$ rpki-client -vvf repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft File: B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft (raw, json) Hash identifier: SYdCFacFYSX2QDSWyQU6lzZXJw1qGivaUD8TJlPsOY0= Subject key identifier: 49:5D:CC:6B:9E:AC:AF:DD:1F:63:5E:60:13:54:74:43:AF:10:C4:68 Authority key identifier: B8:E4:67:F9:AD:3F:6A:B1:EE:F3:A9:09:9A:39:02:31:70:8C:79:0A Certificate issuer: /CN=B8E467F9AD3F6AB1EEF3A9099A390231708C790A Certificate serial: 0190575DBBDFCB11C620EB400B68B3818E28B5D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft Manifest number: 01D4 Signing time: Sun 15 Jun 2025 11:30:35 +0000 Manifest this update: Sun 15 Jun 2025 11:25:35 +0000 Manifest next update: Wed 18 Jun 2025 14:58:35 +0000 Files and hashes: 1: 3130332e352e3134392e302f32342d3234203d3e20313439393338.roa (hash: aIp2Ip0KA7a4+VvE23OSDrVGb4sJGrWUPloeyjyWxtA=) 2: B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl (hash: nxjfaD2ZKFTYdnP/fm+y2wwmjb2wFDbTkjjPwV8UZdc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 14:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:90:57:5d:bb:df:cb:11:c6:20:eb:40:0b:68:b3:81:8e:28:b5:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E467F9AD3F6AB1EEF3A9099A390231708C790A Validity Not Before: Jun 15 11:25:35 2025 GMT Not After : Jun 18 14:58:35 2025 GMT Subject: CN=495DCC6B9EACAFDD1F635E6013547443AF10C468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:4a:71:0f:6b:3c:72:19:d7:d5:72:b2:ef:66: 78:0d:09:ae:43:79:77:9f:13:c5:56:79:a5:00:05: 26:57:33:2b:ed:f8:ef:8c:5f:42:fb:c1:2a:e9:9a: 94:54:54:fb:07:98:ba:5a:09:c9:e8:a8:d8:94:f2: 85:ad:73:a1:17:9b:a4:94:af:4d:14:0e:35:8d:8a: 32:97:5e:91:9d:2f:47:40:70:96:3f:8d:e9:df:af: 00:03:60:40:19:a6:36:2a:20:8f:cf:eb:a8:22:fd: 0b:84:02:cf:2c:39:a0:f9:82:f4:4b:9f:c7:91:ff: 7b:0e:3c:7e:d7:f3:e8:6e:c1:d3:33:37:1e:c3:a4: e6:1f:c2:54:a2:d7:ac:ff:6b:e4:70:be:7a:09:9d: 2b:89:40:b9:8c:7e:47:55:ed:31:31:51:c4:5f:26: 67:61:12:7b:9c:af:90:55:cb:ca:4c:8d:0d:1a:a9: 14:df:38:9f:85:8a:ae:4e:22:b8:a9:40:62:78:0f: e4:58:b5:ed:6f:da:4e:33:9a:a8:ae:78:ad:c9:3a: f4:b0:7c:1b:8f:e8:71:55:1b:45:9d:bd:e9:d6:40: 4f:6e:fe:d9:d8:8c:2b:2d:78:40:f6:d3:3f:05:c8: 2e:e4:a9:43:7c:0e:36:f6:70:cb:cd:35:47:36:21: ef:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:5D:CC:6B:9E:AC:AF:DD:1F:63:5E:60:13:54:74:43:AF:10:C4:68 X509v3 Authority Key Identifier: keyid:B8:E4:67:F9:AD:3F:6A:B1:EE:F3:A9:09:9A:39:02:31:70:8C:79:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:d2:b4:81:a0:2c:de:13:b1:0f:f9:84:11:19:ab:bd:77:b2: 6c:28:a8:a9:57:78:66:5f:f4:f1:4c:0b:3c:a5:d4:9c:56:3b: f6:f3:6f:cb:4d:06:ae:04:4b:b5:53:2d:8d:47:d4:83:94:ba: c5:2d:bd:5f:f1:2f:02:88:27:3b:1a:4d:32:63:b5:13:64:f7: 0e:f1:1e:80:06:9c:d4:fe:d8:e7:3a:fa:ae:85:ed:d3:e8:b3: e7:6c:ef:65:8d:cb:d6:35:e5:eb:2e:c2:62:64:e2:dd:cc:e8: e1:6b:e6:18:f3:69:e0:76:a6:9b:af:cd:6f:df:0e:a4:57:fa: a5:3e:a1:51:7b:f4:f5:ca:75:31:b4:02:e6:dc:3c:8c:43:7f: 7a:1e:86:08:c0:49:ab:0c:f7:86:d5:d9:79:a5:0c:e0:82:11: 61:73:8e:cb:46:43:92:2d:22:24:b1:a4:d3:b5:21:2c:00:55: 60:38:9a:59:38:76:0b:b8:23:4b:2b:17:61:ad:09:d6:5f:9d: 40:d1:f2:9b:a1:3f:a7:f4:ee:2e:67:8e:0a:ae:36:c2:a4:92: 10:1a:93:83:9e:24:99:97:48:c7:76:42:c7:73:7e:4f:84:16: 76:6d:75:f8:0a:01:67:ed:22:e6:8f:c6:c8:f2:c4:e7:0d:ef: a7:ee:f1:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAZBXXbvfyxHGIOtAC2izgY4otdUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhFNDY3RjlBRDNGNkFCMUVFRjNBOTA5OUEzOTAyMzE3 MDhDNzkwQTAeFw0yNTA2MTUxMTI1MzVaFw0yNTA2MTgxNDU4MzVaMDMxMTAvBgNV BAMTKDQ5NURDQzZCOUVBQ0FGREQxRjYzNUU2MDEzNTQ3NDQzQUYxMEM0NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4SnEPazxyGdfVcrLvZngNCa5D eXefE8VWeaUABSZXMyvt+O+MX0L7wSrpmpRUVPsHmLpaCcnoqNiU8oWtc6EXm6SU r00UDjWNijKXXpGdL0dAcJY/jenfrwADYEAZpjYqII/P66gi/QuEAs8sOaD5gvRL n8eR/3sOPH7X8+huwdMzNx7DpOYfwlSi16z/a+RwvnoJnSuJQLmMfkdV7TExUcRf JmdhEnucr5BVy8pMjQ0aqRTfOJ+Fiq5OIripQGJ4D+RYte1v2k4zmqiueK3JOvSw fBuP6HFVG0WdvenWQE9u/tnYjCsteED20z8FyC7kqUN8Djb2cMvNNUc2Ie9NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSV3Ma56sr90fY15gE1R0Q68QxGgwHwYDVR0j BBgwFoAUuORn+a0/arHu86kJmjkCMXCMeQowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDk3ZDgyOC05ODRhLTQzZjEtOWI2ZS1hMDFiYTIxYmI1MTgvMC9COEU0NjdGOUFE M0Y2QUIxRUVGM0E5MDk5QTM5MDIzMTcwOEM3OTBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhFNDY3RjlBRDNGNkFCMUVFRjNBOTA5OUEzOTAyMzE3MDhD NzkwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ5N2Q4MjgtOTg0YS00M2YxLTli NmUtYTAxYmEyMWJiNTE4LzAvQjhFNDY3RjlBRDNGNkFCMUVFRjNBOTA5OUEzOTAy MzE3MDhDNzkwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIDStIGgLN4TsQ/5hBEZq713smwoqKlXeGZf 9PFMCzyl1JxWO/bzb8tNBq4ES7VTLY1H1IOUusUtvV/xLwKIJzsaTTJjtRNk9w7x HoAGnNT+2Oc6+q6F7dPos+ds72WNy9Y15esuwmJk4t3M6OFr5hjzaeB2ppuvzW/f DqRX+qU+oVF79PXKdTG0AubcPIxDf3oehgjASasM94bV2XmlDOCCEWFzjstGQ5It IiSxpNO1ISwAVWA4mlk4dgu4I0srF2GtCdZfnUDR8puhP6f07i5njgquNsKkkhAa k4OeJJmXSMd2Qsdzfk+EFnZtdfgKAWftIuaPxsjyxOcN76fu8fk= -----END CERTIFICATE-----Generated at Tue Jun 17 11:07:06 2025 by rpki-client