$ rpki-client -vvf repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft File: B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft (raw, json) Hash identifier: HB0G6ajIy0FDEKEW/463ymEGByO9PXAIi3/HoCymL4w= Subject key identifier: FD:C8:47:14:F9:15:F6:D5:FF:5A:8B:75:FF:C3:05:E3:27:56:48:6A Authority key identifier: B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C Certificate issuer: /CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C Certificate serial: 25F97B7AF6E6B0B367C3ECFF26AF8BF1013D769E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft Manifest number: 01F6 Signing time: Fri 27 Jun 2025 10:22:09 +0000 Manifest this update: Fri 27 Jun 2025 10:17:09 +0000 Manifest next update: Mon 30 Jun 2025 21:32:09 +0000 Files and hashes: 1: 3130332e3138362e3230322e302f32332d3233203d3e20313439373036.roa (hash: YXcPTV7LyiaT/dlRqQiGxAGyQ4A0Km1DyhqBZdphgGs=) 2: 3130332e3138362e3230332e302f32342d3234203d3e20313439373036.roa (hash: JgDdJ0VL4u8D8+wDznKBSlTRQ0p6opMwZGoPzapaaX4=) 3: B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl (hash: 0YzCGxhPOu7rWQSjrpzWQEjhQFWPPk6FoRb/udvunCk=) 4: 3130332e3138362e3230322e302f32342d3234203d3e20313439373036.roa (hash: k4Wn7QjCevaLRtjzpZzU9aujDNZ1W8N1HpzN16+qakY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 21:32:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:f9:7b:7a:f6:e6:b0:b3:67:c3:ec:ff:26:af:8b:f1:01:3d:76:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C Validity Not Before: Jun 27 10:17:09 2025 GMT Not After : Jun 30 21:32:09 2025 GMT Subject: CN=FDC84714F915F6D5FF5A8B75FFC305E32756486A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ab:07:86:c3:34:db:72:af:5b:8c:ea:ac:fc: 15:bc:3f:b1:a8:cb:b7:77:e9:31:7b:5e:d7:c0:bb: 2d:88:46:35:9f:e4:2f:00:5a:18:43:5d:6b:82:42: 2f:10:b1:de:ee:af:bc:3d:45:1b:e4:42:11:f2:a3: 6a:d8:58:67:9b:54:f7:19:0d:7e:ba:a4:be:54:ca: 84:07:54:cf:ad:3f:f5:bf:95:07:77:60:22:0d:e2: e7:1d:cf:79:74:f3:c4:0b:a9:fc:9f:01:cd:77:0e: 4a:aa:28:42:35:12:ad:83:1b:0d:7a:3e:4c:54:ef: e9:5d:5b:45:a7:94:62:ea:17:24:63:78:78:aa:68: 0d:c3:c8:b1:c5:9d:60:1a:97:e5:b1:cf:22:06:76: 3d:7c:74:6a:31:b0:04:4a:6e:a2:87:2e:48:ed:ff: 49:0f:8c:7a:f2:70:b1:20:3f:2c:45:f6:ec:68:7f: e1:cd:81:88:38:4f:0a:8d:db:a9:9c:24:fa:ce:0e: 85:e2:0b:57:ea:40:d0:33:8d:4e:c7:bd:8f:60:02: 59:e7:8d:2a:b4:50:c1:f2:a9:5b:fd:1a:18:f6:48: 01:0f:0a:96:1a:4f:de:e5:c1:55:3c:1c:70:bc:07: ff:7f:c4:13:18:58:18:4d:1b:e3:ec:3e:e1:5c:0e: b6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C8:47:14:F9:15:F6:D5:FF:5A:8B:75:FF:C3:05:E3:27:56:48:6A X509v3 Authority Key Identifier: keyid:B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:85:c3:85:43:28:ed:ab:75:1a:e3:50:17:19:cb:8e:27:f8: 81:22:ab:80:f8:99:6c:db:f9:8f:17:1d:1b:a4:ec:cf:72:cd: d3:5a:0c:f3:3a:03:d8:40:4a:82:66:60:ba:36:de:ec:d2:1f: 18:a0:12:77:d4:fd:6b:e7:59:61:1f:7a:ac:6f:22:75:9b:64: 43:3b:48:73:78:ec:6a:10:bb:67:e8:27:98:cd:45:22:c3:02: 82:cd:98:eb:1a:3e:cd:6b:47:1c:e1:22:70:c8:7f:3f:2e:69: eb:9b:0b:57:f5:e8:3a:9d:ff:f8:9a:12:8c:aa:7f:d6:97:ca: 2c:1b:f4:dd:fd:03:48:77:ea:58:39:bf:1d:53:6d:8a:9e:c6: b8:e9:e9:3e:cb:6f:c5:d5:f6:1d:6e:53:18:3a:06:37:ee:80: a0:a3:de:40:b8:44:d6:bf:e0:a6:93:7d:4b:2e:30:8b:9c:2f: 6a:71:91:c7:09:fd:21:f2:a9:66:74:bc:12:cb:6e:f5:7e:f8: 5b:5e:fe:14:09:79:91:33:51:4a:28:1e:7b:00:10:74:c2:55: ef:fa:c9:65:5d:b6:84:08:44:95:8e:14:cd:b6:f9:db:84:85: ba:7a:68:10:ca:91:92:14:fc:86:36:8f:1e:d1:b3:54:d9:2b: 91:53:5e:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJfl7evbmsLNnw+z/Jq+L8QE9dp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1RTlG RDIxRkE1QzAeFw0yNTA2MjcxMDE3MDlaFw0yNTA2MzAyMTMyMDlaMDMxMTAvBgNV BAMTKEZEQzg0NzE0RjkxNUY2RDVGRjVBOEI3NUZGQzMwNUUzMjc1NjQ4NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEqweGwzTbcq9bjOqs/BW8P7Go y7d36TF7XtfAuy2IRjWf5C8AWhhDXWuCQi8Qsd7ur7w9RRvkQhHyo2rYWGebVPcZ DX66pL5UyoQHVM+tP/W/lQd3YCIN4ucdz3l088QLqfyfAc13DkqqKEI1Eq2DGw16 PkxU7+ldW0WnlGLqFyRjeHiqaA3DyLHFnWAal+WxzyIGdj18dGoxsARKbqKHLkjt /0kPjHrycLEgPyxF9uxof+HNgYg4TwqN26mcJPrODoXiC1fqQNAzjU7HvY9gAlnn jSq0UMHyqVv9Ghj2SAEPCpYaT97lwVU8HHC8B/9/xBMYWBhNG+PsPuFcDrYXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/chHFPkV9tX/Wot1/8MF4ydWSGowHwYDVR0j BBgwFoAUs0e7pr0Rv8XlX3/zNMFl6f0h+lwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTEwNjgyNy04NjZlLTRhYzMtOGY3OS1hNmUzMjBiMjBkZTcvMC9CMzQ3QkJBNkJE MTFCRkM1RTU1RjdGRjMzNEMxNjVFOUZEMjFGQTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1RTlGRDIx RkE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkxMDY4MjctODY2ZS00YWMzLThm NzktYTZlMzIwYjIwZGU3LzAvQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1 RTlGRDIxRkE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKuFw4VDKO2rdRrjUBcZy44n+IEiq4D4mWzb +Y8XHRuk7M9yzdNaDPM6A9hASoJmYLo23uzSHxigEnfU/WvnWWEfeqxvInWbZEM7 SHN47GoQu2foJ5jNRSLDAoLNmOsaPs1rRxzhInDIfz8uaeubC1f16Dqd//iaEoyq f9aXyiwb9N39A0h36lg5vx1TbYqexrjp6T7Lb8XV9h1uUxg6BjfugKCj3kC4RNa/ 4KaTfUsuMIucL2pxkccJ/SHyqWZ0vBLLbvV++Fte/hQJeZEzUUooHnsAEHTCVe/6 yWVdtoQIRJWOFM22+duEhbp6aBDKkZIU/IY2jx7Rs1TZK5FTXoo= -----END CERTIFICATE-----Generated at Sun Jun 29 18:09:05 2025 by rpki-client