$ rpki-client -vvf repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft File: B0AAB728B88975526C1741CCA8673CBC88F7697C.mft (raw, json) Hash identifier: 27v/nyt4j57QuOY8DBbNrITZuhQHMVIdA+zcVmAgfxw= Subject key identifier: 91:9C:9F:86:8C:F1:E4:DC:3A:EB:5D:01:27:FB:2D:64:9B:5E:54:59 Authority key identifier: B0:AA:B7:28:B8:89:75:52:6C:17:41:CC:A8:67:3C:BC:88:F7:69:7C Certificate issuer: /CN=B0AAB728B88975526C1741CCA8673CBC88F7697C Certificate serial: 4E01C09889397FBE291F50DDE329DD8E8D6A7317 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft Manifest number: 0368 Signing time: Sat 28 Jun 2025 21:31:11 +0000 Manifest this update: Sat 28 Jun 2025 21:26:11 +0000 Manifest next update: Wed 02 Jul 2025 03:31:11 +0000 Files and hashes: 1: B0AAB728B88975526C1741CCA8673CBC88F7697C.crl (hash: mTZapfvbOnYnxeIymgL0Rzgc85qKLgh43ThAJNApDhU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.crl rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 03:31:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:01:c0:98:89:39:7f:be:29:1f:50:dd:e3:29:dd:8e:8d:6a:73:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0AAB728B88975526C1741CCA8673CBC88F7697C Validity Not Before: Jun 28 21:26:11 2025 GMT Not After : Jul 2 03:31:11 2025 GMT Subject: CN=919C9F868CF1E4DC3AEB5D0127FB2D649B5E5459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:03:10:aa:4e:93:35:12:38:f2:d4:2c:c7:6c: 55:05:0e:cf:f6:ca:97:0a:bb:53:d5:38:d0:d4:2b: 29:7b:f1:f9:f7:b0:84:0f:ae:d0:8e:29:64:9b:56: 0b:3b:55:44:15:b1:a0:09:ca:6c:50:39:e4:31:16: 76:20:da:a2:2c:aa:10:0c:89:bd:4c:26:0b:09:0a: 46:60:c5:fe:60:c4:c3:1e:02:f9:9e:d6:8e:cb:8c: b2:65:10:4a:fe:8f:ce:dd:61:49:02:6e:f3:d8:e7: a3:70:01:31:bf:39:35:85:45:2a:17:ce:36:37:53: 17:8a:cd:12:53:31:9c:47:56:12:1d:26:ba:13:d8: e8:df:e6:ab:75:df:83:03:ea:2e:1a:1d:88:e9:d6: 13:f0:f7:ca:2d:43:d6:d4:a0:81:c3:e8:92:28:29: 0b:14:4e:05:d8:5d:35:00:9f:11:6d:55:b4:1a:a7: ec:e8:bb:03:89:56:80:29:0d:13:3d:f4:59:f0:56: 87:25:56:79:6e:b4:19:a8:a9:65:b5:2e:1b:1a:56: a6:38:34:22:e3:5c:2e:99:83:95:6f:1a:4f:2f:ab: b4:7d:c2:af:9b:41:a2:87:3b:bf:cb:46:46:81:4f: cf:ff:95:cf:1a:4c:44:fa:f3:f8:c4:a4:ad:95:15: e9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9C:9F:86:8C:F1:E4:DC:3A:EB:5D:01:27:FB:2D:64:9B:5E:54:59 X509v3 Authority Key Identifier: keyid:B0:AA:B7:28:B8:89:75:52:6C:17:41:CC:A8:67:3C:BC:88:F7:69:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:56:7d:3c:25:8f:3f:86:8c:3c:df:6e:10:56:19:d7:f0:2a: 2c:a4:de:1b:de:21:52:45:cc:c2:20:fa:94:5f:3b:8f:57:07: 3b:44:a4:7a:1b:30:fd:49:b3:f0:b6:c3:a0:71:70:36:32:63: 27:cd:5e:44:56:6b:94:e6:1d:bb:17:96:9c:4c:d9:e6:e3:62: 77:2c:98:92:ef:5d:bf:b1:3c:62:62:2c:16:f6:51:87:9b:cd: 84:5f:cf:95:ff:fe:fc:f7:21:46:79:42:23:4e:42:96:19:05: 16:84:50:dd:ab:c4:34:16:2b:4e:48:57:4c:f7:10:51:14:d8: fb:03:0f:6b:6b:d7:20:cf:77:47:d9:88:0f:b6:54:18:b2:be: 86:3e:d8:71:b7:1c:75:73:28:4c:70:58:07:39:39:2e:83:ea: 06:5f:2c:65:c9:de:9c:f2:f6:88:fc:75:ca:f0:90:67:08:76: c2:b7:e2:12:81:f0:03:2c:27:ba:b6:24:48:a7:b1:ab:ba:e6: da:5f:51:5f:9b:45:e1:fd:ae:8e:2c:96:b3:12:a5:b1:a7:83: b5:a3:a4:1f:8f:57:87:6b:70:66:ce:c3:e0:88:73:d8:f2:d0: 29:36:b7:ad:e7:55:ca:bf:83:c5:d5:00:53:20:c0:e1:eb:99: 60:1e:b8:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTgHAmIk5f74pH1Dd4yndjo1qcxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBBQUI3MjhCODg5NzU1MjZDMTc0MUNDQTg2NzNDQkM4 OEY3Njk3QzAeFw0yNTA2MjgyMTI2MTFaFw0yNTA3MDIwMzMxMTFaMDMxMTAvBgNV BAMTKDkxOUM5Rjg2OENGMUU0REMzQUVCNUQwMTI3RkIyRDY0OUI1RTU0NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAAxCqTpM1Ejjy1CzHbFUFDs/2 ypcKu1PVONDUKyl78fn3sIQPrtCOKWSbVgs7VUQVsaAJymxQOeQxFnYg2qIsqhAM ib1MJgsJCkZgxf5gxMMeAvme1o7LjLJlEEr+j87dYUkCbvPY56NwATG/OTWFRSoX zjY3UxeKzRJTMZxHVhIdJroT2Ojf5qt134MD6i4aHYjp1hPw98otQ9bUoIHD6JIo KQsUTgXYXTUAnxFtVbQap+zouwOJVoApDRM99FnwVoclVnlutBmoqWW1LhsaVqY4 NCLjXC6Zg5VvGk8vq7R9wq+bQaKHO7/LRkaBT8//lc8aTET68/jEpK2VFelJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkZyfhozx5Nw6610BJ/stZJteVFkwHwYDVR0j BBgwFoAUsKq3KLiJdVJsF0HMqGc8vIj3aXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTA1YTFjZS04NDlmLTQxN2MtYjY3My1mZGQzM2YwZDc0NDcvMC9CMEFBQjcyOEI4 ODk3NTUyNkMxNzQxQ0NBODY3M0NCQzg4Rjc2OTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjBBQUI3MjhCODg5NzU1MjZDMTc0MUNDQTg2NzNDQkM4OEY3 Njk3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGUwNWExY2UtODQ5Zi00MTdjLWI2 NzMtZmRkMzNmMGQ3NDQ3LzAvQjBBQUI3MjhCODg5NzU1MjZDMTc0MUNDQTg2NzND QkM4OEY3Njk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZWfTwljz+GjDzfbhBWGdfwKiyk3hveIVJF zMIg+pRfO49XBztEpHobMP1Js/C2w6BxcDYyYyfNXkRWa5TmHbsXlpxM2ebjYncs mJLvXb+xPGJiLBb2UYebzYRfz5X//vz3IUZ5QiNOQpYZBRaEUN2rxDQWK05IV0z3 EFEU2PsDD2tr1yDPd0fZiA+2VBiyvoY+2HG3HHVzKExwWAc5OS6D6gZfLGXJ3pzy 9oj8dcrwkGcIdsK34hKB8AMsJ7q2JEinsau65tpfUV+bReH9ro4slrMSpbGng7Wj pB+PV4drcGbOw+CIc9jy0Ck2t63nVcq/g8XVAFMgwOHrmWAeuCs= -----END CERTIFICATE-----Generated at Sun Jun 29 18:19:52 2025 by rpki-client