$ rpki-client -vvf repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft File: 0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft (raw, json) Hash identifier: lSDY6sXqUVeqRAeZbCIcoI7DKGL6y6PFNyGCRboDKSk= Subject key identifier: 38:FA:AC:80:25:FD:31:49:C0:96:3F:4A:FD:55:A2:E5:63:8E:19:C6 Authority key identifier: 0B:47:BF:C9:4F:DC:EC:08:4C:D7:B3:55:36:C8:51:0E:41:F5:51:30 Certificate issuer: /CN=0B47BFC94FDCEC084CD7B35536C8510E41F55130 Certificate serial: 21EB64A795B4B63D6EC5DCEB5B8E289D511DAC4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft Manifest number: 021B Signing time: Sat 14 Jun 2025 04:52:08 +0000 Manifest this update: Sat 14 Jun 2025 04:47:08 +0000 Manifest next update: Tue 17 Jun 2025 07:25:08 +0000 Files and hashes: 1: 3130332e3232352e3234322e302f32342d3234203d3e20313332363334.roa (hash: Fp/8UnawhM2NuX7rV7CkvyBDfW79/QkTvgsmF36JIIM=) 2: 3130332e362e33342e302f32342d3234203d3e20313332363334.roa (hash: HvrDpYE/J5atwLV8aNk1LyzF9yjb46bY62W/GVeHaaA=) 3: 0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl (hash: VeEZPxctNd3QmpZLAvg4vmERpBAsRrQFWn6O2aRLoMA=) 4: 3130332e382e3233382e302f32342d3234203d3e20313332363334.roa (hash: ETpw0a+aN27La/w8z8t2+Ujt+M7eqg9mv9UITCWqsgM=) 5: 3130332e31362e34382e302f32332d3234203d3e20313332363334.roa (hash: MieROalwE/fB127Dk3xdzAYuGXCkhJHq65WAQmDl2tQ=) 6: 3130332e31382e3131372e302f32342d3234203d3e20313332363334.roa (hash: ZoCcekYbdPtZF1d0wHmqp26jbbPlMBnCSh/Sj6Wzh/Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 07:25:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:eb:64:a7:95:b4:b6:3d:6e:c5:dc:eb:5b:8e:28:9d:51:1d:ac:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B47BFC94FDCEC084CD7B35536C8510E41F55130 Validity Not Before: Jun 14 04:47:08 2025 GMT Not After : Jun 17 07:25:08 2025 GMT Subject: CN=38FAAC8025FD3149C0963F4AFD55A2E5638E19C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c9:75:85:82:e8:a3:20:28:14:ad:90:fa:13: db:5d:45:2c:bf:60:eb:a8:65:1e:64:f2:90:cc:36: bf:69:34:07:82:ee:83:0e:b6:5f:50:42:87:ea:96: 9a:5c:24:97:d1:ba:02:aa:3f:8d:b2:26:66:26:19: d7:fa:26:dc:85:44:38:72:f9:71:01:bd:94:44:19: bc:de:bb:25:5e:66:4c:0f:2c:fb:2a:ad:9f:72:e5: f2:f4:c1:22:40:2c:ff:7c:8e:f4:d9:c2:43:22:78: 41:f4:ce:bf:60:3c:17:18:86:70:4c:ea:f6:7c:b4: c5:6a:c5:5e:96:f4:96:ca:6d:17:7f:b1:e4:51:d1: e7:46:db:21:4f:5e:60:f7:1a:09:a5:3e:55:f0:13: 44:7e:af:77:bf:ea:a1:d2:f3:31:96:32:b8:d3:5c: c9:2b:3e:60:18:78:45:7e:31:64:80:83:5d:50:b7: 4d:6f:85:21:90:d3:b4:51:07:31:79:fd:18:c8:88: 93:e4:c8:3d:65:da:15:8d:cb:d2:e7:21:69:14:e4: 91:a6:9f:b2:6a:69:d4:e0:e3:41:f9:c0:d0:12:6e: 85:08:49:31:ee:17:b3:c2:7a:c2:09:8a:1e:00:bf: 13:04:8a:f5:e9:48:83:40:a0:0d:3c:9f:b8:3e:d3: f8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:FA:AC:80:25:FD:31:49:C0:96:3F:4A:FD:55:A2:E5:63:8E:19:C6 X509v3 Authority Key Identifier: keyid:0B:47:BF:C9:4F:DC:EC:08:4C:D7:B3:55:36:C8:51:0E:41:F5:51:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:88:51:52:ac:50:12:62:6f:91:b8:fc:f6:7e:2c:c7:67:e4: 71:76:04:ac:48:8f:3c:4f:ff:88:80:ed:f3:d1:78:19:d8:66: c8:04:f5:06:1f:52:b6:05:50:61:e3:80:88:ff:d7:94:54:ef: 32:05:ad:da:18:ee:f7:4f:09:3a:84:8f:a0:54:3c:54:bd:41: 3e:00:46:6e:1a:3f:5b:2d:08:f7:33:17:ed:32:d2:5f:5b:30: 9d:62:5e:0e:8c:f2:4c:db:b5:80:03:72:b5:a9:2d:d0:00:00: da:56:b5:7b:d0:d0:36:e8:b8:4e:50:1a:a6:9c:55:ef:12:f8: a3:d8:c5:02:8a:86:b6:1e:91:1c:8c:a8:dc:d0:62:fd:2d:02: fd:f9:e9:f7:33:a3:02:67:45:c5:81:9e:23:bb:57:59:30:c1: 4d:c0:a4:a2:7a:ed:73:f1:d9:b1:96:32:16:fb:49:78:54:28: 3f:a1:3c:54:68:05:cc:4a:f8:79:af:ed:f7:42:27:0d:98:41: 6d:1d:1d:f0:b7:47:f0:b5:c4:cc:9b:64:8d:ee:ef:9b:1c:67: 84:41:6e:88:5f:a2:34:77:b4:42:4b:5f:de:db:3e:c9:d4:d7: 0c:27:3c:11:42:0e:3d:16:cc:70:2f:5a:60:b6:e5:b2:a5:24: 78:39:af:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIetkp5W0tj1uxdzrW44onVEdrEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI0N0JGQzk0RkRDRUMwODRDRDdCMzU1MzZDODUxMEU0 MUY1NTEzMDAeFw0yNTA2MTQwNDQ3MDhaFw0yNTA2MTcwNzI1MDhaMDMxMTAvBgNV BAMTKDM4RkFBQzgwMjVGRDMxNDlDMDk2M0Y0QUZENTVBMkU1NjM4RTE5QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtyXWFguijICgUrZD6E9tdRSy/ YOuoZR5k8pDMNr9pNAeC7oMOtl9QQofqlppcJJfRugKqP42yJmYmGdf6JtyFRDhy +XEBvZREGbzeuyVeZkwPLPsqrZ9y5fL0wSJALP98jvTZwkMieEH0zr9gPBcYhnBM 6vZ8tMVqxV6W9JbKbRd/seRR0edG2yFPXmD3GgmlPlXwE0R+r3e/6qHS8zGWMrjT XMkrPmAYeEV+MWSAg11Qt01vhSGQ07RRBzF5/RjIiJPkyD1l2hWNy9LnIWkU5JGm n7JqadTg40H5wNASboUISTHuF7PCesIJih4AvxMEivXpSINAoA08n7g+0/ibAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOPqsgCX9MUnAlj9K/VWi5WOOGcYwHwYDVR0j BBgwFoAUC0e/yU/c7AhM17NVNshRDkH1UTAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGY3YmUwNi05NjcyLTQ2NDEtOTdiZC05YmZkZjk1NWRlMTcvMC8wQjQ3QkZDOTRG RENFQzA4NENEN0IzNTUzNkM4NTEwRTQxRjU1MTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEI0N0JGQzk0RkRDRUMwODRDRDdCMzU1MzZDODUxMEU0MUY1 NTEzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBmN2JlMDYtOTY3Mi00NjQxLTk3 YmQtOWJmZGY5NTVkZTE3LzAvMEI0N0JGQzk0RkRDRUMwODRDRDdCMzU1MzZDODUx MEU0MUY1NTEzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEqIUVKsUBJib5G4/PZ+LMdn5HF2BKxIjzxP /4iA7fPReBnYZsgE9QYfUrYFUGHjgIj/15RU7zIFrdoY7vdPCTqEj6BUPFS9QT4A Rm4aP1stCPczF+0y0l9bMJ1iXg6M8kzbtYADcrWpLdAAANpWtXvQ0DbouE5QGqac Ve8S+KPYxQKKhrYekRyMqNzQYv0tAv356fczowJnRcWBniO7V1kwwU3ApKJ67XPx 2bGWMhb7SXhUKD+hPFRoBcxK+Hmv7fdCJw2YQW0dHfC3R/C1xMybZI3u75scZ4RB bohfojR3tEJLX97bPsnU1wwnPBFCDj0WzHAvWmC25bKlJHg5r5M= -----END CERTIFICATE-----Generated at Mon Jun 16 02:09:46 2025 by rpki-client