$ rpki-client -vvf repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft File: B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft (raw, json) Hash identifier: 5OBe74lTqY+45r7SlDOg+y7T+7Pd1/VyCJVNLjTC618= Subject key identifier: 4F:54:E8:54:13:C6:0E:7A:1A:39:54:81:BA:E8:AC:D1:4E:6D:5E:14 Authority key identifier: B0:D7:26:41:9F:BF:35:E7:C6:EB:43:7E:23:8F:3D:2A:3F:06:3B:4C Certificate issuer: /CN=B0D726419FBF35E7C6EB437E238F3D2A3F063B4C Certificate serial: 4FD94A3C7725EACCB3F4F44636F01CE9EF85113F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft Manifest number: 96 Signing time: Wed 18 Jun 2025 04:40:05 +0000 Manifest this update: Wed 18 Jun 2025 04:35:05 +0000 Manifest next update: Sat 21 Jun 2025 10:35:05 +0000 Files and hashes: 1: B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.crl (hash: AVTjKtMTEpuZPqXmtEN79INv5EVOZDFa3Qlqlkh8QCI=) 2: 3136302e32352e35382e302f32332d3234203d3e20313532383333.roa (hash: bHOi5SjHU/IA6uuARi1jDeG/5P34ORp+Y9sD3zlRQV0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.crl rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 10:35:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:d9:4a:3c:77:25:ea:cc:b3:f4:f4:46:36:f0:1c:e9:ef:85:11:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0D726419FBF35E7C6EB437E238F3D2A3F063B4C Validity Not Before: Jun 18 04:35:05 2025 GMT Not After : Jun 21 10:35:05 2025 GMT Subject: CN=4F54E85413C60E7A1A395481BAE8ACD14E6D5E14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:59:ac:a2:43:94:8f:e8:ce:2b:77:ac:26:86: e3:16:a2:14:2b:83:a9:6d:c9:02:7e:48:14:21:6a: 71:5a:48:44:7b:53:ee:98:b4:41:ca:58:44:47:e8: 48:12:0f:9e:f0:49:3e:15:c4:62:c9:16:cf:24:66: 9c:1c:e2:85:b6:b9:e9:28:17:cb:e9:9d:3d:e0:9e: cf:f7:2e:6c:f4:03:49:65:8f:fe:7b:5b:e7:e5:56: 4b:43:21:90:3f:e6:fd:64:13:ba:59:aa:25:79:46: 9b:d7:c6:af:75:2b:54:9f:54:22:36:11:ae:41:ff: 19:a9:e1:4f:20:4b:a4:15:4b:de:ba:c5:9b:d7:34: 58:01:f8:85:ef:4c:22:6e:9a:c4:d6:de:6a:64:79: 36:7d:39:61:f2:f7:38:6f:20:27:91:b7:9c:c4:43: e8:6d:a1:e6:5b:e2:af:cf:ac:47:4f:d1:b2:30:54: 8b:b8:fe:19:8c:df:fe:11:42:05:89:24:cb:3f:10: 96:fd:17:5c:7c:10:0c:3b:5b:80:0f:ec:15:d1:71: 7d:c5:39:d4:25:bd:c9:68:3d:52:fb:e0:37:d9:4b: b2:11:4a:00:62:67:14:03:07:75:41:95:e2:b7:27: 2e:a3:00:c9:14:b9:df:40:e1:02:1e:a3:24:16:aa: e8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:54:E8:54:13:C6:0E:7A:1A:39:54:81:BA:E8:AC:D1:4E:6D:5E:14 X509v3 Authority Key Identifier: keyid:B0:D7:26:41:9F:BF:35:E7:C6:EB:43:7E:23:8F:3D:2A:3F:06:3B:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:6a:75:5e:9c:c8:00:d6:a0:c0:6d:5e:52:00:3d:f2:0a:9d: 23:95:20:7b:2c:3d:44:e3:6f:0d:8f:cf:57:07:a2:94:09:2c: 22:e7:77:84:7b:97:cc:b5:25:bd:83:13:ce:1a:d1:82:7c:9d: 57:cb:0e:3a:54:c7:53:57:cc:57:57:e5:32:0a:f6:3d:86:11: ae:4b:67:58:eb:ca:07:9d:e8:96:e9:47:d4:6b:70:14:37:da: e5:ea:f8:e2:e7:d3:39:95:ec:53:1a:f2:75:b0:17:e5:df:67: d0:dc:b2:0a:1e:ae:e9:b1:6b:8f:f5:16:38:10:8a:57:70:7e: a5:27:c9:8f:1b:46:d6:5a:69:07:70:1e:72:96:61:0f:6c:de: 22:d1:6c:5d:7a:f6:0b:14:1d:f8:fe:5e:1b:fc:bd:e1:8a:8e: 47:ab:dd:1c:e9:f8:0c:5e:ba:6b:5a:65:09:65:79:85:59:a6: 6c:c4:3b:e7:c7:7d:2a:11:13:bc:c2:df:2a:06:93:2c:0b:97: 02:02:8a:89:13:6c:09:6c:db:95:27:a0:8d:fd:39:8c:e5:b9: 40:2e:08:dd:ae:b0:e8:46:7c:e3:ea:91:9a:5b:75:9e:64:60: 3f:8a:be:b9:1a:6c:b3:e6:bc:a8:57:7f:3d:43:44:91:5b:f7: 49:eb:0a:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT9lKPHcl6syz9PRGNvAc6e+FET8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBENzI2NDE5RkJGMzVFN0M2RUI0MzdFMjM4RjNEMkEz RjA2M0I0QzAeFw0yNTA2MTgwNDM1MDVaFw0yNTA2MjExMDM1MDVaMDMxMTAvBgNV BAMTKDRGNTRFODU0MTNDNjBFN0ExQTM5NTQ4MUJBRThBQ0QxNEU2RDVFMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtWayiQ5SP6M4rd6wmhuMWohQr g6ltyQJ+SBQhanFaSER7U+6YtEHKWERH6EgSD57wST4VxGLJFs8kZpwc4oW2ueko F8vpnT3gns/3Lmz0A0llj/57W+flVktDIZA/5v1kE7pZqiV5RpvXxq91K1SfVCI2 Ea5B/xmp4U8gS6QVS966xZvXNFgB+IXvTCJumsTW3mpkeTZ9OWHy9zhvICeRt5zE Q+htoeZb4q/PrEdP0bIwVIu4/hmM3/4RQgWJJMs/EJb9F1x8EAw7W4AP7BXRcX3F OdQlvcloPVL74DfZS7IRSgBiZxQDB3VBleK3Jy6jAMkUud9A4QIeoyQWqugbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT1ToVBPGDnoaOVSBuuis0U5tXhQwHwYDVR0j BBgwFoAUsNcmQZ+/NefG60N+I489Kj8GO0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MmRhYjQ2YS0wODVlLTQ0MzItOTgzMy03MWI4ZGIxNDRkOTQvMC9CMEQ3MjY0MTlG QkYzNUU3QzZFQjQzN0UyMzhGM0QyQTNGMDYzQjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjBENzI2NDE5RkJGMzVFN0M2RUI0MzdFMjM4RjNEMkEzRjA2 M0I0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDJkYWI0NmEtMDg1ZS00NDMyLTk4 MzMtNzFiOGRiMTQ0ZDk0LzAvQjBENzI2NDE5RkJGMzVFN0M2RUI0MzdFMjM4RjNE MkEzRjA2M0I0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKlqdV6cyADWoMBtXlIAPfIKnSOVIHssPUTj bw2Pz1cHopQJLCLnd4R7l8y1Jb2DE84a0YJ8nVfLDjpUx1NXzFdX5TIK9j2GEa5L Z1jryged6JbpR9RrcBQ32uXq+OLn0zmV7FMa8nWwF+XfZ9Dcsgoerumxa4/1FjgQ ildwfqUnyY8bRtZaaQdwHnKWYQ9s3iLRbF169gsUHfj+Xhv8veGKjker3Rzp+Axe umtaZQlleYVZpmzEO+fHfSoRE7zC3yoGkywLlwICiokTbAls25UnoI39OYzluUAu CN2usOhGfOPqkZpbdZ5kYD+KvrkabLPmvKhXfz1DRJFb90nrCls= -----END CERTIFICATE-----Generated at Thu Jun 19 13:47:54 2025 by rpki-client