$ rpki-client -vvf repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft File: B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft (raw, json) Hash identifier: cyGAAolwmqe1XCF/kYYE781cPJZ2c0G1gtmxUNGpSSU= Subject key identifier: 1A:84:16:76:2C:E3:ED:37:45:AA:AB:47:8A:7F:D7:D4:19:DF:A3:78 Authority key identifier: B0:D7:26:41:9F:BF:35:E7:C6:EB:43:7E:23:8F:3D:2A:3F:06:3B:4C Certificate issuer: /CN=B0D726419FBF35E7C6EB437E238F3D2A3F063B4C Certificate serial: 5CE4A75A6CD7FED005422A89CB24B60C8B6C8E67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft Manifest number: 86 Signing time: Tue 13 May 2025 12:50:05 +0000 Manifest this update: Tue 13 May 2025 12:45:05 +0000 Manifest next update: Sat 17 May 2025 00:20:05 +0000 Files and hashes: 1: B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.crl (hash: byNXm1eJYd8tJb1o7TVLQCpkR9bjh/hwcykWhU8K/Dc=) 2: 3136302e32352e35382e302f32332d3234203d3e20313532383333.roa (hash: bHOi5SjHU/IA6uuARi1jDeG/5P34ORp+Y9sD3zlRQV0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.crl rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 00:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:e4:a7:5a:6c:d7:fe:d0:05:42:2a:89:cb:24:b6:0c:8b:6c:8e:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0D726419FBF35E7C6EB437E238F3D2A3F063B4C Validity Not Before: May 13 12:45:05 2025 GMT Not After : May 17 00:20:05 2025 GMT Subject: CN=1A8416762CE3ED3745AAAB478A7FD7D419DFA378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:64:9d:bd:d1:9b:b8:47:05:bc:e9:86:29:79: e8:12:33:dc:d0:89:4c:3a:40:54:f6:1f:c8:50:ac: 1e:63:f9:20:fe:56:92:b7:2d:05:5e:45:7e:1b:09: c9:e5:0e:82:f1:91:8b:5a:ba:99:6e:12:ed:e1:77: ee:4f:ec:d4:68:6f:18:68:20:8f:c2:75:cb:8c:75: 76:6c:76:5e:78:3d:01:ef:bc:fa:9f:07:fc:ca:fd: 5b:c9:87:5b:a3:af:01:bb:b8:9e:12:bf:44:25:12: 6c:77:f7:03:d8:23:4d:5c:4d:81:62:16:50:ac:70: f0:e5:f0:25:12:45:f9:bf:f7:1e:20:52:ae:5b:4a: 79:89:5e:44:71:93:be:f2:03:50:35:ca:62:21:f6: 84:23:51:17:55:4c:9f:2d:9f:9e:46:31:e5:80:67: 55:de:1a:a6:5c:d6:dc:58:a9:2d:62:96:95:6e:3e: 0d:02:37:a2:fe:10:1d:7a:d8:ae:e5:32:d2:a8:03: 07:7f:48:d5:3b:5d:58:a8:f2:68:fa:77:eb:ce:92: 85:07:ca:f0:d3:0e:a4:b8:58:b1:d8:6c:cc:20:53: 6f:2c:13:9f:0d:16:78:d3:db:26:ae:26:f4:2c:d5: 28:b6:61:bc:f5:04:11:f3:2b:62:48:d3:e6:d8:81: 61:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:84:16:76:2C:E3:ED:37:45:AA:AB:47:8A:7F:D7:D4:19:DF:A3:78 X509v3 Authority Key Identifier: keyid:B0:D7:26:41:9F:BF:35:E7:C6:EB:43:7E:23:8F:3D:2A:3F:06:3B:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:44:d3:f9:35:9e:40:08:4e:12:23:8c:55:cd:4a:ca:6c:c8: b7:cc:0a:b2:ac:01:41:6d:69:93:fb:c1:70:cb:2b:24:6a:38: 24:0f:c3:81:ee:c1:1d:ae:95:f6:4a:dd:17:2f:d3:57:ca:3e: a5:fe:f4:45:33:83:74:4d:97:b9:72:9d:18:2c:2a:af:18:78: 05:1a:12:74:7f:25:f1:aa:df:d4:f6:49:32:0a:05:8d:f3:3e: 4d:68:47:b4:57:35:58:b1:33:b1:7a:98:b8:24:df:17:47:81: 68:f7:30:de:0d:d1:a0:25:ab:ea:6f:69:16:87:cb:5c:7d:5c: 10:52:38:d2:93:df:2b:df:26:33:4b:1e:36:69:6b:f6:46:33: d7:71:52:7d:c6:8e:c4:b2:f4:c0:19:33:ac:2b:c8:5c:9b:19: 4c:18:b3:ee:3d:ac:ff:95:2c:4e:16:19:47:17:07:3a:7f:79: fd:9c:f9:f9:94:e9:4a:a9:42:bc:26:02:de:c1:96:4e:64:10: 0a:2e:12:84:f0:ce:53:93:20:1b:e2:17:40:6a:cc:e8:3d:be: 84:67:dc:86:1c:f4:cc:d7:ca:d9:c8:5c:e9:f1:8c:d1:ea:f1: 05:70:0d:72:9c:60:0a:69:39:00:15:09:cb:ec:31:64:df:b3: 53:06:2b:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXOSnWmzX/tAFQiqJyyS2DItsjmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBENzI2NDE5RkJGMzVFN0M2RUI0MzdFMjM4RjNEMkEz RjA2M0I0QzAeFw0yNTA1MTMxMjQ1MDVaFw0yNTA1MTcwMDIwMDVaMDMxMTAvBgNV BAMTKDFBODQxNjc2MkNFM0VEMzc0NUFBQUI0NzhBN0ZEN0Q0MTlERkEzNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4ZJ290Zu4RwW86YYpeegSM9zQ iUw6QFT2H8hQrB5j+SD+VpK3LQVeRX4bCcnlDoLxkYtaupluEu3hd+5P7NRobxho II/CdcuMdXZsdl54PQHvvPqfB/zK/VvJh1ujrwG7uJ4Sv0QlEmx39wPYI01cTYFi FlCscPDl8CUSRfm/9x4gUq5bSnmJXkRxk77yA1A1ymIh9oQjURdVTJ8tn55GMeWA Z1XeGqZc1txYqS1ilpVuPg0CN6L+EB162K7lMtKoAwd/SNU7XVio8mj6d+vOkoUH yvDTDqS4WLHYbMwgU28sE58NFnjT2yauJvQs1Si2Ybz1BBHzK2JI0+bYgWG5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGoQWdizj7TdFqqtHin/X1Bnfo3gwHwYDVR0j BBgwFoAUsNcmQZ+/NefG60N+I489Kj8GO0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MmRhYjQ2YS0wODVlLTQ0MzItOTgzMy03MWI4ZGIxNDRkOTQvMC9CMEQ3MjY0MTlG QkYzNUU3QzZFQjQzN0UyMzhGM0QyQTNGMDYzQjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjBENzI2NDE5RkJGMzVFN0M2RUI0MzdFMjM4RjNEMkEzRjA2 M0I0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDJkYWI0NmEtMDg1ZS00NDMyLTk4 MzMtNzFiOGRiMTQ0ZDk0LzAvQjBENzI2NDE5RkJGMzVFN0M2RUI0MzdFMjM4RjNE MkEzRjA2M0I0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAhE0/k1nkAIThIjjFXNSspsyLfMCrKsAUFt aZP7wXDLKyRqOCQPw4HuwR2ulfZK3Rcv01fKPqX+9EUzg3RNl7lynRgsKq8YeAUa EnR/JfGq39T2STIKBY3zPk1oR7RXNVixM7F6mLgk3xdHgWj3MN4N0aAlq+pvaRaH y1x9XBBSONKT3yvfJjNLHjZpa/ZGM9dxUn3GjsSy9MAZM6wryFybGUwYs+49rP+V LE4WGUcXBzp/ef2c+fmU6UqpQrwmAt7Blk5kEAouEoTwzlOTIBviF0BqzOg9voRn 3IYc9MzXytnIXOnxjNHq8QVwDXKcYAppOQAVCcvsMWTfs1MGKyA= -----END CERTIFICATE-----Generated at Wed May 14 12:59:11 2025 by rpki-client