$ rpki-client -vvf repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft File: B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft (raw, json) Hash identifier: o2OIPY2MGyoD+gopT82/KvGoYE+LsIDSYOft8I2/uVc= Subject key identifier: 9B:EB:82:A6:7B:1F:E9:8D:A4:F0:1C:B3:C2:45:6D:00:0B:59:6C:8D Authority key identifier: B2:B2:F4:2B:F1:97:8A:D0:94:18:64:80:A7:DA:00:86:FD:7C:29:19 Certificate issuer: /CN=B2B2F42BF1978AD094186480A7DA0086FD7C2919 Certificate serial: 4AA653D66C668FB1302664FB19F0EBB9EAC2F889 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft Manifest number: 016D Signing time: Thu 08 May 2025 02:41:30 +0000 Manifest this update: Thu 08 May 2025 02:36:30 +0000 Manifest next update: Sun 11 May 2025 14:22:30 +0000 Files and hashes: 1: 323030313a6466313a653034303a3a2f34382d3438203d3e20313530323435.roa (hash: gtOr9NwzW8Aa7fZGd03VkoCWA9Dhf88Ryc02CpBSPGY=) 2: 3130332e32332e39382e302f32332d3233203d3e20313530323435.roa (hash: 4vMfmSE2Nr1Jh9euWzmJY0IXJeyMyzfrb4vovMJmB9A=) 3: B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl (hash: R24UMSupzes/INJzt39/N2nX7csIhTjdhvDBcQDGBfc=) 4: 3130332e32332e39382e302f32342d3234203d3e20313530323435.roa (hash: zfWwMyIyfYFsLYce6cLTwp+3PWwf0vu9ehqN4lOZ8SU=) 5: 3130332e32332e39392e302f32342d3234203d3e20313530323435.roa (hash: 7tXNJtByPVAUWKN7rPTJrICa1r391Ty+571rFNCuCe4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 14:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:a6:53:d6:6c:66:8f:b1:30:26:64:fb:19:f0:eb:b9:ea:c2:f8:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2B2F42BF1978AD094186480A7DA0086FD7C2919 Validity Not Before: May 8 02:36:30 2025 GMT Not After : May 11 14:22:30 2025 GMT Subject: CN=9BEB82A67B1FE98DA4F01CB3C2456D000B596C8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:25:21:6f:ed:88:93:6c:63:28:cd:be:c2:88: 26:0a:4b:78:6f:0f:db:e0:30:9c:3e:62:05:87:46: fb:f0:bd:08:2f:dd:12:89:ac:0d:bf:1c:60:a6:ab: 23:28:96:41:f2:42:52:3b:3c:1c:7f:42:20:41:0f: e9:5c:02:27:a1:c2:98:f7:c2:13:c6:26:7b:ea:72: fd:06:b9:a5:df:0a:57:c6:6a:55:4a:60:ba:11:a2: fd:c1:70:05:7d:2e:34:3e:47:08:47:46:28:23:47: ba:99:15:65:5c:85:ce:87:ad:38:06:ec:40:35:8d: 1e:da:aa:cf:1a:7d:de:f8:da:ba:c1:e7:bd:5d:f1: 46:5c:6a:e3:7b:b9:0f:c4:5e:5d:13:15:fc:45:46: 90:02:05:3e:43:d0:5f:cc:3c:54:f4:f6:05:4a:17: 9b:40:f6:83:ec:91:f6:3e:dd:78:81:44:24:e4:71: 99:8d:5f:f6:0e:0c:7c:f1:82:e0:03:e1:a3:21:68: ec:25:92:db:48:a8:76:98:13:51:49:d7:76:d7:81: a5:04:e7:2c:1b:94:9d:96:70:66:ea:c3:8f:56:80: 79:ff:d0:73:2b:67:75:86:c4:5d:ab:2e:36:14:f1: af:43:40:29:1a:d6:e9:ed:08:f2:c2:71:4c:50:0c: 97:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:EB:82:A6:7B:1F:E9:8D:A4:F0:1C:B3:C2:45:6D:00:0B:59:6C:8D X509v3 Authority Key Identifier: keyid:B2:B2:F4:2B:F1:97:8A:D0:94:18:64:80:A7:DA:00:86:FD:7C:29:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:c6:2b:ff:05:8c:66:35:62:95:57:e2:62:b1:58:83:47:cc: e2:fa:4c:7d:af:2f:eb:4d:3f:d8:5f:88:58:46:18:6a:bb:8d: 5c:99:17:3a:3b:d3:dc:e8:0f:e9:ff:cc:48:8b:3c:a2:18:5d: 85:b6:1e:b0:11:7d:89:e4:a8:87:4e:8b:a9:63:6e:b2:ca:46: 35:f1:85:db:58:16:5c:96:9d:44:24:e0:b8:af:ba:e5:88:87: 2e:8c:b4:c5:2f:ad:bd:57:76:46:04:52:d3:ff:11:db:56:4f: 67:ff:6d:80:08:63:c6:b4:f2:29:2c:2a:11:67:f5:19:e0:3e: 77:61:02:3f:a5:bd:9b:b2:96:c7:6d:f0:e9:4a:e1:b9:cb:89: dc:ff:a0:a4:87:67:8e:32:16:82:86:57:b5:8c:e3:a9:f3:53: fc:2d:c7:61:00:b2:3b:a9:b9:1d:e3:aa:68:45:d8:2a:5b:3c: 93:39:12:08:1d:36:c7:40:41:26:f5:d7:05:c1:79:28:21:89: 5b:cf:83:83:1b:f9:a1:4b:5c:ce:16:55:ac:1f:9e:b5:63:3e: 66:94:1d:0a:35:ef:91:53:77:9d:3f:2f:11:23:b8:ed:11:99: d9:c6:41:a5:c7:5f:49:f0:ac:06:8e:b5:39:c1:34:10:f1:7a: a4:51:69:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSqZT1mxmj7EwJmT7GfDruerC+IkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJCMkY0MkJGMTk3OEFEMDk0MTg2NDgwQTdEQTAwODZG RDdDMjkxOTAeFw0yNTA1MDgwMjM2MzBaFw0yNTA1MTExNDIyMzBaMDMxMTAvBgNV BAMTKDlCRUI4MkE2N0IxRkU5OERBNEYwMUNCM0MyNDU2RDAwMEI1OTZDOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLJSFv7YiTbGMozb7CiCYKS3hv D9vgMJw+YgWHRvvwvQgv3RKJrA2/HGCmqyMolkHyQlI7PBx/QiBBD+lcAiehwpj3 whPGJnvqcv0GuaXfClfGalVKYLoRov3BcAV9LjQ+RwhHRigjR7qZFWVchc6HrTgG 7EA1jR7aqs8afd742rrB571d8UZcauN7uQ/EXl0TFfxFRpACBT5D0F/MPFT09gVK F5tA9oPskfY+3XiBRCTkcZmNX/YODHzxguAD4aMhaOwlkttIqHaYE1FJ13bXgaUE 5ywblJ2WcGbqw49WgHn/0HMrZ3WGxF2rLjYU8a9DQCka1untCPLCcUxQDJd9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm+uCpnsf6Y2k8ByzwkVtAAtZbI0wHwYDVR0j BBgwFoAUsrL0K/GXitCUGGSAp9oAhv18KRkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODQ2ZjQyMi1jMzAyLTQ0NjItYjU4NC03MDBlOTM0NmNhMDkvMC9CMkIyRjQyQkYx OTc4QUQwOTQxODY0ODBBN0RBMDA4NkZEN0MyOTE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJCMkY0MkJGMTk3OEFEMDk0MTg2NDgwQTdEQTAwODZGRDdD MjkxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg0NmY0MjItYzMwMi00NDYyLWI1 ODQtNzAwZTkzNDZjYTA5LzAvQjJCMkY0MkJGMTk3OEFEMDk0MTg2NDgwQTdEQTAw ODZGRDdDMjkxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJfGK/8FjGY1YpVX4mKxWINHzOL6TH2vL+tN P9hfiFhGGGq7jVyZFzo709zoD+n/zEiLPKIYXYW2HrARfYnkqIdOi6ljbrLKRjXx hdtYFlyWnUQk4LivuuWIhy6MtMUvrb1XdkYEUtP/EdtWT2f/bYAIY8a08iksKhFn 9RngPndhAj+lvZuylsdt8OlK4bnLidz/oKSHZ44yFoKGV7WM46nzU/wtx2EAsjup uR3jqmhF2CpbPJM5EggdNsdAQSb11wXBeSghiVvPg4Mb+aFLXM4WVawfnrVjPmaU HQo175FTd50/LxEjuO0RmdnGQaXHX0nwrAaOtTnBNBDxeqRRafk= -----END CERTIFICATE-----Generated at Sat May 10 08:01:26 2025 by rpki-client