$ rpki-client -vvf repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft File: B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft (raw, json) Hash identifier: rSa5dBzZIx8ag1m4wQt23JwQ6Dd75NIZJryFNJw0VUA= Subject key identifier: C5:11:91:B9:F7:4F:CD:23:D8:03:5E:5E:3E:23:27:84:FB:FC:4F:C8 Authority key identifier: B4:A4:21:92:F8:CD:BE:93:5C:E5:92:7E:5A:D3:C6:3C:81:96:15:2D Certificate issuer: /CN=B4A42192F8CDBE935CE5927E5AD3C63C8196152D Certificate serial: 3F43CD1C5C1B05175D5B0AD7AFBA6E94B59B3E70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft Manifest number: 017D Signing time: Sun 15 Jun 2025 13:50:54 +0000 Manifest this update: Sun 15 Jun 2025 13:45:54 +0000 Manifest next update: Wed 18 Jun 2025 18:37:54 +0000 Files and hashes: 1: 3130332e35352e32322e302f32332d3234203d3e20313530343930.roa (hash: qiaxwvksmM66atpVD6z5NciBUAyVEKleM/kHb9VhlSw=) 2: B4A42192F8CDBE935CE5927E5AD3C63C8196152D.crl (hash: MOdUI/ahWKsRPG84C3EazJxZmBs5sfIbrx5uRYUFngU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.crl rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 18:37:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:43:cd:1c:5c:1b:05:17:5d:5b:0a:d7:af:ba:6e:94:b5:9b:3e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4A42192F8CDBE935CE5927E5AD3C63C8196152D Validity Not Before: Jun 15 13:45:54 2025 GMT Not After : Jun 18 18:37:54 2025 GMT Subject: CN=C51191B9F74FCD23D8035E5E3E232784FBFC4FC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:69:64:b6:97:bd:e7:6e:4f:bb:ee:d9:0f:3c: 4d:f8:23:8a:73:b3:18:0b:68:b7:1c:21:31:ba:14: 4b:85:cf:00:bc:89:f5:d2:d9:ab:82:7c:11:07:a6: 09:93:42:23:e7:73:83:8a:ca:33:62:c8:52:21:4c: 65:a1:24:50:32:5c:d8:fc:79:4c:45:69:6e:77:ea: ce:ff:3e:7f:7a:e8:bc:be:bf:e6:15:d7:95:2d:4e: 34:99:6e:2c:a3:b9:6b:c1:14:82:ac:b8:62:4b:cc: 77:06:11:40:ff:00:42:60:86:95:99:1c:f4:d8:60: 8a:c9:47:1d:f4:5c:6f:5f:b4:38:81:73:c3:92:db: 61:af:72:bf:e1:bc:d3:48:e1:81:0d:46:8e:e1:7d: 9c:28:51:b4:99:4e:a3:b0:47:17:ed:b5:a1:d0:92: 7d:b2:d8:ec:e1:3c:e3:5f:2d:24:2b:e2:ff:9d:dc: 8b:e1:9e:dc:29:68:56:7a:3d:ab:6e:b0:13:af:7c: 11:b6:40:99:6d:30:73:0b:17:1e:f0:65:eb:90:e8: 0d:b9:0b:28:11:38:e0:e8:d8:1f:5e:51:85:f0:5f: 3f:e2:f4:72:74:14:72:4b:48:24:73:d4:e6:aa:bc: fc:eb:2f:c8:d9:ac:6c:7b:9d:39:53:af:52:b1:9d: c6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:11:91:B9:F7:4F:CD:23:D8:03:5E:5E:3E:23:27:84:FB:FC:4F:C8 X509v3 Authority Key Identifier: keyid:B4:A4:21:92:F8:CD:BE:93:5C:E5:92:7E:5A:D3:C6:3C:81:96:15:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:0c:76:5f:70:03:60:42:37:4a:4a:c6:40:9a:31:d2:19:52: b0:0b:55:d1:17:67:48:47:b5:07:2d:9a:2f:f6:e0:c9:c1:b2: 53:ad:85:a7:b6:e2:2d:49:44:c9:06:03:6c:70:8f:21:7e:e1: 13:0e:f1:4a:52:1e:c6:bb:c1:56:92:b3:85:33:91:1d:1e:1f: a0:84:ac:a9:ad:29:1a:c6:a2:20:4e:02:e2:ab:74:11:22:75: b3:6e:40:07:06:38:f3:91:15:98:74:3f:f8:80:5d:91:6e:73: d6:5e:00:c1:0b:e3:1e:60:ca:50:29:51:b3:96:1a:e6:cd:55: 95:9d:21:1f:f4:02:35:e5:ed:8b:66:cb:fa:94:70:ab:e9:99: 91:47:f7:89:e6:28:e6:ae:78:79:ec:2a:8b:4c:ba:47:ef:8b: 81:70:59:08:f3:9d:76:e4:dc:7a:87:87:2a:fa:24:96:39:29: 44:e0:67:8d:94:f4:95:01:b6:6d:e0:8b:ee:eb:19:52:dd:f9: 37:13:9d:27:fd:00:05:0f:e9:81:45:6f:63:aa:e8:77:07:5f: c0:d1:f0:f4:64:b8:4b:ce:fd:ff:0e:b0:88:09:2e:6b:e0:7c: f8:28:8e:dc:56:4b:a1:b3:72:ca:69:7d:49:86:2e:ab:f1:fe: d7:2b:8d:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP0PNHFwbBRddWwrXr7pulLWbPnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjRBNDIxOTJGOENEQkU5MzVDRTU5MjdFNUFEM0M2M0M4 MTk2MTUyRDAeFw0yNTA2MTUxMzQ1NTRaFw0yNTA2MTgxODM3NTRaMDMxMTAvBgNV BAMTKEM1MTE5MUI5Rjc0RkNEMjNEODAzNUU1RTNFMjMyNzg0RkJGQzRGQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxaWS2l73nbk+77tkPPE34I4pz sxgLaLccITG6FEuFzwC8ifXS2auCfBEHpgmTQiPnc4OKyjNiyFIhTGWhJFAyXNj8 eUxFaW536s7/Pn966Ly+v+YV15UtTjSZbiyjuWvBFIKsuGJLzHcGEUD/AEJghpWZ HPTYYIrJRx30XG9ftDiBc8OS22Gvcr/hvNNI4YENRo7hfZwoUbSZTqOwRxfttaHQ kn2y2OzhPONfLSQr4v+d3IvhntwpaFZ6PatusBOvfBG2QJltMHMLFx7wZeuQ6A25 CygROODo2B9eUYXwXz/i9HJ0FHJLSCRz1OaqvPzrL8jZrGx7nTlTr1KxncZ3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxRGRufdPzSPYA15ePiMnhPv8T8gwHwYDVR0j BBgwFoAUtKQhkvjNvpNc5ZJ+WtPGPIGWFS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Nzk0ZGE0MC1iMzdlLTRmZTYtOGY0MC03M2IzYjBiZTAxOWYvMC9CNEE0MjE5MkY4 Q0RCRTkzNUNFNTkyN0U1QUQzQzYzQzgxOTYxNTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjRBNDIxOTJGOENEQkU5MzVDRTU5MjdFNUFEM0M2M0M4MTk2 MTUyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc5NGRhNDAtYjM3ZS00ZmU2LThm NDAtNzNiM2IwYmUwMTlmLzAvQjRBNDIxOTJGOENEQkU5MzVDRTU5MjdFNUFEM0M2 M0M4MTk2MTUyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEMMdl9wA2BCN0pKxkCaMdIZUrALVdEXZ0hH tQctmi/24MnBslOthae24i1JRMkGA2xwjyF+4RMO8UpSHsa7wVaSs4UzkR0eH6CE rKmtKRrGoiBOAuKrdBEidbNuQAcGOPORFZh0P/iAXZFuc9ZeAMEL4x5gylApUbOW GubNVZWdIR/0AjXl7Ytmy/qUcKvpmZFH94nmKOaueHnsKotMukfvi4FwWQjznXbk 3HqHhyr6JJY5KUTgZ42U9JUBtm3gi+7rGVLd+TcTnSf9AAUP6YFFb2Oq6HcHX8DR 8PRkuEvO/f8OsIgJLmvgfPgojtxWS6GzcsppfUmGLqvx/tcrjcY= -----END CERTIFICATE-----Generated at Mon Jun 16 10:43:53 2025 by rpki-client