$ rpki-client -vvf repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft File: B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft (raw, json) Hash identifier: h3P9WTZr12/w0N9a4K4og/uRrfrYB0qHdt575fnE+8Y= Subject key identifier: 76:EC:43:42:B4:DD:F3:E2:5F:79:63:28:69:7A:A1:A6:C6:6F:92:E1 Authority key identifier: B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94 Certificate issuer: /CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094 Certificate serial: 6B3FDA736514D13233FD85851FFD603171E44148 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft Manifest number: 019D Signing time: Mon 30 Jun 2025 16:40:04 +0000 Manifest this update: Mon 30 Jun 2025 16:35:04 +0000 Manifest next update: Thu 03 Jul 2025 20:27:04 +0000 Files and hashes: 1: B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl (hash: 9gOC07WLDAcIa4GCJ6cNG6BRcN+UpbgqO8Nj2iiYXPE=) 2: 3130332e312e35302e302f32342d3234203d3e20313432333532.roa (hash: 13a296YbpXPKiDroOx9RoYtV5Gqcvos+cOx12thufiw=) 3: 3130332e312e35312e302f32342d3234203d3e20313432333532.roa (hash: Lx6mbXqTbsqqqJEaZ6Ptl1cSIXULA4hNI34A7lM8ago=) 4: 3130332e312e35302e302f32332d3233203d3e20313432333532.roa (hash: Pk+CfBb09D2NLm+w/mIdTLsk/cAe1V1lpiWgoIeGFHc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 20:27:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:3f:da:73:65:14:d1:32:33:fd:85:85:1f:fd:60:31:71:e4:41:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094 Validity Not Before: Jun 30 16:35:04 2025 GMT Not After : Jul 3 20:27:04 2025 GMT Subject: CN=76EC4342B4DDF3E25F796328697AA1A6C66F92E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fc:6c:e9:7e:46:d3:00:a5:81:3b:8e:33:cb: 58:a6:56:e2:a1:00:38:65:3b:43:9b:b8:0b:55:99: e4:4b:4b:41:d9:ec:b3:19:8e:62:7d:58:c0:13:b2: e7:eb:20:8b:18:4d:93:d9:73:ac:c6:76:91:2c:b0: a3:7d:dd:b4:0d:88:96:43:09:18:7d:55:63:f8:df: 06:9b:80:62:87:05:38:7c:16:41:3b:8f:ab:70:05: ef:9b:cc:61:d8:12:f0:fe:a1:19:d6:29:c8:ee:2b: 31:30:57:4b:24:3b:31:33:c0:b7:af:ff:ef:5a:2c: 93:93:64:43:2d:16:5e:15:e7:2b:0f:ad:19:23:56: c0:8a:c3:85:88:8c:0e:c2:12:a1:4e:55:d6:eb:eb: 2d:07:0a:ac:09:a5:f5:8d:53:1e:11:9a:2b:b1:f8: bc:1e:e2:d6:66:64:db:ec:b0:04:5f:67:94:c0:8f: 94:67:f5:39:60:ae:60:9e:4f:29:83:71:8a:a4:cb: 13:32:46:d5:49:77:d2:f3:3d:1e:6d:bb:5e:4f:9f: 80:48:a0:cd:23:95:92:be:f4:86:b8:0e:41:6f:8f: 65:a0:07:1e:b0:12:85:ea:26:2d:e4:0c:d8:a9:0d: ad:b8:47:b3:8b:8a:fa:bd:a3:d4:96:3a:0f:f9:9f: e3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:EC:43:42:B4:DD:F3:E2:5F:79:63:28:69:7A:A1:A6:C6:6F:92:E1 X509v3 Authority Key Identifier: keyid:B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:13:ed:b2:af:b5:b3:de:35:21:4f:51:0d:21:16:a5:27:d1: 62:11:de:84:c3:36:61:d7:0c:0c:70:b6:5a:a9:80:85:f3:8f: 8e:d2:70:03:fa:07:95:d3:17:da:65:0b:a4:6a:60:eb:8b:77: 33:46:a7:1d:40:c2:26:69:bb:60:1a:24:f7:80:7c:21:be:8a: fe:16:f8:8e:69:c7:69:b7:b9:bf:b7:21:94:89:30:a4:d6:dd: 31:fe:88:f6:ff:fd:ec:fb:e4:f4:63:e3:2a:0d:c8:41:bb:d6: 54:e4:9b:8c:8f:8d:ea:45:29:8b:06:21:45:af:7f:fe:66:e5: 5c:8f:62:8d:36:f9:b3:c0:84:59:9f:fa:59:54:53:f7:e3:54: c4:9b:d9:a1:f7:72:6e:1f:fa:9e:c9:98:9a:36:a2:cb:bf:2e: 98:a2:87:12:ec:7e:88:f4:7f:b7:d6:a3:a5:bc:8b:52:2c:98: da:8e:45:fd:fd:61:23:2a:5c:8d:14:ff:4d:4e:40:16:11:49: 51:51:9f:43:ec:d8:10:70:56:21:b9:b1:81:4c:90:d6:e3:47: 27:e8:dd:18:40:5d:6b:95:cb:f6:82:a8:59:d8:81:f2:f6:c5: a9:a8:a3:2b:fe:45:9b:47:eb:f9:b7:76:45:ac:41:4a:b7:0d: 77:ba:d6:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaz/ac2UU0TIz/YWFH/1gMXHkQUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1RDJB MDk5MzA5NDAeFw0yNTA2MzAxNjM1MDRaFw0yNTA3MDMyMDI3MDRaMDMxMTAvBgNV BAMTKDc2RUM0MzQyQjREREYzRTI1Rjc5NjMyODY5N0FBMUE2QzY2RjkyRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8/GzpfkbTAKWBO44zy1imVuKh ADhlO0ObuAtVmeRLS0HZ7LMZjmJ9WMATsufrIIsYTZPZc6zGdpEssKN93bQNiJZD CRh9VWP43wabgGKHBTh8FkE7j6twBe+bzGHYEvD+oRnWKcjuKzEwV0skOzEzwLev /+9aLJOTZEMtFl4V5ysPrRkjVsCKw4WIjA7CEqFOVdbr6y0HCqwJpfWNUx4Rmiux +Lwe4tZmZNvssARfZ5TAj5Rn9TlgrmCeTymDcYqkyxMyRtVJd9LzPR5tu15Pn4BI oM0jlZK+9Ia4DkFvj2WgBx6wEoXqJi3kDNipDa24R7OLivq9o9SWOg/5n+NlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUduxDQrTd8+JfeWMoaXqhpsZvkuEwHwYDVR0j BBgwFoAUtINF9/n7TxT//ovFt0aF0qCZMJQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjUyYmY5Yy02MzRiLTQwYjktYWMwYy1hODdiNDdkNTlmOTEvMC9CNDgzNDVGN0Y5 RkI0RjE0RkZGRThCQzVCNzQ2ODVEMkEwOTkzMDk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1RDJBMDk5 MzA5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY1MmJmOWMtNjM0Yi00MGI5LWFj MGMtYTg3YjQ3ZDU5ZjkxLzAvQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1 RDJBMDk5MzA5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC0T7bKvtbPeNSFPUQ0hFqUn0WIR3oTDNmHX DAxwtlqpgIXzj47ScAP6B5XTF9plC6RqYOuLdzNGpx1AwiZpu2AaJPeAfCG+iv4W +I5px2m3ub+3IZSJMKTW3TH+iPb//ez75PRj4yoNyEG71lTkm4yPjepFKYsGIUWv f/5m5VyPYo02+bPAhFmf+llUU/fjVMSb2aH3cm4f+p7JmJo2osu/LpiihxLsfoj0 f7fWo6W8i1IsmNqORf39YSMqXI0U/01OQBYRSVFRn0Ps2BBwViG5sYFMkNbjRyfo 3RhAXWuVy/aCqFnYgfL2xamooyv+RZtH6/m3dkWsQUq3DXe61vo= -----END CERTIFICATE-----Generated at Tue Jul 1 15:36:13 2025 by rpki-client