$ rpki-client -vvf repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.mft File: B2BCF7264F89246583B384F354CB350DF3B6AADB.mft (raw, json) Hash identifier: DiY6Ld1+mTWjDi+xEolQCsvE7q7fsQIWPhKp8frtiT8= Subject key identifier: 17:80:88:BC:DE:72:D6:C9:71:F0:A5:5B:4A:DA:85:E4:C8:EA:85:2B Authority key identifier: B2:BC:F7:26:4F:89:24:65:83:B3:84:F3:54:CB:35:0D:F3:B6:AA:DB Certificate issuer: /CN=B2BCF7264F89246583B384F354CB350DF3B6AADB Certificate serial: 353BFCFA8006EB1C5436C8C2708A0CE765C80FDB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2BCF7264F89246583B384F354CB350DF3B6AADB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.mft Manifest number: 04DF Signing time: Sun 15 Jun 2025 22:12:01 +0000 Manifest this update: Sun 15 Jun 2025 22:07:01 +0000 Manifest next update: Thu 19 Jun 2025 00:57:01 +0000 Files and hashes: 1: B2BCF7264F89246583B384F354CB350DF3B6AADB.crl (hash: pxAtNt5BMXEBa07u9tLWOJ5zNFe2MX/fWDf96r9UE1M=) 2: 3230322e34372e39302e302f32332d3234203d3e203436303230.roa (hash: f31WSeSw8w1qVqSz7UZlMp3AZocd9nv655saAh7fViI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.crl rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2BCF7264F89246583B384F354CB350DF3B6AADB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 00:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:3b:fc:fa:80:06:eb:1c:54:36:c8:c2:70:8a:0c:e7:65:c8:0f:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2BCF7264F89246583B384F354CB350DF3B6AADB Validity Not Before: Jun 15 22:07:01 2025 GMT Not After : Jun 19 00:57:01 2025 GMT Subject: CN=178088BCDE72D6C971F0A55B4ADA85E4C8EA852B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0e:4d:ef:27:32:32:bb:10:08:e2:ab:97:48: ca:59:3a:a0:ff:61:a7:bf:1a:3f:23:b4:20:22:c6: 32:67:73:98:a2:7c:e5:ce:a7:1d:20:c7:40:24:5a: 80:9f:bb:ee:b3:98:31:a5:20:32:b7:a8:9b:c2:05: 25:87:c3:6e:fd:17:97:e8:fb:d5:78:24:5e:ff:84: e9:0c:3f:a7:18:ff:e6:70:ec:f8:e7:35:dc:63:7f: 79:4d:4a:9b:c9:61:28:e0:d7:7d:f4:15:c4:f3:f5: 92:bc:b3:fe:58:44:b6:fc:53:98:be:83:4f:66:ad: b6:71:15:76:d1:20:fb:51:d9:dd:9e:19:1f:a6:fd: ac:81:40:b3:aa:37:2d:ab:b1:2c:95:9a:aa:dd:16: 83:d1:75:53:5e:9f:a6:be:10:00:ab:07:35:b9:77: 1c:ac:c3:84:98:58:c9:1f:34:d7:b1:93:12:b5:12: a5:fa:1f:39:1e:51:99:04:3a:a1:8a:cb:d6:6d:b0: 4b:a1:31:e6:9e:01:cc:b8:cf:f3:33:e4:f1:07:a5: 47:9e:b6:84:2a:6b:a3:13:f9:c7:9f:f6:c3:d5:f2: c1:de:03:9d:9b:97:fe:ae:0b:13:ea:54:ce:de:cd: c5:c5:c0:50:6f:9a:22:74:6d:fd:c0:3e:7d:36:8f: 14:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:80:88:BC:DE:72:D6:C9:71:F0:A5:5B:4A:DA:85:E4:C8:EA:85:2B X509v3 Authority Key Identifier: keyid:B2:BC:F7:26:4F:89:24:65:83:B3:84:F3:54:CB:35:0D:F3:B6:AA:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2BCF7264F89246583B384F354CB350DF3B6AADB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:c7:99:b5:ab:28:f8:ba:d8:28:3b:0b:c9:ae:09:dc:20:f1: 04:92:46:e7:21:fb:86:4e:9f:03:23:a0:62:c5:d3:81:c1:65: 51:fc:ac:0f:1a:ef:27:1c:6c:07:f2:3a:10:09:e4:43:68:7e: 26:27:dc:c8:1b:45:af:7a:e2:a2:d1:d3:c0:7f:41:fe:ef:02: a0:cb:d1:53:d7:d5:dc:21:5c:35:4d:a5:dd:25:24:69:f7:6c: 19:38:33:56:cc:61:16:30:46:5d:6c:be:bb:ab:75:f1:1b:1c: 48:ed:9b:a1:1a:f2:e1:0c:1b:4e:57:3b:19:ed:8c:32:42:d4: 46:cb:43:11:d2:ff:89:a9:4f:e4:26:cc:fc:cb:22:21:1d:59: 57:15:94:09:04:5f:18:b9:d7:d2:c6:c1:b3:53:fd:fd:09:1c: 65:a3:ce:6a:78:32:c1:9c:22:07:d2:d4:50:32:11:f4:a4:e1: 9a:aa:9c:43:6b:16:93:e4:47:b3:9b:a4:e3:92:8d:d3:40:f4: 8f:1d:34:fa:9a:f3:2d:d5:97:3b:bc:12:14:1e:55:07:f9:98: df:e3:06:0b:4d:0c:8f:cd:a7:df:fc:53:2c:ff:b9:3d:c7:11: 7b:a4:f1:72:0d:f1:cd:ba:82:fc:6e:e0:89:d8:cd:45:16:ea: e9:8c:f1:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNTv8+oAG6xxUNsjCcIoM52XID9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJCQ0Y3MjY0Rjg5MjQ2NTgzQjM4NEYzNTRDQjM1MERG M0I2QUFEQjAeFw0yNTA2MTUyMjA3MDFaFw0yNTA2MTkwMDU3MDFaMDMxMTAvBgNV BAMTKDE3ODA4OEJDREU3MkQ2Qzk3MUYwQTU1QjRBREE4NUU0QzhFQTg1MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmDk3vJzIyuxAI4quXSMpZOqD/ Yae/Gj8jtCAixjJnc5iifOXOpx0gx0AkWoCfu+6zmDGlIDK3qJvCBSWHw279F5fo +9V4JF7/hOkMP6cY/+Zw7PjnNdxjf3lNSpvJYSjg1330FcTz9ZK8s/5YRLb8U5i+ g09mrbZxFXbRIPtR2d2eGR+m/ayBQLOqNy2rsSyVmqrdFoPRdVNen6a+EACrBzW5 dxysw4SYWMkfNNexkxK1EqX6HzkeUZkEOqGKy9ZtsEuhMeaeAcy4z/Mz5PEHpUee toQqa6MT+cef9sPV8sHeA52bl/6uCxPqVM7ezcXFwFBvmiJ0bf3APn02jxSJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF4CIvN5y1slx8KVbStqF5MjqhSswHwYDVR0j BBgwFoAUsrz3Jk+JJGWDs4TzVMs1DfO2qtswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmEwYTc3MS02MmQyLTQyMzgtYTQwNi03OTk5ZjIyNDg0OWMvMC9CMkJDRjcyNjRG ODkyNDY1ODNCMzg0RjM1NENCMzUwREYzQjZBQURCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJCQ0Y3MjY0Rjg5MjQ2NTgzQjM4NEYzNTRDQjM1MERGM0I2 QUFEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJhMGE3NzEtNjJkMi00MjM4LWE0 MDYtNzk5OWYyMjQ4NDljLzAvQjJCQ0Y3MjY0Rjg5MjQ2NTgzQjM4NEYzNTRDQjM1 MERGM0I2QUFEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/HmbWrKPi62Cg7C8muCdwg8QSSRuch+4ZO nwMjoGLF04HBZVH8rA8a7yccbAfyOhAJ5ENofiYn3MgbRa964qLR08B/Qf7vAqDL 0VPX1dwhXDVNpd0lJGn3bBk4M1bMYRYwRl1svrurdfEbHEjtm6Ea8uEMG05XOxnt jDJC1EbLQxHS/4mpT+QmzPzLIiEdWVcVlAkEXxi519LGwbNT/f0JHGWjzmp4MsGc IgfS1FAyEfSk4ZqqnENrFpPkR7ObpOOSjdNA9I8dNPqa8y3Vlzu8EhQeVQf5mN/j BgtNDI/Np9/8Uyz/uT3HEXuk8XIN8c26gvxu4InYzUUW6umM8RA= -----END CERTIFICATE-----Generated at Wed Jun 18 02:27:59 2025 by rpki-client