$ rpki-client -vvf repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft File: B1F0A7585ED1882783C6AF802B826607ABB92671.mft (raw, json) Hash identifier: 5wZmoZDnOhaZ82zrJwlZqBGwoiv74vOXCzT/YFbTSBc= Subject key identifier: 33:B0:16:B7:BB:07:13:14:62:8A:1D:BB:8B:99:F7:5F:E5:58:73:10 Authority key identifier: B1:F0:A7:58:5E:D1:88:27:83:C6:AF:80:2B:82:66:07:AB:B9:26:71 Certificate issuer: /CN=B1F0A7585ED1882783C6AF802B826607ABB92671 Certificate serial: 34061F6727938C4E1F2E5F7A5F57FE7A20EEA6B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft Manifest number: 82 Signing time: Sun 29 Jun 2025 10:12:16 +0000 Manifest this update: Sun 29 Jun 2025 10:07:16 +0000 Manifest next update: Wed 02 Jul 2025 16:33:16 +0000 Files and hashes: 1: 3136302e3138372e33362e302f32342d3234203d3e20313533333237.roa (hash: VqrWW5xSvGuewi8vAHFbQ7GGTuJaYVxqsL6i06spXCU=) 2: 3136302e3138372e33372e302f32342d3234203d3e20313533333237.roa (hash: 2s2hT2RFc51pEXZc8X5XI589aylunZVhY45QaHon1Ao=) 3: B1F0A7585ED1882783C6AF802B826607ABB92671.crl (hash: BwQoTXb94EhHAU1MpNYEw4jtNN2V6ubXOBXAhz8dWOE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.crl rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 16:33:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:06:1f:67:27:93:8c:4e:1f:2e:5f:7a:5f:57:fe:7a:20:ee:a6:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1F0A7585ED1882783C6AF802B826607ABB92671 Validity Not Before: Jun 29 10:07:16 2025 GMT Not After : Jul 2 16:33:16 2025 GMT Subject: CN=33B016B7BB071314628A1DBB8B99F75FE5587310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:51:d5:25:71:6b:ff:e6:8d:55:4a:9e:04:dd: 23:10:15:9c:ab:52:4c:81:05:7b:b5:8f:b7:87:c7: ab:d0:55:38:5f:42:ef:64:fa:13:6b:39:be:25:f2: a8:77:2f:ba:33:ac:80:a1:a9:d1:69:7e:41:62:5e: 87:51:6f:56:dd:72:3e:6e:7a:65:5f:dd:e9:70:93: fe:22:ad:c3:26:60:82:6b:31:e9:46:b6:e6:6e:61: 7a:a4:ed:cb:28:6f:6e:fd:85:23:d6:20:47:3e:35: 74:c7:9e:0f:f4:a5:4a:ca:e1:e8:25:c2:44:ba:6d: 7c:95:27:8d:c5:d2:8f:b6:db:08:e1:8a:13:9e:cc: 96:c3:21:0a:60:2f:18:e2:0c:76:9c:62:3a:53:71: 17:40:48:a0:97:fa:68:b8:97:a9:fb:d7:67:a0:b3: 71:5e:e9:5e:de:84:fc:02:2c:19:7d:51:33:74:7d: 50:5e:9c:b3:81:83:67:76:f7:5d:57:c0:ae:b6:64: d9:e9:b5:d7:98:67:57:74:a7:8d:2f:d5:56:05:95: 47:69:95:50:20:7e:a7:0b:cf:2d:f5:5f:78:02:6e: b5:3a:81:33:43:d2:ec:51:39:ba:47:6f:b7:e2:9b: 8a:3f:9e:6c:61:11:ce:4b:33:e1:66:a1:5a:be:0d: 38:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B0:16:B7:BB:07:13:14:62:8A:1D:BB:8B:99:F7:5F:E5:58:73:10 X509v3 Authority Key Identifier: keyid:B1:F0:A7:58:5E:D1:88:27:83:C6:AF:80:2B:82:66:07:AB:B9:26:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:d2:05:95:d6:22:41:86:ee:75:4a:27:85:ea:e5:1e:be:d0: 4b:28:92:92:7a:05:8b:b1:99:1c:df:2a:05:1c:49:69:0a:36: ac:88:83:40:e8:90:44:92:72:0d:e9:57:68:f4:a6:85:f0:14: e6:08:5b:29:d4:f9:a4:ef:45:d5:d7:4a:bb:03:a5:e4:1e:94: 14:0f:9a:d8:48:02:93:97:fa:7b:98:fe:a7:a8:34:f7:60:30: 31:0b:8b:f1:55:bf:b2:a8:3d:89:7c:5b:56:60:dc:51:4d:e8: 0c:81:da:5d:9e:a9:56:da:3b:48:6e:1e:64:36:cc:de:8e:5f: 29:90:99:74:cf:48:4d:d6:72:6c:d1:44:fc:52:eb:5c:a3:0a: 66:d9:0a:a1:7f:f8:57:1a:c8:31:ec:09:80:60:75:2e:2c:bc: d9:76:6e:41:e1:cf:6c:d9:a4:5d:b2:03:15:c3:69:95:21:0d: e7:cf:a9:6e:45:a1:63:15:50:90:0e:57:05:d8:5d:a7:9b:53: 07:0a:da:76:cb:2a:2b:bd:f7:fe:60:9e:00:01:dd:37:5a:b4: 52:84:04:00:2c:b6:34:bf:d6:f4:2b:52:d7:ae:21:50:65:10: 89:07:2d:ce:94:58:2e:2a:df:f8:ac:6a:60:96:ca:93:b8:f0: 3e:c6:06:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNAYfZyeTjE4fLl96X1f+eiDuprkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2MDdB QkI5MjY3MTAeFw0yNTA2MjkxMDA3MTZaFw0yNTA3MDIxNjMzMTZaMDMxMTAvBgNV BAMTKDMzQjAxNkI3QkIwNzEzMTQ2MjhBMURCQjhCOTlGNzVGRTU1ODczMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkUdUlcWv/5o1VSp4E3SMQFZyr UkyBBXu1j7eHx6vQVThfQu9k+hNrOb4l8qh3L7ozrIChqdFpfkFiXodRb1bdcj5u emVf3elwk/4ircMmYIJrMelGtuZuYXqk7csob279hSPWIEc+NXTHng/0pUrK4egl wkS6bXyVJ43F0o+22wjhihOezJbDIQpgLxjiDHacYjpTcRdASKCX+mi4l6n712eg s3Fe6V7ehPwCLBl9UTN0fVBenLOBg2d2911XwK62ZNnptdeYZ1d0p40v1VYFlUdp lVAgfqcLzy31X3gCbrU6gTND0uxRObpHb7fim4o/nmxhEc5LM+FmoVq+DTgbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM7AWt7sHExRiih27i5n3X+VYcxAwHwYDVR0j BBgwFoAUsfCnWF7RiCeDxq+AK4JmB6u5JnEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODkxMzg5My01ZjY0LTRhNWUtYThkMi01ZDUxZWJkZTQ3M2YvMC9CMUYwQTc1ODVF RDE4ODI3ODNDNkFGODAyQjgyNjYwN0FCQjkyNjcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2MDdBQkI5 MjY3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzg5MTM4OTMtNWY2NC00YTVlLWE4 ZDItNWQ1MWViZGU0NzNmLzAvQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2 MDdBQkI5MjY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJXSBZXWIkGG7nVKJ4Xq5R6+0EsokpJ6BYux mRzfKgUcSWkKNqyIg0DokESScg3pV2j0poXwFOYIWynU+aTvRdXXSrsDpeQelBQP mthIApOX+nuY/qeoNPdgMDELi/FVv7KoPYl8W1Zg3FFN6AyB2l2eqVbaO0huHmQ2 zN6OXymQmXTPSE3WcmzRRPxS61yjCmbZCqF/+FcayDHsCYBgdS4svNl2bkHhz2zZ pF2yAxXDaZUhDefPqW5FoWMVUJAOVwXYXaebUwcK2nbLKiu99/5gngAB3TdatFKE BAAstjS/1vQrUteuIVBlEIkHLc6UWC4q3/isamCWypO48D7GBhM= -----END CERTIFICATE-----Generated at Mon Jun 30 07:50:40 2025 by rpki-client