$ rpki-client -vvf repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft File: 00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft (raw, json) Hash identifier: PZw+uid99VfffZjJXTGK1kDqBzR/LNjfuzyfCE8H35g= Subject key identifier: E9:F3:80:A4:45:54:E1:76:C3:86:4E:B0:DE:8A:E3:12:EB:82:87:43 Authority key identifier: 00:B4:EC:FC:CA:E9:0A:94:63:FD:71:82:2A:3C:EE:4C:8C:14:5A:D4 Certificate issuer: /CN=00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4 Certificate serial: 37CE3E5EF6F093AA8333E7D12A4A8963C69992F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft Manifest number: 9D Signing time: Sat 28 Jun 2025 11:21:33 +0000 Manifest this update: Sat 28 Jun 2025 11:16:33 +0000 Manifest next update: Tue 01 Jul 2025 12:46:33 +0000 Files and hashes: 1: 3130332e3136392e33322e302f32332d3234203d3e20313432333333.roa (hash: K+l/g4p9y6cTiWHXp9qbhWcap/gI8HD7/DZcp0av7uY=) 2: 00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.crl (hash: oiaT9wEtHXYfKvhT8UaqXb763d1VFpBPfBoNlnC3ouA=) 3: 323030313a6466323a663334303a3a2f34382d3438203d3e20313432333333.roa (hash: TsqNIUGKVArIBEGfFPOQj0RJMusrdrLAysbKak+tetA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.crl rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 12:46:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:ce:3e:5e:f6:f0:93:aa:83:33:e7:d1:2a:4a:89:63:c6:99:92:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4 Validity Not Before: Jun 28 11:16:33 2025 GMT Not After : Jul 1 12:46:33 2025 GMT Subject: CN=E9F380A44554E176C3864EB0DE8AE312EB828743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:54:13:4a:ca:ef:55:ae:b4:29:6e:91:63:e4: 74:c3:71:aa:ad:cb:b1:73:b5:c2:e2:64:05:5e:5e: be:a8:e0:d5:52:e1:74:7e:eb:a7:f9:14:4a:9c:2a: 27:2b:e0:c1:f8:27:db:5b:fa:ed:cd:77:aa:6a:2f: 9b:a8:7c:fa:c6:b6:f8:ac:fd:88:cf:7d:db:08:6e: af:3a:5b:83:e0:60:78:4e:f7:79:ba:1f:3c:4d:a9: 83:bd:85:a6:f6:1f:b7:bb:25:7b:a6:a7:12:9f:da: 7e:2b:34:74:99:dd:f1:a8:1c:23:bb:d0:c9:e3:e9: 96:a4:8c:4b:ab:eb:a0:4f:87:c8:23:63:fd:be:fc: 79:ae:3a:bb:88:07:f9:e9:93:34:f3:ad:af:8b:70: fb:87:cb:32:a6:66:a6:6c:bb:39:5c:89:4a:9b:a8: d9:dc:02:32:fe:e5:5f:36:04:7a:00:a1:ea:40:a3: 42:66:9b:99:f4:f0:82:1f:b9:fb:97:a9:51:8c:38: 2f:f9:89:0f:3f:14:71:11:b8:8a:f3:ab:fe:ea:3c: 4a:9a:05:34:9c:d7:bb:02:de:69:33:fc:e1:aa:63: 0d:b0:de:55:df:df:af:af:f3:a4:3e:73:c7:e2:01: 6d:b6:39:95:e8:5f:3e:27:6d:4c:8e:4e:ab:21:09: 3f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F3:80:A4:45:54:E1:76:C3:86:4E:B0:DE:8A:E3:12:EB:82:87:43 X509v3 Authority Key Identifier: keyid:00:B4:EC:FC:CA:E9:0A:94:63:FD:71:82:2A:3C:EE:4C:8C:14:5A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:cf:89:0c:23:f5:8a:c2:92:a4:6e:b4:66:fc:64:1b:c2:a8: de:7a:cc:f2:c2:c7:5e:7b:f7:d0:85:a6:b9:d4:d9:0f:86:3c: 24:ce:9b:29:fe:28:1c:8d:01:d2:77:ca:b1:42:6d:93:8f:8f: ee:a7:b7:b0:09:8f:55:f8:31:70:3f:1b:79:44:6e:4c:bd:20: b1:1c:7f:9f:b5:58:a4:ad:b8:a0:57:be:0e:89:e8:e8:ec:1a: 36:fa:02:53:6c:ee:3b:0b:07:08:c5:7a:34:7a:d2:b5:bc:36: 61:8d:db:c2:bf:72:05:07:f9:d2:0d:e5:25:3f:79:46:fd:48: 24:dc:11:20:f1:1a:89:99:e1:e9:ca:a0:17:6a:16:89:e5:81: d9:55:ef:17:2f:15:ac:26:d3:70:6a:5c:4f:53:ce:62:38:64: be:ac:dd:05:07:d0:0c:19:8c:77:f8:4a:ee:d5:1b:0e:7e:f4: c9:28:e4:a5:5a:d3:87:ea:7e:e6:9d:0a:c1:b2:e5:74:2a:e5: d2:66:45:51:54:b1:39:8a:1d:e4:02:df:33:a1:13:c9:4f:0b: dd:69:10:df:1c:5c:91:e2:3c:56:0c:5a:60:0b:c9:a9:4f:2e: 71:e1:79:3f:5e:51:1b:0d:78:7e:57:de:0f:a7:92:43:10:00: 1d:8e:5c:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN84+Xvbwk6qDM+fRKkqJY8aZkvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBCNEVDRkNDQUU5MEE5NDYzRkQ3MTgyMkEzQ0VFNEM4 QzE0NUFENDAeFw0yNTA2MjgxMTE2MzNaFw0yNTA3MDExMjQ2MzNaMDMxMTAvBgNV BAMTKEU5RjM4MEE0NDU1NEUxNzZDMzg2NEVCMERFOEFFMzEyRUI4Mjg3NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8VBNKyu9VrrQpbpFj5HTDcaqt y7FztcLiZAVeXr6o4NVS4XR+66f5FEqcKicr4MH4J9tb+u3Nd6pqL5uofPrGtvis /YjPfdsIbq86W4PgYHhO93m6HzxNqYO9hab2H7e7JXumpxKf2n4rNHSZ3fGoHCO7 0Mnj6ZakjEur66BPh8gjY/2+/HmuOruIB/npkzTzra+LcPuHyzKmZqZsuzlciUqb qNncAjL+5V82BHoAoepAo0Jmm5n08IIfufuXqVGMOC/5iQ8/FHERuIrzq/7qPEqa BTSc17sC3mkz/OGqYw2w3lXf36+v86Q+c8fiAW22OZXoXz4nbUyOTqshCT/xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6fOApEVU4XbDhk6w3orjEuuCh0MwHwYDVR0j BBgwFoAUALTs/MrpCpRj/XGCKjzuTIwUWtQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzBjMWJhYi0xM2Y0LTRjZTYtODVmNy1jMzg4NzM3ZjZkMTkvMC8wMEI0RUNGQ0NB RTkwQTk0NjNGRDcxODIyQTNDRUU0QzhDMTQ1QUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBCNEVDRkNDQUU5MEE5NDYzRkQ3MTgyMkEzQ0VFNEM4QzE0 NUFENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcwYzFiYWItMTNmNC00Y2U2LTg1 ZjctYzM4ODczN2Y2ZDE5LzAvMDBCNEVDRkNDQUU5MEE5NDYzRkQ3MTgyMkEzQ0VF NEM4QzE0NUFENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPPiQwj9YrCkqRutGb8ZBvCqN56zPLCx157 99CFprnU2Q+GPCTOmyn+KByNAdJ3yrFCbZOPj+6nt7AJj1X4MXA/G3lEbky9ILEc f5+1WKStuKBXvg6J6OjsGjb6AlNs7jsLBwjFejR60rW8NmGN28K/cgUH+dIN5SU/ eUb9SCTcESDxGomZ4enKoBdqFonlgdlV7xcvFawm03BqXE9TzmI4ZL6s3QUH0AwZ jHf4Su7VGw5+9Mko5KVa04fqfuadCsGy5XQq5dJmRVFUsTmKHeQC3zOhE8lPC91p EN8cXJHiPFYMWmALyalPLnHheT9eURsNeH5X3g+nkkMQAB2OXI8= -----END CERTIFICATE-----Generated at Sun Jun 29 21:37:08 2025 by rpki-client