$ rpki-client -vvf repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft File: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft (raw, json) Hash identifier: n70tZ8v+cehYkZ17G66nKbNbZr3lQAHOV1A3x4G3DmA= Subject key identifier: B4:6C:30:9F:CA:B5:C8:D3:D2:C2:05:38:94:C6:18:61:DE:62:64:04 Authority key identifier: 13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE Certificate issuer: /CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Certificate serial: 3AAEE5A61507738C100F935AA0C7F65046CB9E52 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft Manifest number: 02EB Signing time: Sat 28 Jun 2025 05:30:53 +0000 Manifest this update: Sat 28 Jun 2025 05:25:53 +0000 Manifest next update: Tue 01 Jul 2025 12:55:53 +0000 Files and hashes: 1: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl (hash: cH/BBKJvNohv7lwAqpTU2mIOhgsa/M/D+n/CrLPVgD0=) 2: 3130332e3137342e32342e302f32332d3234203d3e20313331313131.roa (hash: IcV/PuSEjSNsy6cbDUeXZVgPYs8xhMimlvvll5vTiXU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 12:55:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ae:e5:a6:15:07:73:8c:10:0f:93:5a:a0:c7:f6:50:46:cb:9e:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Validity Not Before: Jun 28 05:25:53 2025 GMT Not After : Jul 1 12:55:53 2025 GMT Subject: CN=B46C309FCAB5C8D3D2C2053894C61861DE626404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3f:28:75:a7:f8:9c:b5:89:b3:a5:67:0a:fe: 0f:62:59:3d:82:f0:7c:9b:85:c7:e4:bd:87:99:0c: ec:f9:45:f6:80:97:50:e7:a7:ca:dd:72:60:79:86: 07:eb:2a:fe:6d:96:75:83:b3:3d:4f:cc:35:7c:5b: 2d:b1:b8:8e:db:b4:04:f9:e5:4b:d8:42:70:f7:06: 2b:80:8a:04:2c:1d:3a:cb:d8:18:61:44:89:a8:a2: d4:36:f8:a4:22:23:ac:b5:37:e0:ed:13:ef:9c:ac: 92:69:5c:ff:c2:f9:34:6b:bd:23:18:f2:72:41:1d: 3f:06:65:d0:30:79:ef:80:f6:b5:62:e7:e7:30:ad: 0a:6f:73:b3:a9:d3:fc:7b:22:76:f9:3e:4c:ec:69: dc:27:82:c2:a5:27:cf:46:2a:a5:e3:65:1f:38:21: 4e:d9:cf:1d:96:f1:9d:f6:3f:cd:67:e9:74:6a:78: 59:6d:e8:0f:e1:10:15:5c:82:4d:a5:59:24:a4:2f: 76:1f:a6:3a:ec:88:e9:32:8a:a6:5b:3e:b5:2a:b7: 8d:fe:7e:f7:a1:2d:e6:2b:cf:e0:ca:ea:e7:b0:c9: 5f:67:33:a0:f5:fa:1c:48:75:78:7e:a1:f5:d9:dc: da:03:0f:91:26:75:fc:f1:ac:52:43:c4:ca:30:7b: 7d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:6C:30:9F:CA:B5:C8:D3:D2:C2:05:38:94:C6:18:61:DE:62:64:04 X509v3 Authority Key Identifier: keyid:13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:c1:6e:47:b5:f2:ba:00:95:0e:a8:93:a0:c7:31:c0:54:f2: b9:52:e6:c0:3c:bd:36:78:56:b8:5f:0c:2b:29:ea:5d:65:4f: 46:c8:c1:90:13:ba:7e:8c:4c:f6:1a:2f:d5:35:56:08:aa:a2: 91:8f:22:8d:3c:5b:d2:bb:c8:1d:0b:2c:3b:00:18:15:45:ae: bd:f9:2d:23:64:d8:2d:52:30:4a:b5:20:75:8a:87:cd:3b:01: c9:f0:9e:bb:3c:0a:05:fe:30:94:e0:50:8f:77:cd:7d:78:47: ae:9b:bd:9b:e5:45:c3:76:2d:20:0a:4d:55:48:a8:fd:c2:97: f2:9e:c6:c9:07:d1:c5:ac:8c:d9:9b:f2:9e:8c:d8:0a:e7:31: da:d3:96:30:3a:08:28:5c:b4:1c:23:32:f2:2d:1d:bb:d0:3c: 3b:58:22:29:e6:43:54:81:8e:6b:04:ee:48:6e:63:fd:43:91: 7c:11:cb:25:ba:7e:9d:f7:b4:36:37:96:08:e1:fc:f6:d5:73: 3d:44:d8:04:9e:18:a8:36:a9:50:95:f7:79:2d:df:f1:1c:d1: bc:06:99:21:a2:59:d9:6b:27:f0:b7:14:ba:3c:94:e7:69:db: c8:39:b8:a3:43:bf:3d:ad:05:f0:3b:c5:05:cf:50:b0:7d:a1: 6a:7a:8c:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOq7lphUHc4wQD5NaoMf2UEbLnlIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNC MDRGRENCRTAeFw0yNTA2MjgwNTI1NTNaFw0yNTA3MDExMjU1NTNaMDMxMTAvBgNV BAMTKEI0NkMzMDlGQ0FCNUM4RDNEMkMyMDUzODk0QzYxODYxREU2MjY0MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaPyh1p/ictYmzpWcK/g9iWT2C 8HybhcfkvYeZDOz5RfaAl1Dnp8rdcmB5hgfrKv5tlnWDsz1PzDV8Wy2xuI7btAT5 5UvYQnD3BiuAigQsHTrL2BhhRImootQ2+KQiI6y1N+DtE++crJJpXP/C+TRrvSMY 8nJBHT8GZdAwee+A9rVi5+cwrQpvc7Op0/x7Inb5PkzsadwngsKlJ89GKqXjZR84 IU7Zzx2W8Z32P81n6XRqeFlt6A/hEBVcgk2lWSSkL3YfpjrsiOkyiqZbPrUqt43+ fvehLeYrz+DK6uewyV9nM6D1+hxIdXh+ofXZ3NoDD5EmdfzxrFJDxMowe31lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtGwwn8q1yNPSwgU4lMYYYd5iZAQwHwYDVR0j BBgwFoAUExgHvdqvl+1yIU37xcU5rLBP3L4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjI1Yjk2OC0wOTI3LTQ1OTQtODg3ZS02N2Y1M2Y5NjdiMTIvMC8xMzE4MDdCRERB QUY5N0VENzIyMTRERkJDNUM1MzlBQ0IwNEZEQ0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNCMDRG RENCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmYyNWI5NjgtMDkyNy00NTk0LTg4 N2UtNjdmNTNmOTY3YjEyLzAvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5 QUNCMDRGRENCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE3Bbke18roAlQ6ok6DHMcBU8rlS5sA8vTZ4 VrhfDCsp6l1lT0bIwZATun6MTPYaL9U1VgiqopGPIo08W9K7yB0LLDsAGBVFrr35 LSNk2C1SMEq1IHWKh807Acnwnrs8CgX+MJTgUI93zX14R66bvZvlRcN2LSAKTVVI qP3Cl/KexskH0cWsjNmb8p6M2ArnMdrTljA6CChctBwjMvItHbvQPDtYIinmQ1SB jmsE7khuY/1DkXwRyyW6fp33tDY3lgjh/PbVcz1E2ASeGKg2qVCV93kt3/Ec0bwG mSGiWdlrJ/C3FLo8lOdp28g5uKNDvz2tBfA7xQXPULB9oWp6jBo= -----END CERTIFICATE-----Generated at Mon Jun 30 09:01:14 2025 by rpki-client