$ rpki-client -vvf repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft File: B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft (raw, json) Hash identifier: DO/5nK2IhRLvdTCG3SKLbrP9A3S+kcI7x+7oJbKCPMA= Subject key identifier: E3:92:F1:4D:38:A6:72:2B:66:BA:AA:8C:F6:97:E9:7B:92:53:66:6E Authority key identifier: B2:A7:61:D6:1C:BF:02:4F:24:CD:3A:18:BE:96:E5:8F:7E:D6:C9:09 Certificate issuer: /CN=B2A761D61CBF024F24CD3A18BE96E58F7ED6C909 Certificate serial: 7C60CBD0E16EA1E918D0A6D99D4B5F462A659304 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft Manifest number: 0499 Signing time: Sat 10 May 2025 19:41:12 +0000 Manifest this update: Sat 10 May 2025 19:36:12 +0000 Manifest next update: Wed 14 May 2025 00:06:12 +0000 Files and hashes: 1: B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.crl (hash: kX8DWUP85TjCoqr/B1s1v7DzWvVgwy0p58MB4eoDdAQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.crl rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 00:06:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:60:cb:d0:e1:6e:a1:e9:18:d0:a6:d9:9d:4b:5f:46:2a:65:93:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2A761D61CBF024F24CD3A18BE96E58F7ED6C909 Validity Not Before: May 10 19:36:12 2025 GMT Not After : May 14 00:06:12 2025 GMT Subject: CN=E392F14D38A6722B66BAAA8CF697E97B9253666E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9b:59:9d:0e:75:01:14:1e:3a:f4:99:ba:95: f5:f1:49:5d:ea:ca:be:5a:f0:6e:34:7f:9b:0c:69: 0b:40:0c:ad:85:7c:8d:8a:30:1e:f2:1b:68:1b:7f: 8a:13:66:73:c9:3b:3a:bf:61:1c:6f:44:67:c6:37: 42:af:ff:03:f4:1e:40:7f:82:f1:8f:e1:35:58:f6: 72:da:71:34:94:56:c5:69:5d:85:37:20:dd:c8:03: 9f:3b:86:2a:e5:8c:b4:7e:a3:85:f9:29:f6:ea:0a: 3c:bf:22:06:58:f3:3c:c2:e1:08:be:50:66:56:da: a7:de:0b:9c:a5:f6:f9:0b:94:91:6f:70:9d:46:aa: 72:67:6e:b0:e2:ca:52:13:01:fb:f7:51:cd:dd:5d: a4:f7:af:d6:24:dc:4b:aa:c3:81:b8:fc:93:6a:e0: 09:b7:38:d6:e5:10:c1:c1:af:f9:f4:90:51:b0:da: fc:9b:82:a8:83:00:97:03:27:34:c3:bd:37:81:80: 0f:2c:10:04:99:bf:09:41:29:82:3c:e2:54:83:6e: a4:12:d0:52:69:a1:14:61:1a:a7:c1:ef:f3:ad:0a: e4:28:d0:48:87:59:2e:67:3e:74:d6:c3:d6:d1:7e: e9:d4:fa:4a:d1:e4:b9:71:da:03:9f:1c:86:ee:39: 1a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:92:F1:4D:38:A6:72:2B:66:BA:AA:8C:F6:97:E9:7B:92:53:66:6E X509v3 Authority Key Identifier: keyid:B2:A7:61:D6:1C:BF:02:4F:24:CD:3A:18:BE:96:E5:8F:7E:D6:C9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:9f:a7:13:8a:be:96:a9:85:76:60:52:1c:9e:10:dd:b6:e8: 75:0c:42:57:8f:58:7f:aa:87:06:7c:cf:3a:18:30:1d:29:c3: 93:63:80:3c:51:e6:29:64:9a:01:1e:4f:75:6c:3e:a5:dd:03: 39:d5:c0:f3:97:6c:82:f2:19:9f:29:95:99:b0:40:a2:d0:04: 90:fc:99:9b:1f:de:d7:19:e3:58:7e:55:a2:3f:dc:85:79:0c: 89:f1:10:57:61:07:a8:1e:17:e9:de:f0:ae:f2:6f:e4:29:6d: 6d:07:1d:b1:46:57:7a:63:62:a6:b8:3e:0e:05:d7:b9:e2:6e: 68:0c:2b:25:c4:c8:ca:97:72:e4:49:24:80:8e:f1:07:df:77: db:3d:3e:16:30:88:e0:32:1d:50:27:83:eb:f8:e5:92:6d:29: aa:63:f3:a5:d8:85:5d:f3:17:8b:58:99:d9:98:25:bf:1e:6e: d0:d4:7c:24:a8:8e:4d:ca:9a:7b:0f:42:f5:17:8a:dc:59:8c: 83:6d:ee:d0:51:f6:8a:0e:2e:0c:d7:aa:ff:51:0d:2c:22:6d: 17:3d:53:b3:01:79:26:2f:ba:87:59:cc:3e:71:fa:cd:59:35: 18:4d:c3:ee:66:ca:a8:d0:da:3a:dc:43:07:8e:a5:d9:e7:a0: 03:23:88:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfGDL0OFuoekY0KbZnUtfRiplkwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJBNzYxRDYxQ0JGMDI0RjI0Q0QzQTE4QkU5NkU1OEY3 RUQ2QzkwOTAeFw0yNTA1MTAxOTM2MTJaFw0yNTA1MTQwMDA2MTJaMDMxMTAvBgNV BAMTKEUzOTJGMTREMzhBNjcyMkI2NkJBQUE4Q0Y2OTdFOTdCOTI1MzY2NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSm1mdDnUBFB469Jm6lfXxSV3q yr5a8G40f5sMaQtADK2FfI2KMB7yG2gbf4oTZnPJOzq/YRxvRGfGN0Kv/wP0HkB/ gvGP4TVY9nLacTSUVsVpXYU3IN3IA587hirljLR+o4X5KfbqCjy/IgZY8zzC4Qi+ UGZW2qfeC5yl9vkLlJFvcJ1GqnJnbrDiylITAfv3Uc3dXaT3r9Yk3Euqw4G4/JNq 4Am3ONblEMHBr/n0kFGw2vybgqiDAJcDJzTDvTeBgA8sEASZvwlBKYI84lSDbqQS 0FJpoRRhGqfB7/OtCuQo0EiHWS5nPnTWw9bRfunU+krR5Llx2gOfHIbuORqZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU45LxTTimcitmuqqM9pfpe5JTZm4wHwYDVR0j BBgwFoAUsqdh1hy/Ak8kzToYvpblj37WyQkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YmE5N2IwYi0zOWFlLTRjMmMtYjEzYi0wMWUzOTViN2EyNGIvMC9CMkE3NjFENjFD QkYwMjRGMjRDRDNBMThCRTk2RTU4RjdFRDZDOTA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJBNzYxRDYxQ0JGMDI0RjI0Q0QzQTE4QkU5NkU1OEY3RUQ2 QzkwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmJhOTdiMGItMzlhZS00YzJjLWIx M2ItMDFlMzk1YjdhMjRiLzAvQjJBNzYxRDYxQ0JGMDI0RjI0Q0QzQTE4QkU5NkU1 OEY3RUQ2QzkwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFGfpxOKvpaphXZgUhyeEN226HUMQlePWH+q hwZ8zzoYMB0pw5NjgDxR5ilkmgEeT3VsPqXdAznVwPOXbILyGZ8plZmwQKLQBJD8 mZsf3tcZ41h+VaI/3IV5DInxEFdhB6geF+ne8K7yb+QpbW0HHbFGV3pjYqa4Pg4F 17nibmgMKyXEyMqXcuRJJICO8Qffd9s9PhYwiOAyHVAng+v45ZJtKapj86XYhV3z F4tYmdmYJb8ebtDUfCSojk3KmnsPQvUXitxZjINt7tBR9ooOLgzXqv9RDSwibRc9 U7MBeSYvuodZzD5x+s1ZNRhNw+5myqjQ2jrcQweOpdnnoAMjiK0= -----END CERTIFICATE-----Generated at Sun May 11 05:23:27 2025 by rpki-client