$ rpki-client -vvf repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft File: B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft (raw, json) Hash identifier: LKrJeNatUnU7aKSUfLYMD1dmgy3+pAVbEWhro859dIk= Subject key identifier: 37:82:4D:95:B9:36:B8:C7:0F:AF:2A:B9:FA:08:EE:A5:9E:0F:47:EC Authority key identifier: B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4 Certificate issuer: /CN=B877CD1C542C3DE2CBB8EF151F179B857E9376E4 Certificate serial: 3351F97829D60AA588E24D5D5156DDED46A2813E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft Manifest number: 015D Signing time: Sun 15 Jun 2025 20:22:27 +0000 Manifest this update: Sun 15 Jun 2025 20:17:27 +0000 Manifest next update: Thu 19 Jun 2025 01:59:27 +0000 Files and hashes: 1: B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl (hash: uAXQ3xzTL24iHMgMBgtoHCshCdqFux5pmkCxGUsCPDM=) 2: 3136302e32302e3232322e302f32342d3234203d3e20313338303737.roa (hash: Khtj9hE0U7S7GxsTQLAztRkAFMW84uHyWmMZ0EjXpnw=) 3: 3131372e3130332e3131362e302f32342d3234203d3e20313339333838.roa (hash: SSiq3G+RuqOFkkVg6s948sz9LneDSoc/8S7pdjqZm9U=) 4: 3130332e3133302e3139382e302f32332d3234203d3e20313338303737.roa (hash: Mwvu/CaE5deApG/isN7cjUZhnbfHoZ3qdsbJEM4tty0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 01:59:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:51:f9:78:29:d6:0a:a5:88:e2:4d:5d:51:56:dd:ed:46:a2:81:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B877CD1C542C3DE2CBB8EF151F179B857E9376E4 Validity Not Before: Jun 15 20:17:27 2025 GMT Not After : Jun 19 01:59:27 2025 GMT Subject: CN=37824D95B936B8C70FAF2AB9FA08EEA59E0F47EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ee:fa:01:29:63:55:0e:5e:17:f3:04:3b:9f: 2f:94:6e:33:76:f4:93:2a:63:e9:ff:af:ca:bb:ab: 05:82:a9:b0:bb:1c:a2:c3:a2:ac:eb:9d:9a:24:86: 84:a9:1e:fc:df:03:ed:b4:93:3a:f6:61:23:f4:f7: a5:66:1a:8a:ac:a8:b3:2a:53:2c:f5:7b:21:4c:f5: 7f:e5:84:e0:72:e7:bd:86:1c:74:89:04:6b:1c:9c: 16:21:58:96:be:24:2d:cb:0f:8b:ba:b3:29:dc:2d: f2:73:81:e1:9c:1d:09:4c:95:ca:87:9e:00:36:80: fc:fb:cd:c6:0e:64:3a:77:38:f8:31:e2:4d:09:84: 40:81:0c:cd:99:46:9c:e3:81:e4:84:a6:c9:90:9e: a6:46:ee:46:40:c7:ed:db:51:9a:40:77:7b:48:73: 29:7e:f8:d8:a8:e6:5c:20:06:c1:d3:a6:6a:4b:ae: b6:e2:8a:49:18:b6:42:bb:d9:dd:48:cc:86:c5:9d: 27:c4:ae:c8:9d:f2:79:29:6a:0f:58:71:65:ec:a1: 8b:d1:ac:0b:58:44:51:3e:0a:a2:52:9e:76:31:75: e3:2f:8e:22:84:b0:63:84:4d:9c:2a:5a:e4:3a:6c: 1a:e4:5e:46:65:76:db:3f:a9:97:22:4a:ef:fa:98: 17:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:82:4D:95:B9:36:B8:C7:0F:AF:2A:B9:FA:08:EE:A5:9E:0F:47:EC X509v3 Authority Key Identifier: keyid:B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:40:20:4a:bc:09:18:13:f8:3f:02:18:dc:87:9e:02:4a:29: ae:30:7f:1e:53:21:2f:2a:6f:a8:c6:50:b1:db:60:21:21:d6: a1:d7:96:30:8e:51:5b:85:d7:f3:0c:1d:0f:b9:a2:fc:dc:81: ae:7d:e7:af:c9:44:ca:c5:d4:49:76:cf:b7:0c:20:1a:3b:7c: d4:13:c8:b5:2b:75:2d:52:7e:30:d0:e3:87:4c:7b:c3:53:77: e3:ca:6d:b4:20:63:2a:93:ba:83:48:f2:f2:8e:82:96:c1:99: 67:1a:46:fb:6a:db:c6:ec:00:c8:0a:ca:d7:e8:96:0b:92:d5: c8:64:64:01:a0:49:da:30:67:2d:14:af:4f:4f:41:3b:15:12: f7:5b:00:4d:75:56:5a:71:85:f5:cf:ae:c5:f2:a2:a6:ac:bd: be:9d:c0:61:dc:0d:4b:37:cc:d3:46:94:d1:99:df:a2:57:71: 8c:cf:ab:1c:3e:09:6e:a1:3f:d3:19:08:4e:a0:f6:99:a9:29: 9a:e7:3a:4f:5a:db:1c:07:2f:3b:9a:d3:54:fe:ac:a2:d8:b4: b6:0c:e7:3d:cf:52:69:81:1d:7e:ec:40:5b:83:51:09:31:c6: c8:56:8b:81:d5:55:57:d8:ac:1f:69:ac:f0:0b:b0:23:99:92: ee:96:d2:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM1H5eCnWCqWI4k1dUVbd7UaigT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg3N0NEMUM1NDJDM0RFMkNCQjhFRjE1MUYxNzlCODU3 RTkzNzZFNDAeFw0yNTA2MTUyMDE3MjdaFw0yNTA2MTkwMTU5MjdaMDMxMTAvBgNV BAMTKDM3ODI0RDk1QjkzNkI4QzcwRkFGMkFCOUZBMDhFRUE1OUUwRjQ3RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi7voBKWNVDl4X8wQ7ny+UbjN2 9JMqY+n/r8q7qwWCqbC7HKLDoqzrnZokhoSpHvzfA+20kzr2YSP096VmGoqsqLMq Uyz1eyFM9X/lhOBy572GHHSJBGscnBYhWJa+JC3LD4u6syncLfJzgeGcHQlMlcqH ngA2gPz7zcYOZDp3OPgx4k0JhECBDM2ZRpzjgeSEpsmQnqZG7kZAx+3bUZpAd3tI cyl++Nio5lwgBsHTpmpLrrbiikkYtkK72d1IzIbFnSfErsid8nkpag9YcWXsoYvR rAtYRFE+CqJSnnYxdeMvjiKEsGOETZwqWuQ6bBrkXkZldts/qZciSu/6mBdxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN4JNlbk2uMcPryq5+gjupZ4PR+wwHwYDVR0j BBgwFoAUuHfNHFQsPeLLuO8VHxebhX6TduQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjZkMTg1ZS1kNGY0LTQ4MjAtYjRiNi03OThjMzA3YWQ3ZTUvMC9CODc3Q0QxQzU0 MkMzREUyQ0JCOEVGMTUxRjE3OUI4NTdFOTM3NkU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg3N0NEMUM1NDJDM0RFMkNCQjhFRjE1MUYxNzlCODU3RTkz NzZFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWY2ZDE4NWUtZDRmNC00ODIwLWI0 YjYtNzk4YzMwN2FkN2U1LzAvQjg3N0NEMUM1NDJDM0RFMkNCQjhFRjE1MUYxNzlC ODU3RTkzNzZFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKRAIEq8CRgT+D8CGNyHngJKKa4wfx5TIS8q b6jGULHbYCEh1qHXljCOUVuF1/MMHQ+5ovzcga5956/JRMrF1El2z7cMIBo7fNQT yLUrdS1SfjDQ44dMe8NTd+PKbbQgYyqTuoNI8vKOgpbBmWcaRvtq28bsAMgKytfo lguS1chkZAGgSdowZy0Ur09PQTsVEvdbAE11VlpxhfXPrsXyoqasvb6dwGHcDUs3 zNNGlNGZ36JXcYzPqxw+CW6hP9MZCE6g9pmpKZrnOk9a2xwHLzua01T+rKLYtLYM 5z3PUmmBHX7sQFuDUQkxxshWi4HVVVfYrB9prPALsCOZku6W0uU= -----END CERTIFICATE-----Generated at Mon Jun 16 21:24:02 2025 by rpki-client