$ rpki-client -vvf repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft File: 0BB3D1874063172B5374865233070332233FB7B3.mft (raw, json) Hash identifier: OIkTTlnplCZ7s8JiwU0PRp7/uTEMky7YAeS+Z96AOlM= Subject key identifier: 6A:4F:2C:A5:7C:A9:6D:8C:98:E1:9A:1D:35:22:96:2A:ED:A8:81:E3 Authority key identifier: 0B:B3:D1:87:40:63:17:2B:53:74:86:52:33:07:03:32:23:3F:B7:B3 Certificate issuer: /CN=0BB3D1874063172B5374865233070332233FB7B3 Certificate serial: 124059FE61BA44DD41D8C29F53FF6836845743A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB3D1874063172B5374865233070332233FB7B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft Manifest number: 04FB Signing time: Fri 22 Aug 2025 23:31:26 +0000 Manifest this update: Fri 22 Aug 2025 23:26:26 +0000 Manifest next update: Tue 26 Aug 2025 04:55:26 +0000 Files and hashes: 1: 0BB3D1874063172B5374865233070332233FB7B3.crl (hash: 34H2YU8r+8KBiXavpGNXMMDch5RYxLpU2EBEu3A3Kx8=) 2: 3131372e3130342e3139322e302f31392d3234203d3e203233363636.roa (hash: zCm8uejNjkpY+DjdGXgrEnekcPvtN86UHanFShqlM6g=) 3: 3230322e3135332e31362e302f32302d3234203d3e203233363636.roa (hash: 5FOROrvQq+0t+Mk/ACrrEVqg06jInBJCBz0qroNhCeU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.crl rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB3D1874063172B5374865233070332233FB7B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 04:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:40:59:fe:61:ba:44:dd:41:d8:c2:9f:53:ff:68:36:84:57:43:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BB3D1874063172B5374865233070332233FB7B3 Validity Not Before: Aug 22 23:26:26 2025 GMT Not After : Aug 26 04:55:26 2025 GMT Subject: CN=6A4F2CA57CA96D8C98E19A1D3522962AEDA881E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8a:5d:45:59:8e:43:3c:e3:6a:8d:f8:1e:aa: f6:d9:98:7f:99:05:0e:7e:f4:da:c5:d2:d0:c6:9a: db:bc:8b:64:cd:ce:d0:2e:92:a3:b6:73:5d:00:32: c1:86:fe:b7:6d:a4:d2:e1:27:0b:0c:21:00:0a:62: 5e:4d:22:1e:3d:7e:77:06:7c:24:82:9f:69:76:70: 46:bf:cb:45:52:b1:89:32:79:bf:2a:aa:ba:e5:69: 07:e5:42:20:3f:b0:fa:70:35:0e:de:77:f7:80:b9: ba:b4:f2:c5:33:08:1e:1e:a7:bb:0b:c7:9e:e5:15: bf:ac:3b:c6:24:12:69:98:2a:24:0b:de:c4:2d:42: f5:b5:22:62:16:19:a1:0a:c0:69:76:ac:53:59:92: 29:7f:80:bf:4d:b4:cb:a6:ea:b6:86:fb:e1:56:ee: ae:0d:dd:61:73:0c:ab:c8:36:03:a3:92:b8:a1:64: 78:9a:ef:48:bb:d5:7f:96:c4:5e:f5:b5:58:d8:fc: a6:91:7a:70:c2:f4:85:64:5e:9c:8c:3f:cc:b6:4d: 12:24:b7:0d:f0:f3:52:fc:3c:0c:1b:b0:1a:b3:7b: c8:5e:53:d6:b8:6d:5d:0c:a7:97:94:16:72:c9:9c: ff:bd:d6:de:c6:9b:45:c7:c1:4f:80:dc:40:4b:2a: 14:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:4F:2C:A5:7C:A9:6D:8C:98:E1:9A:1D:35:22:96:2A:ED:A8:81:E3 X509v3 Authority Key Identifier: keyid:0B:B3:D1:87:40:63:17:2B:53:74:86:52:33:07:03:32:23:3F:B7:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB3D1874063172B5374865233070332233FB7B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:58:8e:d8:5d:e7:bc:88:b8:32:74:be:05:2f:a2:fe:76:66: 17:7e:4a:ad:88:d8:b3:14:88:cd:92:1e:64:89:af:2b:dc:c2: 80:2c:9a:59:56:c0:db:92:6a:b3:57:57:9a:73:9d:2f:39:11: ca:3e:8f:2f:67:e8:e2:ea:d8:5e:59:e5:06:21:9e:ec:81:50: d5:08:44:88:f9:8a:cf:51:1b:a9:3a:2d:08:15:80:68:23:56: 18:0f:57:e4:07:85:e1:8d:5e:99:f5:cc:aa:38:32:e3:19:d0: 9d:f9:31:bd:7b:43:2b:ed:6f:7f:b6:1d:5c:07:dc:81:91:39: 24:7f:38:60:02:8d:bc:77:1d:06:c8:e9:fb:58:81:c7:b3:9f: 38:ae:e7:3a:d5:e7:59:0b:f6:0c:e1:ef:f1:ce:84:61:91:15: 4d:e0:e0:78:60:ca:3f:d9:38:e0:9e:31:5b:98:b5:2f:e0:49: 98:cc:5d:7f:eb:45:29:39:43:a2:33:ef:d8:1b:e3:51:d3:f3: c7:bf:ce:17:02:ca:64:5d:43:3d:0a:fa:03:88:82:b0:37:de: 58:db:46:d4:80:30:96:77:e5:e7:d5:52:2b:4a:4d:eb:4f:8d: 2b:32:87:21:ce:2a:10:c0:a1:df:28:4c:fb:f2:1b:de:af:81: 1d:cb:38:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEkBZ/mG6RN1B2MKfU/9oNoRXQ6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJCM0QxODc0MDYzMTcyQjUzNzQ4NjUyMzMwNzAzMzIy MzNGQjdCMzAeFw0yNTA4MjIyMzI2MjZaFw0yNTA4MjYwNDU1MjZaMDMxMTAvBgNV BAMTKDZBNEYyQ0E1N0NBOTZEOEM5OEUxOUExRDM1MjI5NjJBRURBODgxRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDil1FWY5DPONqjfgeqvbZmH+Z BQ5+9NrF0tDGmtu8i2TNztAukqO2c10AMsGG/rdtpNLhJwsMIQAKYl5NIh49fncG fCSCn2l2cEa/y0VSsYkyeb8qqrrlaQflQiA/sPpwNQ7ed/eAubq08sUzCB4ep7sL x57lFb+sO8YkEmmYKiQL3sQtQvW1ImIWGaEKwGl2rFNZkil/gL9NtMum6raG++FW 7q4N3WFzDKvINgOjkrihZHia70i71X+WxF71tVjY/KaRenDC9IVkXpyMP8y2TRIk tw3w81L8PAwbsBqze8heU9a4bV0Mp5eUFnLJnP+91t7Gm0XHwU+A3EBLKhTdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUak8spXypbYyY4ZodNSKWKu2ogeMwHwYDVR0j BBgwFoAUC7PRh0BjFytTdIZSMwcDMiM/t7MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTkwOGI4My03ZjQ0LTQ2ZTAtODUzNS02ZmI4NGI1OWQ1OGEvMC8wQkIzRDE4NzQw NjMxNzJCNTM3NDg2NTIzMzA3MDMzMjIzM0ZCN0IzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEJCM0QxODc0MDYzMTcyQjUzNzQ4NjUyMzMwNzAzMzIyMzNG QjdCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDU5MDhiODMtN2Y0NC00NmUwLTg1 MzUtNmZiODRiNTlkNThhLzAvMEJCM0QxODc0MDYzMTcyQjUzNzQ4NjUyMzMwNzAz MzIyMzNGQjdCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC5Yjthd57yIuDJ0vgUvov52Zhd+Sq2I2LMU iM2SHmSJryvcwoAsmllWwNuSarNXV5pznS85Eco+jy9n6OLq2F5Z5QYhnuyBUNUI RIj5is9RG6k6LQgVgGgjVhgPV+QHheGNXpn1zKo4MuMZ0J35Mb17Qyvtb3+2HVwH 3IGROSR/OGACjbx3HQbI6ftYgceznziu5zrV51kL9gzh7/HOhGGRFU3g4Hhgyj/Z OOCeMVuYtS/gSZjMXX/rRSk5Q6Iz79gb41HT88e/zhcCymRdQz0K+gOIgrA33ljb RtSAMJZ35efVUitKTetPjSsyhyHOKhDAod8oTPvyG96vgR3LOLQ= -----END CERTIFICATE-----Generated at Sat Aug 23 14:23:32 2025 by rpki-client