$ rpki-client -vvf repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft File: B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft (raw, json) Hash identifier: 9o1kOjO7XaymBlVKQKQt9JlrmRitQf8xlZYlzuMpuDs= Subject key identifier: 29:FE:08:74:5F:DF:52:B6:2B:B0:02:2E:2E:D8:A9:C1:22:63:67:73 Authority key identifier: B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C Certificate issuer: /CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C Certificate serial: 0EF7E0B63E0837E8FA1810B19E41D8B2561B55DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft Manifest number: 01EC Signing time: Thu 05 Jun 2025 04:12:11 +0000 Manifest this update: Thu 05 Jun 2025 04:07:11 +0000 Manifest next update: Sun 08 Jun 2025 07:41:11 +0000 Files and hashes: 1: 3130332e3138362e3230322e302f32342d3234203d3e20313439373036.roa (hash: k4Wn7QjCevaLRtjzpZzU9aujDNZ1W8N1HpzN16+qakY=) 2: B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl (hash: XB06Fml2argCe6hDR2jq1+j4gZSrwpxZOFn/xSQ5ziE=) 3: 3130332e3138362e3230332e302f32342d3234203d3e20313439373036.roa (hash: JgDdJ0VL4u8D8+wDznKBSlTRQ0p6opMwZGoPzapaaX4=) 4: 3130332e3138362e3230322e302f32332d3233203d3e20313439373036.roa (hash: YXcPTV7LyiaT/dlRqQiGxAGyQ4A0Km1DyhqBZdphgGs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 07:41:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:f7:e0:b6:3e:08:37:e8:fa:18:10:b1:9e:41:d8:b2:56:1b:55:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C Validity Not Before: Jun 5 04:07:11 2025 GMT Not After : Jun 8 07:41:11 2025 GMT Subject: CN=29FE08745FDF52B62BB0022E2ED8A9C122636773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:79:bf:7e:c3:61:9d:01:22:e0:90:20:d3:28: d2:98:d6:31:4a:9b:05:e7:81:63:e9:26:dd:e1:06: 4a:3d:68:e4:35:d4:53:00:9d:ea:ed:fa:82:c4:b4: 9c:57:f4:5d:9f:b6:72:14:76:b7:c0:28:45:3f:a3: d1:56:5e:1d:73:cf:cc:e8:33:81:b7:43:ec:46:1d: c4:33:0d:ee:74:15:5d:3a:fd:9c:8f:7c:3a:08:3f: ad:44:8d:3e:7e:f1:3c:e2:20:5d:7a:5a:33:58:71: 43:bb:53:ac:47:79:90:0c:81:12:67:78:b9:e1:2c: d3:08:75:0f:dc:01:c0:e9:1f:d7:09:72:d4:42:aa: c8:80:99:e5:39:e3:a9:7c:e3:10:68:bc:d8:c8:77: c6:45:d3:3d:ec:e8:84:64:35:83:8b:b8:2d:a8:a0: 34:a3:fe:80:2a:c8:c7:63:f9:7b:c7:e5:62:81:48: b8:16:22:6a:07:a0:f2:3d:fd:ea:1f:9b:fd:bd:a8: f0:ec:87:95:6f:d1:9f:35:59:48:a8:ab:ae:28:5e: 31:b1:74:be:96:f7:36:5f:d8:6e:a7:f5:c0:7b:e3: d4:9f:ba:9f:16:3c:24:39:d1:33:42:ce:83:d8:cb: 90:66:98:59:55:c2:4e:c3:6b:29:df:5b:17:94:f5: c2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:FE:08:74:5F:DF:52:B6:2B:B0:02:2E:2E:D8:A9:C1:22:63:67:73 X509v3 Authority Key Identifier: keyid:B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:1d:29:15:48:1f:a5:b9:e0:96:75:a6:ee:6b:3a:5c:97:a4: f7:e7:da:dd:fb:ab:c3:5b:c0:a5:bb:7c:aa:79:a1:5d:e4:ff: b5:cd:d8:8a:7b:4f:6d:cb:06:0a:cb:59:0e:9c:c6:66:d8:4d: 2e:bf:2b:8b:82:b3:6a:5a:b4:52:76:6d:2b:55:b3:ec:e8:59: 2e:5c:91:ad:c9:c0:20:32:a3:a0:49:9a:24:ae:71:51:2d:61: 1d:c3:03:fc:dd:e2:f0:84:55:3e:e8:5f:2f:c9:b7:65:32:42: 7d:72:ab:60:32:d8:6b:17:f7:46:5d:cc:56:70:31:52:b2:c4: c2:e4:c6:04:c0:21:62:24:76:29:29:0a:cb:07:d7:e2:1d:7e: ed:d7:dc:35:a2:30:cb:25:11:56:74:4a:25:e3:21:99:7d:07: 5f:33:92:ea:f1:c7:8c:01:72:75:3a:5f:c3:49:64:6a:d3:88: a4:50:d1:47:ca:1e:53:5c:f5:34:e7:65:23:b7:b7:d8:7e:a7: 0b:93:14:8a:c1:44:6f:97:fb:88:cb:0a:8c:cb:25:3d:36:85: 87:aa:c6:ae:26:7d:28:be:47:40:5d:53:13:b6:70:a2:30:41: 65:0e:aa:b4:c0:ec:b6:ad:f3:bc:2b:34:ff:a2:a5:0d:3b:fe: a0:54:74:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDvfgtj4IN+j6GBCxnkHYslYbVd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1RTlG RDIxRkE1QzAeFw0yNTA2MDUwNDA3MTFaFw0yNTA2MDgwNzQxMTFaMDMxMTAvBgNV BAMTKDI5RkUwODc0NUZERjUyQjYyQkIwMDIyRTJFRDhBOUMxMjI2MzY3NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3eb9+w2GdASLgkCDTKNKY1jFK mwXngWPpJt3hBko9aOQ11FMAnert+oLEtJxX9F2ftnIUdrfAKEU/o9FWXh1zz8zo M4G3Q+xGHcQzDe50FV06/ZyPfDoIP61EjT5+8TziIF16WjNYcUO7U6xHeZAMgRJn eLnhLNMIdQ/cAcDpH9cJctRCqsiAmeU546l84xBovNjId8ZF0z3s6IRkNYOLuC2o oDSj/oAqyMdj+XvH5WKBSLgWImoHoPI9/eofm/29qPDsh5Vv0Z81WUioq64oXjGx dL6W9zZf2G6n9cB749Sfup8WPCQ50TNCzoPYy5BmmFlVwk7DaynfWxeU9cLxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKf4IdF/fUrYrsAIuLtipwSJjZ3MwHwYDVR0j BBgwFoAUs0e7pr0Rv8XlX3/zNMFl6f0h+lwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTEwNjgyNy04NjZlLTRhYzMtOGY3OS1hNmUzMjBiMjBkZTcvMC9CMzQ3QkJBNkJE MTFCRkM1RTU1RjdGRjMzNEMxNjVFOUZEMjFGQTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1RTlGRDIx RkE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkxMDY4MjctODY2ZS00YWMzLThm NzktYTZlMzIwYjIwZGU3LzAvQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1 RTlGRDIxRkE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQdKRVIH6W54JZ1pu5rOlyXpPfn2t37q8Nb wKW7fKp5oV3k/7XN2Ip7T23LBgrLWQ6cxmbYTS6/K4uCs2patFJ2bStVs+zoWS5c ka3JwCAyo6BJmiSucVEtYR3DA/zd4vCEVT7oXy/Jt2UyQn1yq2Ay2GsX90ZdzFZw MVKyxMLkxgTAIWIkdikpCssH1+Idfu3X3DWiMMslEVZ0SiXjIZl9B18zkurxx4wB cnU6X8NJZGrTiKRQ0UfKHlNc9TTnZSO3t9h+pwuTFIrBRG+X+4jLCozLJT02hYeq xq4mfSi+R0BdUxO2cKIwQWUOqrTA7Lat87wrNP+ipQ07/qBUdGI= -----END CERTIFICATE-----Generated at Thu Jun 5 18:10:44 2025 by rpki-client