$ rpki-client -vvf repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft File: B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft (raw, json) Hash identifier: BNhkvuH6hQA6wb1s7ytACqB0+d/n43FidvHa7U5Iy5g= Subject key identifier: 98:46:B5:0B:4D:40:08:BE:EE:1C:70:2D:D5:78:DD:7F:BA:A2:0D:5C Authority key identifier: B4:A4:21:92:F8:CD:BE:93:5C:E5:92:7E:5A:D3:C6:3C:81:96:15:2D Certificate issuer: /CN=B4A42192F8CDBE935CE5927E5AD3C63C8196152D Certificate serial: 724523C77DE6B7F9EBB9AB826CCBD5E9B3B294B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft Manifest number: 0183 Signing time: Sat 28 Jun 2025 15:50:54 +0000 Manifest this update: Sat 28 Jun 2025 15:45:54 +0000 Manifest next update: Wed 02 Jul 2025 01:17:54 +0000 Files and hashes: 1: 3130332e35352e32322e302f32332d3234203d3e20313530343930.roa (hash: qiaxwvksmM66atpVD6z5NciBUAyVEKleM/kHb9VhlSw=) 2: B4A42192F8CDBE935CE5927E5AD3C63C8196152D.crl (hash: e8zgHo2EIjGQrvFGK02wnshOt3wTaNxGNe1BOgNob2M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.crl rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 01:17:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:45:23:c7:7d:e6:b7:f9:eb:b9:ab:82:6c:cb:d5:e9:b3:b2:94:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4A42192F8CDBE935CE5927E5AD3C63C8196152D Validity Not Before: Jun 28 15:45:54 2025 GMT Not After : Jul 2 01:17:54 2025 GMT Subject: CN=9846B50B4D4008BEEE1C702DD578DD7FBAA20D5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:49:9f:5d:96:5d:7a:c9:32:1f:a5:79:7f:95: 54:c1:73:d7:1a:ec:0d:bc:90:c8:6e:f3:09:80:55: e0:ad:8d:aa:24:7a:8c:f7:18:29:02:dc:b2:2a:4d: 19:1b:d1:91:43:e3:a9:db:6d:24:56:af:9c:7e:fd: 63:0b:0b:80:0c:1f:33:0d:5c:0c:ee:b6:a4:2e:74: a1:cd:1d:14:cc:d8:0e:61:a3:2c:59:d6:93:7f:37: 0b:27:7f:1c:3e:17:67:73:b6:83:e6:9b:e2:33:4f: c7:11:ea:15:c7:35:28:2b:ff:9c:ef:44:72:3d:93: d8:e5:ca:ba:13:ed:52:94:aa:cc:c8:f8:5c:81:de: 35:a2:7b:db:fd:77:b4:55:d5:c1:6e:f7:d4:9e:a3: 1e:9a:1f:c3:f1:05:36:ab:3b:c2:76:3d:68:74:2c: 2a:40:a0:13:91:84:76:4a:14:91:78:33:b4:70:f0: ce:5a:2a:c6:ba:3f:c5:09:68:19:f9:20:ca:b0:0a: 26:a2:18:21:7d:56:a8:5e:8e:da:7a:7d:e3:0b:77: 53:4b:9e:e7:04:5d:a5:08:ff:94:55:46:fa:48:90: d9:d6:a0:0f:f8:f4:f0:cb:3d:10:30:8f:24:6e:73: 94:1a:ea:1a:d0:ec:ae:83:fe:c7:39:9d:2b:74:82: ad:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:46:B5:0B:4D:40:08:BE:EE:1C:70:2D:D5:78:DD:7F:BA:A2:0D:5C X509v3 Authority Key Identifier: keyid:B4:A4:21:92:F8:CD:BE:93:5C:E5:92:7E:5A:D3:C6:3C:81:96:15:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:5e:9c:df:10:1f:f8:20:cc:47:e9:ed:65:98:5b:5d:15:d1: 2d:10:24:a3:c9:92:2b:32:91:cc:15:c1:b3:bd:37:30:ce:36: ea:c6:50:54:d0:11:f6:b5:6c:8a:86:3a:de:7e:b1:0d:01:6d: 19:28:3f:2a:b5:e1:c0:2b:ba:f6:bb:33:cb:6d:44:05:09:7d: 1e:be:c0:b8:44:6e:ec:f2:93:bf:4e:66:9c:9d:18:63:9f:67: c0:9b:97:9f:f0:d4:a8:1e:14:af:11:00:17:06:32:01:24:8c: 65:de:a9:47:ae:a5:89:53:ee:a2:e9:6d:3b:e5:15:68:7b:f0: d4:13:e3:bb:f9:e3:9c:22:5f:0f:35:1e:04:1f:60:ea:63:4c: 24:ef:d6:f9:77:4c:c6:98:60:aa:26:4f:2c:00:d0:04:18:e7: a2:3e:43:29:06:1a:62:57:08:0a:e1:1b:ec:ff:e1:92:35:07: ca:e4:20:3b:ea:62:6c:72:44:01:93:c5:95:ac:21:51:4b:03: 9a:ba:dd:07:44:ef:9e:0a:7f:c5:dd:48:b8:14:c5:70:76:a3: 61:6b:07:a2:6f:57:80:87:7f:62:07:ca:05:97:72:39:61:e0: fd:a3:31:cc:06:d8:ce:d3:73:e9:3a:e1:28:9d:4d:11:f8:9a: b0:0e:f4:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUckUjx33mt/nruauCbMvV6bOylLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjRBNDIxOTJGOENEQkU5MzVDRTU5MjdFNUFEM0M2M0M4 MTk2MTUyRDAeFw0yNTA2MjgxNTQ1NTRaFw0yNTA3MDIwMTE3NTRaMDMxMTAvBgNV BAMTKDk4NDZCNTBCNEQ0MDA4QkVFRTFDNzAyREQ1NzhERDdGQkFBMjBENUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdSZ9dll16yTIfpXl/lVTBc9ca 7A28kMhu8wmAVeCtjaokeoz3GCkC3LIqTRkb0ZFD46nbbSRWr5x+/WMLC4AMHzMN XAzutqQudKHNHRTM2A5hoyxZ1pN/Nwsnfxw+F2dztoPmm+IzT8cR6hXHNSgr/5zv RHI9k9jlyroT7VKUqszI+FyB3jWie9v9d7RV1cFu99Seox6aH8PxBTarO8J2PWh0 LCpAoBORhHZKFJF4M7Rw8M5aKsa6P8UJaBn5IMqwCiaiGCF9Vqhejtp6feMLd1NL nucEXaUI/5RVRvpIkNnWoA/49PDLPRAwjyRuc5Qa6hrQ7K6D/sc5nSt0gq3hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmEa1C01ACL7uHHAt1Xjdf7qiDVwwHwYDVR0j BBgwFoAUtKQhkvjNvpNc5ZJ+WtPGPIGWFS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Nzk0ZGE0MC1iMzdlLTRmZTYtOGY0MC03M2IzYjBiZTAxOWYvMC9CNEE0MjE5MkY4 Q0RCRTkzNUNFNTkyN0U1QUQzQzYzQzgxOTYxNTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjRBNDIxOTJGOENEQkU5MzVDRTU5MjdFNUFEM0M2M0M4MTk2 MTUyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc5NGRhNDAtYjM3ZS00ZmU2LThm NDAtNzNiM2IwYmUwMTlmLzAvQjRBNDIxOTJGOENEQkU5MzVDRTU5MjdFNUFEM0M2 M0M4MTk2MTUyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKhenN8QH/ggzEfp7WWYW10V0S0QJKPJkisy kcwVwbO9NzDONurGUFTQEfa1bIqGOt5+sQ0BbRkoPyq14cAruva7M8ttRAUJfR6+ wLhEbuzyk79OZpydGGOfZ8Cbl5/w1KgeFK8RABcGMgEkjGXeqUeupYlT7qLpbTvl FWh78NQT47v545wiXw81HgQfYOpjTCTv1vl3TMaYYKomTywA0AQY56I+QykGGmJX CArhG+z/4ZI1B8rkIDvqYmxyRAGTxZWsIVFLA5q63QdE754Kf8XdSLgUxXB2o2Fr B6JvV4CHf2IHygWXcjlh4P2jMcwG2M7Tc+k64SidTRH4mrAO9Gc= -----END CERTIFICATE-----Generated at Sun Jun 29 18:14:29 2025 by rpki-client