:0c:72: f9:ce:0d:69:45:5c:87:1d:ba:e3:91:ee:0e:60:78: 86:5c:8f:37:b3:83:5f:6f:f2:2a:6a:30:1f:d7:7c: 5f:e5:6d:7e:b5:21:dd:01:ef:8d:48:3c:66:89:cc: b8:63:38:fe:52:26:2a:4b:4a:8d:1a:b9:24:51:30: 53:4e:d8:61:9d:e8:27:a0:35:96:38:16:af:6f:f3: b2:d7:5f:f4:5d:56:9f:3b:8b:0a:9b:56:bf:83:14: 3a:c1:9d:53:78:99:be:11:15:50:e0:5b:30:f3:b6: 49:38:85:20:b8:2e:24:ee:de:ec:23:65:0e:ae:79: a7:01:cd:c5:a7:20:97:ef:c1:ac:b3:83:d7:cf:a0: 5d:f5:35:5c:08:d4:d9:90:82:de:c0:e5:91:98:82: 07:f9:2a:13:b8:18:25:83:cc:69:f3:f5:c0:d6:11: b0:a2:dc:a5:2c:07:fe:bc:a0:42:de:a4:b6:b2:20: 4d:12:a6:73:61:78:3b:fd:ae:1c:ff:62:d2:c4:90: 54:07:5c:1e:47:c2:0b:03:fe:ef:25:af:0b:41:de: 44:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:EA:85:1A:F6:71:5F:A6:C9:87:9D:A4:E6:D5:AE:8B:A1:A4:82:AA X509v3 Authority Key Identifier: keyid:0B:B3:D1:87:40:63:17:2B:53:74:86:52:33:07:03:32:23:3F:B7:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB3D1874063172B5374865233070332233FB7B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:63:39:3a:ef:41:2e:af:22:c9:48:3a:90:52:07:ae:72:30: 61:65:93:ae:32:a7:63:a8:2c:33:d0:09:22:4b:4b:26:de:f0: c4:fd:9f:a0:69:f8:96:4e:68:2d:f3:32:c2:71:a5:c3:12:19: a5:ca:5c:a1:bd:7e:d4:c4:34:c6:fc:ae:30:78:44:d2:a9:82: 50:b0:0b:4e:7d:df:b0:c3:2e:29:a1:76:90:77:cd:bd:21:cb: 29:86:ed:65:40:50:8f:58:02:8f:fd:90:66:fb:bf:ec:d7:9f: 31:93:09:55:6c:e9:5d:2f:bd:7b:55:71:66:32:30:aa:74:dc: d9:9f:48:c6:f0:fe:19:df:83:06:af:5d:57:35:91:f2:c1:54: b0:ad:aa:66:2e:cd:e9:52:71:b9:18:38:ff:c6:a5:28:73:19: 82:7a:c2:e1:fb:c8:9b:38:3b:f3:0a:80:3c:d4:12:9f:90:2e: 2f:c4:14:04:38:b4:69:6a:f9:7a:f2:5a:e1:ad:1b:7f:01:dc: 87:f5:f7:39:7c:2d:07:32:99:b3:ad:2d:dd:d6:a2:5d:90:d9: 73:1d:4a:c6:7d:06:25:fb:73:a1:7f:66:36:fe:d2:e0:f5:26: 1b:fb:df:ea:d3:c2:e8:a6:ae:d0:fe:66:1b:28:69:ad:a8:90: 4d:70:eb:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFUkCSimc7qioIRqEY7PuRW7CgaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJCM0QxODc0MDYzMTcyQjUzNzQ4NjUyMzMwNzAzMzIy MzNGQjdCMzAeFw0yNTA0MDUwNjM2MjNaFw0yNTA0MDgxMzEzMjNaMDMxMTAvBgNV BAMTKEI2RUE4NTFBRjY3MTVGQTZDOTg3OURBNEU2RDVBRThCQTFBNDgyQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEh9F7PsmOsT7sd5MCgqb5NTCx nDRCeIl1W82zznD48q4CQiwdZBaFR7QMcvnODWlFXIcduuOR7g5geIZcjzezg19v 8ipqMB/XfF/lbX61Id0B741IPGaJzLhjOP5SJipLSo0auSRRMFNO2GGd6CegNZY4 Fq9v87LXX/RdVp87iwqbVr+DFDrBnVN4mb4RFVDgWzDztkk4hSC4LiTu3uwjZQ6u eacBzcWnIJfvwayzg9fPoF31NVwI1NmQgt7A5ZGYggf5KhO4GCWDzGnz9cDWEbCi 3KUsB/68oELepLayIE0SpnNheDv9rhz/YtLEkFQHXB5HwgsD/u8lrwtB3kQ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtuqFGvZxX6bJh52k5tWui6GkgqowHwYDVR0j BBgwFoAUC7PRh0BjFytTdIZSMwcDMiM/t7MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTkwOGI4My03ZjQ0LTQ2ZTAtODUzNS02ZmI4NGI1OWQ1OGEvMC8wQkIzRDE4NzQw NjMxNzJCNTM3NDg2NTIzMzA3MDMzMjIzM0ZCN0IzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEJCM0QxODc0MDYzMTcyQjUzNzQ4NjUyMzMwNzAzMzIyMzNG QjdCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU5MDhiODMtN2Y0NC00NmUwLTg1 MzUtNmZiODRiNTlkNThhLzAvMEJCM0QxODc0MDYzMTcyQjUzNzQ4NjUyMzMwNzAz MzIyMzNGQjdCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI9jOTrvQS6vIslIOpBSB65yMGFlk64yp2Oo LDPQCSJLSybe8MT9n6Bp+JZOaC3zMsJxpcMSGaXKXKG9ftTENMb8rjB4RNKpglCw C05937DDLimhdpB3zb0hyymG7WVAUI9YAo/9kGb7v+zXnzGTCVVs6V0vvXtVcWYy MKp03NmfSMbw/hnfgwavXVc1kfLBVLCtqmYuzelScbkYOP/GpShzGYJ6wuH7yJs4 O/MKgDzUEp+QLi/EFAQ4tGlq+XryWuGtG38B3If19zl8LQcymbOtLd3Wol2Q2XMd SsZ9BiX7c6F/Zjb+0uD1Jhv73+rTwuimrtD+Zhsoaa2okE1w65U= -----END CERTIFICATE-----Generated at Sun Apr 6 11:08:23 2025 by rpki-client