$ rpki-client -vvf repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft File: B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft (raw, json) Hash identifier: SIgmPvhwvtzcOL0/NZXdcRLp2uu9jt6Ggh0cphomE7o= Subject key identifier: 88:02:5E:1F:C5:90:86:ED:0F:98:11:73:69:B3:7D:37:CD:54:B7:96 Authority key identifier: B2:07:7B:9B:AF:0B:F3:E5:FC:B8:45:13:B1:D7:44:5E:30:CE:65:82 Certificate issuer: /CN=B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582 Certificate serial: 68DF699A32B2838439C8A87B1BF98BA7947F19EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft Manifest number: 0443 Signing time: Sat 03 May 2025 09:52:00 +0000 Manifest this update: Sat 03 May 2025 09:47:00 +0000 Manifest next update: Tue 06 May 2025 21:42:00 +0000 Files and hashes: 1: B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl (hash: gDYJB/rd6ULnDGwiovKU5x30MwMG8VPTpwsK9sIqcUM=) 2: 3130332e3135372e362e302f32342d3234203d3e20313431313036.roa (hash: /7z2+JC7qoPzUqAK7WiZ8hM8Bf1dEmgOqji6pvEw+hI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 21:42:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:df:69:9a:32:b2:83:84:39:c8:a8:7b:1b:f9:8b:a7:94:7f:19:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582 Validity Not Before: May 3 09:47:00 2025 GMT Not After : May 6 21:42:00 2025 GMT Subject: CN=88025E1FC59086ED0F98117369B37D37CD54B796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e8:22:3f:e3:c8:83:80:09:6d:af:79:04:44: e5:9f:c4:a1:df:89:b9:cc:ed:66:0f:cc:5e:49:eb: 1d:e3:86:d4:99:02:68:7f:99:80:8e:69:bf:be:7a: 43:9e:d3:fa:4d:70:3e:ad:70:00:7c:2d:18:c9:b5: 51:7c:69:f2:30:e9:c8:17:76:a5:ae:7d:ce:27:19: 2a:e9:a3:04:58:1d:ed:d6:85:9b:f4:8f:6a:54:98: f1:5c:1e:37:b6:81:39:e0:ab:f1:d2:88:05:9c:41: 9d:f6:86:cd:69:76:47:ba:de:63:4e:0b:a6:60:b9: 6d:d2:2c:34:e7:80:1e:1f:5f:02:4b:e4:2e:fe:5e: b8:eb:a1:ed:89:e3:f9:ee:55:26:33:be:0b:47:2f: c3:8a:d5:09:bc:d5:a8:ad:b9:cf:da:0b:10:f7:b2: 14:ce:34:b9:ee:47:72:c1:22:bc:3a:4a:ea:6a:10: a3:3f:3f:32:e6:e4:0a:45:da:19:15:b1:c8:8e:0b: 00:65:66:54:c5:1f:84:cd:d4:d4:03:59:6d:e4:b6: e6:d0:f6:00:8b:12:a3:d7:3e:ef:61:75:56:6b:fd: 65:90:23:45:e3:df:13:71:60:25:75:f1:5e:e6:70: 08:4a:79:c7:3b:44:0a:16:3d:93:d1:80:61:fb:bc: f3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:02:5E:1F:C5:90:86:ED:0F:98:11:73:69:B3:7D:37:CD:54:B7:96 X509v3 Authority Key Identifier: keyid:B2:07:7B:9B:AF:0B:F3:E5:FC:B8:45:13:B1:D7:44:5E:30:CE:65:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:d3:1d:52:76:25:f0:38:e0:13:3d:57:68:fa:6c:83:58:48: a7:46:c4:13:34:83:f7:37:dd:be:a2:a3:d5:d0:50:12:ac:fe: a4:63:95:fa:87:63:f1:0d:4f:7f:c1:8b:d1:da:6e:2e:38:74: 55:3e:dc:ca:cf:64:ff:9c:ba:b2:52:be:8b:80:fa:25:86:73: 52:0b:e4:9b:47:6e:40:17:8c:12:ca:54:cf:55:c5:04:ff:e5: ae:58:26:70:64:9a:e7:9f:4c:59:f6:f2:15:e6:45:85:c5:7c: fc:0b:d7:fa:74:70:66:e7:d1:d7:5e:c3:95:2f:93:3c:24:86: 36:a0:77:b3:c6:df:f1:71:a2:e2:e3:e4:cb:64:5a:51:7c:4a: e8:68:a5:d6:ec:6d:02:09:38:d9:b2:c9:e3:26:a6:14:d0:de: b7:89:94:64:7e:24:85:a5:cd:05:6c:08:6a:ab:d1:d9:0d:5a: a4:db:73:47:ed:be:1b:ed:a2:47:96:c0:f0:b6:d6:19:f2:a5: bc:95:6d:c7:7a:de:a0:40:16:8d:fc:3d:d8:58:38:3c:25:34: af:e0:bd:da:45:af:aa:e7:b8:a2:c9:72:16:39:bb:bf:59:c5: 77:9a:92:04:1f:b3:31:7d:f9:77:c7:e1:64:32:47:9f:98:6c: 08:fe:3b:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaN9pmjKyg4Q5yKh7G/mLp5R/GeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0NUUz MENFNjU4MjAeFw0yNTA1MDMwOTQ3MDBaFw0yNTA1MDYyMTQyMDBaMDMxMTAvBgNV BAMTKDg4MDI1RTFGQzU5MDg2RUQwRjk4MTE3MzY5QjM3RDM3Q0Q1NEI3OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV6CI/48iDgAltr3kEROWfxKHf ibnM7WYPzF5J6x3jhtSZAmh/mYCOab++ekOe0/pNcD6tcAB8LRjJtVF8afIw6cgX dqWufc4nGSrpowRYHe3WhZv0j2pUmPFcHje2gTngq/HSiAWcQZ32hs1pdke63mNO C6ZguW3SLDTngB4fXwJL5C7+Xrjroe2J4/nuVSYzvgtHL8OK1Qm81aituc/aCxD3 shTONLnuR3LBIrw6SupqEKM/PzLm5ApF2hkVsciOCwBlZlTFH4TN1NQDWW3ktubQ 9gCLEqPXPu9hdVZr/WWQI0Xj3xNxYCV18V7mcAhKecc7RAoWPZPRgGH7vPOhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiAJeH8WQhu0PmBFzabN9N81Ut5YwHwYDVR0j BBgwFoAUsgd7m68L8+X8uEUTsddEXjDOZYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWRkNGYxNi01NzBlLTRjOGMtYTk5Mi1kYjg5ZWEzYmFkMzYvMC9CMjA3N0I5QkFG MEJGM0U1RkNCODQ1MTNCMUQ3NDQ1RTMwQ0U2NTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0NUUzMENF NjU4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVkZDRmMTYtNTcwZS00YzhjLWE5 OTItZGI4OWVhM2JhZDM2LzAvQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0 NUUzMENFNjU4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANDTHVJ2JfA44BM9V2j6bINYSKdGxBM0g/c3 3b6io9XQUBKs/qRjlfqHY/ENT3/Bi9Habi44dFU+3MrPZP+curJSvouA+iWGc1IL 5JtHbkAXjBLKVM9VxQT/5a5YJnBkmuefTFn28hXmRYXFfPwL1/p0cGbn0ddew5Uv kzwkhjagd7PG3/FxouLj5MtkWlF8SuhopdbsbQIJONmyyeMmphTQ3reJlGR+JIWl zQVsCGqr0dkNWqTbc0ftvhvtokeWwPC21hnypbyVbcd63qBAFo38PdhYODwlNK/g vdpFr6rnuKLJchY5u79ZxXeakgQfszF9+XfH4WQyR5+YbAj+O+c= -----END CERTIFICATE-----Generated at Tue May 6 01:56:32 2025 by rpki-client