$ rpki-client -vvf repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft File: B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft (raw, json) Hash identifier: sOieYGJMz787joEo688chkdjpD5Q4+RqVnvxH1GEFaA= Subject key identifier: 03:F7:D4:41:11:88:BD:68:74:5A:2A:97:29:25:CE:5C:E1:49:72:35 Authority key identifier: B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16 Certificate issuer: /CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416 Certificate serial: 544B46AAB2F9F23E757A347A19D909002A7B5560 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft Manifest number: 01DC Signing time: Sun 27 Apr 2025 07:50:47 +0000 Manifest this update: Sun 27 Apr 2025 07:45:47 +0000 Manifest next update: Wed 30 Apr 2025 14:55:47 +0000 Files and hashes: 1: 3130332e36382e3133362e302f32332d3234203d3e20313335343535.roa (hash: 3shwJ2AKcESaufbVwJ1tBPOkyd6LqDrGvkFRzpot0c8=) 2: 323030313a6466333a313230303a3a2f34382d3438203d3e20313335343535.roa (hash: PbwEzJXRFcDlg8qq7i8GVSnaGAPkcyZUmZy35AgEFf0=) 3: 3130332e36382e3133362e302f32332d3233203d3e203338353131.roa (hash: YKEJ6xXEXwkPYNOCuZQFtX9Ji/2UDJQxeQnbNUcl++Q=) 4: 3130332e36382e3133372e302f32342d3234203d3e203338353131.roa (hash: JVkCLbeZDJdwzZ2v3iR22hauCUbtGIEz6OcbZ/e1uz8=) 5: 3130332e36382e3133372e302f32342d3234203d3e20313335343535.roa (hash: B/Oe9y1prQPdwN9dHWS523CLyIs4euOM6VNMTv5PS6I=) 6: 3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa (hash: Vqh39P+3nWLH6GpYM+8FhU68z1hzASxU3wAlgsuT274=) 7: 3130332e36382e3133362e302f32342d3234203d3e203338353131.roa (hash: /3OF733rpM3jdRT3EkKeOCDNT6qwcGILSfVrlznc0RM=) 8: B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl (hash: cEDtxkJjBu3mM8nmJ9d8udH0jDyc3JLV7H0qSThCX6o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 14:55:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:4b:46:aa:b2:f9:f2:3e:75:7a:34:7a:19:d9:09:00:2a:7b:55:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416 Validity Not Before: Apr 27 07:45:47 2025 GMT Not After : Apr 30 14:55:47 2025 GMT Subject: CN=03F7D4411188BD68745A2A972925CE5CE1497235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c1:b6:c4:21:69:73:f4:40:5e:d0:9d:93:49: 49:ca:a2:d2:cd:26:1f:67:6c:f4:a2:70:5b:94:e7: 27:90:03:ec:2b:dd:40:b6:cf:26:e2:a7:a6:58:e1: 5f:fe:00:bc:37:93:84:63:12:48:ff:13:d3:58:f4: 79:ea:29:7e:70:65:19:3e:1d:6a:cf:d8:ac:1c:fd: 1c:76:98:23:c8:cd:2e:84:b8:db:92:6e:b4:37:49: df:9f:01:81:f7:d4:bb:47:43:bd:64:7a:aa:92:78: cd:2c:e3:08:c2:98:cb:9d:6c:98:a0:02:e3:c4:bc: 92:8e:a8:e5:58:c5:ae:16:95:c9:78:73:30:3f:21: 55:3c:31:12:6a:c2:c3:27:bd:c3:16:cf:84:81:86: 57:65:9e:1b:b9:d6:5c:99:18:04:01:10:5e:67:02: 4a:8c:ad:8d:2f:f8:81:19:66:4e:1c:5c:55:de:6e: 12:b3:16:dc:c7:b5:de:2b:52:c0:76:63:c4:a6:7e: 46:96:72:cc:31:37:c7:63:72:1b:9f:df:39:bb:cd: 91:c1:77:c2:b5:91:67:47:23:d4:b6:8e:73:27:c4: e4:95:ae:57:95:67:87:6f:15:62:2a:ed:a9:c2:37: 79:7b:8e:6b:09:82:da:ed:b1:40:5e:68:e1:4b:c4: 06:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F7:D4:41:11:88:BD:68:74:5A:2A:97:29:25:CE:5C:E1:49:72:35 X509v3 Authority Key Identifier: keyid:B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:3d:bd:74:44:c6:54:5f:2e:2e:a0:f0:5e:70:f8:49:e4:0a: ee:6b:00:5a:86:8e:5d:f1:bb:82:2a:34:9f:e2:7e:9e:a0:44: 4e:36:33:cb:4d:aa:49:e9:58:6a:2e:f2:5b:87:bb:15:a8:f7: 73:e3:bc:d8:43:08:a2:97:42:4c:46:81:fa:6f:4e:e2:79:4d: a8:6a:f8:4f:13:5e:8a:06:47:bb:ef:7f:a4:fa:92:96:13:c5: 2d:1b:4d:51:ce:97:d5:a8:2d:3f:a0:2e:cf:05:91:1f:cc:1f: 3e:6a:be:63:6a:88:81:ec:df:0c:64:75:3a:85:0e:b4:c9:30: c1:1c:d5:55:52:62:7b:88:86:84:e8:c5:3a:b9:0f:61:20:82: 37:80:8a:03:ba:29:a4:8b:91:9b:f1:38:7b:19:b5:e8:f2:0a: 99:05:01:4f:69:ba:31:78:f1:66:56:9d:b7:10:cc:37:4c:c6: df:32:08:c9:a6:a1:07:3d:54:65:4c:5e:1d:15:ee:37:89:46: e3:b4:c7:4c:67:9d:c9:83:5c:52:71:5f:4a:dc:34:d3:9f:52: 56:f5:27:92:c0:26:43:a8:3c:36:12:01:d6:29:c4:3c:3b:6a: 1b:ff:43:fc:35:08:d1:aa:1e:9d:db:00:f1:4d:12:1e:8b:99: a7:b6:ca:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVEtGqrL58j51ejR6GdkJACp7VWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJDMThFMTFDODUzMEJERjRFRTMzM0Y1REVCRDBCMDU1 RjlEQTQxNjAeFw0yNTA0MjcwNzQ1NDdaFw0yNTA0MzAxNDU1NDdaMDMxMTAvBgNV BAMTKDAzRjdENDQxMTE4OEJENjg3NDVBMkE5NzI5MjVDRTVDRTE0OTcyMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOwbbEIWlz9EBe0J2TSUnKotLN Jh9nbPSicFuU5yeQA+wr3UC2zybip6ZY4V/+ALw3k4RjEkj/E9NY9HnqKX5wZRk+ HWrP2Kwc/Rx2mCPIzS6EuNuSbrQ3Sd+fAYH31LtHQ71keqqSeM0s4wjCmMudbJig AuPEvJKOqOVYxa4Wlcl4czA/IVU8MRJqwsMnvcMWz4SBhldlnhu51lyZGAQBEF5n AkqMrY0v+IEZZk4cXFXebhKzFtzHtd4rUsB2Y8SmfkaWcswxN8djchuf3zm7zZHB d8K1kWdHI9S2jnMnxOSVrleVZ4dvFWIq7anCN3l7jmsJgtrtsUBeaOFLxAa3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA/fUQRGIvWh0WiqXKSXOXOFJcjUwHwYDVR0j BBgwFoAUssGOEchTC99O4zP13r0LBV+dpBYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 M2RjMWIwNS0yYTY5LTQ1YjAtOGM0NC02MjY3NzIyNzZiZDkvMC9CMkMxOEUxMUM4 NTMwQkRGNEVFMzMzRjVERUJEMEIwNTVGOURBNDE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJDMThFMTFDODUzMEJERjRFRTMzM0Y1REVCRDBCMDU1RjlE QTQxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTNkYzFiMDUtMmE2OS00NWIwLThj NDQtNjI2NzcyMjc2YmQ5LzAvQjJDMThFMTFDODUzMEJERjRFRTMzM0Y1REVCRDBC MDU1RjlEQTQxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADc9vXRExlRfLi6g8F5w+EnkCu5rAFqGjl3x u4IqNJ/ifp6gRE42M8tNqknpWGou8luHuxWo93PjvNhDCKKXQkxGgfpvTuJ5Tahq +E8TXooGR7vvf6T6kpYTxS0bTVHOl9WoLT+gLs8FkR/MHz5qvmNqiIHs3wxkdTqF DrTJMMEc1VVSYnuIhoToxTq5D2EggjeAigO6KaSLkZvxOHsZtejyCpkFAU9pujF4 8WZWnbcQzDdMxt8yCMmmoQc9VGVMXh0V7jeJRuO0x0xnncmDXFJxX0rcNNOfUlb1 J5LAJkOoPDYSAdYpxDw7ahv/Q/w1CNGqHp3bAPFNEh6Lmae2yrE= -----END CERTIFICATE-----Generated at Tue Apr 29 09:46:21 2025 by rpki-client