$ rpki-client -vvf repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft File: B2D1CBD015A419010845E6F56D8385C8647B5390.mft (raw, json) Hash identifier: SzvztT1uxozM4HwqPGvcId8zsnGqGud8c48oO07fqho= Subject key identifier: B3:A6:21:7B:50:F1:95:F6:52:5A:E7:01:29:02:B9:4A:10:AF:91:3B Authority key identifier: B2:D1:CB:D0:15:A4:19:01:08:45:E6:F5:6D:83:85:C8:64:7B:53:90 Certificate issuer: /CN=B2D1CBD015A419010845E6F56D8385C8647B5390 Certificate serial: 230E6BD107EA925868971C628E40BB91B8CE3680 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft Manifest number: 028B Signing time: Sun 01 Jun 2025 22:32:02 +0000 Manifest this update: Sun 01 Jun 2025 22:27:02 +0000 Manifest next update: Thu 05 Jun 2025 08:02:02 +0000 Files and hashes: 1: 3130332e3135332e3133352e302f32342d3234203d3e20313430343634.roa (hash: WsmI0rdfXmL0fWdst11niyZhvNmKpEwJDzCH1ijVhS8=) 2: 323430363a343534303a3a2f33322d3332203d3e20313430343634.roa (hash: zD3MmvWg8/hnp1isGEqEx8GCf/Gya3epsj8OBSoizYQ=) 3: 3130332e3135332e3133342e302f32342d3234203d3e20313430343634.roa (hash: cW/9D7f3rSD1Wd+uYOFJYajDwTDUi1FLo5623123rGc=) 4: 3130332e3135332e3133342e302f32332d3233203d3e20313430343634.roa (hash: cPwdxx5hPy0Al9znnfs7+/9F2Ic938FTNbuxG5Z3xhY=) 5: B2D1CBD015A419010845E6F56D8385C8647B5390.crl (hash: WOyOimL8OCzqdg5piuZ2gxrPnmPm7/V48atph+t7BUc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.crl rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 08:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:0e:6b:d1:07:ea:92:58:68:97:1c:62:8e:40:bb:91:b8:ce:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2D1CBD015A419010845E6F56D8385C8647B5390 Validity Not Before: Jun 1 22:27:02 2025 GMT Not After : Jun 5 08:02:02 2025 GMT Subject: CN=B3A6217B50F195F6525AE7012902B94A10AF913B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:78:92:4b:47:5e:1b:4c:a5:bc:55:49:7f:a7: d5:b7:ba:75:d6:68:bc:78:6e:a1:8c:e4:1b:85:7b: c6:0b:c5:f7:10:d2:2d:92:de:d8:94:4b:b0:16:06: e1:9b:fe:28:9e:ab:28:3f:91:b6:9c:57:de:9e:71: d3:a3:51:08:a7:7d:b2:72:81:82:fa:24:fd:f7:ee: 5c:6d:1c:03:8f:43:b9:00:96:10:2f:e8:64:f8:22: a8:98:47:25:cb:7a:5b:30:88:f7:4d:87:8a:84:a2: 1a:ed:8b:35:fd:d2:3f:3d:f8:29:ad:18:a1:1e:e4: a3:61:ff:ab:ca:66:24:8d:42:69:37:3f:07:e8:10: fd:04:9b:33:fe:31:f8:f4:ae:9d:58:67:ef:97:ca: 04:40:cf:cd:bf:7b:05:e7:58:74:c8:61:eb:48:55: ed:60:a2:d6:71:2a:a4:70:6a:35:9e:35:ea:df:80: dd:cc:2d:ce:8b:cb:53:de:ec:94:29:69:bc:20:5e: a1:82:62:b2:61:0d:aa:d3:1a:b9:d6:9b:3d:4c:d0: 22:28:be:ed:a2:4f:0e:8a:85:8e:92:62:6b:cc:d2: 41:e0:5c:76:70:61:ed:fa:8d:56:f1:4e:c5:b7:ca: f1:ef:b9:1b:e4:e2:bc:15:ff:08:3a:7a:35:fb:c8: a2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A6:21:7B:50:F1:95:F6:52:5A:E7:01:29:02:B9:4A:10:AF:91:3B X509v3 Authority Key Identifier: keyid:B2:D1:CB:D0:15:A4:19:01:08:45:E6:F5:6D:83:85:C8:64:7B:53:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:66:f7:2e:30:d9:6e:3e:88:14:86:32:eb:b6:ca:0b:1c:1f: 3c:27:b6:e6:43:b1:a5:41:c3:a8:0c:f3:e3:1a:e5:06:dc:c0: b2:7e:3f:d8:c0:9c:26:20:3b:8b:e3:9e:45:1d:78:d8:c2:39: 19:07:6c:3b:c7:30:8d:9e:10:3f:d3:94:72:4d:fa:0a:70:9e: d6:a0:9d:b7:af:47:45:8c:9e:2f:41:8b:7c:c9:a1:6c:9b:3e: af:d6:1b:92:8c:6a:c2:1d:a0:ec:17:58:d1:fd:1a:5a:ed:ed: ac:55:fe:36:cd:a9:39:33:81:26:ac:59:6a:64:51:cb:fc:35: 85:fa:1e:7f:f6:a3:bf:de:3d:0e:cf:b9:71:55:e7:fd:26:17: 1b:fc:30:e9:c2:aa:f7:dd:da:50:f6:e0:a6:0c:40:d6:c1:f6: 76:b5:73:a4:9a:cc:62:de:cd:b9:9c:7c:fb:4c:ba:1b:a5:22: 05:32:fe:87:79:bf:2c:8a:86:63:8f:ff:bd:50:b7:43:e6:32: bb:a7:4d:ed:cb:00:79:97:51:98:5a:35:c0:e1:81:5b:db:c1: fa:db:a8:bd:9a:4e:74:67:46:60:dd:31:42:15:14:cc:f4:90: e3:a9:f0:9e:13:c1:42:b2:c0:be:d5:3e:50:27:bf:c6:63:df: 55:bc:e6:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIw5r0QfqklholxxijkC7kbjONoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1Qzg2 NDdCNTM5MDAeFw0yNTA2MDEyMjI3MDJaFw0yNTA2MDUwODAyMDJaMDMxMTAvBgNV BAMTKEIzQTYyMTdCNTBGMTk1RjY1MjVBRTcwMTI5MDJCOTRBMTBBRjkxM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMeJJLR14bTKW8VUl/p9W3unXW aLx4bqGM5BuFe8YLxfcQ0i2S3tiUS7AWBuGb/iieqyg/kbacV96ecdOjUQinfbJy gYL6JP337lxtHAOPQ7kAlhAv6GT4IqiYRyXLelswiPdNh4qEohrtizX90j89+Cmt GKEe5KNh/6vKZiSNQmk3PwfoEP0EmzP+Mfj0rp1YZ++XygRAz82/ewXnWHTIYetI Ve1gotZxKqRwajWeNerfgN3MLc6Ly1Pe7JQpabwgXqGCYrJhDarTGrnWmz1M0CIo vu2iTw6KhY6SYmvM0kHgXHZwYe36jVbxTsW3yvHvuRvk4rwV/wg6ejX7yKJLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs6Yhe1DxlfZSWucBKQK5ShCvkTswHwYDVR0j BBgwFoAUstHL0BWkGQEIReb1bYOFyGR7U5AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjhiZTkwNS1mMjk2LTQ1ZDEtYTg3OS00YTRkZTUyY2IyZDYvMC9CMkQxQ0JEMDE1 QTQxOTAxMDg0NUU2RjU2RDgzODVDODY0N0I1MzkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1Qzg2NDdC NTM5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4YmU5MDUtZjI5Ni00NWQxLWE4 NzktNGE0ZGU1MmNiMmQ2LzAvQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1 Qzg2NDdCNTM5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJm9y4w2W4+iBSGMuu2ygscHzwntuZDsaVB w6gM8+Ma5QbcwLJ+P9jAnCYgO4vjnkUdeNjCORkHbDvHMI2eED/TlHJN+gpwntag nbevR0WMni9Bi3zJoWybPq/WG5KMasIdoOwXWNH9Glrt7axV/jbNqTkzgSasWWpk Ucv8NYX6Hn/2o7/ePQ7PuXFV5/0mFxv8MOnCqvfd2lD24KYMQNbB9na1c6SazGLe zbmcfPtMuhulIgUy/od5vyyKhmOP/71Qt0PmMrunTe3LAHmXUZhaNcDhgVvbwfrb qL2aTnRnRmDdMUIVFMz0kOOp8J4TwUKywL7VPlAnv8Zj31W85pY= -----END CERTIFICATE-----Generated at Tue Jun 3 23:19:10 2025 by rpki-client