$ rpki-client -vvf repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft File: B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft (raw, json) Hash identifier: wyEkOSjQGn4q/NSEFecL5LhEqIuvraeNNN1q2YkFZtM= Subject key identifier: 21:EB:C4:9E:3D:F0:BC:3A:5E:8E:C2:9D:76:48:6B:E9:26:D1:10:8A Authority key identifier: B2:A7:61:D6:1C:BF:02:4F:24:CD:3A:18:BE:96:E5:8F:7E:D6:C9:09 Certificate issuer: /CN=B2A761D61CBF024F24CD3A18BE96E58F7ED6C909 Certificate serial: 0CCBFA74830CA994927E7BC05B5D71584E1FEB9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft Manifest number: 04AE Signing time: Sat 28 Jun 2025 05:41:09 +0000 Manifest this update: Sat 28 Jun 2025 05:36:09 +0000 Manifest next update: Tue 01 Jul 2025 08:22:09 +0000 Files and hashes: 1: B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.crl (hash: 9idas5lozLKzsatgptgUIGUspTU7fE3u0YeoOpxCspY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.crl rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 08:22:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:cb:fa:74:83:0c:a9:94:92:7e:7b:c0:5b:5d:71:58:4e:1f:eb:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2A761D61CBF024F24CD3A18BE96E58F7ED6C909 Validity Not Before: Jun 28 05:36:09 2025 GMT Not After : Jul 1 08:22:09 2025 GMT Subject: CN=21EBC49E3DF0BC3A5E8EC29D76486BE926D1108A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:88:f7:0b:6f:58:f7:56:a1:8a:31:14:96:eb: 52:c9:39:7c:29:22:cd:6f:95:59:d9:cd:90:f3:a5: 78:49:2e:2a:fb:38:50:c9:53:24:00:53:92:1a:30: c8:e4:93:5e:22:4a:16:0f:11:f5:05:f3:a5:89:f3: bc:98:88:32:fa:97:2f:b9:be:6e:6f:61:0c:11:e9: a6:54:ed:aa:e1:70:c9:89:16:b6:9e:36:10:23:7a: 6a:14:6c:d9:d7:9e:19:ea:87:bf:a1:65:83:0b:57: 9a:bb:74:67:ac:86:5c:d6:fd:99:d4:cb:a1:51:15: a2:98:a7:3d:50:be:ae:8b:ff:b3:40:d6:71:b4:5a: e0:53:f3:13:23:7a:74:c3:5a:1b:65:18:e9:45:54: c5:f2:be:3e:d4:b9:ee:c8:76:27:4d:80:7b:65:54: 32:d0:01:d3:d4:38:d3:f3:c9:b5:73:e1:53:6e:3a: 30:ee:61:79:8c:f3:6e:76:ad:fb:7c:92:3e:79:9e: a7:6c:11:12:45:8c:c4:2d:5b:20:b4:70:05:53:23: 1f:4d:aa:d7:a4:10:0e:8c:a9:88:f6:85:22:b5:42: f6:a0:59:ae:14:bd:69:29:6a:a1:44:3e:1b:43:7d: 8d:e1:e5:8f:a0:cd:60:53:89:3f:18:89:65:6d:42: 93:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:EB:C4:9E:3D:F0:BC:3A:5E:8E:C2:9D:76:48:6B:E9:26:D1:10:8A X509v3 Authority Key Identifier: keyid:B2:A7:61:D6:1C:BF:02:4F:24:CD:3A:18:BE:96:E5:8F:7E:D6:C9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:a1:8f:7b:0d:51:14:0f:7c:30:ef:5b:23:d9:67:5c:ea:9a: c7:5f:fe:b5:16:8d:08:92:ca:26:32:d8:c4:cf:74:cd:50:86: 51:5e:51:a6:28:51:e5:51:21:e8:a7:ef:d1:6a:f0:94:6f:7f: fa:d7:db:48:3b:3f:41:a2:49:b2:86:ec:18:42:ae:e1:39:33: 1f:47:0c:14:47:bf:9c:e4:af:28:8b:de:f1:14:af:ff:ef:6a: 28:b1:57:78:b1:ae:77:25:16:08:d0:1f:18:52:be:4a:c8:64: 08:6c:20:99:26:1f:3c:db:86:02:3a:2f:62:5a:9e:4e:5c:39: 3b:bc:16:36:b4:9c:86:4e:10:8e:72:84:e7:4b:b4:91:f9:f5: d4:c6:a0:4a:d8:5e:12:93:2e:40:3d:d7:03:f8:6d:68:e9:31: b2:9d:51:91:7a:d2:cd:8a:7b:16:9b:48:de:a1:9b:c4:2d:46: 4f:92:a8:c6:19:8c:4b:ee:1d:07:2d:9e:ce:7e:ec:99:8a:f6: 3a:76:2c:ea:66:2a:55:ee:f9:d7:0c:3a:77:36:b1:02:0f:ab: 6f:60:fd:d2:d3:c4:1a:3c:2d:32:6c:a7:c2:37:61:be:f2:4d: bf:03:9c:ed:ed:0b:d9:50:31:62:bb:63:4b:94:f7:b2:db:de: f3:73:cb:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDMv6dIMMqZSSfnvAW11xWE4f658wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJBNzYxRDYxQ0JGMDI0RjI0Q0QzQTE4QkU5NkU1OEY3 RUQ2QzkwOTAeFw0yNTA2MjgwNTM2MDlaFw0yNTA3MDEwODIyMDlaMDMxMTAvBgNV BAMTKDIxRUJDNDlFM0RGMEJDM0E1RThFQzI5RDc2NDg2QkU5MjZEMTEwOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwiPcLb1j3VqGKMRSW61LJOXwp Is1vlVnZzZDzpXhJLir7OFDJUyQAU5IaMMjkk14iShYPEfUF86WJ87yYiDL6ly+5 vm5vYQwR6aZU7arhcMmJFraeNhAjemoUbNnXnhnqh7+hZYMLV5q7dGeshlzW/ZnU y6FRFaKYpz1Qvq6L/7NA1nG0WuBT8xMjenTDWhtlGOlFVMXyvj7Uue7IdidNgHtl VDLQAdPUONPzybVz4VNuOjDuYXmM8252rft8kj55nqdsERJFjMQtWyC0cAVTIx9N qtekEA6MqYj2hSK1QvagWa4UvWkpaqFEPhtDfY3h5Y+gzWBTiT8YiWVtQpPPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIevEnj3wvDpejsKddkhr6SbREIowHwYDVR0j BBgwFoAUsqdh1hy/Ak8kzToYvpblj37WyQkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YmE5N2IwYi0zOWFlLTRjMmMtYjEzYi0wMWUzOTViN2EyNGIvMC9CMkE3NjFENjFD QkYwMjRGMjRDRDNBMThCRTk2RTU4RjdFRDZDOTA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJBNzYxRDYxQ0JGMDI0RjI0Q0QzQTE4QkU5NkU1OEY3RUQ2 QzkwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmJhOTdiMGItMzlhZS00YzJjLWIx M2ItMDFlMzk1YjdhMjRiLzAvQjJBNzYxRDYxQ0JGMDI0RjI0Q0QzQTE4QkU5NkU1 OEY3RUQ2QzkwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFmhj3sNURQPfDDvWyPZZ1zqmsdf/rUWjQiS yiYy2MTPdM1QhlFeUaYoUeVRIein79Fq8JRvf/rX20g7P0GiSbKG7BhCruE5Mx9H DBRHv5zkryiL3vEUr//vaiixV3ixrnclFgjQHxhSvkrIZAhsIJkmHzzbhgI6L2Ja nk5cOTu8Fja0nIZOEI5yhOdLtJH59dTGoErYXhKTLkA91wP4bWjpMbKdUZF60s2K exabSN6hm8QtRk+SqMYZjEvuHQctns5+7JmK9jp2LOpmKlXu+dcMOnc2sQIPq29g /dLTxBo8LTJsp8I3Yb7yTb8DnO3tC9lQMWK7Y0uU97Lb3vNzy9s= -----END CERTIFICATE-----Generated at Sun Jun 29 22:29:24 2025 by rpki-client