$ rpki-client -vvf repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft File: B2650BD2D997B6C198A4B362B7395AC364683312.mft (raw, json) Hash identifier: Sr8lnSzttR/YtisQ7mVBZPcimzC7hzHo6RHB28zpWiI= Subject key identifier: 4E:08:92:3C:96:89:8A:D1:99:AB:9F:FC:61:D3:58:B5:2B:5A:1A:AB Authority key identifier: B2:65:0B:D2:D9:97:B6:C1:98:A4:B3:62:B7:39:5A:C3:64:68:33:12 Certificate issuer: /CN=B2650BD2D997B6C198A4B362B7395AC364683312 Certificate serial: 02709A28587C48C8CF7E0C2A2176BD2B3E0C7067 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft Manifest number: 01BD Signing time: Sun 29 Jun 2025 11:40:54 +0000 Manifest this update: Sun 29 Jun 2025 11:35:54 +0000 Manifest next update: Wed 02 Jul 2025 18:10:54 +0000 Files and hashes: 1: B2650BD2D997B6C198A4B362B7395AC364683312.crl (hash: HTYhGksOMSVfar0ReXnWfXGaj3WNEUV4DhzQbGKFnJU=) 2: 3130332e31372e33322e302f32342d3234203d3e20313530323238.roa (hash: PXsuVPLEzGme/TvSRalwKMlC1hWsjOPUgK0Lgy+M/Is=) 3: 3130332e31372e33332e302f32342d3234203d3e20313530323238.roa (hash: JLuyTnkAd9LdVP7Ap7TsyT3WybJ3uwYm9GdHPUO4P9s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.crl rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 18:10:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:70:9a:28:58:7c:48:c8:cf:7e:0c:2a:21:76:bd:2b:3e:0c:70:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2650BD2D997B6C198A4B362B7395AC364683312 Validity Not Before: Jun 29 11:35:54 2025 GMT Not After : Jul 2 18:10:54 2025 GMT Subject: CN=4E08923C96898AD199AB9FFC61D358B52B5A1AAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:c9:44:74:eb:4c:1c:c5:a7:27:c3:91:c2:28: 66:d3:bd:95:10:43:ce:83:d8:53:e2:fa:ad:c0:a7: 72:84:0b:ba:9b:a9:35:4a:8f:b9:09:56:3f:5e:3c: 76:9f:5c:f0:4c:a3:ff:12:d6:95:aa:2b:e7:88:7c: 8d:2d:5d:54:30:d2:12:d3:e1:0d:fc:89:7e:6e:24: 6a:25:2d:a5:81:d4:ea:97:46:94:13:b5:b9:84:8c: e2:e3:25:82:46:10:f6:33:a2:fc:a2:b8:79:b7:3d: d3:fd:97:45:2a:eb:e0:64:c5:a3:0a:b4:14:6a:7d: 44:bb:d1:9f:d7:4e:d1:e7:85:c3:11:42:7d:ba:60: 35:fa:80:e8:d5:b6:e4:8e:77:17:20:1f:93:ce:e1: 5c:5b:86:85:cf:54:63:7a:b7:00:77:5d:cd:65:ce: e6:ba:85:91:2d:df:94:3b:86:e5:0b:65:d9:20:b6: d0:3c:39:f0:85:5b:c3:3e:f1:5d:c2:02:e4:08:de: a6:c8:b1:34:9a:34:aa:e8:98:f5:44:20:15:77:65: a5:63:14:91:83:45:86:b4:88:83:ae:16:10:09:59: 81:f9:97:50:ce:ba:11:ab:2c:a9:09:dc:af:e0:3d: 3d:3b:f4:d8:1d:aa:82:40:ce:96:ca:0a:da:9b:e7: 4d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:08:92:3C:96:89:8A:D1:99:AB:9F:FC:61:D3:58:B5:2B:5A:1A:AB X509v3 Authority Key Identifier: keyid:B2:65:0B:D2:D9:97:B6:C1:98:A4:B3:62:B7:39:5A:C3:64:68:33:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:0c:88:83:1c:9e:86:18:10:b2:6d:ca:0a:4d:ba:2b:cb:51: 42:7c:6d:60:45:a8:b5:76:d0:e5:42:e5:5d:83:25:68:03:68: 7b:0c:88:de:97:cd:5f:54:81:a1:3b:4e:9c:82:04:62:cc:78: 0e:c0:b3:4c:39:ea:94:25:b2:76:ac:f1:d1:04:75:7c:69:3f: c3:3d:33:e0:89:91:57:13:28:21:67:1a:6c:10:65:5c:dc:79: e7:c4:91:06:ba:95:f1:b8:05:fb:78:f1:47:01:fb:22:aa:a6: 10:f7:f9:d5:c9:ca:7b:98:37:f9:0b:ba:1d:2d:9c:f1:22:89: 18:0c:b7:4e:43:06:17:b1:6f:a9:41:10:16:7d:40:8c:d5:af: c4:4a:40:dd:6a:47:f1:a9:9c:02:86:8a:92:e1:1e:a8:37:ce: d5:b0:5c:b3:fb:f1:c0:7a:78:4f:db:14:6a:35:01:79:e8:ce: 20:09:d6:f0:51:76:0c:4f:a0:b5:16:b0:86:06:5f:97:ce:ce: 2a:eb:16:16:ef:2e:c9:a3:56:11:39:48:79:6f:96:aa:11:bb: 3f:d7:23:a1:e0:ec:22:21:66:3a:7a:26:e3:30:4c:f1:5d:de: e4:b4:bf:df:5f:4c:d3:a6:2a:85:4b:9e:bb:b2:37:04:c8:bc: e5:07:f9:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAnCaKFh8SMjPfgwqIXa9Kz4McGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVBQzM2 NDY4MzMxMjAeFw0yNTA2MjkxMTM1NTRaFw0yNTA3MDIxODEwNTRaMDMxMTAvBgNV BAMTKDRFMDg5MjNDOTY4OThBRDE5OUFCOUZGQzYxRDM1OEI1MkI1QTFBQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvyUR060wcxacnw5HCKGbTvZUQ Q86D2FPi+q3Ap3KEC7qbqTVKj7kJVj9ePHafXPBMo/8S1pWqK+eIfI0tXVQw0hLT 4Q38iX5uJGolLaWB1OqXRpQTtbmEjOLjJYJGEPYzovyiuHm3PdP9l0Uq6+BkxaMK tBRqfUS70Z/XTtHnhcMRQn26YDX6gOjVtuSOdxcgH5PO4VxbhoXPVGN6twB3Xc1l zua6hZEt35Q7huULZdkgttA8OfCFW8M+8V3CAuQI3qbIsTSaNKromPVEIBV3ZaVj FJGDRYa0iIOuFhAJWYH5l1DOuhGrLKkJ3K/gPT079NgdqoJAzpbKCtqb5013AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTgiSPJaJitGZq5/8YdNYtStaGqswHwYDVR0j BBgwFoAUsmUL0tmXtsGYpLNitzlaw2RoMxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjkwNTc2Ni00NDBlLTRiY2ItYWU3Mi0zZTc4ODMxY2U5ZGMvMC9CMjY1MEJEMkQ5 OTdCNkMxOThBNEIzNjJCNzM5NUFDMzY0NjgzMzEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVBQzM2NDY4 MzMxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2I5MDU3NjYtNDQwZS00YmNiLWFl NzItM2U3ODgzMWNlOWRjLzAvQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVB QzM2NDY4MzMxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJMMiIMcnoYYELJtygpNuivLUUJ8bWBFqLV2 0OVC5V2DJWgDaHsMiN6XzV9UgaE7TpyCBGLMeA7As0w56pQlsnas8dEEdXxpP8M9 M+CJkVcTKCFnGmwQZVzceefEkQa6lfG4Bft48UcB+yKqphD3+dXJynuYN/kLuh0t nPEiiRgMt05DBhexb6lBEBZ9QIzVr8RKQN1qR/GpnAKGipLhHqg3ztWwXLP78cB6 eE/bFGo1AXnoziAJ1vBRdgxPoLUWsIYGX5fOzirrFhbvLsmjVhE5SHlvlqoRuz/X I6Hg7CIhZjp6JuMwTPFd3uS0v99fTNOmKoVLnruyNwTIvOUH+dg= -----END CERTIFICATE-----Generated at Mon Jun 30 19:11:11 2025 by rpki-client