$ rpki-client -vvf repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft File: B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft (raw, json) Hash identifier: SdLcDPDXIKVz/SrDTyQcs36+LinVHMP6BS+t9OL/YJI= Subject key identifier: 5F:6C:FC:16:28:29:70:94:1D:85:05:F4:23:39:A1:D8:1F:5E:34:D1 Authority key identifier: B2:FA:6D:D6:2C:0D:60:EA:AD:64:F6:B4:71:D2:2D:29:44:32:B7:B8 Certificate issuer: /CN=B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8 Certificate serial: 43B1BC8E33352F62A9850A7696D794D09D118260 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft Manifest number: 04E3 Signing time: Sun 15 Jun 2025 17:20:41 +0000 Manifest this update: Sun 15 Jun 2025 17:15:41 +0000 Manifest next update: Wed 18 Jun 2025 19:33:41 +0000 Files and hashes: 1: 3130332e3130362e3137342e302f32342d3234203d3e20313336383838.roa (hash: gCxomhlXPqJzdF7SJ3iSXnHHdDE1CzdM3fX39z9NSbw=) 2: B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl (hash: aD3tNC3J1CPHYzuQ0I4ZHelIFoqiDVdFO7vQCf7NK6w=) 3: 3130332e3130362e3137322e302f32332d3234203d3e20313336383838.roa (hash: DZlWR7tuLnpwDkeYEthZYN05oc1IXglcFF75rJ6G2+c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 19:33:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:b1:bc:8e:33:35:2f:62:a9:85:0a:76:96:d7:94:d0:9d:11:82:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8 Validity Not Before: Jun 15 17:15:41 2025 GMT Not After : Jun 18 19:33:41 2025 GMT Subject: CN=5F6CFC16282970941D8505F42339A1D81F5E34D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b7:a7:68:01:54:f8:dc:b4:6d:dd:18:56:05: b7:29:46:70:3b:59:f5:c1:ac:9d:ef:44:24:1f:55: a7:34:f1:98:4f:02:34:b6:7a:ed:62:07:a6:df:8f: 83:6d:3f:4d:d5:17:cc:e3:b6:8d:c8:5a:a6:3a:44: 6b:2d:17:b1:e1:71:cd:64:11:32:a0:ac:4c:e8:62: fe:5e:99:bd:37:29:a5:79:51:3e:2e:3b:1b:e1:54: ab:73:35:84:12:96:20:23:49:3e:5c:38:77:9d:63: a0:39:eb:ba:d4:7b:b5:89:7d:91:86:c0:b4:0f:e4: 47:1c:9f:c5:25:0b:20:c2:a7:c7:b2:4f:33:ba:41: f4:73:34:0f:87:5c:c6:47:bb:23:7d:8f:7a:21:d1: 25:48:b7:4e:53:7d:d8:64:21:70:a8:d7:c6:68:92: 59:ca:6b:ee:63:fe:14:55:ab:4c:a0:18:4f:28:a4: 88:c2:92:24:0b:0c:58:22:bd:ef:5c:ae:74:5e:57: 18:26:4b:2b:23:ad:40:71:7a:03:8c:75:64:37:99: 35:5a:04:51:06:35:86:da:74:96:c9:44:6c:18:11: 05:79:ed:88:d5:17:20:26:ae:24:46:99:49:77:05: 26:68:32:de:3d:8f:b9:7f:84:32:9c:ba:da:f9:de: 5d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:6C:FC:16:28:29:70:94:1D:85:05:F4:23:39:A1:D8:1F:5E:34:D1 X509v3 Authority Key Identifier: keyid:B2:FA:6D:D6:2C:0D:60:EA:AD:64:F6:B4:71:D2:2D:29:44:32:B7:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:ec:33:bb:4f:c9:c3:47:03:4c:dc:ca:16:74:a1:4e:d9:b6: e2:de:52:49:12:81:cc:9f:d0:07:6f:8a:7b:6c:9f:77:e3:90: 8c:82:4e:3f:fe:ad:a9:c9:af:60:58:bb:df:6d:90:fb:3f:51: 3a:b8:bb:90:3d:8c:02:48:34:63:24:c4:52:6d:87:69:4a:4e: 38:2f:a2:8d:3b:84:95:b2:32:27:90:10:92:5b:82:89:a1:5a: 52:66:89:ef:40:cd:2f:4c:bd:6f:c3:f4:d8:65:b5:85:6d:67: 4f:14:9b:07:bb:02:a5:4b:63:b2:48:31:0d:5e:03:5f:12:f0: 7a:2c:2c:d0:bc:62:92:c8:eb:98:10:ea:17:f4:75:dc:5f:d9: d2:62:9c:24:92:43:59:01:c6:c2:63:a8:d2:89:81:b8:b2:03: b1:db:60:c5:dd:04:d0:f4:7f:32:1a:14:6c:ad:50:1d:ee:79: c5:ba:e3:62:da:7e:1c:25:c5:df:49:79:8e:c3:07:ef:81:ae: cf:30:a7:4b:c6:6d:16:40:da:c0:8e:7f:a7:57:7e:02:e3:16: 32:af:c6:5e:e8:2a:40:c2:07:12:17:a7:31:61:4a:52:1a:2d: 99:b7:96:88:fc:d2:06:4e:65:10:21:44:b9:f1:84:ca:4b:fa: 13:bd:85:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ7G8jjM1L2KphQp2lteU0J0RgmAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJGQTZERDYyQzBENjBFQUFENjRGNkI0NzFEMjJEMjk0 NDMyQjdCODAeFw0yNTA2MTUxNzE1NDFaFw0yNTA2MTgxOTMzNDFaMDMxMTAvBgNV BAMTKDVGNkNGQzE2MjgyOTcwOTQxRDg1MDVGNDIzMzlBMUQ4MUY1RTM0RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlt6doAVT43LRt3RhWBbcpRnA7 WfXBrJ3vRCQfVac08ZhPAjS2eu1iB6bfj4NtP03VF8zjto3IWqY6RGstF7Hhcc1k ETKgrEzoYv5emb03KaV5UT4uOxvhVKtzNYQSliAjST5cOHedY6A567rUe7WJfZGG wLQP5Eccn8UlCyDCp8eyTzO6QfRzNA+HXMZHuyN9j3oh0SVIt05TfdhkIXCo18Zo klnKa+5j/hRVq0ygGE8opIjCkiQLDFgive9crnReVxgmSysjrUBxegOMdWQ3mTVa BFEGNYbadJbJRGwYEQV57YjVFyAmriRGmUl3BSZoMt49j7l/hDKcutr53l1TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX2z8FigpcJQdhQX0Izmh2B9eNNEwHwYDVR0j BBgwFoAUsvpt1iwNYOqtZPa0cdItKUQyt7gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmJkN2NmNi1mNTVhLTRiNzgtYTU4OC1kOTI2MWYxNWY3NjMvMC9CMkZBNkRENjJD MEQ2MEVBQUQ2NEY2QjQ3MUQyMkQyOTQ0MzJCN0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJGQTZERDYyQzBENjBFQUFENjRGNkI0NzFEMjJEMjk0NDMy QjdCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZiZDdjZjYtZjU1YS00Yjc4LWE1 ODgtZDkyNjFmMTVmNzYzLzAvQjJGQTZERDYyQzBENjBFQUFENjRGNkI0NzFEMjJE Mjk0NDMyQjdCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALsM7tPycNHA0zcyhZ0oU7ZtuLeUkkSgcyf 0Advintsn3fjkIyCTj/+ranJr2BYu99tkPs/UTq4u5A9jAJINGMkxFJth2lKTjgv oo07hJWyMieQEJJbgomhWlJmie9AzS9MvW/D9NhltYVtZ08Umwe7AqVLY7JIMQ1e A18S8HosLNC8YpLI65gQ6hf0ddxf2dJinCSSQ1kBxsJjqNKJgbiyA7HbYMXdBND0 fzIaFGytUB3uecW642Lafhwlxd9JeY7DB++Brs8wp0vGbRZA2sCOf6dXfgLjFjKv xl7oKkDCBxIXpzFhSlIaLZm3loj80gZOZRAhRLnxhMpL+hO9hf8= -----END CERTIFICATE-----Generated at Mon Jun 16 04:20:50 2025 by rpki-client