$ rpki-client -vvf repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft File: B2D1CBD015A419010845E6F56D8385C8647B5390.mft (raw, json) Hash identifier: cCHWhUF00x0G1SIbL1WV+SLsi6NoZVgxtdRe9cfD3kI= Subject key identifier: 04:8A:6B:7B:96:FD:D8:2C:EB:FA:73:42:7D:73:ED:94:E2:37:C7:44 Authority key identifier: B2:D1:CB:D0:15:A4:19:01:08:45:E6:F5:6D:83:85:C8:64:7B:53:90 Certificate issuer: /CN=B2D1CBD015A419010845E6F56D8385C8647B5390 Certificate serial: 28A7550A5C0CE69D29C520B32461C8510A1E68D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft Manifest number: 0280 Signing time: Thu 08 May 2025 11:12:06 +0000 Manifest this update: Thu 08 May 2025 11:07:06 +0000 Manifest next update: Sun 11 May 2025 11:52:06 +0000 Files and hashes: 1: 3130332e3135332e3133342e302f32342d3234203d3e20313430343634.roa (hash: cW/9D7f3rSD1Wd+uYOFJYajDwTDUi1FLo5623123rGc=) 2: B2D1CBD015A419010845E6F56D8385C8647B5390.crl (hash: 8oiSkAveZ9V8/8WvQL777nx2iYhoxgLUc8pXuC9tQTU=) 3: 3130332e3135332e3133352e302f32342d3234203d3e20313430343634.roa (hash: WsmI0rdfXmL0fWdst11niyZhvNmKpEwJDzCH1ijVhS8=) 4: 3130332e3135332e3133342e302f32332d3233203d3e20313430343634.roa (hash: cPwdxx5hPy0Al9znnfs7+/9F2Ic938FTNbuxG5Z3xhY=) 5: 323430363a343534303a3a2f33322d3332203d3e20313430343634.roa (hash: zD3MmvWg8/hnp1isGEqEx8GCf/Gya3epsj8OBSoizYQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.crl rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 11:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:a7:55:0a:5c:0c:e6:9d:29:c5:20:b3:24:61:c8:51:0a:1e:68:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2D1CBD015A419010845E6F56D8385C8647B5390 Validity Not Before: May 8 11:07:06 2025 GMT Not After : May 11 11:52:06 2025 GMT Subject: CN=048A6B7B96FDD82CEBFA73427D73ED94E237C744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:32:fb:39:54:d5:19:10:54:d5:fc:55:d3:1d: 43:41:c7:9c:f8:8b:40:58:91:54:c0:e7:76:85:d6: 1b:f7:69:8a:0f:cd:b8:bc:89:c1:5e:72:e0:61:87: cd:ea:ff:6b:83:74:82:08:44:39:03:1d:e4:73:1e: dc:f9:dc:fc:b0:c2:2b:43:ea:e5:bb:40:96:21:9e: ef:6d:bc:27:7b:27:47:ee:df:fc:a0:cb:f9:41:a2: ea:ba:15:08:cf:d8:19:20:37:69:3a:3b:8d:8e:f9: f5:c3:22:f8:48:16:6f:13:ab:ff:b0:d0:a1:db:7f: 45:ac:69:f8:36:c3:6e:39:5d:d9:e3:2d:26:63:b3: 58:a0:c6:2e:b7:19:af:2a:dd:36:03:2f:df:6b:c1: f0:3e:1f:c3:6b:a2:33:d7:63:b2:4b:78:1d:70:02: 02:7d:9c:42:13:ee:97:d5:4f:89:65:01:35:98:b8: b9:be:6b:52:6b:17:a0:37:65:40:51:2a:08:73:b6: 3f:42:f5:05:33:ad:53:d9:ea:1e:04:8f:93:22:a0: f8:54:a4:51:a0:31:46:da:72:42:4a:54:38:3d:e5: 47:2b:0b:5d:ab:42:d2:a7:01:4f:e3:7f:0a:c2:2f: 21:44:e0:f6:64:0a:00:49:10:59:56:e7:84:57:c5: eb:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:8A:6B:7B:96:FD:D8:2C:EB:FA:73:42:7D:73:ED:94:E2:37:C7:44 X509v3 Authority Key Identifier: keyid:B2:D1:CB:D0:15:A4:19:01:08:45:E6:F5:6D:83:85:C8:64:7B:53:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:ff:5f:44:85:e7:ef:b8:c8:6f:30:bf:76:a2:40:9a:c1:6a: 80:dc:5e:0c:42:cf:8f:75:8c:9d:a5:fb:29:36:77:80:bf:61: da:ca:45:b1:98:30:7d:ef:91:4c:77:3a:df:12:43:00:5f:6f: cf:19:55:20:51:a6:0b:09:7c:8e:50:a7:4e:92:50:a8:94:b1: 0b:fd:3c:15:5e:cd:4b:ad:c0:fd:4e:e8:6c:01:02:db:70:d3: 3b:3e:3d:8f:19:e3:e7:b3:c4:da:77:93:1f:65:86:be:7e:2d: 59:ba:0a:c6:9e:de:ff:53:34:fb:74:e8:35:ec:1a:9c:23:64: 4c:99:a8:01:86:b9:fc:75:d1:5a:ee:15:fd:93:11:98:bd:09: 54:0f:c1:4b:1b:a2:9c:fe:07:87:f5:e5:58:30:5d:45:28:7f: 32:0a:9e:4f:fe:e9:d1:94:28:a7:d9:c3:34:73:7e:45:a6:b4: 8f:46:f7:29:76:33:b3:6d:44:45:15:5c:a0:d1:4c:d9:3e:67: 79:80:14:08:e5:20:fc:c4:a1:18:e9:18:65:e1:70:5a:c7:ba: 37:17:fc:2c:20:d0:f9:3c:bb:f9:6b:bb:7c:6b:2e:7c:1f:17: a5:0b:fe:b3:66:40:d4:e7:4b:3e:37:9c:ea:61:f6:66:3a:eb: 99:e1:d8:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKKdVClwM5p0pxSCzJGHIUQoeaNUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1Qzg2 NDdCNTM5MDAeFw0yNTA1MDgxMTA3MDZaFw0yNTA1MTExMTUyMDZaMDMxMTAvBgNV BAMTKDA0OEE2QjdCOTZGREQ4MkNFQkZBNzM0MjdENzNFRDk0RTIzN0M3NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Mvs5VNUZEFTV/FXTHUNBx5z4 i0BYkVTA53aF1hv3aYoPzbi8icFecuBhh83q/2uDdIIIRDkDHeRzHtz53PywwitD 6uW7QJYhnu9tvCd7J0fu3/ygy/lBouq6FQjP2BkgN2k6O42O+fXDIvhIFm8Tq/+w 0KHbf0Wsafg2w245XdnjLSZjs1igxi63Ga8q3TYDL99rwfA+H8NrojPXY7JLeB1w AgJ9nEIT7pfVT4llATWYuLm+a1JrF6A3ZUBRKghztj9C9QUzrVPZ6h4Ej5MioPhU pFGgMUbackJKVDg95UcrC12rQtKnAU/jfwrCLyFE4PZkCgBJEFlW54RXxevXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBIpre5b92Czr+nNCfXPtlOI3x0QwHwYDVR0j BBgwFoAUstHL0BWkGQEIReb1bYOFyGR7U5AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjhiZTkwNS1mMjk2LTQ1ZDEtYTg3OS00YTRkZTUyY2IyZDYvMC9CMkQxQ0JEMDE1 QTQxOTAxMDg0NUU2RjU2RDgzODVDODY0N0I1MzkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1Qzg2NDdC NTM5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4YmU5MDUtZjI5Ni00NWQxLWE4 NzktNGE0ZGU1MmNiMmQ2LzAvQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1 Qzg2NDdCNTM5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJn/X0SF5++4yG8wv3aiQJrBaoDcXgxCz491 jJ2l+yk2d4C/YdrKRbGYMH3vkUx3Ot8SQwBfb88ZVSBRpgsJfI5Qp06SUKiUsQv9 PBVezUutwP1O6GwBAttw0zs+PY8Z4+ezxNp3kx9lhr5+LVm6Csae3v9TNPt06DXs GpwjZEyZqAGGufx10VruFf2TEZi9CVQPwUsbopz+B4f15VgwXUUofzIKnk/+6dGU KKfZwzRzfkWmtI9G9yl2M7NtREUVXKDRTNk+Z3mAFAjlIPzEoRjpGGXhcFrHujcX /Cwg0Pk8u/lru3xrLnwfF6UL/rNmQNTnSz43nOph9mY665nh2Gk= -----END CERTIFICATE-----Generated at Thu May 8 13:34:21 2025 by rpki-client