$ rpki-client -vvf repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft File: B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft (raw, json) Hash identifier: GvKoLtmCjBGGCufG5wq5yYNgfTWJmTDcAWzRdnyO/C8= Subject key identifier: 3D:02:94:E6:19:5E:C7:47:00:15:2C:62:ED:3D:1F:E0:93:7C:7F:C8 Authority key identifier: B0:D5:A0:53:40:C5:5C:7E:2C:DC:83:AD:CE:47:74:AF:0C:C1:84:C1 Certificate issuer: /CN=B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1 Certificate serial: 3BD08E80219741A4F00B57C616D5F0E8E92EBE04 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft Manifest number: 02DC Signing time: Fri 27 Jun 2025 16:40:59 +0000 Manifest this update: Fri 27 Jun 2025 16:35:59 +0000 Manifest next update: Tue 01 Jul 2025 04:12:59 +0000 Files and hashes: 1: B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.crl (hash: ZqpT3PTieW++SB9M6fW/iU6bTZVxEaY3AO6PhhRfRUA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.crl rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 04:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:d0:8e:80:21:97:41:a4:f0:0b:57:c6:16:d5:f0:e8:e9:2e:be:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1 Validity Not Before: Jun 27 16:35:59 2025 GMT Not After : Jul 1 04:12:59 2025 GMT Subject: CN=3D0294E6195EC74700152C62ED3D1FE0937C7FC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:26:66:30:f6:11:08:ea:66:bf:c8:ef:78:92: a0:99:b6:08:d1:0e:f9:b9:c5:1e:ed:c0:9e:47:7a: 7f:cc:2e:7c:29:1e:d8:e8:6b:7b:f8:3e:e1:57:ee: b9:07:8a:8a:80:7b:da:0a:13:4d:d7:ff:2d:d9:eb: 47:a9:54:d1:50:ae:59:ae:13:97:e6:45:f3:c8:f8: 38:b7:27:0d:16:f5:73:13:40:78:fa:98:91:4c:f9: ce:28:ba:77:1e:34:ab:b8:c3:29:31:68:e5:12:ce: cb:23:7d:17:a3:53:e8:ba:a3:d1:db:ce:08:d5:83: 2a:c2:da:54:71:8c:87:69:71:96:25:2e:03:d0:d0: e6:ef:f4:58:f2:31:2e:34:56:da:4f:a2:cd:61:4b: 29:35:8c:31:28:7e:91:76:35:0c:1a:2c:d4:74:ff: 25:75:1b:e8:45:54:5e:b9:01:d3:1e:f8:85:3f:df: de:85:38:77:cb:74:75:89:73:eb:93:79:96:09:3b: ad:91:b8:a2:2f:25:02:f8:81:d4:04:d3:1d:f9:c0: 70:34:61:ee:98:e1:97:3e:4a:f6:86:38:ea:b9:42: a7:ce:a5:ae:2e:61:ff:db:56:cc:d7:d1:d7:4a:cf: 4d:d7:2f:9d:a7:cf:00:1b:68:81:5a:cc:3e:cb:42: 07:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:02:94:E6:19:5E:C7:47:00:15:2C:62:ED:3D:1F:E0:93:7C:7F:C8 X509v3 Authority Key Identifier: keyid:B0:D5:A0:53:40:C5:5C:7E:2C:DC:83:AD:CE:47:74:AF:0C:C1:84:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:33:e9:4b:3d:99:d7:08:10:ec:5e:b6:b0:cc:56:e5:4e:2a: 46:6b:40:1c:8e:27:bc:f5:17:03:9d:0b:9a:1d:8a:94:81:cd: ee:f4:29:1b:cc:ee:f3:04:17:c6:8c:2b:17:64:17:67:db:67: e7:4d:7c:7c:3b:07:81:34:3e:70:ee:93:e5:6d:3b:28:d5:78: 81:9c:d2:4b:a9:da:75:42:b1:95:db:0a:1e:87:56:34:6d:4c: df:82:e8:e3:5b:6d:e4:20:0f:e8:84:7e:37:b5:23:62:0c:0d: 72:27:d8:47:6f:b5:ce:b6:04:b3:77:1e:32:fb:c5:ac:74:fc: 27:37:99:74:24:3f:b1:c8:2d:ec:c9:31:c5:43:0f:2d:5d:5e: 42:fd:de:74:d8:8e:e2:e7:c1:fe:1b:11:d1:e7:4a:b4:eb:3b: 89:8d:02:bd:36:6f:e7:1e:27:fe:c8:27:d7:02:6c:72:c9:08: 10:af:19:e0:03:7a:73:a5:dc:73:5c:32:3b:c8:04:17:be:01: 76:37:49:0a:ab:a7:66:05:20:a0:1e:22:38:16:27:82:6f:18: f2:de:d6:7c:19:14:70:e5:81:e6:3a:24:7e:cb:33:8f:3d:42: 32:b0:fc:97:34:40:98:4b:61:6c:f2:03:df:5e:f6:54:ec:1f: 87:cb:14:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO9COgCGXQaTwC1fGFtXw6OkuvgQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBENUEwNTM0MEM1NUM3RTJDREM4M0FEQ0U0Nzc0QUYw Q0MxODRDMTAeFw0yNTA2MjcxNjM1NTlaFw0yNTA3MDEwNDEyNTlaMDMxMTAvBgNV BAMTKDNEMDI5NEU2MTk1RUM3NDcwMDE1MkM2MkVEM0QxRkUwOTM3QzdGQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxJmYw9hEI6ma/yO94kqCZtgjR Dvm5xR7twJ5Hen/MLnwpHtjoa3v4PuFX7rkHioqAe9oKE03X/y3Z60epVNFQrlmu E5fmRfPI+Di3Jw0W9XMTQHj6mJFM+c4ounceNKu4wykxaOUSzssjfRejU+i6o9Hb zgjVgyrC2lRxjIdpcZYlLgPQ0Obv9FjyMS40VtpPos1hSyk1jDEofpF2NQwaLNR0 /yV1G+hFVF65AdMe+IU/396FOHfLdHWJc+uTeZYJO62RuKIvJQL4gdQE0x35wHA0 Ye6Y4Zc+SvaGOOq5QqfOpa4uYf/bVszX0ddKz03XL52nzwAbaIFazD7LQgdDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPQKU5hlex0cAFSxi7T0f4JN8f8gwHwYDVR0j BBgwFoAUsNWgU0DFXH4s3IOtzkd0rwzBhMEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MWNmNTY1Ny1lY2RjLTRkOTctYTU5Yy1iNjc2Y2U1M2M4YTEvMC9CMEQ1QTA1MzQw QzU1QzdFMkNEQzgzQURDRTQ3NzRBRjBDQzE4NEMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjBENUEwNTM0MEM1NUM3RTJDREM4M0FEQ0U0Nzc0QUYwQ0Mx ODRDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODFjZjU2NTctZWNkYy00ZDk3LWE1 OWMtYjY3NmNlNTNjOGExLzAvQjBENUEwNTM0MEM1NUM3RTJDREM4M0FEQ0U0Nzc0 QUYwQ0MxODRDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIkz6Us9mdcIEOxetrDMVuVOKkZrQByOJ7z1 FwOdC5odipSBze70KRvM7vMEF8aMKxdkF2fbZ+dNfHw7B4E0PnDuk+VtOyjVeIGc 0kup2nVCsZXbCh6HVjRtTN+C6ONbbeQgD+iEfje1I2IMDXIn2Edvtc62BLN3HjL7 xax0/Cc3mXQkP7HILezJMcVDDy1dXkL93nTYjuLnwf4bEdHnSrTrO4mNAr02b+ce J/7IJ9cCbHLJCBCvGeADenOl3HNcMjvIBBe+AXY3SQqrp2YFIKAeIjgWJ4JvGPLe 1nwZFHDlgeY6JH7LM489QjKw/Jc0QJhLYWzyA99e9lTsH4fLFPs= -----END CERTIFICATE-----Generated at Sun Jun 29 18:12:03 2025 by rpki-client