$ rpki-client -vvf repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft File: B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft (raw, json) Hash identifier: t7NYBOREjjZq7+eZACHKUp3Ngc/0emFzgV0PFPVQv5Q= Subject key identifier: EB:E6:FC:A9:AD:CD:22:B6:FB:60:67:C4:02:BB:77:64:4B:8D:67:4F Authority key identifier: B9:72:F0:73:B8:AF:26:B8:53:3E:97:AA:FB:AE:C1:7F:CE:FD:6F:8C Certificate issuer: /CN=B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C Certificate serial: 573988C63D374967B7B9110D398CC4CD1B6D24B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft Manifest number: 035C Signing time: Fri 27 Jun 2025 22:21:52 +0000 Manifest this update: Fri 27 Jun 2025 22:16:52 +0000 Manifest next update: Tue 01 Jul 2025 03:23:52 +0000 Files and hashes: 1: 3130332e3135352e3135362e302f32342d3234203d3e20313431303632.roa (hash: neE3zrlksOzJV8H0qe9TgTIuCvuChMBCqnrQKxlvrQU=) 2: 3130332e3135352e3135372e302f32342d3234203d3e20313431303632.roa (hash: 0/uMdmxlRYv0BxLj1kLNukE06046JVFdcxHugW59xeM=) 3: B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl (hash: 2+jQ1wJU8ShFW+W3ESKcEhj76eO0jGa3Kz4fsOjK6DA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 03:23:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:39:88:c6:3d:37:49:67:b7:b9:11:0d:39:8c:c4:cd:1b:6d:24:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C Validity Not Before: Jun 27 22:16:52 2025 GMT Not After : Jul 1 03:23:52 2025 GMT Subject: CN=EBE6FCA9ADCD22B6FB6067C402BB77644B8D674F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:49:db:f5:7c:11:25:8f:2e:1c:40:6e:5d:6f: c3:f4:80:04:d5:db:21:c8:a4:07:a3:0e:c2:6b:26: 1e:60:3e:7c:29:3a:60:4c:57:7e:4c:a2:cf:a0:01: 3b:41:d5:ab:80:69:d6:d4:75:d5:df:b5:02:1c:2c: 13:bf:d4:e6:04:03:a2:b7:79:8f:d5:85:25:e2:be: 17:fa:93:1b:89:ae:c4:83:37:e6:95:8f:1b:c6:1b: 32:09:d5:53:be:cb:44:3d:e8:39:d2:25:bb:42:e1: 5f:1f:96:f6:2e:84:63:33:8b:6a:e8:a2:7d:aa:70: b8:61:4f:65:cd:a3:dd:e0:cf:78:c7:3e:78:73:61: d8:44:5b:17:2f:27:cb:a7:80:79:83:55:d3:50:5c: e5:ce:c9:94:99:82:41:b6:f4:d2:c1:6e:63:7d:91: 18:86:b4:43:5b:23:8f:43:3e:ed:a8:bf:2d:03:01: 00:e1:52:b9:0f:ee:a7:86:29:56:1a:ec:5f:70:59: 81:3a:d6:e7:f6:be:e5:cf:fe:22:27:11:c6:23:b2: 56:aa:80:cb:37:9f:ee:d9:8a:86:fa:06:f8:e9:49: df:d3:c7:62:77:ab:5c:bf:95:64:a1:bb:6e:25:c6: 4f:e6:85:39:5f:9a:72:42:87:cb:18:81:a6:d8:f6: cf:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:E6:FC:A9:AD:CD:22:B6:FB:60:67:C4:02:BB:77:64:4B:8D:67:4F X509v3 Authority Key Identifier: keyid:B9:72:F0:73:B8:AF:26:B8:53:3E:97:AA:FB:AE:C1:7F:CE:FD:6F:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:be:e1:d1:bd:9f:f3:1c:2e:9d:8b:4e:f7:e1:06:1d:ca:7d: 42:46:d8:32:62:b7:10:b3:f1:c7:86:79:ad:fd:0d:64:6b:3e: 84:49:6f:b3:e9:f3:d0:33:5c:95:93:24:be:cb:b3:b1:6c:46: a4:7b:2b:24:15:05:f6:ec:7d:5d:05:36:9d:49:72:ae:68:17: cd:a3:3b:4c:06:47:89:da:10:a7:0c:68:ca:06:36:02:d6:de: 44:1c:c1:95:b5:50:bc:79:cd:b2:9f:bc:c0:1a:2e:5f:09:c1: 3d:45:fd:e5:97:a9:c8:e9:0a:73:f0:d9:b2:80:09:68:6d:19: af:ea:02:03:2a:8d:e5:c0:5f:1c:4a:d5:58:f7:bc:a9:5f:b8: 90:4f:7b:7f:0d:0c:e5:3c:48:aa:5e:96:44:03:4c:06:52:31: 09:64:86:7d:8c:fb:59:2d:bf:ba:c3:01:f8:09:83:bd:3e:04: 5d:30:ba:34:8a:ca:4a:10:5e:b6:f7:ff:8f:13:84:f5:71:44: dd:32:d4:5e:c9:43:9b:6d:75:95:61:56:c5:ff:07:68:e7:b6: 74:98:82:0d:15:03:52:0b:8c:13:1d:23:b4:45:96:b6:d4:88: 5b:01:12:12:1a:ad:4d:95:f5:7b:81:67:6d:95:ca:26:dd:26: 2e:06:a4:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVzmIxj03SWe3uRENOYzEzRttJLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMxN0ZD RUZENkY4QzAeFw0yNTA2MjcyMjE2NTJaFw0yNTA3MDEwMzIzNTJaMDMxMTAvBgNV BAMTKEVCRTZGQ0E5QURDRDIyQjZGQjYwNjdDNDAyQkI3NzY0NEI4RDY3NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuSdv1fBEljy4cQG5db8P0gATV 2yHIpAejDsJrJh5gPnwpOmBMV35Mos+gATtB1auAadbUddXftQIcLBO/1OYEA6K3 eY/VhSXivhf6kxuJrsSDN+aVjxvGGzIJ1VO+y0Q96DnSJbtC4V8flvYuhGMzi2ro on2qcLhhT2XNo93gz3jHPnhzYdhEWxcvJ8ungHmDVdNQXOXOyZSZgkG29NLBbmN9 kRiGtENbI49DPu2ovy0DAQDhUrkP7qeGKVYa7F9wWYE61uf2vuXP/iInEcYjslaq gMs3n+7Ziob6BvjpSd/Tx2J3q1y/lWShu24lxk/mhTlfmnJCh8sYgabY9s8dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6+b8qa3NIrb7YGfEArt3ZEuNZ08wHwYDVR0j BBgwFoAUuXLwc7ivJrhTPpeq+67Bf879b4wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZDE2MTljYi1jMDFjLTQ2MTQtODYzZS1jZTI4OGQ3YmE3NjUvMC9COTcyRjA3M0I4 QUYyNkI4NTMzRTk3QUFGQkFFQzE3RkNFRkQ2RjhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMxN0ZDRUZE NkY4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWQxNjE5Y2ItYzAxYy00NjE0LTg2 M2UtY2UyODhkN2JhNzY1LzAvQjk3MkYwNzNCOEFGMjZCODUzM0U5N0FBRkJBRUMx N0ZDRUZENkY4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHO+4dG9n/McLp2LTvfhBh3KfUJG2DJitxCz 8ceGea39DWRrPoRJb7Pp89AzXJWTJL7Ls7FsRqR7KyQVBfbsfV0FNp1Jcq5oF82j O0wGR4naEKcMaMoGNgLW3kQcwZW1ULx5zbKfvMAaLl8JwT1F/eWXqcjpCnPw2bKA CWhtGa/qAgMqjeXAXxxK1Vj3vKlfuJBPe38NDOU8SKpelkQDTAZSMQlkhn2M+1kt v7rDAfgJg70+BF0wujSKykoQXrb3/48ThPVxRN0y1F7JQ5ttdZVhVsX/B2jntnSY gg0VA1ILjBMdI7RFlrbUiFsBEhIarU2V9XuBZ22VyibdJi4GpNk= -----END CERTIFICATE-----Generated at Sun Jun 29 18:54:41 2025 by rpki-client