$ rpki-client -vvf repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft File: B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft (raw, json) Hash identifier: 12TsQteThhz6SCjdRAlBGst1Q3HIrLY/R3rq/xoBj40= Subject key identifier: B7:C2:6D:34:74:C1:F7:2C:AB:42:90:A7:02:87:43:F0:80:A6:E5:08 Authority key identifier: B0:73:4A:32:D1:3A:96:FC:B3:FD:F9:82:C2:EE:C5:00:15:04:11:CA Certificate issuer: /CN=B0734A32D13A96FCB3FDF982C2EEC500150411CA Certificate serial: 36D6003AAEFD6F1BFBFF3B605F0797CA4A31B1F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft Manifest number: 01ED Signing time: Mon 16 Jun 2025 14:41:08 +0000 Manifest this update: Mon 16 Jun 2025 14:36:08 +0000 Manifest next update: Thu 19 Jun 2025 16:25:08 +0000 Files and hashes: 1: 3130332e3138372e3232362e302f32332d3234203d3e20313439373238.roa (hash: fcX6dDB/6jZr5p1excLhOSLezwfpNz/DNvOt6VHyTLo=) 2: B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl (hash: Cz/0wm8WsV6L4F82ypMKJV1VxXP3XjhUW6qxYl7HIoE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 16:25:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:d6:00:3a:ae:fd:6f:1b:fb:ff:3b:60:5f:07:97:ca:4a:31:b1:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0734A32D13A96FCB3FDF982C2EEC500150411CA Validity Not Before: Jun 16 14:36:08 2025 GMT Not After : Jun 19 16:25:08 2025 GMT Subject: CN=B7C26D3474C1F72CAB4290A7028743F080A6E508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:af:d4:9b:f8:9f:13:56:b9:e1:a3:b5:f1:8f: e5:f1:93:16:e6:c5:8e:80:69:55:b9:87:44:69:4c: dc:4c:75:46:75:68:b6:72:46:7c:cf:dd:e4:ea:c2: f2:b2:71:73:6a:52:00:f2:25:6d:5e:49:f8:3e:7e: d3:40:69:ef:7c:02:91:fa:75:12:09:33:8f:9c:4b: a7:9f:17:3c:82:f7:f7:6d:5b:22:66:74:36:52:88: a9:38:f8:41:76:07:6d:cd:e8:3a:e6:c4:ae:34:b5: 12:fc:ee:e4:09:86:89:26:de:52:8c:1e:3e:ea:1c: 19:46:27:27:27:24:b9:87:88:52:9a:b9:d7:bd:a5: 09:13:87:fb:80:7a:a0:79:fb:ce:91:70:08:00:74: dd:62:cb:e6:ea:80:1f:eb:82:d5:fa:b5:c1:6f:b8: 51:dd:22:75:ea:28:8c:66:31:14:dd:b0:26:61:98: a8:24:3f:2b:eb:55:aa:32:7f:89:89:44:28:4f:25: 63:d4:53:db:05:16:77:c6:09:07:22:4c:1f:8e:1f: d1:a0:a2:6f:ef:7e:63:d6:c5:9e:1f:02:5c:1a:97: a5:1a:13:aa:00:bf:b2:3d:c9:94:e4:6c:39:ee:83: c8:63:dc:48:1e:35:f9:38:65:b4:7c:63:a2:ca:96: fa:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C2:6D:34:74:C1:F7:2C:AB:42:90:A7:02:87:43:F0:80:A6:E5:08 X509v3 Authority Key Identifier: keyid:B0:73:4A:32:D1:3A:96:FC:B3:FD:F9:82:C2:EE:C5:00:15:04:11:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:7a:cb:46:fc:d8:bf:fe:9d:f4:d4:b5:15:7c:c7:68:a7:e3: fa:5a:a8:51:1a:97:52:09:ac:49:95:72:00:e7:4e:df:1e:d7: a1:03:59:59:a8:21:6a:08:66:09:d1:7b:0c:3b:0e:ad:22:b3: 14:a3:2f:d8:4e:b1:31:dd:e1:41:24:89:8a:a5:fa:2d:a3:34: 1c:df:6f:6a:01:96:be:e9:51:11:e5:b5:38:57:94:aa:d6:e2: e3:fc:33:59:58:07:cf:c9:1c:ce:03:51:0b:c5:e7:ea:da:33: 02:bd:56:a4:95:35:63:da:3d:f6:e9:a0:86:0e:37:54:7f:00: b5:37:37:9f:64:ac:a3:4e:63:ba:b4:2a:85:58:09:ac:9a:03: b6:e4:51:85:a5:e3:5f:06:ec:75:dc:79:99:23:da:3a:3e:a3: dc:d1:3e:4d:5e:c9:34:ab:d1:fb:7c:dd:50:d6:78:b2:85:ea: d6:f9:ea:c2:a9:f4:05:c5:18:cd:c9:e9:16:49:43:3f:1c:0e: c5:ac:a8:df:84:39:c8:44:dd:3e:92:ac:41:7c:4e:e4:09:82: 92:82:e9:04:48:9a:8a:1b:3f:76:57:a4:3a:c6:bf:df:0d:fb: cb:7e:db:71:18:a1:d1:39:0d:3e:e6:2e:7c:e2:e3:80:e5:34: 99:d6:72:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNtYAOq79bxv7/ztgXweXykoxsfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1MDAx NTA0MTFDQTAeFw0yNTA2MTYxNDM2MDhaFw0yNTA2MTkxNjI1MDhaMDMxMTAvBgNV BAMTKEI3QzI2RDM0NzRDMUY3MkNBQjQyOTBBNzAyODc0M0YwODBBNkU1MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmr9Sb+J8TVrnho7Xxj+Xxkxbm xY6AaVW5h0RpTNxMdUZ1aLZyRnzP3eTqwvKycXNqUgDyJW1eSfg+ftNAae98ApH6 dRIJM4+cS6efFzyC9/dtWyJmdDZSiKk4+EF2B23N6DrmxK40tRL87uQJhokm3lKM Hj7qHBlGJycnJLmHiFKaude9pQkTh/uAeqB5+86RcAgAdN1iy+bqgB/rgtX6tcFv uFHdInXqKIxmMRTdsCZhmKgkPyvrVaoyf4mJRChPJWPUU9sFFnfGCQciTB+OH9Gg om/vfmPWxZ4fAlwal6UaE6oAv7I9yZTkbDnug8hj3EgeNfk4ZbR8Y6LKlvqpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt8JtNHTB9yyrQpCnAodD8ICm5QgwHwYDVR0j BBgwFoAUsHNKMtE6lvyz/fmCwu7FABUEEcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjMwOTdmMC0zOTc4LTQ5Y2UtYjY5Yy00YjIwYjRkY2ZiN2UvMC9CMDczNEEzMkQx M0E5NkZDQjNGREY5ODJDMkVFQzUwMDE1MDQxMUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1MDAxNTA0 MTFDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzMDk3ZjAtMzk3OC00OWNlLWI2 OWMtNGIyMGI0ZGNmYjdlLzAvQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1 MDAxNTA0MTFDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFV6y0b82L/+nfTUtRV8x2in4/paqFEal1IJ rEmVcgDnTt8e16EDWVmoIWoIZgnReww7Dq0isxSjL9hOsTHd4UEkiYql+i2jNBzf b2oBlr7pURHltThXlKrW4uP8M1lYB8/JHM4DUQvF5+raMwK9VqSVNWPaPfbpoIYO N1R/ALU3N59krKNOY7q0KoVYCayaA7bkUYWl418G7HXceZkj2jo+o9zRPk1eyTSr 0ft83VDWeLKF6tb56sKp9AXFGM3J6RZJQz8cDsWsqN+EOchE3T6SrEF8TuQJgpKC 6QRImoobP3ZXpDrGv98N+8t+23EYodE5DT7mLnzi44DlNJnWckg= -----END CERTIFICATE-----Generated at Mon Jun 16 19:30:55 2025 by rpki-client