$ rpki-client -vvf repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft File: 0BB3D1874063172B5374865233070332233FB7B3.mft (raw, json) Hash identifier: HW0cjrR5OJ4JUmLr30tW6igJ0mmdn+UG1/cjHPXcZwA= Subject key identifier: 72:96:8B:2E:4B:38:DC:30:47:C8:80:8C:9A:06:A9:33:2E:A5:DB:6A Authority key identifier: 0B:B3:D1:87:40:63:17:2B:53:74:86:52:33:07:03:32:23:3F:B7:B3 Certificate issuer: /CN=0BB3D1874063172B5374865233070332233FB7B3 Certificate serial: 331C8959961B4BE255F862D4A2CA6E17EC233279 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB3D1874063172B5374865233070332233FB7B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft Manifest number: 04F5 Signing time: Sun 10 Aug 2025 01:21:27 +0000 Manifest this update: Sun 10 Aug 2025 01:16:27 +0000 Manifest next update: Wed 13 Aug 2025 11:33:27 +0000 Files and hashes: 1: 0BB3D1874063172B5374865233070332233FB7B3.crl (hash: JpVLg0EISNHbCZT5xy1jPznZiZY4yNONLbRadqz/cZk=) 2: 3131372e3130342e3139322e302f31392d3234203d3e203233363636.roa (hash: zCm8uejNjkpY+DjdGXgrEnekcPvtN86UHanFShqlM6g=) 3: 3230322e3135332e31362e302f32302d3234203d3e203233363636.roa (hash: 5FOROrvQq+0t+Mk/ACrrEVqg06jInBJCBz0qroNhCeU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.crl rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB3D1874063172B5374865233070332233FB7B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 11:33:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:1c:89:59:96:1b:4b:e2:55:f8:62:d4:a2:ca:6e:17:ec:23:32:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BB3D1874063172B5374865233070332233FB7B3 Validity Not Before: Aug 10 01:16:27 2025 GMT Not After : Aug 13 11:33:27 2025 GMT Subject: CN=72968B2E4B38DC3047C8808C9A06A9332EA5DB6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a7:9a:24:88:a4:23:cb:09:97:05:64:4c:eb: fd:f1:6e:aa:b3:f6:f6:69:50:e6:22:45:34:57:27: 94:04:81:73:35:60:f3:9d:9c:05:40:87:9d:58:65: 3d:03:28:bb:69:3f:c8:ff:ff:5b:b3:66:65:fa:9c: a4:0e:33:19:25:83:52:06:d9:18:fb:a3:7d:82:62: f5:94:e8:83:43:1c:e0:0d:5b:54:32:23:92:01:25: 81:70:8a:bd:72:39:c9:a1:b3:4a:f5:eb:cc:4d:0d: 89:df:e5:f0:2c:67:c6:db:be:d6:1f:f1:6d:9b:b8: d9:7c:8a:03:ab:d2:65:db:44:cb:e4:38:86:be:49: b5:7c:1d:b9:de:b7:0e:ee:fb:6e:33:61:a9:8d:78: 67:57:d4:47:81:3f:7a:d0:59:5d:bf:72:53:91:d5: 32:7b:8c:2d:0f:05:94:03:80:9a:94:81:f6:d3:3e: 97:a4:9b:97:70:49:aa:30:fd:1c:13:79:a4:b3:fd: 6b:20:13:02:5a:b6:8b:8b:f3:52:ec:11:5e:65:d9: 41:36:bc:94:b4:b3:f1:e9:da:e3:f7:97:87:7a:2c: 12:ef:d0:f0:60:17:ab:82:5d:aa:f2:9f:df:c3:18: 33:f0:0c:fd:c6:3f:6d:f4:d4:bc:ba:73:8a:b7:9b: bd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:96:8B:2E:4B:38:DC:30:47:C8:80:8C:9A:06:A9:33:2E:A5:DB:6A X509v3 Authority Key Identifier: keyid:0B:B3:D1:87:40:63:17:2B:53:74:86:52:33:07:03:32:23:3F:B7:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB3D1874063172B5374865233070332233FB7B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:84:ff:d5:37:d6:dc:bf:22:0e:4d:fc:5a:6c:cd:af:83:db: 18:ce:24:e8:cc:99:8d:6a:cc:70:f8:cf:f0:7a:19:98:4d:d4: a4:57:1d:41:50:89:0b:e3:76:f0:1f:df:80:10:f8:cb:9b:ab: c8:06:40:86:c6:95:b4:66:ca:91:b6:43:c3:69:45:0c:f3:5c: 17:78:60:41:f4:83:a8:30:35:65:bd:76:f0:cf:dc:6d:f5:6f: 88:17:18:05:28:ff:21:fe:ad:46:7e:53:8e:e3:79:b9:dc:3b: f2:80:32:1a:54:ce:c5:73:57:d2:9a:e2:b1:45:61:87:a5:02: 2b:24:9d:e1:78:cb:f8:4e:ec:17:5a:13:79:d6:25:40:52:be: d9:e1:2d:f1:29:d8:88:dc:6c:76:8a:b9:eb:58:db:b6:26:50: db:e4:86:70:6c:4d:6a:64:ef:89:9f:2c:0f:c8:04:d1:4a:df: e9:cd:eb:3c:54:a0:57:50:09:78:8a:d1:b9:ce:53:de:9f:20: 1f:2b:85:4e:e8:e5:0f:98:50:cb:11:7b:fa:fb:78:dc:39:d4: 95:0e:07:bb:7f:98:25:32:f4:73:5b:aa:2e:43:01:20:51:67: f9:6d:2a:b2:15:58:3e:a5:15:d2:15:1b:57:e1:ba:ee:68:d8: 0a:a9:68:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMxyJWZYbS+JV+GLUospuF+wjMnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJCM0QxODc0MDYzMTcyQjUzNzQ4NjUyMzMwNzAzMzIy MzNGQjdCMzAeFw0yNTA4MTAwMTE2MjdaFw0yNTA4MTMxMTMzMjdaMDMxMTAvBgNV BAMTKDcyOTY4QjJFNEIzOERDMzA0N0M4ODA4QzlBMDZBOTMzMkVBNURCNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmp5okiKQjywmXBWRM6/3xbqqz 9vZpUOYiRTRXJ5QEgXM1YPOdnAVAh51YZT0DKLtpP8j//1uzZmX6nKQOMxklg1IG 2Rj7o32CYvWU6INDHOANW1QyI5IBJYFwir1yOcmhs0r168xNDYnf5fAsZ8bbvtYf 8W2buNl8igOr0mXbRMvkOIa+SbV8Hbnetw7u+24zYamNeGdX1EeBP3rQWV2/clOR 1TJ7jC0PBZQDgJqUgfbTPpekm5dwSaow/RwTeaSz/WsgEwJatouL81LsEV5l2UE2 vJS0s/Hp2uP3l4d6LBLv0PBgF6uCXaryn9/DGDPwDP3GP2301Ly6c4q3m725AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcpaLLks43DBHyICMmgapMy6l22owHwYDVR0j BBgwFoAUC7PRh0BjFytTdIZSMwcDMiM/t7MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTkwOGI4My03ZjQ0LTQ2ZTAtODUzNS02ZmI4NGI1OWQ1OGEvMC8wQkIzRDE4NzQw NjMxNzJCNTM3NDg2NTIzMzA3MDMzMjIzM0ZCN0IzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEJCM0QxODc0MDYzMTcyQjUzNzQ4NjUyMzMwNzAzMzIyMzNG QjdCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU5MDhiODMtN2Y0NC00NmUwLTg1 MzUtNmZiODRiNTlkNThhLzAvMEJCM0QxODc0MDYzMTcyQjUzNzQ4NjUyMzMwNzAz MzIyMzNGQjdCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADKE/9U31ty/Ig5N/Fpsza+D2xjOJOjMmY1q zHD4z/B6GZhN1KRXHUFQiQvjdvAf34AQ+Mubq8gGQIbGlbRmypG2Q8NpRQzzXBd4 YEH0g6gwNWW9dvDP3G31b4gXGAUo/yH+rUZ+U47jebncO/KAMhpUzsVzV9Ka4rFF YYelAiskneF4y/hO7BdaE3nWJUBSvtnhLfEp2IjcbHaKuetY27YmUNvkhnBsTWpk 74mfLA/IBNFK3+nN6zxUoFdQCXiK0bnOU96fIB8rhU7o5Q+YUMsRe/r7eNw51JUO B7t/mCUy9HNbqi5DASBRZ/ltKrIVWD6lFdIVG1fhuu5o2AqpaGY= -----END CERTIFICATE-----Generated at Mon Aug 11 04:08:03 2025 by rpki-client