$ rpki-client -vvf repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft File: B0AAB728B88975526C1741CCA8673CBC88F7697C.mft (raw, json) Hash identifier: vmI7P9n9XEPtUJfLqBUm3J3id5VZLvEAwpHdTcmcnRM= Subject key identifier: 9D:05:F5:95:5B:EA:C0:3F:6A:A9:3B:1A:3B:63:69:CB:B4:85:AE:F0 Authority key identifier: B0:AA:B7:28:B8:89:75:52:6C:17:41:CC:A8:67:3C:BC:88:F7:69:7C Certificate issuer: /CN=B0AAB728B88975526C1741CCA8673CBC88F7697C Certificate serial: 31A45E150E594AE888746785D2A4DB64679EB5FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft Manifest number: 0379 Signing time: Tue 05 Aug 2025 15:51:14 +0000 Manifest this update: Tue 05 Aug 2025 15:46:14 +0000 Manifest next update: Fri 08 Aug 2025 20:19:14 +0000 Files and hashes: 1: B0AAB728B88975526C1741CCA8673CBC88F7697C.crl (hash: 8IJaroDik6vtpKRpfbVbimeoII/pgTBey4O0Qs5x5WE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.crl rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 20:19:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:a4:5e:15:0e:59:4a:e8:88:74:67:85:d2:a4:db:64:67:9e:b5:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0AAB728B88975526C1741CCA8673CBC88F7697C Validity Not Before: Aug 5 15:46:14 2025 GMT Not After : Aug 8 20:19:14 2025 GMT Subject: CN=9D05F5955BEAC03F6AA93B1A3B6369CBB485AEF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:97:17:67:05:9a:ec:98:40:38:14:ff:f6:0e: a7:33:6b:ff:cb:92:48:22:06:f1:dd:d3:b0:24:b7: 7d:e6:d1:fa:5b:f8:da:9c:fd:66:f0:3b:05:e2:58: ba:45:93:f6:1a:fa:14:bf:25:fd:43:a4:10:7b:1f: b7:d7:9a:6d:d3:5d:5f:9e:a0:2d:94:18:16:01:3c: 32:a9:56:ee:4e:1f:61:6a:da:f7:d8:4e:72:d9:64: 3d:8a:b6:1d:75:ef:df:65:99:6a:89:b7:a5:2b:42: 33:68:d9:80:e5:4e:38:fe:92:2e:7f:42:93:30:c5: ad:90:61:9c:0f:0e:59:43:20:46:1c:e1:c6:34:13: 1d:c9:c2:60:cc:d2:90:77:74:22:f6:a3:24:e3:ff: 94:d3:03:43:60:b0:d2:b9:4f:b2:b3:85:47:10:e1: 4e:87:4c:90:48:40:0e:30:62:cd:e9:79:6e:e5:78: 7b:56:4a:05:3c:3b:0e:b7:a1:62:31:43:fe:55:60: e0:4f:1e:e1:83:b1:a8:20:99:eb:0c:28:62:bc:bc: e7:d5:4d:c0:0c:bf:95:5e:b9:82:22:81:60:44:0f: 25:26:11:df:c9:33:26:44:28:e1:cd:55:8a:8d:9e: 30:2f:ac:dd:62:96:51:25:4a:e3:98:ff:06:fd:53: 4f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:05:F5:95:5B:EA:C0:3F:6A:A9:3B:1A:3B:63:69:CB:B4:85:AE:F0 X509v3 Authority Key Identifier: keyid:B0:AA:B7:28:B8:89:75:52:6C:17:41:CC:A8:67:3C:BC:88:F7:69:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:87:8d:ea:f0:f3:52:ab:f7:73:9d:a0:69:8b:a2:8b:f5:4f: 7c:bb:4e:57:5e:b9:4e:04:7d:49:53:94:d0:6e:4f:9a:5c:d9: 48:e9:b8:bc:cd:25:b3:b3:e2:cb:a9:d0:3e:8b:1f:26:a4:bb: fb:f0:6a:05:fe:ae:79:49:65:4d:d4:4d:1a:ec:96:bc:30:99: 32:1e:12:87:18:7c:cd:6a:b4:c2:ab:67:9b:ef:bc:f8:b1:2f: e8:69:6d:44:48:58:1b:79:30:bb:95:db:46:c4:93:20:f1:91: af:a2:93:70:19:77:e0:db:64:b8:09:35:94:54:e1:74:82:3e: a4:17:c3:90:e6:e3:3e:a7:6c:d9:43:dc:d6:5f:dd:fc:f2:f2: ec:53:87:23:76:d6:a8:e5:9e:4c:3e:0c:68:08:51:fd:77:a4: 24:e1:69:cd:13:09:f4:a9:70:16:af:3c:cf:7a:0e:67:f6:6b: 1f:1d:1b:9f:20:25:4f:40:54:c9:3f:45:c0:1e:71:97:b7:ba: 03:fd:70:22:ae:5b:00:07:f8:9d:d8:2b:65:da:39:6d:94:35: 96:98:aa:60:4b:57:34:be:37:4c:c8:3c:f1:d1:47:ff:f5:7a: fa:c7:ec:0e:cf:a7:31:49:f4:06:8e:46:27:a0:e8:ed:ad:13: 48:ec:5d:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMaReFQ5ZSuiIdGeF0qTbZGeetf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBBQUI3MjhCODg5NzU1MjZDMTc0MUNDQTg2NzNDQkM4 OEY3Njk3QzAeFw0yNTA4MDUxNTQ2MTRaFw0yNTA4MDgyMDE5MTRaMDMxMTAvBgNV BAMTKDlEMDVGNTk1NUJFQUMwM0Y2QUE5M0IxQTNCNjM2OUNCQjQ4NUFFRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDElxdnBZrsmEA4FP/2Dqcza//L kkgiBvHd07Akt33m0fpb+Nqc/WbwOwXiWLpFk/Ya+hS/Jf1DpBB7H7fXmm3TXV+e oC2UGBYBPDKpVu5OH2Fq2vfYTnLZZD2Kth11799lmWqJt6UrQjNo2YDlTjj+ki5/ QpMwxa2QYZwPDllDIEYc4cY0Ex3JwmDM0pB3dCL2oyTj/5TTA0NgsNK5T7KzhUcQ 4U6HTJBIQA4wYs3peW7leHtWSgU8Ow63oWIxQ/5VYOBPHuGDsaggmesMKGK8vOfV TcAMv5VeuYIigWBEDyUmEd/JMyZEKOHNVYqNnjAvrN1illElSuOY/wb9U08BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnQX1lVvqwD9qqTsaO2Npy7SFrvAwHwYDVR0j BBgwFoAUsKq3KLiJdVJsF0HMqGc8vIj3aXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTA1YTFjZS04NDlmLTQxN2MtYjY3My1mZGQzM2YwZDc0NDcvMC9CMEFBQjcyOEI4 ODk3NTUyNkMxNzQxQ0NBODY3M0NCQzg4Rjc2OTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjBBQUI3MjhCODg5NzU1MjZDMTc0MUNDQTg2NzNDQkM4OEY3 Njk3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGUwNWExY2UtODQ5Zi00MTdjLWI2 NzMtZmRkMzNmMGQ3NDQ3LzAvQjBBQUI3MjhCODg5NzU1MjZDMTc0MUNDQTg2NzND QkM4OEY3Njk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH2Hjerw81Kr93OdoGmLoov1T3y7TldeuU4E fUlTlNBuT5pc2UjpuLzNJbOz4sup0D6LHyaku/vwagX+rnlJZU3UTRrslrwwmTIe EocYfM1qtMKrZ5vvvPixL+hpbURIWBt5MLuV20bEkyDxka+ik3AZd+DbZLgJNZRU 4XSCPqQXw5Dm4z6nbNlD3NZf3fzy8uxThyN21qjlnkw+DGgIUf13pCThac0TCfSp cBavPM96Dmf2ax8dG58gJU9AVMk/RcAecZe3ugP9cCKuWwAH+J3YK2XaOW2UNZaY qmBLVzS+N0zIPPHRR//1evrH7A7PpzFJ9AaORieg6O2tE0jsXdk= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:29 2025 by rpki-client