$ rpki-client -vvf repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft File: B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft (raw, json) Hash identifier: XAREBeLO62JAn23rZGfDtusazjTZpD3hVy5if/nVSd0= Subject key identifier: B5:E1:06:3C:E2:53:6B:D8:9A:42:B8:E4:07:7F:85:68:BC:BD:CE:1B Authority key identifier: B7:25:35:E4:EB:8B:31:C6:79:4C:4D:F3:1F:F5:3E:4E:64:91:4C:56 Certificate issuer: /CN=B72535E4EB8B31C6794C4DF31FF53E4E64914C56 Certificate serial: 4BBEDB49324001A2446600FDF70F26E10B6DD131 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft Manifest number: B1 Signing time: Mon 30 Jun 2025 00:01:16 +0000 Manifest this update: Sun 29 Jun 2025 23:56:16 +0000 Manifest next update: Thu 03 Jul 2025 02:55:16 +0000 Files and hashes: 1: B72535E4EB8B31C6794C4DF31FF53E4E64914C56.crl (hash: +YOxokAOlXKz81CUrztgR3O14lZfYBmN18qoJ//IS2k=) 2: 3135372e36362e35302e302f32332d3234203d3e20313532343338.roa (hash: 0z+OlDe1hua3zv7OtVHMMPyi/MvPOJjdEV9nI71654g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.crl rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 02:55:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:be:db:49:32:40:01:a2:44:66:00:fd:f7:0f:26:e1:0b:6d:d1:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B72535E4EB8B31C6794C4DF31FF53E4E64914C56 Validity Not Before: Jun 29 23:56:16 2025 GMT Not After : Jul 3 02:55:16 2025 GMT Subject: CN=B5E1063CE2536BD89A42B8E4077F8568BCBDCE1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:58:e1:a8:e8:c9:a8:5b:7f:d2:b0:8d:9b:2f: 01:82:8e:00:d2:20:bb:23:13:b6:23:b6:b8:5e:27: ab:2b:83:f5:c6:c1:b5:cd:76:a6:c9:79:c6:5c:45: d9:73:26:e5:a9:2a:9d:9b:11:5c:58:54:3a:49:0a: d1:5a:90:0c:6e:39:5e:ae:c7:d9:1c:3c:58:5e:1e: 57:6c:b0:a7:25:5d:4a:b4:43:a5:28:ac:5f:db:fe: 93:a9:7a:58:ca:21:99:a8:fa:6f:6d:a2:04:c5:30: 45:d0:72:4e:31:eb:48:fc:10:84:4e:b8:be:15:67: 9f:b2:64:85:fc:c1:9a:e2:33:06:ec:47:aa:e2:a8: 1e:c7:25:53:78:36:ed:ed:eb:02:d2:77:75:c8:f9: 6c:b7:5d:61:65:26:6a:e4:a2:d9:fb:eb:ec:86:bb: 25:70:f6:d9:dc:a6:5a:ca:38:84:2e:49:85:08:00: 07:ca:6c:78:9b:bb:ac:a2:7d:23:6b:6b:15:93:a8: 37:36:78:43:00:95:b2:40:6a:ad:da:0e:4c:b0:95: b9:a1:b9:d1:c2:74:c1:8b:89:de:8f:13:61:ff:bb: 56:62:a8:0f:a0:31:b4:21:d4:62:bb:1e:63:c9:2d: 1a:c7:59:04:62:aa:ca:1d:32:b4:09:ef:51:72:4e: e6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E1:06:3C:E2:53:6B:D8:9A:42:B8:E4:07:7F:85:68:BC:BD:CE:1B X509v3 Authority Key Identifier: keyid:B7:25:35:E4:EB:8B:31:C6:79:4C:4D:F3:1F:F5:3E:4E:64:91:4C:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:06:e2:47:2b:d5:99:5a:0a:6d:95:93:b5:7a:5c:fa:bf:20: 85:1a:34:02:ce:1e:61:d9:2a:45:03:bd:a9:a9:7c:c0:18:db: cf:17:94:20:bf:db:36:9f:bf:cf:83:85:69:cf:76:ac:18:48: 94:cd:2d:b1:d5:71:d5:53:3b:a2:ef:c5:fb:96:14:a0:bf:d8: 05:eb:f1:9d:ba:b8:c5:bb:ac:fc:93:4c:76:61:f9:2d:79:9b: bc:f4:6e:ae:7a:01:fa:6a:f7:6f:21:a5:cc:6c:8e:a3:80:df: 1e:fd:81:59:e2:40:1d:6f:af:54:27:5f:ad:67:13:2c:aa:b8: f5:3f:fd:e6:30:ec:a9:9c:95:9d:ee:ea:dc:7f:e8:29:56:34: 38:29:2b:6d:f3:68:53:1b:0f:7c:cc:e7:96:2f:40:36:ec:f0: 1c:8c:50:02:e7:39:a0:b5:ce:ff:33:6b:af:25:ff:2d:e6:5b: 17:ff:94:38:88:de:32:2c:f7:c4:d0:17:07:84:d2:7d:ae:be: 23:b7:aa:fb:e4:5a:a0:75:71:88:58:33:43:5a:39:32:6a:67: 30:a2:1b:51:f1:2a:fb:01:0a:3d:6b:f4:18:98:79:67:58:7e: 3a:d9:de:2e:fb:c9:ae:55:18:0e:60:5d:3b:59:d1:f8:23:c3: 8c:04:a2:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS77bSTJAAaJEZgD99w8m4Qtt0TEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcyNTM1RTRFQjhCMzFDNjc5NEM0REYzMUZGNTNFNEU2 NDkxNEM1NjAeFw0yNTA2MjkyMzU2MTZaFw0yNTA3MDMwMjU1MTZaMDMxMTAvBgNV BAMTKEI1RTEwNjNDRTI1MzZCRDg5QTQyQjhFNDA3N0Y4NTY4QkNCRENFMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdWOGo6MmoW3/SsI2bLwGCjgDS ILsjE7YjtrheJ6srg/XGwbXNdqbJecZcRdlzJuWpKp2bEVxYVDpJCtFakAxuOV6u x9kcPFheHldssKclXUq0Q6UorF/b/pOpeljKIZmo+m9togTFMEXQck4x60j8EIRO uL4VZ5+yZIX8wZriMwbsR6riqB7HJVN4Nu3t6wLSd3XI+Wy3XWFlJmrkotn76+yG uyVw9tncplrKOIQuSYUIAAfKbHibu6yifSNraxWTqDc2eEMAlbJAaq3aDkywlbmh udHCdMGLid6PE2H/u1ZiqA+gMbQh1GK7HmPJLRrHWQRiqsodMrQJ71FyTuYTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUteEGPOJTa9iaQrjkB3+FaLy9zhswHwYDVR0j BBgwFoAUtyU15OuLMcZ5TE3zH/U+TmSRTFYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmZhOTU4NC02Zjk3LTQwNDEtOWM4ZC04YjM5NTllNGY5YjMvMC9CNzI1MzVFNEVC OEIzMUM2Nzk0QzRERjMxRkY1M0U0RTY0OTE0QzU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjcyNTM1RTRFQjhCMzFDNjc5NEM0REYzMUZGNTNFNEU2NDkx NEM1Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjZmYTk1ODQtNmY5Ny00MDQxLTlj OGQtOGIzOTU5ZTRmOWIzLzAvQjcyNTM1RTRFQjhCMzFDNjc5NEM0REYzMUZGNTNF NEU2NDkxNEM1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL8G4kcr1ZlaCm2Vk7V6XPq/IIUaNALOHmHZ KkUDvampfMAY288XlCC/2zafv8+DhWnPdqwYSJTNLbHVcdVTO6LvxfuWFKC/2AXr 8Z26uMW7rPyTTHZh+S15m7z0bq56Afpq928hpcxsjqOA3x79gVniQB1vr1QnX61n EyyquPU//eYw7KmclZ3u6tx/6ClWNDgpK23zaFMbD3zM55YvQDbs8ByMUALnOaC1 zv8za68l/y3mWxf/lDiI3jIs98TQFweE0n2uviO3qvvkWqB1cYhYM0NaOTJqZzCi G1HxKvsBCj1r9BiYeWdYfjrZ3i77ya5VGA5gXTtZ0fgjw4wEouE= -----END CERTIFICATE-----Generated at Mon Jun 30 17:33:57 2025 by rpki-client