$ rpki-client -vvf repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft File: B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft (raw, json) Hash identifier: 3ch26bVQklGpV+8to2rdQXCHFK25a3gfgkBZA+DVAbA= Subject key identifier: 88:8B:D2:BC:07:BC:80:BD:C5:39:CE:1E:DA:9D:23:24:67:9C:2F:25 Authority key identifier: B0:FA:6C:3E:D4:78:0E:03:2B:0A:3F:16:1E:01:8A:7C:8F:A8:2B:45 Certificate issuer: /CN=B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45 Certificate serial: 649CAB377F0351EFB4AC9011FE688A8362823FB5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft Manifest number: 01E9 Signing time: Wed 07 May 2025 16:02:12 +0000 Manifest this update: Wed 07 May 2025 15:57:12 +0000 Manifest next update: Sat 10 May 2025 17:36:12 +0000 Files and hashes: 1: 3130332e3138362e3136382e302f32332d3233203d3e20313439333135.roa (hash: 0o9IBgjEwrH3ZJGqMXSmtJgW+TONR3n1c/K3AjhSCz0=) 2: 3130332e3138362e3136392e302f32342d3234203d3e20313439333135.roa (hash: k0YtTjCvRfHkKBkEOTB9msrr0NImtoiaOd/b0Un02oI=) 3: 3130332e3138362e3136382e302f32342d3234203d3e20313439333135.roa (hash: cA/IXkQfExxLqkZklRIGA4Iq/8wfMruGPEzuyZnNgNM=) 4: B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.crl (hash: Huhm8uuyNW4jqI002Jy9Ro/JiTuR919ehsECLOmf/QA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.crl rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 17:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:9c:ab:37:7f:03:51:ef:b4:ac:90:11:fe:68:8a:83:62:82:3f:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45 Validity Not Before: May 7 15:57:12 2025 GMT Not After : May 10 17:36:12 2025 GMT Subject: CN=888BD2BC07BC80BDC539CE1EDA9D2324679C2F25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:eb:02:ac:d8:e6:cd:c3:5a:35:56:5a:27:5f: 57:0a:0d:f8:a9:9f:f5:19:55:1d:56:a4:4d:f6:36: 6c:44:dd:f3:b0:79:9d:b9:84:1c:b2:20:03:c7:b0: 60:f8:0a:c8:36:25:02:66:d8:f7:0b:ea:59:39:6b: b7:f4:af:78:b0:9f:fb:37:12:d0:28:ab:b7:b4:2b: f5:76:a2:cd:c7:ea:30:fe:bf:20:69:ef:17:84:ee: db:9a:9e:01:6d:4e:4a:69:ee:7d:25:5f:86:dc:9c: ef:2d:1c:83:15:fa:02:8c:78:35:ab:d1:29:24:34: 30:22:07:b6:6b:c0:d1:00:7e:d7:df:40:26:d9:d5: 24:85:71:56:ac:b6:de:c0:3e:88:18:1b:e2:45:02: 2c:e9:2b:61:25:77:0f:f6:49:e2:6b:13:21:68:f1: 99:39:35:13:6f:0e:73:fb:92:60:79:a7:66:46:a7: ff:75:de:a9:e5:03:c2:c5:7e:d7:d7:7e:30:48:6c: b0:7f:95:8e:a6:6a:ab:b0:f1:17:29:07:fc:a5:5d: b0:04:5e:f6:ff:09:c5:9b:e8:c0:9c:52:43:3b:69: 52:c9:97:fc:2a:e8:e7:f8:c7:88:be:de:55:a5:13: 3b:09:48:a0:f4:12:bb:48:e4:38:02:4c:9f:00:71: d9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:8B:D2:BC:07:BC:80:BD:C5:39:CE:1E:DA:9D:23:24:67:9C:2F:25 X509v3 Authority Key Identifier: keyid:B0:FA:6C:3E:D4:78:0E:03:2B:0A:3F:16:1E:01:8A:7C:8F:A8:2B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ee:1e:93:72:be:7a:a2:03:72:9d:0a:5a:97:b7:af:35:3d: f3:cf:e7:7c:99:dd:91:b8:6e:0f:3b:9b:cc:d8:8f:cc:88:60: d6:19:1d:36:96:0e:e0:40:e6:65:2a:9c:36:41:6c:d1:e2:3c: dc:ce:75:18:20:9f:50:ce:65:44:73:0b:34:70:78:69:bd:f0: 7e:7c:57:5f:13:37:ef:22:68:a9:0a:a8:b9:f7:73:f2:da:9a: 2b:6d:52:71:ea:2f:9c:31:d8:52:e0:75:ae:b2:69:d3:3b:ba: b5:1a:52:39:71:12:e5:2c:d8:96:6c:ce:6c:e2:22:74:11:8c: 0e:37:98:9e:fe:e6:b7:1f:bc:32:13:37:9e:5f:88:f4:be:8f: e8:c6:27:3c:7c:0e:fa:9d:98:cf:03:bf:77:55:5e:13:bb:d6: 2b:72:67:7d:72:ee:fb:ad:c2:2d:d4:46:2d:d4:7d:5f:e1:ec: 2e:ef:94:15:39:77:45:ba:82:5e:2a:df:ff:56:71:b8:7e:77: 32:70:15:04:7a:1f:60:e0:d6:62:b6:2c:da:43:92:66:99:09: 60:09:61:cb:f7:9e:f7:d2:a9:92:8e:fe:ef:8d:c5:79:fe:6d: ee:72:c3:4e:f8:a3:bf:49:dc:7a:80:24:8a:a1:e2:60:d2:b1: 4f:bb:14:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZJyrN38DUe+0rJAR/miKg2KCP7UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBGQTZDM0VENDc4MEUwMzJCMEEzRjE2MUUwMThBN0M4 RkE4MkI0NTAeFw0yNTA1MDcxNTU3MTJaFw0yNTA1MTAxNzM2MTJaMDMxMTAvBgNV BAMTKDg4OEJEMkJDMDdCQzgwQkRDNTM5Q0UxRURBOUQyMzI0Njc5QzJGMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj6wKs2ObNw1o1VlonX1cKDfip n/UZVR1WpE32NmxE3fOweZ25hByyIAPHsGD4Csg2JQJm2PcL6lk5a7f0r3iwn/s3 EtAoq7e0K/V2os3H6jD+vyBp7xeE7tuangFtTkpp7n0lX4bcnO8tHIMV+gKMeDWr 0SkkNDAiB7ZrwNEAftffQCbZ1SSFcVastt7APogYG+JFAizpK2Eldw/2SeJrEyFo 8Zk5NRNvDnP7kmB5p2ZGp/913qnlA8LFftfXfjBIbLB/lY6maquw8RcpB/ylXbAE Xvb/CcWb6MCcUkM7aVLJl/wq6Of4x4i+3lWlEzsJSKD0ErtI5DgCTJ8AcdntAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiIvSvAe8gL3FOc4e2p0jJGecLyUwHwYDVR0j BBgwFoAUsPpsPtR4DgMrCj8WHgGKfI+oK0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjcxM2EzMi1mYWRhLTQ4NGUtYTY4ZC0wY2FjMGZmZmEzM2MvMC9CMEZBNkMzRUQ0 NzgwRTAzMkIwQTNGMTYxRTAxOEE3QzhGQTgyQjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjBGQTZDM0VENDc4MEUwMzJCMEEzRjE2MUUwMThBN0M4RkE4 MkI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI3MTNhMzItZmFkYS00ODRlLWE2 OGQtMGNhYzBmZmZhMzNjLzAvQjBGQTZDM0VENDc4MEUwMzJCMEEzRjE2MUUwMThB N0M4RkE4MkI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/uHpNyvnqiA3KdClqXt681PfPP53yZ3ZG4 bg87m8zYj8yIYNYZHTaWDuBA5mUqnDZBbNHiPNzOdRggn1DOZURzCzRweGm98H58 V18TN+8iaKkKqLn3c/LamittUnHqL5wx2FLgda6yadM7urUaUjlxEuUs2JZszmzi InQRjA43mJ7+5rcfvDITN55fiPS+j+jGJzx8DvqdmM8Dv3dVXhO71ityZ31y7vut wi3URi3UfV/h7C7vlBU5d0W6gl4q3/9Wcbh+dzJwFQR6H2Dg1mK2LNpDkmaZCWAJ Ycv3nvfSqZKO/u+NxXn+be5yw074o79J3HqAJIqh4mDSsU+7FLc= -----END CERTIFICATE-----Generated at Thu May 8 06:26:06 2025 by rpki-client