$ rpki-client -vvf repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft File: 0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft (raw, json) Hash identifier: BjyxofBl+akF/08phcyOModOmfmf4qoCDsOwaRsAVac= Subject key identifier: 2D:5D:4E:10:DD:50:81:51:71:EE:5C:DB:7C:6B:11:90:81:F9:08:05 Authority key identifier: 0B:47:BF:C9:4F:DC:EC:08:4C:D7:B3:55:36:C8:51:0E:41:F5:51:30 Certificate issuer: /CN=0B47BFC94FDCEC084CD7B35536C8510E41F55130 Certificate serial: 33E9CE32D38A681D7A595DB5490A6CB967397E1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft Manifest number: 0222 Signing time: Mon 30 Jun 2025 03:32:07 +0000 Manifest this update: Mon 30 Jun 2025 03:27:07 +0000 Manifest next update: Thu 03 Jul 2025 05:15:07 +0000 Files and hashes: 1: 3130332e31362e34382e302f32332d3234203d3e20313332363334.roa (hash: MieROalwE/fB127Dk3xdzAYuGXCkhJHq65WAQmDl2tQ=) 2: 0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl (hash: DNtGezExzgbqFD6G036XI+D+9bN9pwUwUz/tX39ofc4=) 3: 3130332e382e3233382e302f32342d3234203d3e20313332363334.roa (hash: ETpw0a+aN27La/w8z8t2+Ujt+M7eqg9mv9UITCWqsgM=) 4: 3130332e3232352e3234322e302f32342d3234203d3e20313332363334.roa (hash: Fp/8UnawhM2NuX7rV7CkvyBDfW79/QkTvgsmF36JIIM=) 5: 3130332e31382e3131372e302f32342d3234203d3e20313332363334.roa (hash: ZoCcekYbdPtZF1d0wHmqp26jbbPlMBnCSh/Sj6Wzh/Y=) 6: 3130332e362e33342e302f32342d3234203d3e20313332363334.roa (hash: HvrDpYE/J5atwLV8aNk1LyzF9yjb46bY62W/GVeHaaA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 05:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:e9:ce:32:d3:8a:68:1d:7a:59:5d:b5:49:0a:6c:b9:67:39:7e:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B47BFC94FDCEC084CD7B35536C8510E41F55130 Validity Not Before: Jun 30 03:27:07 2025 GMT Not After : Jul 3 05:15:07 2025 GMT Subject: CN=2D5D4E10DD50815171EE5CDB7C6B119081F90805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:fe:c0:70:74:13:dd:8d:88:33:a0:f6:4b:5f: e1:91:1e:23:f7:ca:15:10:75:56:e3:79:e9:3f:94: 8e:11:bf:8a:dd:c9:ba:23:51:b0:83:9b:ff:f0:a9: 6b:64:de:83:f2:36:f7:66:a5:af:e9:cc:6b:71:a2: 91:bc:d0:a8:32:71:9e:08:54:d3:db:a1:25:5c:56: 89:43:bf:ae:8c:71:1e:21:89:93:86:40:60:e8:dd: 0d:67:93:c8:03:c3:49:6e:07:a4:68:a7:3c:d6:2d: 24:cf:30:af:e9:ec:75:b3:99:87:e4:36:46:47:c9: fb:98:fe:7e:6a:e9:c9:a0:35:27:ea:8f:58:ed:43: 2f:d7:bd:19:aa:2e:9c:c7:11:fe:e5:74:5f:5e:5a: 42:08:6d:60:3e:da:aa:74:7c:f2:e2:a1:5e:e9:54: a4:b1:0f:d3:a5:81:35:60:77:f2:4e:1a:05:b8:40: 1a:21:e3:a0:d5:a9:0c:36:cd:a2:88:b1:dd:68:9c: 57:1d:5e:c2:b8:16:25:1d:fa:7e:4d:c4:f6:c6:45: ad:c7:7f:e7:a7:cc:46:9c:b4:2b:8d:a4:65:e9:af: 56:e4:ea:8d:b0:82:f4:5d:d0:f5:f8:44:74:8e:fc: d5:77:ff:21:7a:82:6b:4a:81:ea:63:ed:3f:2e:3e: 16:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:5D:4E:10:DD:50:81:51:71:EE:5C:DB:7C:6B:11:90:81:F9:08:05 X509v3 Authority Key Identifier: keyid:0B:47:BF:C9:4F:DC:EC:08:4C:D7:B3:55:36:C8:51:0E:41:F5:51:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:4a:94:9c:ae:b6:54:e9:ec:75:56:7a:a4:95:0c:bd:24:a9: d8:1e:77:e9:f1:fb:a0:8d:ef:ef:42:cf:a5:cf:50:2a:9b:a3: c6:37:0a:b5:26:ec:c0:2c:ac:d4:83:94:ef:ad:11:e8:0f:f8: c0:cf:97:0f:3c:d2:42:b8:2a:79:02:4d:3b:bc:fc:2a:c3:a8: f5:46:35:1b:7e:03:de:45:c0:3e:9d:08:3c:8f:b7:b7:eb:7d: c1:6f:64:9e:b0:ae:55:89:8a:fe:3e:67:b9:81:26:b1:fb:1f: 6f:12:80:62:1d:0d:5c:6a:b0:bf:1c:82:25:14:ba:96:a5:32: 54:f1:91:13:e9:b8:31:e1:f4:d3:ea:6f:b8:07:17:05:9c:fa: a4:b3:38:17:19:9f:7b:7f:f2:d0:b1:d1:14:1c:3a:0a:1a:31: a9:b7:7a:f8:04:4f:8b:a8:2d:4f:d0:c6:d9:fb:98:52:99:7c: 0e:de:62:e6:4a:33:b4:a8:59:8f:86:5a:b6:37:36:95:38:a2: d5:c2:d8:e3:c8:1f:84:4f:27:40:02:07:98:c4:79:07:32:3b: c7:88:b0:42:8b:5c:86:24:03:70:ab:3d:5e:dc:5f:99:84:bb: 54:86:64:8c:6d:9e:79:69:5c:7e:87:fa:27:e5:ae:72:14:13: fb:93:e6:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM+nOMtOKaB16WV21SQpsuWc5fh4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI0N0JGQzk0RkRDRUMwODRDRDdCMzU1MzZDODUxMEU0 MUY1NTEzMDAeFw0yNTA2MzAwMzI3MDdaFw0yNTA3MDMwNTE1MDdaMDMxMTAvBgNV BAMTKDJENUQ0RTEwREQ1MDgxNTE3MUVFNUNEQjdDNkIxMTkwODFGOTA4MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy/sBwdBPdjYgzoPZLX+GRHiP3 yhUQdVbjeek/lI4Rv4rdybojUbCDm//wqWtk3oPyNvdmpa/pzGtxopG80KgycZ4I VNPboSVcVolDv66McR4hiZOGQGDo3Q1nk8gDw0luB6RopzzWLSTPMK/p7HWzmYfk NkZHyfuY/n5q6cmgNSfqj1jtQy/XvRmqLpzHEf7ldF9eWkIIbWA+2qp0fPLioV7p VKSxD9OlgTVgd/JOGgW4QBoh46DVqQw2zaKIsd1onFcdXsK4FiUd+n5NxPbGRa3H f+enzEactCuNpGXpr1bk6o2wgvRd0PX4RHSO/NV3/yF6gmtKgepj7T8uPhaXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULV1OEN1QgVFx7lzbfGsRkIH5CAUwHwYDVR0j BBgwFoAUC0e/yU/c7AhM17NVNshRDkH1UTAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGY3YmUwNi05NjcyLTQ2NDEtOTdiZC05YmZkZjk1NWRlMTcvMC8wQjQ3QkZDOTRG RENFQzA4NENEN0IzNTUzNkM4NTEwRTQxRjU1MTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEI0N0JGQzk0RkRDRUMwODRDRDdCMzU1MzZDODUxMEU0MUY1 NTEzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBmN2JlMDYtOTY3Mi00NjQxLTk3 YmQtOWJmZGY5NTVkZTE3LzAvMEI0N0JGQzk0RkRDRUMwODRDRDdCMzU1MzZDODUx MEU0MUY1NTEzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE9KlJyutlTp7HVWeqSVDL0kqdged+nx+6CN 7+9Cz6XPUCqbo8Y3CrUm7MAsrNSDlO+tEegP+MDPlw880kK4KnkCTTu8/CrDqPVG NRt+A95FwD6dCDyPt7frfcFvZJ6wrlWJiv4+Z7mBJrH7H28SgGIdDVxqsL8cgiUU upalMlTxkRPpuDHh9NPqb7gHFwWc+qSzOBcZn3t/8tCx0RQcOgoaMam3evgET4uo LU/Qxtn7mFKZfA7eYuZKM7SoWY+GWrY3NpU4otXC2OPIH4RPJ0ACB5jEeQcyO8eI sEKLXIYkA3CrPV7cX5mEu1SGZIxtnnlpXH6H+iflrnIUE/uT5v4= -----END CERTIFICATE-----Generated at Mon Jun 30 05:05:21 2025 by rpki-client