$ rpki-client -vvf repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft File: B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft (raw, json) Hash identifier: 4a4edwC204IVH75Pli95vu7+Di5tt/QSQ06tJYDXPb4= Subject key identifier: 26:17:C3:B7:96:04:A7:E4:27:E8:82:88:9A:34:10:85:03:28:52:F0 Authority key identifier: B2:07:7B:9B:AF:0B:F3:E5:FC:B8:45:13:B1:D7:44:5E:30:CE:65:82 Certificate issuer: /CN=B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582 Certificate serial: 24A087BF74321CCAA0D439A790D0C2A16467648F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft Manifest number: 045C Signing time: Sat 28 Jun 2025 09:22:00 +0000 Manifest this update: Sat 28 Jun 2025 09:17:00 +0000 Manifest next update: Tue 01 Jul 2025 16:44:00 +0000 Files and hashes: 1: B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl (hash: DLr2NiYnPDWVnQ9nkAIHBacnrSZjPvHSshtwbZWzCPc=) 2: 3130332e3135372e362e302f32342d3234203d3e20313431313036.roa (hash: /7z2+JC7qoPzUqAK7WiZ8hM8Bf1dEmgOqji6pvEw+hI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 16:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:a0:87:bf:74:32:1c:ca:a0:d4:39:a7:90:d0:c2:a1:64:67:64:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582 Validity Not Before: Jun 28 09:17:00 2025 GMT Not After : Jul 1 16:44:00 2025 GMT Subject: CN=2617C3B79604A7E427E882889A341085032852F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:31:b4:63:8a:94:d9:30:83:9e:db:4f:68:46: 3a:5c:63:8c:8f:c3:52:9f:af:e4:98:54:5f:be:f8: dc:70:55:0f:1f:cb:52:74:eb:df:f3:30:f9:85:eb: 04:5d:56:e5:10:46:fb:f8:17:4a:e5:ce:85:56:0b: 5a:e4:98:b6:9e:4e:f1:e4:ed:97:c4:ab:e9:0b:1b: df:5d:26:8e:31:0e:10:40:16:c2:f8:da:42:06:64: 10:83:11:96:3a:d2:ff:08:b4:02:d8:0c:ba:ec:0c: 07:09:e3:38:e6:d1:54:6d:8c:0c:34:ec:d4:14:04: 12:c8:24:ab:7a:29:63:de:be:1f:85:a4:7b:6f:82: 2b:3d:13:3c:c5:90:bc:7b:9d:91:6d:ae:a0:6b:f7: 88:e1:71:79:93:8c:46:e6:ee:cf:83:a2:b3:40:0d: 25:b3:7f:c6:e5:39:ae:7f:03:79:7a:1e:93:4d:51: 0d:4d:98:b5:d7:2d:cf:7e:c2:33:29:3f:df:2c:af: ab:c8:d0:dc:d2:ce:2f:e1:1a:04:53:b9:8b:77:a6: 8e:5d:ca:c9:c7:f0:ce:fb:f8:b4:98:fd:67:78:1e: 52:1e:85:e3:5f:c5:fc:8d:d4:64:7a:d0:66:8a:e7: e8:6c:10:06:68:86:51:73:66:51:5b:55:92:ea:f2: 27:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:17:C3:B7:96:04:A7:E4:27:E8:82:88:9A:34:10:85:03:28:52:F0 X509v3 Authority Key Identifier: keyid:B2:07:7B:9B:AF:0B:F3:E5:FC:B8:45:13:B1:D7:44:5E:30:CE:65:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ba:3b:42:2e:30:83:93:3f:55:b6:ae:77:8c:b6:45:18:34: 18:10:cb:31:d7:db:5d:29:5f:52:84:18:e0:63:3f:f9:d2:b4: 5a:ba:06:31:6b:e9:23:ff:74:bf:a9:4e:32:e7:8f:a1:5e:cd: 2a:53:c2:cb:4b:ce:d7:5b:50:9d:cd:6b:91:08:a6:14:46:c2: a7:fb:9f:0f:2a:94:f0:f2:99:5c:13:60:06:9e:66:fe:53:3c: f8:71:42:31:d2:68:13:1e:37:2e:49:13:22:a3:70:1e:a9:2f: 82:fb:b0:72:91:21:ee:8d:bb:76:6b:6c:f4:67:16:04:92:61: cf:a3:93:b1:f5:dd:d5:04:2f:4b:87:db:80:f4:57:6d:bb:a6: af:50:ba:f5:e6:9e:02:25:aa:c1:6b:52:8f:05:7b:1c:84:80: fb:85:32:03:c5:4f:2a:bb:f8:83:3b:ca:a6:47:31:12:df:00: be:35:0c:e4:ba:20:22:bf:6c:86:d7:82:7b:0e:32:94:03:17: 05:00:08:9b:c1:cb:ba:7a:42:d0:b8:00:f4:d3:07:a5:d6:91: e9:44:ea:9a:ea:4b:58:4c:0a:23:5f:ca:fb:bc:73:65:ea:bd: df:db:7f:fa:5d:98:d2:f0:50:81:6f:70:49:f1:c4:9a:d0:21: f5:37:fe:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJKCHv3QyHMqg1DmnkNDCoWRnZI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0NUUz MENFNjU4MjAeFw0yNTA2MjgwOTE3MDBaFw0yNTA3MDExNjQ0MDBaMDMxMTAvBgNV BAMTKDI2MTdDM0I3OTYwNEE3RTQyN0U4ODI4ODlBMzQxMDg1MDMyODUyRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaMbRjipTZMIOe209oRjpcY4yP w1Kfr+SYVF+++NxwVQ8fy1J069/zMPmF6wRdVuUQRvv4F0rlzoVWC1rkmLaeTvHk 7ZfEq+kLG99dJo4xDhBAFsL42kIGZBCDEZY60v8ItALYDLrsDAcJ4zjm0VRtjAw0 7NQUBBLIJKt6KWPevh+FpHtvgis9EzzFkLx7nZFtrqBr94jhcXmTjEbm7s+DorNA DSWzf8blOa5/A3l6HpNNUQ1NmLXXLc9+wjMpP98sr6vI0NzSzi/hGgRTuYt3po5d ysnH8M77+LSY/Wd4HlIeheNfxfyN1GR60GaK5+hsEAZohlFzZlFbVZLq8if1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJhfDt5YEp+Qn6IKImjQQhQMoUvAwHwYDVR0j BBgwFoAUsgd7m68L8+X8uEUTsddEXjDOZYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWRkNGYxNi01NzBlLTRjOGMtYTk5Mi1kYjg5ZWEzYmFkMzYvMC9CMjA3N0I5QkFG MEJGM0U1RkNCODQ1MTNCMUQ3NDQ1RTMwQ0U2NTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0NUUzMENF NjU4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVkZDRmMTYtNTcwZS00YzhjLWE5 OTItZGI4OWVhM2JhZDM2LzAvQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0 NUUzMENFNjU4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGq6O0IuMIOTP1W2rneMtkUYNBgQyzHX210p X1KEGOBjP/nStFq6BjFr6SP/dL+pTjLnj6FezSpTwstLztdbUJ3Na5EIphRGwqf7 nw8qlPDymVwTYAaeZv5TPPhxQjHSaBMeNy5JEyKjcB6pL4L7sHKRIe6Nu3ZrbPRn FgSSYc+jk7H13dUEL0uH24D0V227pq9QuvXmngIlqsFrUo8FexyEgPuFMgPFTyq7 +IM7yqZHMRLfAL41DOS6ICK/bIbXgnsOMpQDFwUACJvBy7p6QtC4APTTB6XWkelE 6prqS1hMCiNfyvu8c2Xqvd/bf/pdmNLwUIFvcEnxxJrQIfU3/iA= -----END CERTIFICATE-----Generated at Sun Jun 29 18:10:36 2025 by rpki-client