$ rpki-client -vvf repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft File: B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft (raw, json) Hash identifier: a2TiEkfaHSFSc+n+7L24/v+W2FoZ5Sb01TweMumoAOw= Subject key identifier: FD:1E:CD:9A:FD:9D:28:C7:C0:06:59:71:88:FC:97:CD:2E:F0:6D:93 Authority key identifier: B0:FA:6C:3E:D4:78:0E:03:2B:0A:3F:16:1E:01:8A:7C:8F:A8:2B:45 Certificate issuer: /CN=B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45 Certificate serial: 3A67789633B18731A7DFF56CA5C8D4335892B7E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft Manifest number: 01FA Signing time: Sun 15 Jun 2025 09:02:08 +0000 Manifest this update: Sun 15 Jun 2025 08:57:08 +0000 Manifest next update: Wed 18 Jun 2025 10:41:08 +0000 Files and hashes: 1: B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.crl (hash: xSSX1xrFy+J9IlpOmhfIZqoKafB7cJSWZoflGPzpbWo=) 2: 3130332e3138362e3136392e302f32342d3234203d3e20313439333135.roa (hash: k0YtTjCvRfHkKBkEOTB9msrr0NImtoiaOd/b0Un02oI=) 3: 3130332e3138362e3136382e302f32332d3233203d3e20313439333135.roa (hash: 0o9IBgjEwrH3ZJGqMXSmtJgW+TONR3n1c/K3AjhSCz0=) 4: 3130332e3138362e3136382e302f32342d3234203d3e20313439333135.roa (hash: cA/IXkQfExxLqkZklRIGA4Iq/8wfMruGPEzuyZnNgNM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.crl rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 10:41:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:67:78:96:33:b1:87:31:a7:df:f5:6c:a5:c8:d4:33:58:92:b7:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45 Validity Not Before: Jun 15 08:57:08 2025 GMT Not After : Jun 18 10:41:08 2025 GMT Subject: CN=FD1ECD9AFD9D28C7C006597188FC97CD2EF06D93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:fa:5f:af:a1:99:a0:d9:f4:b5:92:c7:1d:5c: 66:cf:46:95:70:11:8d:6d:01:1b:aa:2b:53:b8:70: 9d:d5:99:36:81:da:c1:ff:73:fa:5c:3f:cf:62:44: 05:dd:4b:5b:fe:80:e9:ae:aa:eb:68:3f:c7:ea:59: c0:64:c4:65:bd:a9:5e:b2:d3:f3:62:49:00:92:0f: ac:47:e8:6c:c8:23:d1:4b:41:19:5b:33:58:42:de: d7:d6:fe:1e:68:85:df:11:e3:3a:49:af:f8:2c:3f: 17:ac:68:49:bb:62:08:de:dd:c9:f1:1d:8a:a2:3e: 97:d1:d0:55:56:8f:22:d2:01:ed:91:62:61:8b:4e: 86:07:cf:82:87:4f:93:b5:57:84:57:3d:eb:71:d5: fa:1c:a6:9b:62:5d:b4:ef:3e:4b:a8:35:a9:45:d5: a6:48:f7:bb:d3:78:86:cd:dd:ad:b7:22:b4:cc:91: ae:e5:39:5e:fc:13:c1:9a:b4:6f:d2:12:59:90:35: 72:cb:2e:20:4b:20:a1:40:57:83:9d:ae:0b:10:6d: 90:d8:01:a1:92:d5:de:75:09:ec:5a:b9:70:ac:30: 69:74:22:ce:f7:10:62:7c:85:28:76:ff:38:3e:82: 38:35:e2:74:e3:92:2a:80:ab:53:08:c7:d8:6a:80: be:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:1E:CD:9A:FD:9D:28:C7:C0:06:59:71:88:FC:97:CD:2E:F0:6D:93 X509v3 Authority Key Identifier: keyid:B0:FA:6C:3E:D4:78:0E:03:2B:0A:3F:16:1E:01:8A:7C:8F:A8:2B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:37:de:12:9b:db:4d:b1:f8:ba:d5:cc:50:bf:44:7c:f3:da: 2a:a3:81:16:5d:2b:7d:7e:03:57:2e:9c:ce:33:cd:59:d8:3c: d8:9c:04:9f:ca:7d:e4:9e:e7:0d:7e:2b:44:ca:15:ae:90:4a: d8:d4:fb:11:be:3f:25:45:d9:00:58:5f:41:b3:b5:cb:e9:b9: b0:78:dc:a4:4c:4f:8c:f1:0c:b1:91:65:c2:9f:36:cd:26:af: 8e:79:fe:e0:17:9a:6d:42:1d:f1:b3:d7:dd:16:78:82:b9:7e: c5:13:f2:96:cf:4e:54:a4:b1:5c:0f:4c:e2:0c:51:99:18:7e: 57:4d:8c:b6:e2:03:9e:11:23:25:5a:03:89:5f:f3:5c:e9:7c: ff:75:12:13:36:62:27:76:ae:89:51:49:a9:be:ea:31:6c:13: 90:73:ae:1d:3a:9e:ad:5c:b0:d8:66:9b:94:7d:70:5e:ab:f7: a3:13:c6:3a:1f:ef:d3:08:b5:6c:0a:8d:6a:1b:b0:46:73:4d: a0:e4:83:e9:a7:cb:23:6d:0b:e1:30:34:65:7c:5e:27:ee:72: bb:d7:11:b9:ca:4f:3f:3b:5b:e5:3a:0b:5a:b4:3b:f5:84:ed: 3f:36:e1:c1:e2:7b:a5:fd:ce:11:88:06:db:86:0d:66:68:65: a4:3d:38:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOmd4ljOxhzGn3/VspcjUM1iSt+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBGQTZDM0VENDc4MEUwMzJCMEEzRjE2MUUwMThBN0M4 RkE4MkI0NTAeFw0yNTA2MTUwODU3MDhaFw0yNTA2MTgxMDQxMDhaMDMxMTAvBgNV BAMTKEZEMUVDRDlBRkQ5RDI4QzdDMDA2NTk3MTg4RkM5N0NEMkVGMDZEOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt+l+voZmg2fS1kscdXGbPRpVw EY1tARuqK1O4cJ3VmTaB2sH/c/pcP89iRAXdS1v+gOmuqutoP8fqWcBkxGW9qV6y 0/NiSQCSD6xH6GzII9FLQRlbM1hC3tfW/h5ohd8R4zpJr/gsPxesaEm7Ygje3cnx HYqiPpfR0FVWjyLSAe2RYmGLToYHz4KHT5O1V4RXPetx1focpptiXbTvPkuoNalF 1aZI97vTeIbN3a23IrTMka7lOV78E8GatG/SElmQNXLLLiBLIKFAV4OdrgsQbZDY AaGS1d51CexauXCsMGl0Is73EGJ8hSh2/zg+gjg14nTjkiqAq1MIx9hqgL5jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/R7Nmv2dKMfABllxiPyXzS7wbZMwHwYDVR0j BBgwFoAUsPpsPtR4DgMrCj8WHgGKfI+oK0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjcxM2EzMi1mYWRhLTQ4NGUtYTY4ZC0wY2FjMGZmZmEzM2MvMC9CMEZBNkMzRUQ0 NzgwRTAzMkIwQTNGMTYxRTAxOEE3QzhGQTgyQjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjBGQTZDM0VENDc4MEUwMzJCMEEzRjE2MUUwMThBN0M4RkE4 MkI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI3MTNhMzItZmFkYS00ODRlLWE2 OGQtMGNhYzBmZmZhMzNjLzAvQjBGQTZDM0VENDc4MEUwMzJCMEEzRjE2MUUwMThB N0M4RkE4MkI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI033hKb202x+LrVzFC/RHzz2iqjgRZdK31+ A1cunM4zzVnYPNicBJ/KfeSe5w1+K0TKFa6QStjU+xG+PyVF2QBYX0GztcvpubB4 3KRMT4zxDLGRZcKfNs0mr455/uAXmm1CHfGz190WeIK5fsUT8pbPTlSksVwPTOIM UZkYfldNjLbiA54RIyVaA4lf81zpfP91EhM2Yid2rolRSam+6jFsE5Bzrh06nq1c sNhmm5R9cF6r96MTxjof79MItWwKjWobsEZzTaDkg+mnyyNtC+EwNGV8XifucrvX EbnKTz87W+U6C1q0O/WE7T824cHie6X9zhGIBtuGDWZoZaQ9ONI= -----END CERTIFICATE-----Generated at Sun Jun 15 17:00:51 2025 by rpki-client