$ rpki-client -vvf repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft File: B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft (raw, json) Hash identifier: sH7cv1p0GbfxZPutQZAJ3UPZWT76mTClHceWEOWZATw= Subject key identifier: 4D:BD:A0:EE:55:43:39:AD:08:1A:D9:13:D7:07:3F:1D:E0:22:30:2F Authority key identifier: B0:73:4A:32:D1:3A:96:FC:B3:FD:F9:82:C2:EE:C5:00:15:04:11:CA Certificate issuer: /CN=B0734A32D13A96FCB3FDF982C2EEC500150411CA Certificate serial: 0DFF083A9EE8DE8499F546D25709E24F9A75FBCD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft Manifest number: 01F3 Signing time: Mon 30 Jun 2025 03:21:08 +0000 Manifest this update: Mon 30 Jun 2025 03:16:08 +0000 Manifest next update: Thu 03 Jul 2025 04:26:08 +0000 Files and hashes: 1: B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl (hash: RZtl2qISsV1maeLQ2N5yzNQPqZKn6ptD4S1cwXfcQV8=) 2: 3130332e3138372e3232362e302f32332d3234203d3e20313439373238.roa (hash: fcX6dDB/6jZr5p1excLhOSLezwfpNz/DNvOt6VHyTLo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 04:26:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ff:08:3a:9e:e8:de:84:99:f5:46:d2:57:09:e2:4f:9a:75:fb:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0734A32D13A96FCB3FDF982C2EEC500150411CA Validity Not Before: Jun 30 03:16:08 2025 GMT Not After : Jul 3 04:26:08 2025 GMT Subject: CN=4DBDA0EE554339AD081AD913D7073F1DE022302F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cd:8c:b2:f9:97:96:53:36:a9:0a:0f:03:bd: 48:93:f9:41:c4:49:41:37:f3:bf:2a:cf:3f:86:50: d8:45:61:12:a3:5d:45:c7:b8:8e:14:a4:a9:53:ed: 52:03:d8:21:cd:d7:79:5a:e6:ee:58:80:3c:f9:19: 49:78:37:3a:f8:51:61:e8:17:8d:2c:cb:23:f0:8e: 8d:7e:9d:47:b5:d9:58:1f:38:ff:42:8c:52:65:48: dd:b0:4a:0f:48:ef:89:6d:55:27:66:4c:ee:7f:d0: 29:58:4e:fd:cf:20:b8:bf:76:6e:11:37:93:29:de: b3:53:36:92:76:4a:78:c3:39:27:27:bb:64:5c:29: 84:31:a2:18:cc:26:6c:d9:4f:b8:09:6b:1c:0a:e8: 52:e9:88:d8:42:a5:28:fd:d9:b6:43:38:b4:19:a1: bb:4f:64:25:2e:98:4f:76:87:1f:6e:24:2f:60:b3: 24:f4:6c:46:cc:4e:4b:11:76:3d:4e:69:b9:76:4b: b3:78:69:c6:e3:3f:bf:4b:39:b5:cf:74:2d:77:07: ef:7f:2f:69:5c:66:4f:e9:02:04:ab:1d:60:07:db: 96:da:95:04:08:ef:09:a0:ba:a9:ac:1a:e0:86:12: d3:80:bb:d6:15:f1:21:7d:e4:25:cd:8f:3c:c8:66: ca:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:BD:A0:EE:55:43:39:AD:08:1A:D9:13:D7:07:3F:1D:E0:22:30:2F X509v3 Authority Key Identifier: keyid:B0:73:4A:32:D1:3A:96:FC:B3:FD:F9:82:C2:EE:C5:00:15:04:11:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:cb:d3:6b:4d:5b:f8:ff:56:cd:f5:76:35:fd:b5:4a:99:f2: 53:97:b9:00:83:cd:3a:30:8d:06:15:c5:0a:f0:e5:ac:30:62: 4b:3a:1d:c1:d5:d6:6b:18:fa:1f:a4:ad:a0:e1:f3:a7:b0:b2: 2d:e6:dc:10:e0:2d:0e:6b:aa:42:bf:b7:c4:6b:b5:85:38:61: b6:43:46:07:f5:b0:59:dd:81:e4:2b:13:f4:46:87:7f:ea:e8: d8:28:d2:32:c3:b2:7f:ed:f4:26:3b:14:76:88:33:0b:3f:12: e8:3e:e8:01:63:81:82:ca:57:fa:6f:7d:42:75:5f:5e:fa:97: 1a:28:3b:21:00:b5:99:ee:43:52:62:eb:a8:5a:22:de:a5:7d: b1:8a:df:c6:96:69:7b:82:ec:0e:73:36:04:71:86:6e:9e:af: 12:74:da:43:f8:40:63:e9:a3:52:56:f0:aa:e3:5c:12:52:45: cd:40:28:22:f4:49:32:c1:d6:52:56:48:76:9a:d9:3b:40:c3: c5:14:d0:6d:e2:c2:4a:1d:27:d8:f5:4c:dd:36:33:e4:02:5c: e7:6a:c8:d6:83:7d:2b:2b:8a:14:f0:b1:e1:c9:cf:70:5d:30: b7:2c:ef:98:81:8e:13:df:ea:53:72:df:a0:10:65:de:48:d2: b6:57:fa:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDf8IOp7o3oSZ9UbSVwniT5p1+80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1MDAx NTA0MTFDQTAeFw0yNTA2MzAwMzE2MDhaFw0yNTA3MDMwNDI2MDhaMDMxMTAvBgNV BAMTKDREQkRBMEVFNTU0MzM5QUQwODFBRDkxM0Q3MDczRjFERTAyMjMwMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCizYyy+ZeWUzapCg8DvUiT+UHE SUE3878qzz+GUNhFYRKjXUXHuI4UpKlT7VID2CHN13la5u5YgDz5GUl4Nzr4UWHo F40syyPwjo1+nUe12VgfOP9CjFJlSN2wSg9I74ltVSdmTO5/0ClYTv3PILi/dm4R N5Mp3rNTNpJ2SnjDOScnu2RcKYQxohjMJmzZT7gJaxwK6FLpiNhCpSj92bZDOLQZ obtPZCUumE92hx9uJC9gsyT0bEbMTksRdj1Oabl2S7N4acbjP79LObXPdC13B+9/ L2lcZk/pAgSrHWAH25balQQI7wmguqmsGuCGEtOAu9YV8SF95CXNjzzIZsqnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTb2g7lVDOa0IGtkT1wc/HeAiMC8wHwYDVR0j BBgwFoAUsHNKMtE6lvyz/fmCwu7FABUEEcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjMwOTdmMC0zOTc4LTQ5Y2UtYjY5Yy00YjIwYjRkY2ZiN2UvMC9CMDczNEEzMkQx M0E5NkZDQjNGREY5ODJDMkVFQzUwMDE1MDQxMUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1MDAxNTA0 MTFDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzMDk3ZjAtMzk3OC00OWNlLWI2 OWMtNGIyMGI0ZGNmYjdlLzAvQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1 MDAxNTA0MTFDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGXL02tNW/j/Vs31djX9tUqZ8lOXuQCDzTow jQYVxQrw5awwYks6HcHV1msY+h+kraDh86ewsi3m3BDgLQ5rqkK/t8RrtYU4YbZD Rgf1sFndgeQrE/RGh3/q6Ngo0jLDsn/t9CY7FHaIMws/Eug+6AFjgYLKV/pvfUJ1 X176lxooOyEAtZnuQ1Ji66haIt6lfbGK38aWaXuC7A5zNgRxhm6erxJ02kP4QGPp o1JW8KrjXBJSRc1AKCL0STLB1lJWSHaa2TtAw8UU0G3iwkodJ9j1TN02M+QCXOdq yNaDfSsrihTwseHJz3BdMLcs75iBjhPf6lNy36AQZd5I0rZX+hI= -----END CERTIFICATE-----Generated at Tue Jul 1 08:56:32 2025 by rpki-client