$ rpki-client -vvf repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft File: B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft (raw, json) Hash identifier: br/dMYab9dPMAM9MVztrs6bTLNa2Tp4iS++Ynlc2rWU= Subject key identifier: 90:C6:14:F5:C5:F8:17:BC:99:8C:66:C1:67:1D:F3:60:A1:03:71:EE Authority key identifier: B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6 Certificate issuer: /CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6 Certificate serial: 181A0E24FDF9AAB4AD00AA7FB6E45D874E4B5B79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft Manifest number: BA Signing time: Sat 28 Jun 2025 23:31:53 +0000 Manifest this update: Sat 28 Jun 2025 23:26:53 +0000 Manifest next update: Wed 02 Jul 2025 02:38:53 +0000 Files and hashes: 1: B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl (hash: MMC5O8dABZkZCs67xr6MxczjCfoTXv2068aUz/l1Sck=) 2: 3130332e372e3130362e302f32342d3234203d3e20313531353939.roa (hash: 0rbZlrsZPTaqVhI90ea5Mcg8UbhZvU1fUTVZXNAKo74=) 3: 3130332e372e3130362e302f32332d3233203d3e20313531353939.roa (hash: gKuzS0cjEmgd3PQlr3qETih9wH6v1uECgkfmF5qpn9s=) 4: 3130332e372e3130372e302f32342d3234203d3e20313531353939.roa (hash: ZOp7UUJVVpn+HE+2CW6AOz2wc15ptx3FxJXIlhX1FTo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 02:38:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:1a:0e:24:fd:f9:aa:b4:ad:00:aa:7f:b6:e4:5d:87:4e:4b:5b:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6 Validity Not Before: Jun 28 23:26:53 2025 GMT Not After : Jul 2 02:38:53 2025 GMT Subject: CN=90C614F5C5F817BC998C66C1671DF360A10371EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4d:0b:27:ea:6c:09:34:5a:26:d1:7b:64:cc: 9f:5b:e4:cc:43:23:27:83:68:9d:2f:58:d3:58:83: 4e:5f:ac:11:61:ff:af:89:e0:d2:ac:a9:3e:3a:c9: 97:7d:99:6a:51:d6:e4:64:5b:69:66:30:f3:8c:d2: ca:4f:f2:d1:bc:db:34:6b:8e:60:b1:67:32:e8:bb: 97:6a:45:24:7d:b5:21:cf:cb:d5:10:0e:86:41:b6: e2:40:e6:c5:af:b8:bc:41:01:4c:3f:61:de:e6:1f: c6:a2:79:45:3d:fc:ae:a7:f7:e5:52:6b:6b:7a:1b: f1:c1:a7:59:27:53:34:da:77:6b:8f:f5:dc:79:c0: 90:01:aa:e5:d1:94:b9:90:cf:34:e8:5c:69:49:6d: f9:c2:4e:8c:e5:05:19:a2:2c:97:b2:0b:d6:36:ba: ff:38:c4:06:f9:af:db:ce:fd:2b:e2:6e:61:09:8d: 95:d1:64:a7:22:81:36:51:71:a2:d8:72:c0:61:c1: e8:6b:41:5b:cd:c1:c6:0a:e9:ad:ef:c4:66:e2:0e: 26:bc:05:e1:a6:96:ae:47:28:22:86:6f:0f:13:1e: 37:1c:c9:c2:fa:68:b6:f7:cc:a9:6d:e6:70:ec:cf: 94:83:3b:e8:45:d9:05:73:8f:8c:f2:38:55:6d:b6: 03:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C6:14:F5:C5:F8:17:BC:99:8C:66:C1:67:1D:F3:60:A1:03:71:EE X509v3 Authority Key Identifier: keyid:B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:01:d5:27:92:0a:ad:09:a3:b2:fc:ee:c6:69:63:ee:69:0b: b2:cc:19:af:cb:4b:d5:fa:f5:3f:67:c3:ce:a3:67:ce:f1:71: 3b:4f:6d:82:4c:d5:ca:05:12:13:c7:b8:58:51:f4:5b:95:a3: 5a:dd:5b:b0:ed:61:ef:fd:1d:12:31:91:c2:60:cb:1a:7a:b6: 64:ba:21:04:90:e9:a2:85:af:36:e1:4c:61:ca:cc:ea:2f:2b: c9:99:ee:41:0d:cf:ba:09:b4:7b:b5:e4:08:4a:03:91:50:97: 4f:47:dc:70:18:dc:5d:4f:9f:55:d5:f2:07:c2:e6:75:93:0f: 93:e4:7d:c0:00:a7:07:e8:41:3f:cb:d5:9d:cf:73:33:54:f4: 28:08:46:41:94:a6:31:0a:f3:05:45:16:25:bf:af:4a:55:bf: 41:43:2e:6e:9b:6f:44:e8:32:e2:64:58:81:ad:c9:b0:91:8f: 24:17:48:d8:8b:79:30:b2:c0:32:c5:1a:41:fe:89:62:24:75: 5d:eb:db:17:68:6f:c2:3b:fb:29:38:fb:8e:9b:8e:5f:d8:38: 2b:d7:fa:2a:e3:b8:63:2c:29:01:f3:80:36:f6:df:a9:3c:25: 44:97:06:4c:02:4d:3b:f4:a0:0b:cb:3e:66:7f:1b:74:cc:61: d4:64:96:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGBoOJP35qrStAKp/tuRdh05LW3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZBMTM2 MEMwNkFGNjAeFw0yNTA2MjgyMzI2NTNaFw0yNTA3MDIwMjM4NTNaMDMxMTAvBgNV BAMTKDkwQzYxNEY1QzVGODE3QkM5OThDNjZDMTY3MURGMzYwQTEwMzcxRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyTQsn6mwJNFom0XtkzJ9b5MxD IyeDaJ0vWNNYg05frBFh/6+J4NKsqT46yZd9mWpR1uRkW2lmMPOM0spP8tG82zRr jmCxZzLou5dqRSR9tSHPy9UQDoZBtuJA5sWvuLxBAUw/Yd7mH8aieUU9/K6n9+VS a2t6G/HBp1knUzTad2uP9dx5wJABquXRlLmQzzToXGlJbfnCTozlBRmiLJeyC9Y2 uv84xAb5r9vO/SvibmEJjZXRZKcigTZRcaLYcsBhwehrQVvNwcYK6a3vxGbiDia8 BeGmlq5HKCKGbw8THjccycL6aLb3zKlt5nDsz5SDO+hF2QVzj4zyOFVttgPvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkMYU9cX4F7yZjGbBZx3zYKEDce4wHwYDVR0j BBgwFoAUsXhAK+3j7Fpe4uDnH3NqE2DAavYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTEyNGU2YS1mNTFiLTQ2ZDAtOGVhMy03NmIyNzQ0NTU4YTYvMC9CMTc4NDAyQkVE RTNFQzVBNUVFMkUwRTcxRjczNkExMzYwQzA2QUY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZBMTM2MEMw NkFGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ExMjRlNmEtZjUxYi00NmQwLThl YTMtNzZiMjc0NDU1OGE2LzAvQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZB MTM2MEMwNkFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEEB1SeSCq0Jo7L87sZpY+5pC7LMGa/LS9X6 9T9nw86jZ87xcTtPbYJM1coFEhPHuFhR9FuVo1rdW7DtYe/9HRIxkcJgyxp6tmS6 IQSQ6aKFrzbhTGHKzOovK8mZ7kENz7oJtHu15AhKA5FQl09H3HAY3F1Pn1XV8gfC 5nWTD5PkfcAApwfoQT/L1Z3PczNU9CgIRkGUpjEK8wVFFiW/r0pVv0FDLm6bb0To MuJkWIGtybCRjyQXSNiLeTCywDLFGkH+iWIkdV3r2xdob8I7+yk4+46bjl/YOCvX +irjuGMsKQHzgDb236k8JUSXBkwCTTv0oAvLPmZ/G3TMYdRklt0= -----END CERTIFICATE-----Generated at Sun Jun 29 18:47:16 2025 by rpki-client