$ rpki-client -vvf repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft File: B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft (raw, json) Hash identifier: f9+Nu3tw69g/VvQVAibelldyE7Ovzk6ZjrY0t+cTZas= Subject key identifier: 88:86:3A:FC:E4:40:D1:73:A6:47:30:72:3E:7E:9E:1C:B3:F0:21:D2 Authority key identifier: B8:43:6A:CB:7C:E8:F8:C2:F5:72:45:FF:E4:E6:BA:2F:52:39:3F:4D Certificate issuer: /CN=B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D Certificate serial: 347FF00E304A4D408E42427010217470AEC315F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft Manifest number: 0346 Signing time: Sun 15 Jun 2025 06:51:46 +0000 Manifest this update: Sun 15 Jun 2025 06:46:46 +0000 Manifest next update: Wed 18 Jun 2025 08:32:46 +0000 Files and hashes: 1: 3130332e3135342e32342e302f32332d3233203d3e20313430343738.roa (hash: s1nmEcWlMGfpOr6XkgkIDAhuvP77SQ9zj5c2Qr3sr/E=) 2: B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl (hash: ypUuL3AnXgzHfHModuJyKgAQAwG++bQ3JEYluMzdmZs=) 3: 3130332e3135342e32352e302f32342d3234203d3e20313430343738.roa (hash: YWVKY2G+Nvg6caG2vXoeK6bw0DFIbKqpsrtcWOftF08=) 4: 3130332e3135342e32342e302f32342d3234203d3e20313430343738.roa (hash: OPJ+0bfTR2bNFtVvMzF36s5tfMJLI0pXwTypT9BsLeE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 08:32:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:7f:f0:0e:30:4a:4d:40:8e:42:42:70:10:21:74:70:ae:c3:15:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D Validity Not Before: Jun 15 06:46:46 2025 GMT Not After : Jun 18 08:32:46 2025 GMT Subject: CN=88863AFCE440D173A64730723E7E9E1CB3F021D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e3:70:96:9c:6d:96:8a:cd:6d:2a:e5:f9:f6: 60:d5:72:b2:ea:db:ab:bb:95:7b:5d:6c:f1:80:c7: ef:e9:09:35:f9:c5:ff:c3:9c:79:77:ff:c5:19:af: 36:98:f1:66:b6:b3:c0:9a:75:91:c5:0a:b1:6b:c7: ac:7c:11:30:3c:4f:83:6e:f9:0b:b4:6c:bc:cb:d3: e1:42:2d:ff:8d:f9:d2:cc:08:d9:dc:74:d8:0c:3f: 40:cf:48:9e:5e:53:ae:1c:fc:e3:5c:57:95:0f:65: d6:33:60:4e:af:2b:a8:a3:28:f7:f3:7f:a1:fc:cc: 33:2c:9d:5e:e7:d2:17:9d:ef:7d:44:0a:d8:64:9c: 1d:09:be:ba:f2:3a:ed:63:72:c8:22:bf:4b:d6:1c: e8:2d:c5:98:16:e2:bd:04:f3:ca:ca:bc:25:27:93: 44:26:a0:51:01:a9:bf:8d:48:a5:4c:a9:3e:d4:22: 10:cb:e8:94:e2:a0:4b:f0:79:1a:45:e8:14:1c:86: 12:1c:07:dd:45:ee:3d:0c:33:e0:ed:ef:ca:38:a2: e5:62:29:e4:53:7b:ad:bc:89:cc:3d:b0:a4:c1:10: 07:9b:05:42:0e:8d:13:06:e2:5c:20:37:2c:82:ea: fa:6c:a6:23:26:5a:42:89:c3:88:9f:80:9e:fb:cf: 77:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:86:3A:FC:E4:40:D1:73:A6:47:30:72:3E:7E:9E:1C:B3:F0:21:D2 X509v3 Authority Key Identifier: keyid:B8:43:6A:CB:7C:E8:F8:C2:F5:72:45:FF:E4:E6:BA:2F:52:39:3F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:92:a7:06:ec:69:57:ba:ea:c6:47:ea:b3:97:b4:de:19:1b: 26:df:33:76:b6:26:ea:44:ee:33:1a:e3:3e:8c:97:10:95:a1: b9:82:0c:fe:3e:7d:87:f3:f8:cb:8b:69:d2:f3:82:ee:43:36: 5c:ab:65:c4:c8:66:31:97:33:d4:56:c8:7c:8a:38:a3:07:0f: e5:05:12:4c:70:c5:1e:74:c7:ad:d5:3e:fd:99:af:53:d9:8b: 2c:37:a5:d6:73:23:d7:ce:4d:9c:ae:c8:9b:58:10:3f:54:03: 2a:3e:fd:28:ec:f3:69:01:ba:1e:5d:0e:35:8e:fa:a9:25:bc: 26:a5:17:fe:9f:73:c8:b5:d7:0b:38:cd:0d:42:3d:85:be:a8: 1d:5f:32:f9:e8:0f:ad:57:71:7d:a3:f7:80:d6:21:06:df:e3: b1:23:75:23:23:4d:9f:14:6e:16:62:78:27:ac:0f:58:30:76: c6:17:76:20:6d:b9:58:ca:5f:47:e4:bd:ce:e6:89:78:56:38: 8d:5b:b0:93:06:2a:20:65:ed:db:e9:cb:e2:4c:5a:d1:67:78: 40:14:cd:d9:63:f2:c3:e8:80:79:b1:ad:ed:e9:6f:17:92:d0: 1e:9d:73:1a:ad:fc:48:44:60:63:9c:c6:ac:7b:97:ef:2a:1e: be:b3:08:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNH/wDjBKTUCOQkJwECF0cK7DFfMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJBMkY1 MjM5M0Y0RDAeFw0yNTA2MTUwNjQ2NDZaFw0yNTA2MTgwODMyNDZaMDMxMTAvBgNV BAMTKDg4ODYzQUZDRTQ0MEQxNzNBNjQ3MzA3MjNFN0U5RTFDQjNGMDIxRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC43CWnG2Wis1tKuX59mDVcrLq 26u7lXtdbPGAx+/pCTX5xf/DnHl3/8UZrzaY8Wa2s8CadZHFCrFrx6x8ETA8T4Nu +Qu0bLzL0+FCLf+N+dLMCNncdNgMP0DPSJ5eU64c/ONcV5UPZdYzYE6vK6ijKPfz f6H8zDMsnV7n0hed731ECthknB0JvrryOu1jcsgiv0vWHOgtxZgW4r0E88rKvCUn k0QmoFEBqb+NSKVMqT7UIhDL6JTioEvweRpF6BQchhIcB91F7j0MM+Dt78o4ouVi KeRTe628icw9sKTBEAebBUIOjRMG4lwgNyyC6vpspiMmWkKJw4ifgJ77z3cjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiIY6/ORA0XOmRzByPn6eHLPwIdIwHwYDVR0j BBgwFoAUuENqy3zo+ML1ckX/5Oa6L1I5P00wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YmVmYmYwNC00MWJlLTQ4ZDctYWMwMC04YTNjNDk4Y2E5YWUvMC9CODQzNkFDQjdD RThGOEMyRjU3MjQ1RkZFNEU2QkEyRjUyMzkzRjRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJBMkY1MjM5 M0Y0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWJlZmJmMDQtNDFiZS00OGQ3LWFj MDAtOGEzYzQ5OGNhOWFlLzAvQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJB MkY1MjM5M0Y0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG6SpwbsaVe66sZH6rOXtN4ZGybfM3a2JupE 7jMa4z6MlxCVobmCDP4+fYfz+MuLadLzgu5DNlyrZcTIZjGXM9RWyHyKOKMHD+UF EkxwxR50x63VPv2Zr1PZiyw3pdZzI9fOTZyuyJtYED9UAyo+/Sjs82kBuh5dDjWO +qklvCalF/6fc8i11ws4zQ1CPYW+qB1fMvnoD61XcX2j94DWIQbf47EjdSMjTZ8U bhZieCesD1gwdsYXdiBtuVjKX0fkvc7miXhWOI1bsJMGKiBl7dvpy+JMWtFneEAU zdlj8sPogHmxre3pbxeS0B6dcxqt/EhEYGOcxqx7l+8qHr6zCG8= -----END CERTIFICATE-----Generated at Mon Jun 16 12:10:57 2025 by rpki-client