$ rpki-client -vvf repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft File: B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft (raw, json) Hash identifier: lIcbX3xDlwyMpIQ/rV+lvFZnpK90r7H2KHVTggybmX0= Subject key identifier: 53:83:D9:68:58:42:C3:BF:3D:47:CE:FE:D9:3C:72:81:F7:96:21:10 Authority key identifier: B0:B4:D0:A5:FD:4E:58:D8:05:34:97:7B:02:7C:8B:C6:82:22:07:0F Certificate issuer: /CN=B0B4D0A5FD4E58D80534977B027C8BC68222070F Certificate serial: 032C2E849E82D9B28D15E0EF334B918244FC3BCD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft Manifest number: 0364 Signing time: Sat 05 Jul 2025 03:41:20 +0000 Manifest this update: Sat 05 Jul 2025 03:36:20 +0000 Manifest next update: Tue 08 Jul 2025 07:28:20 +0000 Files and hashes: 1: B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl (hash: xCFfmaPq6f1NFOGyLX1qIrZqg1kAZ7PJiNy1IYwA6O8=) 2: 3130332e3136342e35372e302f32342d3234203d3e20313431393033.roa (hash: QHTzNtrA62lCbap5pnLy6Afc1/3RNfZE7wu74tOUQBg=) 3: 3130332e3136342e35362e302f32332d3233203d3e20313431393033.roa (hash: lmDaoh03D9rTDqDSAuHtSlsBls3g0dB3bSo5aCMqbVU=) 4: 3130332e3136342e35362e302f32342d3234203d3e20313431393033.roa (hash: BZ7IxyZHQ1xzeEJa2EscxaRyrE0WSeLJOeD3hu5iHH8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:2c:2e:84:9e:82:d9:b2:8d:15:e0:ef:33:4b:91:82:44:fc:3b:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0B4D0A5FD4E58D80534977B027C8BC68222070F Validity Not Before: Jul 5 03:36:20 2025 GMT Not After : Jul 8 07:28:20 2025 GMT Subject: CN=5383D9685842C3BF3D47CEFED93C7281F7962110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:27:67:78:07:7f:93:6f:91:f7:3f:be:08:ac: 00:8f:91:bb:13:14:f7:92:71:9e:e1:0b:80:86:6d: 58:b0:93:19:05:4c:b1:6b:fe:79:7c:ba:46:ad:5f: 5e:2c:bc:02:f4:98:99:88:70:20:db:1b:4c:41:63: ef:c1:47:35:1c:ea:9c:4e:37:04:e9:d6:94:33:ab: f2:bd:4a:39:98:df:d0:8b:04:34:91:16:3d:8a:f3: 5f:c5:81:b4:ce:57:33:32:8f:43:1d:29:95:ef:9e: ed:c0:3a:63:29:10:19:8d:7f:71:d8:41:8b:cf:d7: e8:72:55:a9:0d:65:47:d0:b3:22:6c:c1:ea:7e:85: 89:69:b3:24:83:13:fd:8d:33:2a:3f:c0:c5:b0:39: 84:cd:98:b6:d8:e3:d5:d2:3d:79:ae:f1:fe:39:38: 77:a5:5f:67:fc:89:7a:97:26:16:24:2a:36:2d:54: 95:1f:dc:ba:d8:37:49:03:b7:35:9f:8a:06:74:2b: 00:b2:9f:5e:5e:d5:b6:40:b1:29:bf:0c:9b:9d:09: b2:ad:2f:f7:85:d4:42:f4:32:50:f1:90:20:ba:d4: 07:4d:90:13:56:52:e3:e4:d7:37:10:01:2a:58:39: ab:5c:22:a1:9e:df:89:bb:6f:50:71:57:d2:2b:84: ab:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:83:D9:68:58:42:C3:BF:3D:47:CE:FE:D9:3C:72:81:F7:96:21:10 X509v3 Authority Key Identifier: keyid:B0:B4:D0:A5:FD:4E:58:D8:05:34:97:7B:02:7C:8B:C6:82:22:07:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:3b:64:89:c0:96:91:81:4f:bd:57:84:21:6c:41:4b:60:dd: e5:de:9f:2f:e7:4b:98:2e:34:c0:47:f1:c0:b8:19:ff:6b:0f: fb:71:9e:cc:69:69:7b:b0:08:1e:78:72:39:b3:e3:23:fb:0d: 5c:9e:05:26:c2:ee:52:30:34:8a:3b:e9:ed:28:4c:d5:dd:54: 61:e8:c2:6d:b8:2f:e0:73:53:7a:ed:5d:37:ff:84:e9:98:ab: 7f:10:fe:48:b7:b7:2f:dd:0e:fa:fb:62:9d:44:54:88:7a:44: d3:b1:ff:55:53:90:d9:df:6c:24:e9:3e:90:f9:41:af:b3:0c: 34:61:54:cb:8a:8f:61:4c:b8:8c:e5:f7:e1:45:f9:a6:15:e9: ae:12:f6:d6:e0:c5:b6:92:96:c0:4c:46:72:d9:3e:e9:20:21: cb:6f:fa:0e:45:f2:6d:ca:1b:f2:9b:ce:46:07:a6:92:14:12: 0b:0f:00:88:54:79:87:87:f8:14:ea:1b:85:86:07:46:1c:d9: 4d:51:c9:f6:e1:3a:14:e0:b2:7b:f4:0f:3d:3e:49:bd:f0:69: 67:a0:35:7d:da:9f:a9:fa:e4:1b:c7:fd:f5:e8:71:52:3c:05: a3:b2:89:5c:6b:56:9c:bf:01:76:37:af:c2:f5:87:54:c7:a3: 72:aa:ed:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAywuhJ6C2bKNFeDvM0uRgkT8O80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBCNEQwQTVGRDRFNThEODA1MzQ5NzdCMDI3QzhCQzY4 MjIyMDcwRjAeFw0yNTA3MDUwMzM2MjBaFw0yNTA3MDgwNzI4MjBaMDMxMTAvBgNV BAMTKDUzODNEOTY4NTg0MkMzQkYzRDQ3Q0VGRUQ5M0M3MjgxRjc5NjIxMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyJ2d4B3+Tb5H3P74IrACPkbsT FPeScZ7hC4CGbViwkxkFTLFr/nl8ukatX14svAL0mJmIcCDbG0xBY+/BRzUc6pxO NwTp1pQzq/K9SjmY39CLBDSRFj2K81/FgbTOVzMyj0MdKZXvnu3AOmMpEBmNf3HY QYvP1+hyVakNZUfQsyJswep+hYlpsySDE/2NMyo/wMWwOYTNmLbY49XSPXmu8f45 OHelX2f8iXqXJhYkKjYtVJUf3LrYN0kDtzWfigZ0KwCyn15e1bZAsSm/DJudCbKt L/eF1EL0MlDxkCC61AdNkBNWUuPk1zcQASpYOatcIqGe34m7b1BxV9IrhKuvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU4PZaFhCw789R87+2TxygfeWIRAwHwYDVR0j BBgwFoAUsLTQpf1OWNgFNJd7AnyLxoIiBw8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2NkNTExZi1hZmZmLTRmZWMtODcyNC1kNDExOWY4OTFkZjIvMC9CMEI0RDBBNUZE NEU1OEQ4MDUzNDk3N0IwMjdDOEJDNjgyMjIwNzBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjBCNEQwQTVGRDRFNThEODA1MzQ5NzdCMDI3QzhCQzY4MjIy MDcwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdjZDUxMWYtYWZmZi00ZmVjLTg3 MjQtZDQxMTlmODkxZGYyLzAvQjBCNEQwQTVGRDRFNThEODA1MzQ5NzdCMDI3QzhC QzY4MjIyMDcwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIo7ZInAlpGBT71XhCFsQUtg3eXeny/nS5gu NMBH8cC4Gf9rD/txnsxpaXuwCB54cjmz4yP7DVyeBSbC7lIwNIo76e0oTNXdVGHo wm24L+BzU3rtXTf/hOmYq38Q/ki3ty/dDvr7Yp1EVIh6RNOx/1VTkNnfbCTpPpD5 Qa+zDDRhVMuKj2FMuIzl9+FF+aYV6a4S9tbgxbaSlsBMRnLZPukgIctv+g5F8m3K G/KbzkYHppIUEgsPAIhUeYeH+BTqG4WGB0Yc2U1RyfbhOhTgsnv0Dz0+Sb3waWeg NX3an6n65BvH/fXocVI8BaOyiVxrVpy/AXY3r8L1h1THo3Kq7UI= -----END CERTIFICATE-----Generated at Sat Jul 5 07:51:25 2025 by rpki-client