$ rpki-client -vvf repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft File: B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft (raw, json) Hash identifier: gtX+xVvncxcY/UlwC5mMySGHNDMPyt/vkzeGgKUpgls= Subject key identifier: EB:16:05:F0:E8:AD:D3:41:57:40:F2:E5:C1:67:98:37:29:85:E9:C6 Authority key identifier: B2:A7:61:D6:1C:BF:02:4F:24:CD:3A:18:BE:96:E5:8F:7E:D6:C9:09 Certificate issuer: /CN=B2A761D61CBF024F24CD3A18BE96E58F7ED6C909 Certificate serial: 2DE4E5E6D7B029767A16AE52111DD5DF2B390374 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft Manifest number: 04A8 Signing time: Sat 14 Jun 2025 03:31:09 +0000 Manifest this update: Sat 14 Jun 2025 03:26:09 +0000 Manifest next update: Tue 17 Jun 2025 10:51:09 +0000 Files and hashes: 1: B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.crl (hash: M7trlewxCvB/mXssZ2Vd0hgNeoT5eJtUvPbmnWDBNQg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.crl rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 10:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:e4:e5:e6:d7:b0:29:76:7a:16:ae:52:11:1d:d5:df:2b:39:03:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2A761D61CBF024F24CD3A18BE96E58F7ED6C909 Validity Not Before: Jun 14 03:26:09 2025 GMT Not After : Jun 17 10:51:09 2025 GMT Subject: CN=EB1605F0E8ADD3415740F2E5C16798372985E9C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:04:c2:f3:38:f0:03:07:9a:d9:02:c9:2a:4b: 4a:bd:d8:a6:dc:4b:04:fb:18:b1:08:97:cf:68:2b: 51:b0:58:dd:0d:92:de:37:d1:46:d1:48:52:4c:58: f3:11:02:e6:91:89:34:cc:c5:bd:7b:e9:91:dd:d5: f1:26:6c:b1:22:43:e2:96:6a:27:6d:c9:57:ba:ec: 99:43:7b:df:fe:d4:51:55:9d:d5:73:bc:d9:37:9c: ca:7a:c1:33:43:35:fc:47:33:ea:7f:fd:a6:4a:0a: a6:bb:04:cb:ad:e6:ec:06:73:a7:7b:a0:94:e5:e8: 31:b9:21:e9:c3:3e:a1:bd:d1:cc:92:41:e8:c9:11: 90:0f:98:01:96:8c:2a:fd:09:c2:de:8a:fa:9b:a2: 7e:2d:fb:85:39:c8:73:2d:93:c1:c0:e1:b9:24:67: c2:34:90:19:68:ea:be:0e:26:81:6f:d8:50:7a:96: 85:71:75:c0:2c:6c:1e:56:a9:d1:e0:e5:c0:c4:5f: 4a:6e:2e:f3:96:2f:e6:a3:5b:66:e1:62:79:b2:19: a2:a6:00:57:3b:f0:29:fa:f1:ea:ed:11:b4:52:d7: 63:a2:3d:ce:31:75:8c:93:49:bc:be:2b:9d:d7:c9: 65:63:4d:6e:16:a5:92:d4:a3:05:9c:f7:c1:e7:f1: 52:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:16:05:F0:E8:AD:D3:41:57:40:F2:E5:C1:67:98:37:29:85:E9:C6 X509v3 Authority Key Identifier: keyid:B2:A7:61:D6:1C:BF:02:4F:24:CD:3A:18:BE:96:E5:8F:7E:D6:C9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:a5:0b:6f:69:07:f4:1c:68:13:a3:c9:58:e0:a1:e3:0c:64: 38:23:09:73:4d:3b:5b:1d:4a:d7:49:6a:e7:75:86:06:54:7d: 23:a1:56:a2:ef:bd:35:49:32:35:e2:86:86:f6:b4:3d:16:a8: 22:ec:15:85:1f:7a:71:19:72:c5:f9:ed:93:cc:22:87:cf:5e: cf:ef:97:3c:1c:75:a7:39:4f:c0:92:ea:30:69:35:a4:ff:d1: 00:92:64:be:12:5d:ca:ff:25:5c:76:e8:0e:e5:e3:e5:ba:17: 3a:ee:2a:9d:f3:5a:d9:1a:c0:8b:6e:fc:16:ad:6e:93:ac:0e: 3d:9d:87:41:63:8e:78:a4:9c:9a:61:a8:b2:4c:65:72:8f:a9: 49:8c:70:f9:81:b7:08:64:ab:a1:cb:f7:53:9a:cc:a4:cf:77: 59:33:b9:a0:e1:ed:d2:eb:72:4b:98:57:f6:5f:3a:fd:40:4a: 61:dd:90:2f:64:92:fc:d0:18:ca:53:66:d3:c6:2d:fb:32:f4: 1c:53:5e:5e:9f:0f:3f:fc:fc:8f:51:d4:23:52:e4:da:5f:d2: 88:af:32:8b:07:04:b5:e4:e7:d5:f2:ef:e5:2f:fc:53:25:5d: c1:38:6c:6a:b8:d2:fe:04:d9:23:8c:46:4b:01:1a:1b:b7:fa: a0:67:6f:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULeTl5tewKXZ6Fq5SER3V3ys5A3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJBNzYxRDYxQ0JGMDI0RjI0Q0QzQTE4QkU5NkU1OEY3 RUQ2QzkwOTAeFw0yNTA2MTQwMzI2MDlaFw0yNTA2MTcxMDUxMDlaMDMxMTAvBgNV BAMTKEVCMTYwNUYwRThBREQzNDE1NzQwRjJFNUMxNjc5ODM3Mjk4NUU5QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvBMLzOPADB5rZAskqS0q92Kbc SwT7GLEIl89oK1GwWN0Nkt430UbRSFJMWPMRAuaRiTTMxb176ZHd1fEmbLEiQ+KW aidtyVe67JlDe9/+1FFVndVzvNk3nMp6wTNDNfxHM+p//aZKCqa7BMut5uwGc6d7 oJTl6DG5IenDPqG90cySQejJEZAPmAGWjCr9CcLeivqbon4t+4U5yHMtk8HA4bkk Z8I0kBlo6r4OJoFv2FB6loVxdcAsbB5WqdHg5cDEX0puLvOWL+ajW2bhYnmyGaKm AFc78Cn68ertEbRS12OiPc4xdYyTSby+K53XyWVjTW4WpZLUowWc98Hn8VK9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6xYF8Oit00FXQPLlwWeYNymF6cYwHwYDVR0j BBgwFoAUsqdh1hy/Ak8kzToYvpblj37WyQkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YmE5N2IwYi0zOWFlLTRjMmMtYjEzYi0wMWUzOTViN2EyNGIvMC9CMkE3NjFENjFD QkYwMjRGMjRDRDNBMThCRTk2RTU4RjdFRDZDOTA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJBNzYxRDYxQ0JGMDI0RjI0Q0QzQTE4QkU5NkU1OEY3RUQ2 QzkwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmJhOTdiMGItMzlhZS00YzJjLWIx M2ItMDFlMzk1YjdhMjRiLzAvQjJBNzYxRDYxQ0JGMDI0RjI0Q0QzQTE4QkU5NkU1 OEY3RUQ2QzkwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALalC29pB/QcaBOjyVjgoeMMZDgjCXNNO1sd StdJaud1hgZUfSOhVqLvvTVJMjXihob2tD0WqCLsFYUfenEZcsX57ZPMIofPXs/v lzwcdac5T8CS6jBpNaT/0QCSZL4SXcr/JVx26A7l4+W6FzruKp3zWtkawItu/Bat bpOsDj2dh0FjjniknJphqLJMZXKPqUmMcPmBtwhkq6HL91OazKTPd1kzuaDh7dLr ckuYV/ZfOv1ASmHdkC9kkvzQGMpTZtPGLfsy9BxTXl6fDz/8/I9R1CNS5Npf0oiv MosHBLXk59Xy7+Uv/FMlXcE4bGq40v4E2SOMRksBGhu3+qBnb2M= -----END CERTIFICATE-----Generated at Mon Jun 16 06:14:44 2025 by rpki-client