$ rpki-client -vvf repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.mft File: B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.mft (raw, json) Hash identifier: VcB3bL01KCkkQ2GkSr4HX6ZdwrxAd4aY815bA96Nr/0= Subject key identifier: D7:37:AC:B8:53:48:A2:1E:1B:32:DD:50:80:3F:87:99:1A:2B:45:D0 Authority key identifier: B1:01:5F:DC:3A:BD:C9:EC:59:4F:6E:8A:82:A1:16:F7:69:CA:56:65 Certificate issuer: /CN=B1015FDC3ABDC9EC594F6E8A82A116F769CA5665 Certificate serial: 5191771EBD2EF4C32CE5698C6B210F3DA10FB59B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.mft Manifest number: 0171 Signing time: Tue 01 Jul 2025 00:30:42 +0000 Manifest this update: Tue 01 Jul 2025 00:25:42 +0000 Manifest next update: Fri 04 Jul 2025 03:51:42 +0000 Files and hashes: 1: B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.crl (hash: 68psIKtoYtY3c80+pOpB795H/jXsJOj9ax7oxptPMJg=) 2: 3130332e3134312e3235352e302f32342d3234203d3e20313331373639.roa (hash: UaQ/mjwTv+b6NTjX6YdQwkzBFAEMayy8kKSUdpdv01Q=) 3: 3130332e3134312e3235342e302f32342d3234203d3e20313331373639.roa (hash: 3jV7osfpuzM2RdznZ0/4uwu+i/NyUjZA48yClTEGD1w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.crl rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 03:51:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:91:77:1e:bd:2e:f4:c3:2c:e5:69:8c:6b:21:0f:3d:a1:0f:b5:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1015FDC3ABDC9EC594F6E8A82A116F769CA5665 Validity Not Before: Jul 1 00:25:42 2025 GMT Not After : Jul 4 03:51:42 2025 GMT Subject: CN=D737ACB85348A21E1B32DD50803F87991A2B45D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:94:af:67:a7:fc:16:ef:5f:2d:31:01:a7:06: 8e:3f:aa:2b:d4:eb:b6:f7:15:30:16:7f:84:76:87: 3a:19:27:4f:da:f6:cd:bd:c1:68:bc:5d:3b:b3:e6: 74:d9:86:ca:ec:54:df:cc:6e:14:4a:ad:d0:a9:09: 31:ae:81:72:a1:57:d8:56:3c:f8:77:de:70:99:d1: a6:ed:62:24:b7:0c:61:0a:b7:4b:0f:12:f0:db:74: f4:1a:7f:b2:aa:20:23:90:fa:d7:88:34:34:2b:71: 2a:72:66:87:c0:5f:1a:e1:80:3b:d4:60:fa:0a:94: ab:06:8c:48:41:df:a7:76:c1:3f:c4:f8:73:40:66: 54:ce:06:28:50:1c:b4:68:47:0b:5b:a1:b2:42:bf: 96:82:9a:2c:3e:ae:b8:11:f2:e0:f8:78:72:76:cb: 76:86:02:74:00:a8:d7:0a:50:b6:5b:e3:81:ea:9d: 0a:9e:0b:16:23:e9:66:30:3f:8d:29:44:ae:56:3a: 53:d3:6f:a6:cd:b1:f6:4b:7d:a5:4d:16:07:10:24: 61:9b:8b:72:bc:81:35:3d:35:1f:e1:87:7f:52:0e: a3:c6:3b:0a:0b:66:03:19:8d:fe:1b:4d:ca:ef:1d: a4:d4:58:04:54:dd:5e:cd:44:17:22:b9:af:14:a4: 3c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:37:AC:B8:53:48:A2:1E:1B:32:DD:50:80:3F:87:99:1A:2B:45:D0 X509v3 Authority Key Identifier: keyid:B1:01:5F:DC:3A:BD:C9:EC:59:4F:6E:8A:82:A1:16:F7:69:CA:56:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:4e:c9:cb:8d:d2:59:4b:63:24:cd:a4:2e:13:be:7c:7d:b3: a2:66:0c:90:14:f4:d1:13:ca:87:77:b3:5d:74:4d:a5:e9:12: 27:08:5e:ec:a1:b5:ce:cc:ed:ff:c6:e8:31:2b:00:13:b3:55: 94:5f:af:c0:2e:6e:04:83:e7:77:fe:18:3b:fb:36:20:7c:2c: c4:bd:f0:72:d9:b9:7e:19:b3:e9:bd:47:32:f1:e0:e7:22:86: 55:89:6b:18:9d:94:5c:6d:d0:87:c2:9a:f9:dd:f1:d2:3b:43: 76:56:81:61:d0:e2:a4:c5:1a:2d:39:02:1d:96:32:8b:63:48: 08:9f:9d:05:92:5a:aa:8f:ff:e8:fd:c1:d2:78:7b:3f:36:09: c1:3d:fb:3e:02:0e:cb:9d:7d:7f:06:f9:b5:3d:88:6d:c3:a9: a3:f0:70:b2:a0:09:84:ef:30:1b:97:2e:a5:9d:83:18:3a:d7: 31:bb:cd:72:21:18:20:54:72:67:e2:97:00:85:60:75:d3:83: 9f:1c:c2:ed:e2:9b:37:4b:b9:5b:5a:28:70:01:49:51:3a:9b: f2:1f:81:11:64:e9:4d:4e:29:aa:ee:96:fe:ee:4d:1d:44:b6: ce:ed:a7:bc:1e:df:ae:3c:ca:9c:32:5f:a9:e4:a6:f6:9b:4d: e8:de:da:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUZF3Hr0u9MMs5WmMayEPPaEPtZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjEwMTVGREMzQUJEQzlFQzU5NEY2RThBODJBMTE2Rjc2 OUNBNTY2NTAeFw0yNTA3MDEwMDI1NDJaFw0yNTA3MDQwMzUxNDJaMDMxMTAvBgNV BAMTKEQ3MzdBQ0I4NTM0OEEyMUUxQjMyREQ1MDgwM0Y4Nzk5MUEyQjQ1RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSlK9np/wW718tMQGnBo4/qivU 67b3FTAWf4R2hzoZJ0/a9s29wWi8XTuz5nTZhsrsVN/MbhRKrdCpCTGugXKhV9hW PPh33nCZ0abtYiS3DGEKt0sPEvDbdPQaf7KqICOQ+teINDQrcSpyZofAXxrhgDvU YPoKlKsGjEhB36d2wT/E+HNAZlTOBihQHLRoRwtbobJCv5aCmiw+rrgR8uD4eHJ2 y3aGAnQAqNcKULZb44HqnQqeCxYj6WYwP40pRK5WOlPTb6bNsfZLfaVNFgcQJGGb i3K8gTU9NR/hh39SDqPGOwoLZgMZjf4bTcrvHaTUWARU3V7NRBciua8UpDzRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1zesuFNIoh4bMt1QgD+HmRorRdAwHwYDVR0j BBgwFoAUsQFf3Dq9yexZT26KgqEW92nKVmUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWQ4NTBhOC1hYmI5LTQ0ODItYTViYy01NGQ3OWViN2YzMjMvMC9CMTAxNUZEQzNB QkRDOUVDNTk0RjZFOEE4MkExMTZGNzY5Q0E1NjY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjEwMTVGREMzQUJEQzlFQzU5NEY2RThBODJBMTE2Rjc2OUNB NTY2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVkODUwYTgtYWJiOS00NDgyLWE1 YmMtNTRkNzllYjdmMzIzLzAvQjEwMTVGREMzQUJEQzlFQzU5NEY2RThBODJBMTE2 Rjc2OUNBNTY2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHFOycuN0llLYyTNpC4Tvnx9s6JmDJAU9NET yod3s110TaXpEicIXuyhtc7M7f/G6DErABOzVZRfr8AubgSD53f+GDv7NiB8LMS9 8HLZuX4Zs+m9RzLx4OcihlWJaxidlFxt0IfCmvnd8dI7Q3ZWgWHQ4qTFGi05Ah2W MotjSAifnQWSWqqP/+j9wdJ4ez82CcE9+z4CDsudfX8G+bU9iG3DqaPwcLKgCYTv MBuXLqWdgxg61zG7zXIhGCBUcmfilwCFYHXTg58cwu3imzdLuVtaKHABSVE6m/If gRFk6U1OKarulv7uTR1Ets7tp7we3648ypwyX6nkpvabTeje2kc= -----END CERTIFICATE-----Generated at Wed Jul 2 04:53:49 2025 by rpki-client