$ rpki-client -vvf repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft File: B0928A45D014D8D5FAD50314E828086F12B15610.mft (raw, json) Hash identifier: CRrMp4zj37N3Y7TNEso0jr9NgzU6E9ECLWN2UMwI2dg= Subject key identifier: B3:E5:C5:99:D3:DF:6A:FB:69:B6:D9:08:63:DA:04:E2:D1:4C:A8:0E Authority key identifier: B0:92:8A:45:D0:14:D8:D5:FA:D5:03:14:E8:28:08:6F:12:B1:56:10 Certificate issuer: /CN=B0928A45D014D8D5FAD50314E828086F12B15610 Certificate serial: 269C4FC4D8473C189AA572C42B7402D55CED7423 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft Manifest number: 02E3 Signing time: Tue 17 Jun 2025 10:11:14 +0000 Manifest this update: Tue 17 Jun 2025 10:06:14 +0000 Manifest next update: Fri 20 Jun 2025 12:57:14 +0000 Files and hashes: 1: 3230322e37302e3133332e302f32342d3234203d3e20313430343433.roa (hash: wdtK/qmLPSYK98usl8We2OAmclE1Y5QskILTtOqsrh0=) 2: B0928A45D014D8D5FAD50314E828086F12B15610.crl (hash: Efu6XBvdkChG1UTPtP0HdgX1/qRtSox3cgI7yGYYHtk=) 3: 3230322e3132352e38322e302f32332d3233203d3e20313430343433.roa (hash: g4b6/Xa0b41J+1gc8Xz+JaVY6mTt5QNosbt82K9ZCLY=) 4: 3230322e3132352e38332e302f32342d3234203d3e20313430343433.roa (hash: Ky8MrLU9AvVMvZfrLkoaRO/9X/2qSweH3weFbcGoV3c=) 5: 3230322e37302e3133322e302f32332d3233203d3e20313430343433.roa (hash: zemQSZcrisUT3ypYGuVnD0HgXPjCIaBTMHzTcVM9um8=) 6: 3230322e3132352e38322e302f32342d3234203d3e20313430343433.roa (hash: svi5IuXnIA+13Wc0eQrV3WQdaOBiVClli1PIWM+ewGc=) 7: 3230322e37302e3133322e302f32342d3234203d3e20313430343433.roa (hash: t5xXiyHWAYUMNFYe6N3ZJ/nwbkXPClS4KSSDztJ55tw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.crl rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 12:57:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:9c:4f:c4:d8:47:3c:18:9a:a5:72:c4:2b:74:02:d5:5c:ed:74:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0928A45D014D8D5FAD50314E828086F12B15610 Validity Not Before: Jun 17 10:06:14 2025 GMT Not After : Jun 20 12:57:14 2025 GMT Subject: CN=B3E5C599D3DF6AFB69B6D90863DA04E2D14CA80E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:44:3f:8c:7b:32:8f:e5:da:c2:61:61:c0:11: 45:b3:29:b9:54:f5:65:99:5f:7d:f0:66:23:67:0a: 8c:f4:f8:fd:ce:9b:40:35:02:48:c1:d8:d6:89:ed: ac:13:5c:5a:31:b1:60:e8:10:73:a6:b8:83:e3:35: 41:a7:9a:a6:39:77:fc:47:d0:96:4f:1f:1c:22:5a: cd:bc:fd:f1:b2:03:1b:50:0a:d9:45:66:79:83:73: f3:e9:00:01:3a:70:3c:8e:33:69:ec:d4:63:38:77: 68:57:70:7e:bd:a2:ef:75:68:83:90:06:74:b6:30: 73:ae:fd:92:16:67:71:6b:de:6f:1d:b6:07:69:b3: 63:4b:08:d8:74:ee:f0:ac:3f:21:ad:de:c7:be:00: f1:dc:3f:f7:ea:8a:44:04:2e:08:b9:f7:9d:36:f1: a4:a9:9d:cc:f0:62:33:a1:fc:b4:b3:d6:e3:33:7f: c7:04:59:7b:bb:99:dd:28:4d:c8:8a:ad:87:58:9e: 76:c2:82:4f:3d:4f:32:b5:a2:d0:49:da:97:3c:d9: c4:b5:2d:b6:4d:b4:50:99:04:4f:07:68:e0:db:7d: 18:68:f3:59:d6:71:36:6a:39:c9:53:20:f4:91:d1: e9:7d:ed:07:3c:66:8c:2f:07:c1:e6:89:12:0c:99: 93:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E5:C5:99:D3:DF:6A:FB:69:B6:D9:08:63:DA:04:E2:D1:4C:A8:0E X509v3 Authority Key Identifier: keyid:B0:92:8A:45:D0:14:D8:D5:FA:D5:03:14:E8:28:08:6F:12:B1:56:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:d7:8e:31:e5:76:a8:83:74:bf:95:d1:af:0e:4f:fd:36:90: c3:d8:29:fc:43:ee:6f:fa:21:74:4b:d1:36:09:e2:ae:d4:51: 60:50:f2:08:1f:25:79:e1:4b:0b:ce:d2:de:f0:d5:76:63:1e: 01:b8:e7:0a:50:d0:69:66:0c:8b:c2:31:80:98:bc:86:31:45: 61:c8:e7:7a:85:03:d8:a4:af:bb:00:95:ad:5a:60:7d:7a:88: ee:bd:6f:b1:b7:fc:96:74:c9:c3:42:59:68:5e:7b:c4:f0:d8: 6f:6d:24:18:9d:83:5d:37:d4:25:49:96:2d:17:ba:5d:41:dd: 2f:4d:c3:dc:4d:50:4d:97:3d:c9:2b:22:a2:67:87:62:9f:2f: 7f:21:cd:12:ff:42:73:df:ee:14:c8:49:0e:3a:be:5d:31:15: 82:2a:a8:61:44:e7:6d:6e:f0:0d:43:ef:cf:0c:35:c4:af:24: b0:09:ba:24:a6:90:fa:93:e6:f8:ef:ad:bf:f9:a6:04:4e:fa: a9:1a:d5:71:6a:17:7e:aa:5d:44:99:19:fd:3a:ff:54:0d:96: 8f:df:85:e3:9b:d7:22:f3:e2:33:3a:a3:d3:58:8d:18:39:9c: 09:6b:85:28:3e:28:31:cf:39:0b:12:8c:dc:ab:fe:12:2b:72: 3a:f0:b7:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJpxPxNhHPBiapXLEK3QC1VztdCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4NkYx MkIxNTYxMDAeFw0yNTA2MTcxMDA2MTRaFw0yNTA2MjAxMjU3MTRaMDMxMTAvBgNV BAMTKEIzRTVDNTk5RDNERjZBRkI2OUI2RDkwODYzREEwNEUyRDE0Q0E4MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsRD+MezKP5drCYWHAEUWzKblU 9WWZX33wZiNnCoz0+P3Om0A1AkjB2NaJ7awTXFoxsWDoEHOmuIPjNUGnmqY5d/xH 0JZPHxwiWs28/fGyAxtQCtlFZnmDc/PpAAE6cDyOM2ns1GM4d2hXcH69ou91aIOQ BnS2MHOu/ZIWZ3Fr3m8dtgdps2NLCNh07vCsPyGt3se+APHcP/fqikQELgi59502 8aSpnczwYjOh/LSz1uMzf8cEWXu7md0oTciKrYdYnnbCgk89TzK1otBJ2pc82cS1 LbZNtFCZBE8HaODbfRho81nWcTZqOclTIPSR0el97Qc8ZowvB8HmiRIMmZPvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs+XFmdPfavtpttkIY9oE4tFMqA4wHwYDVR0j BBgwFoAUsJKKRdAU2NX61QMU6CgIbxKxVhAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2QzMjNiZS04MzdkLTQyNDQtODQ2Yy03ZDIzOTNhOWEwMDkvMC9CMDkyOEE0NUQw MTREOEQ1RkFENTAzMTRFODI4MDg2RjEyQjE1NjEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4NkYxMkIx NTYxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NkMzIzYmUtODM3ZC00MjQ0LTg0 NmMtN2QyMzkzYTlhMDA5LzAvQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4 NkYxMkIxNTYxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADfXjjHldqiDdL+V0a8OT/02kMPYKfxD7m/6 IXRL0TYJ4q7UUWBQ8ggfJXnhSwvO0t7w1XZjHgG45wpQ0GlmDIvCMYCYvIYxRWHI 53qFA9ikr7sAla1aYH16iO69b7G3/JZ0ycNCWWhee8Tw2G9tJBidg1031CVJli0X ul1B3S9Nw9xNUE2XPckrIqJnh2KfL38hzRL/QnPf7hTISQ46vl0xFYIqqGFE521u 8A1D788MNcSvJLAJuiSmkPqT5vjvrb/5pgRO+qka1XFqF36qXUSZGf06/1QNlo/f heOb1yLz4jM6o9NYjRg5nAlrhSg+KDHPOQsSjNyr/hIrcjrwt4s= -----END CERTIFICATE-----Generated at Tue Jun 17 16:09:08 2025 by rpki-client