$ rpki-client -vvf repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft File: B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft (raw, json) Hash identifier: AexHEcdyVoP5Bpllh7D6pdt3df0n5iouN//D1RNqgzA= Subject key identifier: 08:D1:68:7F:FA:FC:BC:99:B5:4F:D9:4C:2E:B2:BC:87:48:CF:FD:E2 Authority key identifier: B0:D6:73:B7:8D:BE:21:9F:1E:EE:F0:56:E3:E4:9F:B6:D5:8A:55:50 Certificate issuer: /CN=B0D673B78DBE219F1EEEF056E3E49FB6D58A5550 Certificate serial: 52B7515C343579FF1ADD370D0ACB52E8C5FB02FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft Manifest number: AD Signing time: Mon 30 Jun 2025 01:20:51 +0000 Manifest this update: Mon 30 Jun 2025 01:15:51 +0000 Manifest next update: Thu 03 Jul 2025 13:18:51 +0000 Files and hashes: 1: 3136302e32322e32322e302f32332d3234203d3e20313532383032.roa (hash: 1cb+dRF1cCmzlK2LUqHDHTpgVi9SG86amprY/lPnWU4=) 2: B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl (hash: TPi5GbMkA1oHwQoyLgsxxIqy+RwPPEDo+iAe/OM7CR4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 12:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:b7:51:5c:34:35:79:ff:1a:dd:37:0d:0a:cb:52:e8:c5:fb:02:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0D673B78DBE219F1EEEF056E3E49FB6D58A5550 Validity Not Before: Jun 30 01:15:51 2025 GMT Not After : Jul 3 13:18:51 2025 GMT Subject: CN=08D1687FFAFCBC99B54FD94C2EB2BC8748CFFDE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:51:3b:95:8a:c2:7f:ca:e6:ef:55:7f:28:fc: 33:32:3d:4d:c1:2a:b4:f6:13:51:2a:20:e7:4b:4b: 1b:ad:69:88:56:2f:94:5e:bc:93:8e:5b:5c:a3:dc: 6b:60:7f:4e:a5:ca:8e:72:1f:37:68:7f:c0:15:2f: b6:af:76:45:65:fa:c6:68:16:9a:fb:2c:aa:06:dc: c7:e2:8a:35:9b:03:49:85:12:86:c9:30:a7:3a:54: a1:5c:8d:67:ef:eb:12:aa:9a:ec:93:55:81:a4:15: 97:98:e5:6e:bb:48:85:d0:b5:80:01:15:0b:3f:65: 8e:dc:60:f4:04:4c:28:b8:64:b5:88:25:d1:2f:4f: f0:6e:bb:e2:3c:86:6d:1b:a7:19:a1:54:8a:1a:c7: d2:31:ed:1f:d3:a0:44:37:34:41:c7:54:92:97:a7: c2:d9:91:bc:b1:f5:3b:05:be:02:8c:a7:ae:e1:ce: 63:54:ad:f4:61:4b:f9:36:3e:b9:75:16:88:8f:ad: c4:ae:6b:98:ae:a1:19:a4:11:78:3e:eb:31:ce:1d: 93:83:06:51:f1:5b:a1:2e:99:83:20:0d:f4:65:c8: 72:e4:fa:e0:b1:7e:54:da:8d:84:e3:a8:34:36:39: 39:0b:43:6f:a0:78:94:7a:64:d6:de:5a:4d:e8:f1: f0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D1:68:7F:FA:FC:BC:99:B5:4F:D9:4C:2E:B2:BC:87:48:CF:FD:E2 X509v3 Authority Key Identifier: keyid:B0:D6:73:B7:8D:BE:21:9F:1E:EE:F0:56:E3:E4:9F:B6:D5:8A:55:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:61:0c:a2:6d:03:c2:64:98:ca:ca:9e:8c:58:fa:99:e8:d3: bc:85:f7:09:71:22:6b:e4:bd:aa:9a:bd:9e:07:73:62:ef:98: b3:5e:7d:03:64:2d:8b:38:f3:56:26:f5:c3:05:2a:b9:aa:7e: 93:d4:b2:31:db:df:8e:7e:04:35:6a:f9:fd:31:5d:98:9a:cc: d9:2f:20:f7:00:5f:f5:4a:54:40:ba:b1:ab:5c:8d:80:e1:4a: 33:dd:ef:6d:cb:30:79:05:8a:07:65:2a:cc:e9:6b:5e:c1:f0: 04:4d:aa:c7:b2:47:a4:8e:34:9f:95:37:c4:cf:3f:95:79:6a: d6:92:66:b3:6d:02:5a:12:9b:10:64:0d:32:a8:52:55:b1:d9: f0:df:fc:ab:29:d5:89:7b:ce:78:38:6a:2f:a2:61:7b:66:09: 62:06:f4:e9:b6:f0:e8:c0:9b:15:a2:f4:22:bb:2a:ca:d3:35: 70:0b:a2:2b:ac:de:da:d5:73:8b:aa:80:16:07:8c:a2:3a:99: 99:01:9c:90:87:00:ef:52:e5:04:64:4b:72:be:00:52:70:8e: 1d:08:98:5e:ce:a1:06:09:e7:4c:22:69:73:28:7d:12:18:72: 64:b1:30:44:0e:27:48:8e:4a:3e:ba:f3:1f:8c:de:75:a6:03: fb:c3:a5:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUrdRXDQ1ef8a3TcNCstS6MX7AvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBENjczQjc4REJFMjE5RjFFRUVGMDU2RTNFNDlGQjZE NThBNTU1MDAeFw0yNTA2MzAwMTE1NTFaFw0yNTA3MDMxMzE4NTFaMDMxMTAvBgNV BAMTKDA4RDE2ODdGRkFGQ0JDOTlCNTRGRDk0QzJFQjJCQzg3NDhDRkZERTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIUTuVisJ/yubvVX8o/DMyPU3B KrT2E1EqIOdLSxutaYhWL5RevJOOW1yj3Gtgf06lyo5yHzdof8AVL7avdkVl+sZo Fpr7LKoG3MfiijWbA0mFEobJMKc6VKFcjWfv6xKqmuyTVYGkFZeY5W67SIXQtYAB FQs/ZY7cYPQETCi4ZLWIJdEvT/Buu+I8hm0bpxmhVIoax9Ix7R/ToEQ3NEHHVJKX p8LZkbyx9TsFvgKMp67hzmNUrfRhS/k2Prl1FoiPrcSua5iuoRmkEXg+6zHOHZOD BlHxW6EumYMgDfRlyHLk+uCxflTajYTjqDQ2OTkLQ2+geJR6ZNbeWk3o8fBvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCNFof/r8vJm1T9lMLrK8h0jP/eIwHwYDVR0j BBgwFoAUsNZzt42+IZ8e7vBW4+SfttWKVVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjdkMjg5NC1jMDc3LTQyMWMtYmMxZC0zN2Q2ZjlkOTg5N2QvMC9CMEQ2NzNCNzhE QkUyMTlGMUVFRUYwNTZFM0U0OUZCNkQ1OEE1NTUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjBENjczQjc4REJFMjE5RjFFRUVGMDU2RTNFNDlGQjZENThB NTU1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY3ZDI4OTQtYzA3Ny00MjFjLWJj MWQtMzdkNmY5ZDk4OTdkLzAvQjBENjczQjc4REJFMjE5RjFFRUVGMDU2RTNFNDlG QjZENThBNTU1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIVhDKJtA8JkmMrKnoxY+pno07yF9wlxImvk vaqavZ4Hc2LvmLNefQNkLYs481Ym9cMFKrmqfpPUsjHb345+BDVq+f0xXZiazNkv IPcAX/VKVEC6satcjYDhSjPd723LMHkFigdlKszpa17B8ARNqseyR6SONJ+VN8TP P5V5ataSZrNtAloSmxBkDTKoUlWx2fDf/Ksp1Yl7zng4ai+iYXtmCWIG9Om28OjA mxWi9CK7KsrTNXALoius3trVc4uqgBYHjKI6mZkBnJCHAO9S5QRkS3K+AFJwjh0I mF7OoQYJ50wiaXMofRIYcmSxMEQOJ0iOSj668x+M3nWmA/vDpTg= -----END CERTIFICATE-----Generated at Mon Jun 30 10:14:04 2025 by rpki-client