$ rpki-client -vvf repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft File: B2650BD2D997B6C198A4B362B7395AC364683312.mft (raw, json) Hash identifier: ZxwG8sjAWRRKFZc/+D6qPKQ0A3rmp1XRijkUZ8+8ySw= Subject key identifier: 85:86:7A:B6:46:BD:1A:B3:79:34:06:74:3D:AE:3C:23:47:3F:EF:E3 Authority key identifier: B2:65:0B:D2:D9:97:B6:C1:98:A4:B3:62:B7:39:5A:C3:64:68:33:12 Certificate issuer: /CN=B2650BD2D997B6C198A4B362B7395AC364683312 Certificate serial: 45E10004D25C253F07246EC1E862D33969EBE748 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft Manifest number: 01B7 Signing time: Sun 15 Jun 2025 14:30:54 +0000 Manifest this update: Sun 15 Jun 2025 14:25:54 +0000 Manifest next update: Thu 19 Jun 2025 00:49:54 +0000 Files and hashes: 1: B2650BD2D997B6C198A4B362B7395AC364683312.crl (hash: k6YuZatkbNO6bSAO2iyWCoKkiskqEfVn9NXrbW4BbzY=) 2: 3130332e31372e33322e302f32342d3234203d3e20313530323238.roa (hash: PXsuVPLEzGme/TvSRalwKMlC1hWsjOPUgK0Lgy+M/Is=) 3: 3130332e31372e33332e302f32342d3234203d3e20313530323238.roa (hash: JLuyTnkAd9LdVP7Ap7TsyT3WybJ3uwYm9GdHPUO4P9s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.crl rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 00:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:e1:00:04:d2:5c:25:3f:07:24:6e:c1:e8:62:d3:39:69:eb:e7:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2650BD2D997B6C198A4B362B7395AC364683312 Validity Not Before: Jun 15 14:25:54 2025 GMT Not After : Jun 19 00:49:54 2025 GMT Subject: CN=85867AB646BD1AB3793406743DAE3C23473FEFE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2d:1e:aa:df:be:1d:72:07:a5:bb:f4:ee:db: c8:76:18:5f:d5:f2:50:75:c0:1d:76:96:7a:db:cd: 19:55:ff:5c:9e:18:a6:19:bf:d5:dd:ab:df:5a:4d: e7:e8:b1:df:dc:6c:94:90:cf:b2:df:4b:01:fb:1a: 65:b5:69:3c:1e:0a:3c:c6:93:75:85:37:19:27:03: ae:a8:26:1f:91:ab:ee:f8:20:3d:61:0f:2d:1d:18: 00:cc:dc:28:52:36:c9:7c:c9:ed:9a:6c:9c:a9:44: da:78:a8:3e:70:10:d2:70:ce:e6:ac:79:98:f3:e2: 1e:46:3a:cb:a4:c4:04:9b:1f:74:71:75:c8:bb:3b: 3b:8f:6a:48:70:1c:88:b9:4d:05:72:48:f7:db:14: 95:f7:3e:da:2a:46:8c:42:c3:85:40:a8:be:d6:9a: 08:8f:4d:8a:34:0e:99:98:7e:e5:d6:93:2b:f0:f4: 8c:6e:72:66:31:dc:b4:70:57:04:17:69:8f:9a:f4: 8d:0e:dd:92:70:3e:97:dd:b5:45:c7:eb:44:b8:4a: 32:63:55:3d:ac:ff:3e:8d:6a:62:2e:fd:ec:c1:83: 0f:ca:1b:e8:3e:0b:08:ea:0d:f8:61:86:fe:a1:6f: 9e:59:8f:ee:d2:9f:b3:d5:8e:0a:61:ea:4f:83:84: 0d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:86:7A:B6:46:BD:1A:B3:79:34:06:74:3D:AE:3C:23:47:3F:EF:E3 X509v3 Authority Key Identifier: keyid:B2:65:0B:D2:D9:97:B6:C1:98:A4:B3:62:B7:39:5A:C3:64:68:33:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:da:7d:55:ff:b7:04:bf:b8:43:c8:42:79:93:27:c6:b6:94: 65:e8:04:2b:c1:e7:53:52:a5:ff:09:11:61:45:c8:0e:48:85: ee:69:70:51:b9:55:50:54:6b:59:63:45:1f:8b:50:f8:3b:5d: 5e:1e:b3:06:3e:39:2c:70:ca:2d:ef:73:1b:3b:b2:d0:fc:ba: f6:07:e2:02:8e:bf:66:f2:9a:fd:a6:80:b3:a7:e4:3c:70:90: 82:1f:d8:fd:da:00:75:7c:43:09:19:54:78:10:1b:da:d1:89: 54:d4:ff:3c:c0:c8:38:b5:89:2e:ff:e5:34:7e:f7:3b:ec:d2: d1:c5:ea:21:2a:9e:55:60:cd:10:9e:26:18:a3:48:31:24:71: 58:c5:56:7c:07:4a:72:ea:fe:7c:b1:bb:7d:ad:e2:e7:80:66: ed:b8:f6:f9:d3:ca:49:15:3a:be:0c:ea:7a:cb:77:94:a4:51: c8:96:0e:3a:c3:83:1c:ef:5d:e3:78:70:12:2f:62:ae:70:28: d5:86:8e:86:3e:66:b4:c5:cf:c7:77:71:29:d2:74:b2:2e:f3: 78:d9:cd:f4:f2:24:ab:22:a4:b6:81:73:83:45:ea:f7:67:d5: 10:9c:21:7c:1f:93:fe:26:92:9c:a0:71:94:1d:a2:21:e1:8a: e6:22:ea:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUReEABNJcJT8HJG7B6GLTOWnr50gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVBQzM2 NDY4MzMxMjAeFw0yNTA2MTUxNDI1NTRaFw0yNTA2MTkwMDQ5NTRaMDMxMTAvBgNV BAMTKDg1ODY3QUI2NDZCRDFBQjM3OTM0MDY3NDNEQUUzQzIzNDczRkVGRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8LR6q374dcgelu/Tu28h2GF/V 8lB1wB12lnrbzRlV/1yeGKYZv9Xdq99aTefosd/cbJSQz7LfSwH7GmW1aTweCjzG k3WFNxknA66oJh+Rq+74ID1hDy0dGADM3ChSNsl8ye2abJypRNp4qD5wENJwzuas eZjz4h5GOsukxASbH3Rxdci7OzuPakhwHIi5TQVySPfbFJX3PtoqRoxCw4VAqL7W mgiPTYo0DpmYfuXWkyvw9IxucmYx3LRwVwQXaY+a9I0O3ZJwPpfdtUXH60S4SjJj VT2s/z6NamIu/ezBgw/KG+g+CwjqDfhhhv6hb55Zj+7Sn7PVjgph6k+DhA0TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhYZ6tka9GrN5NAZ0Pa48I0c/7+MwHwYDVR0j BBgwFoAUsmUL0tmXtsGYpLNitzlaw2RoMxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjkwNTc2Ni00NDBlLTRiY2ItYWU3Mi0zZTc4ODMxY2U5ZGMvMC9CMjY1MEJEMkQ5 OTdCNkMxOThBNEIzNjJCNzM5NUFDMzY0NjgzMzEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVBQzM2NDY4 MzMxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2I5MDU3NjYtNDQwZS00YmNiLWFl NzItM2U3ODgzMWNlOWRjLzAvQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVB QzM2NDY4MzMxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAILafVX/twS/uEPIQnmTJ8a2lGXoBCvB51NS pf8JEWFFyA5Ihe5pcFG5VVBUa1ljRR+LUPg7XV4eswY+OSxwyi3vcxs7stD8uvYH 4gKOv2bymv2mgLOn5DxwkIIf2P3aAHV8QwkZVHgQG9rRiVTU/zzAyDi1iS7/5TR+ 9zvs0tHF6iEqnlVgzRCeJhijSDEkcVjFVnwHSnLq/nyxu32t4ueAZu249vnTykkV Or4M6nrLd5SkUciWDjrDgxzvXeN4cBIvYq5wKNWGjoY+ZrTFz8d3cSnSdLIu83jZ zfTyJKsipLaBc4NF6vdn1RCcIXwfk/4mkpygcZQdoiHhiuYi6lo= -----END CERTIFICATE-----Generated at Tue Jun 17 02:42:53 2025 by rpki-client