$ rpki-client -vvf repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft File: B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft (raw, json) Hash identifier: KeTjZV8FL+HO8qW9+FhlgenCXfIIcT6RhkXg7IR3VAs= Subject key identifier: 46:27:34:A5:FA:D1:FA:BF:B3:5B:7F:F0:A4:BF:A7:E6:93:65:A7:55 Authority key identifier: B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6 Certificate issuer: /CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6 Certificate serial: 2400D39DC834211EA507E4690F01736566B4E26A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft Manifest number: B4 Signing time: Sun 15 Jun 2025 15:51:54 +0000 Manifest this update: Sun 15 Jun 2025 15:46:54 +0000 Manifest next update: Wed 18 Jun 2025 21:27:54 +0000 Files and hashes: 1: 3130332e372e3130372e302f32342d3234203d3e20313531353939.roa (hash: ZOp7UUJVVpn+HE+2CW6AOz2wc15ptx3FxJXIlhX1FTo=) 2: B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl (hash: 9fUMEPDTmX2qyt3B9eASk/G9YUPnM7EWR2U4FQfF3Do=) 3: 3130332e372e3130362e302f32342d3234203d3e20313531353939.roa (hash: 0rbZlrsZPTaqVhI90ea5Mcg8UbhZvU1fUTVZXNAKo74=) 4: 3130332e372e3130362e302f32332d3233203d3e20313531353939.roa (hash: gKuzS0cjEmgd3PQlr3qETih9wH6v1uECgkfmF5qpn9s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 21:27:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:00:d3:9d:c8:34:21:1e:a5:07:e4:69:0f:01:73:65:66:b4:e2:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6 Validity Not Before: Jun 15 15:46:54 2025 GMT Not After : Jun 18 21:27:54 2025 GMT Subject: CN=462734A5FAD1FABFB35B7FF0A4BFA7E69365A755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0f:88:18:06:d3:9b:83:55:e5:91:a6:b8:4a: 53:07:52:24:e3:5c:17:06:fd:46:f6:06:d2:9a:3d: 6b:03:60:70:f0:4f:05:27:02:08:40:95:80:b5:a5: c2:2b:62:06:63:7f:28:8d:9b:95:da:7c:45:48:76: f4:c1:52:47:15:30:fc:cb:bc:28:98:de:27:32:50: 9d:6d:3b:1e:df:a0:a6:26:f8:06:99:91:bc:f5:9c: e7:a1:8c:db:55:5a:5a:f0:5d:dd:dd:d0:58:6f:80: a6:a6:78:21:de:a7:c2:ab:17:54:cd:00:35:6c:e5: ac:f4:e9:77:cb:b3:c2:fd:ef:95:f6:ef:13:3f:a7: 83:18:d3:a5:be:fd:41:07:44:e3:61:f1:9f:98:76: 22:73:4a:62:45:80:59:b1:52:a6:05:46:d8:03:08: 72:44:d7:f9:70:8c:6d:8b:74:93:1a:98:b1:87:08: 77:86:5d:e2:78:a8:aa:8c:31:3c:ae:fc:62:f5:c2: fe:bd:81:62:ee:fb:b7:19:44:f2:3b:d2:41:ce:c2: 17:43:b1:02:71:d1:69:39:9a:04:c2:fb:eb:68:69: 21:50:e8:d5:37:7b:a4:d6:4f:d5:6f:14:79:c5:02: 91:0b:4b:15:69:60:c1:49:7b:ad:ab:e1:e0:38:fc: 1c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:27:34:A5:FA:D1:FA:BF:B3:5B:7F:F0:A4:BF:A7:E6:93:65:A7:55 X509v3 Authority Key Identifier: keyid:B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:37:f1:7d:b3:52:f1:29:2c:06:54:c2:ef:31:65:20:4a:7e: e2:06:e6:22:77:61:3d:71:5f:13:77:e9:cf:f5:fa:2a:11:6f: 29:7c:28:d7:db:95:d7:1d:ce:a0:c8:6e:a7:5d:08:43:91:7e: 12:32:53:84:7d:b7:82:d4:22:a0:d6:40:15:ec:db:8e:6f:b4: fd:a4:17:31:cf:9c:8d:a0:83:07:21:27:5b:8f:5c:27:b0:68: b8:c9:ca:1f:7a:28:ff:ca:80:4d:f9:9b:0e:e5:fc:b4:4c:2b: c0:ab:57:97:07:e9:78:3a:e2:e6:6a:38:58:ed:49:04:7e:b0: bb:c1:7f:bf:4d:47:b3:73:f2:03:4a:fc:32:27:08:ee:08:c6: a0:92:44:60:6c:4f:b5:89:0e:a3:ce:9e:00:87:f8:c1:32:3c: 52:27:3a:03:2f:12:12:d7:47:9c:0c:94:78:30:eb:84:b8:9d: 17:f2:1e:43:32:a2:41:86:f7:97:0a:8e:c7:be:ad:09:bd:e5: d9:c8:4c:2f:22:86:3b:31:be:4d:0d:41:37:8d:a0:9a:6b:9f: c5:9a:4b:b1:f5:c7:e4:c4:4c:24:30:0c:6c:67:1f:04:7b:af: ad:f2:7d:2f:d9:64:77:35:85:ac:8f:4f:77:5e:65:db:8a:fa: dd:7e:e2:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJADTncg0IR6lB+RpDwFzZWa04mowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZBMTM2 MEMwNkFGNjAeFw0yNTA2MTUxNTQ2NTRaFw0yNTA2MTgyMTI3NTRaMDMxMTAvBgNV BAMTKDQ2MjczNEE1RkFEMUZBQkZCMzVCN0ZGMEE0QkZBN0U2OTM2NUE3NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3D4gYBtObg1Xlkaa4SlMHUiTj XBcG/Ub2BtKaPWsDYHDwTwUnAghAlYC1pcIrYgZjfyiNm5XafEVIdvTBUkcVMPzL vCiY3icyUJ1tOx7foKYm+AaZkbz1nOehjNtVWlrwXd3d0FhvgKameCHep8KrF1TN ADVs5az06XfLs8L975X27xM/p4MY06W+/UEHRONh8Z+YdiJzSmJFgFmxUqYFRtgD CHJE1/lwjG2LdJMamLGHCHeGXeJ4qKqMMTyu/GL1wv69gWLu+7cZRPI70kHOwhdD sQJx0Wk5mgTC++toaSFQ6NU3e6TWT9VvFHnFApELSxVpYMFJe62r4eA4/Bx3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURic0pfrR+r+zW3/wpL+n5pNlp1UwHwYDVR0j BBgwFoAUsXhAK+3j7Fpe4uDnH3NqE2DAavYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTEyNGU2YS1mNTFiLTQ2ZDAtOGVhMy03NmIyNzQ0NTU4YTYvMC9CMTc4NDAyQkVE RTNFQzVBNUVFMkUwRTcxRjczNkExMzYwQzA2QUY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZBMTM2MEMw NkFGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ExMjRlNmEtZjUxYi00NmQwLThl YTMtNzZiMjc0NDU1OGE2LzAvQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZB MTM2MEMwNkFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEg38X2zUvEpLAZUwu8xZSBKfuIG5iJ3YT1x XxN36c/1+ioRbyl8KNfbldcdzqDIbqddCEORfhIyU4R9t4LUIqDWQBXs245vtP2k FzHPnI2ggwchJ1uPXCewaLjJyh96KP/KgE35mw7l/LRMK8CrV5cH6Xg64uZqOFjt SQR+sLvBf79NR7Nz8gNK/DInCO4IxqCSRGBsT7WJDqPOngCH+MEyPFInOgMvEhLX R5wMlHgw64S4nRfyHkMyokGG95cKjse+rQm95dnITC8ihjsxvk0NQTeNoJprn8Wa S7H1x+TETCQwDGxnHwR7r63yfS/ZZHc1hayPT3deZduK+t1+4rE= -----END CERTIFICATE-----Generated at Mon Jun 16 15:38:05 2025 by rpki-client