$ rpki-client -vvf repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft File: B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft (raw, json) Hash identifier: BywpRq9Mi4t3H+rNqTWulpyPzIO0leDVrrUkmTIA6y4= Subject key identifier: 01:B8:70:CB:65:9A:15:98:E4:72:63:A2:75:97:0B:89:FD:E8:66:3A Authority key identifier: B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7 Certificate issuer: /CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7 Certificate serial: 02822F852FA76A0DEFC6BC9C09396478D2AEFBA7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft Manifest number: 016E Signing time: Mon 16 Jun 2025 18:40:37 +0000 Manifest this update: Mon 16 Jun 2025 18:35:37 +0000 Manifest next update: Thu 19 Jun 2025 20:05:37 +0000 Files and hashes: 1: 3130332e3138352e3139372e302f32342d3234203d3e20313333333535.roa (hash: PjJ5xaEmVECnvYiFxtFmdeDestY/+54rJNs+3F7mqcY=) 2: 3130332e3230392e3133312e302f32342d3234203d3e20313333333535.roa (hash: j+U4AErtYzwumrbJ7yEuFWr2i7wA+4c75xZyRtRhbQ4=) 3: B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl (hash: N7/jBfIGAgOm4PJDYYKhw6GbaDggcGrYXkgSOi/by2w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:05:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:82:2f:85:2f:a7:6a:0d:ef:c6:bc:9c:09:39:64:78:d2:ae:fb:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7 Validity Not Before: Jun 16 18:35:37 2025 GMT Not After : Jun 19 20:05:37 2025 GMT Subject: CN=01B870CB659A1598E47263A275970B89FDE8663A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:14:03:bc:14:92:3b:53:97:5c:2d:96:a7:9b: d7:64:c4:c7:96:1d:3b:ab:aa:49:e2:ab:7a:8e:7f: cc:3b:03:38:8b:91:ab:02:84:3f:80:88:17:f4:ba: 2a:ad:f4:13:0f:e2:02:65:32:ed:0c:e0:4c:a3:42: a3:e7:db:aa:4a:8d:33:a7:7f:7d:eb:eb:d5:00:3a: f5:f1:7a:4f:9c:21:67:2f:59:89:8a:16:ea:ea:3b: c7:27:de:fa:f9:79:93:e4:7b:68:ac:3c:f7:a2:a0: f7:04:e0:65:0c:89:f5:19:11:17:89:b7:29:97:cc: d1:44:50:1c:43:90:14:4f:d4:f6:7f:d9:d2:2b:df: 3d:43:78:3d:9b:c3:2b:17:ad:af:77:ab:c9:16:b5: 72:4e:a0:cf:d4:3c:07:a1:a1:eb:b5:ec:c1:73:1a: d6:2a:8a:48:7e:6c:dd:b5:3c:b4:4b:83:06:cc:ce: 96:dd:bb:ef:59:a7:17:d7:d0:d2:51:2a:b6:59:ef: d0:72:ed:05:a4:99:7b:e3:86:78:cb:8d:bf:67:52: f6:d9:78:d4:0e:3d:c9:b0:2b:02:21:29:20:b7:b7: 25:96:a1:63:1d:c6:c1:92:91:67:3b:b2:41:00:c1: 7f:42:05:38:31:5b:f0:72:a0:13:c8:43:15:b1:e6: 6d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B8:70:CB:65:9A:15:98:E4:72:63:A2:75:97:0B:89:FD:E8:66:3A X509v3 Authority Key Identifier: keyid:B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:a9:41:f4:f7:59:21:4e:ea:20:97:37:36:6d:09:4f:73:b0: 50:d3:49:1d:0f:3c:a4:9e:47:f5:28:65:a5:9b:87:79:9d:6e: fc:11:e7:40:71:a0:71:bf:d2:b9:13:50:b0:db:0b:7d:64:f4: db:70:bf:8b:3d:a0:9d:d9:c2:f0:3b:ba:d4:ad:b3:1c:1b:8f: 8e:d4:fb:7b:08:35:dd:6a:33:ce:77:98:1f:a5:f7:b2:00:17: da:63:35:0a:9b:86:4d:7c:72:f1:2b:61:8d:ce:e6:9c:a7:fb: d6:94:d8:78:33:b2:54:f4:2e:55:f0:4b:a5:4f:a0:7a:17:c7: e3:4e:30:ff:a7:e0:b0:52:ec:a5:2a:9a:d0:95:23:f2:73:4b: 71:d4:65:98:48:9e:a3:5a:31:7a:14:58:e4:f0:fe:5d:0f:ae: 81:c7:0e:b4:d4:e8:12:50:40:54:ad:de:1c:09:83:28:8c:dc: 14:cc:cd:6e:30:01:10:18:42:72:6a:c9:a2:40:4c:10:52:d1: 9b:6a:b8:d4:6f:cf:26:84:8a:6e:a2:02:4b:ec:07:ef:95:08: ed:87:a5:7a:29:5a:c8:09:b1:2b:b2:a3:54:97:e1:19:78:f9: 74:9a:55:d6:02:2a:66:52:f2:bb:ea:5c:ba:b4:e5:22:75:e5: 44:8c:aa:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAoIvhS+nag3vxrycCTlkeNKu+6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYwQUYz QTgxRkZGNzAeFw0yNTA2MTYxODM1MzdaFw0yNTA2MTkyMDA1MzdaMDMxMTAvBgNV BAMTKDAxQjg3MENCNjU5QTE1OThFNDcyNjNBMjc1OTcwQjg5RkRFODY2M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdFAO8FJI7U5dcLZanm9dkxMeW HTurqkniq3qOf8w7AziLkasChD+AiBf0uiqt9BMP4gJlMu0M4EyjQqPn26pKjTOn f33r69UAOvXxek+cIWcvWYmKFurqO8cn3vr5eZPke2isPPeioPcE4GUMifUZEReJ tymXzNFEUBxDkBRP1PZ/2dIr3z1DeD2bwysXra93q8kWtXJOoM/UPAehoeu17MFz GtYqikh+bN21PLRLgwbMzpbdu+9ZpxfX0NJRKrZZ79By7QWkmXvjhnjLjb9nUvbZ eNQOPcmwKwIhKSC3tyWWoWMdxsGSkWc7skEAwX9CBTgxW/ByoBPIQxWx5m0BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAbhwy2WaFZjkcmOidZcLif3oZjowHwYDVR0j BBgwFoAUub62DNYiTUHzM6B+GCDwrzqB//cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MWY4N2Y1YS1mNmY5LTQ2OGQtODk1ZS0zMTQ0ODdmNWUyNWUvMC9COUJFQjYwQ0Q2 MjI0RDQxRjMzM0EwN0UxODIwRjBBRjNBODFGRkY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYwQUYzQTgx RkZGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjFmODdmNWEtZjZmOS00NjhkLTg5 NWUtMzE0NDg3ZjVlMjVlLzAvQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYw QUYzQTgxRkZGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABepQfT3WSFO6iCXNzZtCU9zsFDTSR0PPKSe R/UoZaWbh3mdbvwR50BxoHG/0rkTULDbC31k9Ntwv4s9oJ3ZwvA7utStsxwbj47U +3sINd1qM853mB+l97IAF9pjNQqbhk18cvErYY3O5pyn+9aU2HgzslT0LlXwS6VP oHoXx+NOMP+n4LBS7KUqmtCVI/JzS3HUZZhInqNaMXoUWOTw/l0ProHHDrTU6BJQ QFSt3hwJgyiM3BTMzW4wARAYQnJqyaJATBBS0ZtquNRvzyaEim6iAkvsB++VCO2H pXopWsgJsSuyo1SX4Rl4+XSaVdYCKmZS8rvqXLq05SJ15USMqhQ= -----END CERTIFICATE-----Generated at Mon Jun 16 21:09:53 2025 by rpki-client