$ rpki-client -vvf repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft File: B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft (raw, json) Hash identifier: nhvxe2eV/coQxAJTl3G86czo4gSGWt/c/MdorVpW250= Subject key identifier: D9:54:85:69:0D:61:F2:46:F5:C0:0C:9F:9D:55:29:8F:E8:EB:26:EB Authority key identifier: B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C Certificate issuer: /CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C Certificate serial: 58C82B48F9ABA371F277CC3007A40E0BDB4BC187 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft Manifest number: 01DE Signing time: Sat 03 May 2025 21:12:09 +0000 Manifest this update: Sat 03 May 2025 21:07:09 +0000 Manifest next update: Wed 07 May 2025 08:51:09 +0000 Files and hashes: 1: B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl (hash: 9WUTG252B/aZyZWMdBIzkvqBdyXvjPIoqpu5yXo0AJw=) 2: 3130332e3138362e3230322e302f32332d3233203d3e20313439373036.roa (hash: YXcPTV7LyiaT/dlRqQiGxAGyQ4A0Km1DyhqBZdphgGs=) 3: 3130332e3138362e3230322e302f32342d3234203d3e20313439373036.roa (hash: k4Wn7QjCevaLRtjzpZzU9aujDNZ1W8N1HpzN16+qakY=) 4: 3130332e3138362e3230332e302f32342d3234203d3e20313439373036.roa (hash: JgDdJ0VL4u8D8+wDznKBSlTRQ0p6opMwZGoPzapaaX4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 08:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:c8:2b:48:f9:ab:a3:71:f2:77:cc:30:07:a4:0e:0b:db:4b:c1:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C Validity Not Before: May 3 21:07:09 2025 GMT Not After : May 7 08:51:09 2025 GMT Subject: CN=D95485690D61F246F5C00C9F9D55298FE8EB26EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:15:aa:ac:ba:33:51:f7:5d:cf:da:58:e3:4c: cc:70:71:a4:86:6e:a0:86:d5:ce:e6:cd:7d:64:9b: d0:32:22:f1:28:28:5f:d1:2f:cb:a6:c3:d5:0f:de: 4f:6a:f1:e6:5f:f7:0a:19:5d:73:fb:60:be:f1:f5: 26:49:6f:bf:72:3b:39:c3:cb:8d:9f:e9:20:f3:bd: f4:39:42:32:1b:ea:67:17:b6:d8:91:aa:6a:b6:fb: 54:ba:11:79:a0:67:20:85:57:d8:dd:04:92:9e:f2: d8:69:d4:7f:e8:bd:0f:ae:d9:4c:fa:78:fa:66:34: 35:cf:2d:a8:5e:9f:f9:90:75:89:9b:d1:13:f1:45: bf:80:8f:e2:4b:d8:f0:f3:07:ce:f1:38:04:b5:dd: 90:b9:76:9d:0a:c6:76:de:06:57:ec:fa:7b:75:30: bd:62:ad:76:4a:0f:48:57:01:d8:fb:92:f0:7b:75: ec:d9:cb:8e:06:a1:62:89:2e:f7:b7:6e:bf:b9:7c: ad:38:1a:40:47:49:b1:bb:d0:4a:3e:bf:fc:22:4d: b7:51:28:bb:fa:85:0c:ca:7a:0e:1d:a4:a2:20:bf: 19:eb:01:e4:d1:c7:58:95:24:f7:6a:a7:02:2e:78: a8:69:5a:3c:69:b8:81:ef:86:0d:3d:8c:5d:5d:fd: 3e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:54:85:69:0D:61:F2:46:F5:C0:0C:9F:9D:55:29:8F:E8:EB:26:EB X509v3 Authority Key Identifier: keyid:B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:6d:6c:f0:f0:75:e0:a4:1e:16:0b:0b:01:5a:fa:ca:6c:32: 57:97:5a:48:87:93:da:cc:d4:b9:99:ce:2d:2d:3c:80:cd:b8: e0:99:e4:16:d1:52:dc:0e:40:b0:3c:11:be:05:6a:d5:cf:b5: 4e:2b:13:46:a9:a6:f6:75:c8:0a:1e:e6:ab:b9:ee:e4:71:8b: 77:0d:9b:ec:f3:50:13:6f:e3:fe:20:ec:79:47:c6:a8:df:7e: 72:af:3b:fa:1e:e7:c5:7e:16:72:68:29:ed:89:45:05:ad:ef: 27:12:a1:4f:4b:a8:67:f9:2b:0b:50:f6:40:40:ca:cc:ba:70: bc:3f:cb:ba:0e:1c:e7:78:5c:24:e8:95:74:ac:e2:f1:9e:cb: 6b:33:7e:c3:20:2a:15:b8:9f:99:26:35:e2:98:ba:e5:2c:32: 2b:e0:e8:9d:ba:0f:9d:c5:4e:8a:c0:bc:19:3e:de:07:14:84: 70:48:5a:6b:b3:05:30:7c:fa:81:60:1f:cc:56:89:82:c8:16: 1d:0b:a9:4f:db:ef:03:58:67:c0:7f:ff:a0:17:b9:40:58:df: 75:59:56:a8:f8:89:d6:20:3e:ee:1b:33:1d:c4:e4:a4:f5:20: 19:04:95:de:b2:e6:35:85:6c:3a:f6:44:2e:4a:88:ee:77:8e: 54:03:ef:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWMgrSPmro3Hyd8wwB6QOC9tLwYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1RTlG RDIxRkE1QzAeFw0yNTA1MDMyMTA3MDlaFw0yNTA1MDcwODUxMDlaMDMxMTAvBgNV BAMTKEQ5NTQ4NTY5MEQ2MUYyNDZGNUMwMEM5RjlENTUyOThGRThFQjI2RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvFaqsujNR913P2ljjTMxwcaSG bqCG1c7mzX1km9AyIvEoKF/RL8umw9UP3k9q8eZf9woZXXP7YL7x9SZJb79yOznD y42f6SDzvfQ5QjIb6mcXttiRqmq2+1S6EXmgZyCFV9jdBJKe8thp1H/ovQ+u2Uz6 ePpmNDXPLahen/mQdYmb0RPxRb+Aj+JL2PDzB87xOAS13ZC5dp0KxnbeBlfs+nt1 ML1irXZKD0hXAdj7kvB7dezZy44GoWKJLve3br+5fK04GkBHSbG70Eo+v/wiTbdR KLv6hQzKeg4dpKIgvxnrAeTRx1iVJPdqpwIueKhpWjxpuIHvhg09jF1d/T55AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2VSFaQ1h8kb1wAyfnVUpj+jrJuswHwYDVR0j BBgwFoAUs0e7pr0Rv8XlX3/zNMFl6f0h+lwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTEwNjgyNy04NjZlLTRhYzMtOGY3OS1hNmUzMjBiMjBkZTcvMC9CMzQ3QkJBNkJE MTFCRkM1RTU1RjdGRjMzNEMxNjVFOUZEMjFGQTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1RTlGRDIx RkE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkxMDY4MjctODY2ZS00YWMzLThm NzktYTZlMzIwYjIwZGU3LzAvQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1 RTlGRDIxRkE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAhtbPDwdeCkHhYLCwFa+spsMleXWkiHk9rM 1LmZzi0tPIDNuOCZ5BbRUtwOQLA8Eb4FatXPtU4rE0appvZ1yAoe5qu57uRxi3cN m+zzUBNv4/4g7HlHxqjffnKvO/oe58V+FnJoKe2JRQWt7ycSoU9LqGf5KwtQ9kBA ysy6cLw/y7oOHOd4XCTolXSs4vGey2szfsMgKhW4n5kmNeKYuuUsMivg6J26D53F TorAvBk+3gcUhHBIWmuzBTB8+oFgH8xWiYLIFh0LqU/b7wNYZ8B//6AXuUBY33VZ Vqj4idYgPu4bMx3E5KT1IBkEld6y5jWFbDr2RC5KiO53jlQD794= -----END CERTIFICATE-----Generated at Tue May 6 04:16:35 2025 by rpki-client