$ rpki-client -vvf repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft File: B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft (raw, json) Hash identifier: EDxiSFlunTk98wa7TF9OeQ9n0R5ANSeHTI/xPtmc3B4= Subject key identifier: 56:DA:79:C2:DB:15:ED:2E:1B:83:28:05:AD:F8:D1:C6:0C:D2:55:76 Authority key identifier: B9:72:F0:73:B8:AF:26:B8:53:3E:97:AA:FB:AE:C1:7F:CE:FD:6F:8C Certificate issuer: /CN=B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C Certificate serial: 233DFEC665D9027A122A6EFB8C0B0541B1BF8403 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft Manifest number: 0356 Signing time: Sat 14 Jun 2025 21:01:54 +0000 Manifest this update: Sat 14 Jun 2025 20:56:54 +0000 Manifest next update: Wed 18 Jun 2025 01:14:54 +0000 Files and hashes: 1: 3130332e3135352e3135362e302f32342d3234203d3e20313431303632.roa (hash: neE3zrlksOzJV8H0qe9TgTIuCvuChMBCqnrQKxlvrQU=) 2: B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl (hash: NULRR67lJ8aJwGJ5vwYXi5BP90IVzIA3kv2NL+m66B4=) 3: 3130332e3135352e3135372e302f32342d3234203d3e20313431303632.roa (hash: 0/uMdmxlRYv0BxLj1kLNukE06046JVFdcxHugW59xeM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 01:14:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:3d:fe:c6:65:d9:02:7a:12:2a:6e:fb:8c:0b:05:41:b1:bf:84:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C Validity Not Before: Jun 14 20:56:54 2025 GMT Not After : Jun 18 01:14:54 2025 GMT Subject: CN=56DA79C2DB15ED2E1B832805ADF8D1C60CD25576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1a:7c:aa:6d:88:3d:88:31:3d:62:fb:e3:3e: 5b:65:3b:8a:60:15:46:b0:09:11:e6:a0:5b:94:c3: d1:71:a8:45:b6:f7:8a:b1:65:b1:55:87:de:24:ef: 0d:25:a4:77:4c:e8:ae:5a:df:c6:df:b0:c6:81:8b: 8b:47:21:37:dc:46:dd:8c:68:c3:5c:88:3e:dc:b8: 28:22:75:83:e0:57:3f:2d:c8:43:91:75:5f:4a:74: 8f:72:c1:97:b6:c9:4e:49:ce:41:a9:1a:fb:a1:8f: e4:25:f2:62:7c:ed:89:d0:36:0d:7f:11:3d:81:e0: e6:6b:c7:37:3f:d6:6d:d0:d6:b1:9b:d1:91:c5:21: cf:bd:04:33:5b:7b:21:ce:4c:27:6b:aa:77:cf:46: 1b:e3:cb:3d:89:85:e3:b3:ad:a7:f8:fd:b5:ef:78: 91:bf:a5:58:0f:c5:5b:a6:02:ad:85:3c:99:5a:d3: 83:d4:59:ca:2c:96:08:ab:83:6b:6b:14:75:df:2e: bc:ce:32:cd:56:bd:68:0d:40:01:b7:8e:3a:e3:4c: 87:bc:34:ba:03:54:8d:55:b2:24:a3:c9:11:aa:36: 19:39:75:bc:0e:ff:db:45:85:05:92:99:1b:de:94: 73:72:84:5e:62:78:ba:18:09:c4:83:40:c5:50:64: 45:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:DA:79:C2:DB:15:ED:2E:1B:83:28:05:AD:F8:D1:C6:0C:D2:55:76 X509v3 Authority Key Identifier: keyid:B9:72:F0:73:B8:AF:26:B8:53:3E:97:AA:FB:AE:C1:7F:CE:FD:6F:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ea:b3:c3:d6:35:b6:a6:f4:05:71:a4:ec:fe:18:33:5f:28: df:32:5b:22:e5:3b:42:27:bd:5d:b9:d2:6d:6a:e6:c5:54:e3: 55:ca:bb:18:fb:03:30:4d:9b:54:ba:ef:0f:08:d9:e9:47:2b: e1:b3:2f:b7:db:e1:3c:66:ee:7c:39:ab:6d:c7:d4:af:87:96: ae:b4:69:d3:1f:7d:89:96:6d:62:e6:46:c5:53:b5:d7:38:07: 72:ef:21:42:5e:58:07:ca:8f:ca:d2:5d:a2:4e:59:4f:44:3a: 8f:a9:53:a8:bb:33:d3:a1:2c:d9:8e:7e:92:48:96:94:8e:2c: 34:77:50:bb:b8:f1:09:c7:df:6c:c5:8d:38:8c:5a:f1:c7:69: d9:c3:b3:0d:c8:12:36:c4:49:6f:c5:b4:d6:d8:ea:ff:70:d4: d8:91:cb:d0:92:e1:2e:47:2d:0d:85:9d:99:ad:63:68:98:93: 4f:05:bf:05:b8:6c:e9:ba:36:4e:1d:e9:1b:2e:a4:09:6a:8f: 77:33:fc:bc:b7:69:62:0a:00:e9:5a:47:a2:fa:c2:dd:02:aa: 69:c3:aa:53:b7:62:65:69:f6:f8:44:14:5b:64:46:c3:62:a4: 86:42:f3:4f:e2:6c:cc:36:20:27:41:41:a0:ac:24:18:ba:08: 1a:5f:5e:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIz3+xmXZAnoSKm77jAsFQbG/hAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMxN0ZD RUZENkY4QzAeFw0yNTA2MTQyMDU2NTRaFw0yNTA2MTgwMTE0NTRaMDMxMTAvBgNV BAMTKDU2REE3OUMyREIxNUVEMkUxQjgzMjgwNUFERjhEMUM2MENEMjU1NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkGnyqbYg9iDE9YvvjPltlO4pg FUawCRHmoFuUw9FxqEW294qxZbFVh94k7w0lpHdM6K5a38bfsMaBi4tHITfcRt2M aMNciD7cuCgidYPgVz8tyEORdV9KdI9ywZe2yU5JzkGpGvuhj+Ql8mJ87YnQNg1/ ET2B4OZrxzc/1m3Q1rGb0ZHFIc+9BDNbeyHOTCdrqnfPRhvjyz2JheOzraf4/bXv eJG/pVgPxVumAq2FPJla04PUWcoslgirg2trFHXfLrzOMs1WvWgNQAG3jjrjTIe8 NLoDVI1VsiSjyRGqNhk5dbwO/9tFhQWSmRvelHNyhF5ieLoYCcSDQMVQZEWlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVtp5wtsV7S4bgygFrfjRxgzSVXYwHwYDVR0j BBgwFoAUuXLwc7ivJrhTPpeq+67Bf879b4wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZDE2MTljYi1jMDFjLTQ2MTQtODYzZS1jZTI4OGQ3YmE3NjUvMC9COTcyRjA3M0I4 QUYyNkI4NTMzRTk3QUFGQkFFQzE3RkNFRkQ2RjhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMxN0ZDRUZE NkY4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWQxNjE5Y2ItYzAxYy00NjE0LTg2 M2UtY2UyODhkN2JhNzY1LzAvQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMx N0ZDRUZENkY4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEzqs8PWNbam9AVxpOz+GDNfKN8yWyLlO0In vV250m1q5sVU41XKuxj7AzBNm1S67w8I2elHK+GzL7fb4Txm7nw5q23H1K+Hlq60 adMffYmWbWLmRsVTtdc4B3LvIUJeWAfKj8rSXaJOWU9EOo+pU6i7M9OhLNmOfpJI lpSOLDR3ULu48QnH32zFjTiMWvHHadnDsw3IEjbESW/FtNbY6v9w1NiRy9CS4S5H LQ2FnZmtY2iYk08FvwW4bOm6Nk4d6RsupAlqj3cz/Ly3aWIKAOlaR6L6wt0CqmnD qlO3YmVp9vhEFFtkRsNipIZC80/ibMw2ICdBQaCsJBi6CBpfXlQ= -----END CERTIFICATE-----Generated at Mon Jun 16 11:19:21 2025 by rpki-client