$ rpki-client -vvf repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft File: B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft (raw, json) Hash identifier: t0URMteH3BziTOEBF6fGnooOHJ5ly06YO2MPcD2EkNY= Subject key identifier: 96:B1:EC:CB:D0:5B:64:DB:7B:22:37:2F:40:B7:5E:25:25:30:01:F5 Authority key identifier: B8:A9:E4:5E:7E:2D:EA:66:24:14:0C:03:DE:02:5D:16:B9:1C:B9:DC Certificate issuer: /CN=B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC Certificate serial: 7F5FCF959E0DAED6C23FA9D759D59618E0376DCF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft Manifest number: 0148 Signing time: Mon 30 Jun 2025 13:52:05 +0000 Manifest this update: Mon 30 Jun 2025 13:47:05 +0000 Manifest next update: Thu 03 Jul 2025 23:51:05 +0000 Files and hashes: 1: B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl (hash: oWvLce5B/3+JBo4993X91UkWdZONjVaNwk+9XgSe8v4=) 2: 3130332e34302e39322e302f32332d3233203d3e203633353034.roa (hash: SFyP6dQXcZeCfICHfcQqBzkquUF0rSVZjhOo/oTB3lM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 23:51:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:5f:cf:95:9e:0d:ae:d6:c2:3f:a9:d7:59:d5:96:18:e0:37:6d:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC Validity Not Before: Jun 30 13:47:05 2025 GMT Not After : Jul 3 23:51:05 2025 GMT Subject: CN=96B1ECCBD05B64DB7B22372F40B75E25253001F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:15:28:c1:8b:04:7e:21:a6:36:b1:1b:55:3a: 84:de:48:5c:c5:94:1c:bb:82:68:98:1f:77:b9:35: b6:1c:15:dd:4a:b0:17:c5:3f:12:71:09:cf:ad:78: 67:7c:fd:01:98:93:3f:07:b8:8d:0e:a2:f2:74:99: b5:53:32:27:53:d2:6e:7e:9b:f4:f3:92:f7:96:99: cc:2c:b7:09:87:43:a7:6d:e1:71:b8:66:4b:c0:e9: 51:40:73:9b:90:77:68:78:0d:34:81:38:1b:cc:4b: a1:89:a9:e7:22:5b:ec:a1:23:d8:24:80:b6:86:90: cf:03:17:f7:88:e7:14:9f:7e:22:8b:ca:ec:c3:58: 6f:f0:f4:67:6a:84:a7:f8:80:b6:53:c3:bc:8f:44: 80:2d:64:02:8f:6d:41:53:2c:c3:73:eb:28:2d:64: ed:47:a4:a4:6b:85:dd:f8:4b:2f:e1:7e:76:78:5f: 63:82:d3:cb:86:b4:7c:fc:ed:6b:66:6f:40:c8:b9: 03:f7:fc:bf:b4:ad:d8:b5:06:a3:d4:4d:c5:be:2d: 77:49:3f:e9:7e:3a:6e:f3:ad:aa:04:d1:f4:ad:5a: c3:d5:d8:48:ab:42:45:10:16:b1:8a:c8:04:e8:90: 9f:fd:ca:d2:f8:b6:1e:8c:be:45:e7:7d:0d:e0:55: cd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B1:EC:CB:D0:5B:64:DB:7B:22:37:2F:40:B7:5E:25:25:30:01:F5 X509v3 Authority Key Identifier: keyid:B8:A9:E4:5E:7E:2D:EA:66:24:14:0C:03:DE:02:5D:16:B9:1C:B9:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:61:f3:15:cc:45:ea:22:62:fb:81:8c:b0:aa:06:c3:14:04: a5:ab:1c:66:8c:72:cd:5c:0a:43:17:f4:2b:55:29:e5:23:d2: 53:c5:7c:3b:25:d7:7d:d0:2f:66:d5:9b:72:bd:34:e0:6f:b6: 6c:e2:df:07:8c:cc:11:c7:7f:4a:e2:33:87:c5:9f:b6:83:bf: 8e:48:32:f1:bf:e2:c2:56:8b:90:68:9d:da:71:be:ee:d0:d7: 9e:be:ee:f7:b9:4e:8c:c1:5a:13:ad:e4:88:c1:b3:e5:7a:3a: fc:fa:21:94:89:85:5e:54:66:06:45:47:b3:5d:6a:a7:47:3a: cc:1a:bc:9a:e2:49:cb:a5:a6:8b:50:5b:db:a6:9e:4b:5b:d3: ec:12:d2:5d:09:c1:1a:d9:d7:cc:dc:8d:08:67:10:af:37:79: 5f:aa:d7:c6:05:f4:40:b1:80:cb:5f:2d:65:c9:ea:cd:98:2d: 48:2c:c0:7f:53:18:a5:98:c9:35:57:ad:ac:44:e0:c5:c2:4d: 0b:25:a2:3c:13:1f:38:12:9d:c0:dd:28:f8:23:03:0e:1d:3f: c2:7f:37:90:2f:be:a0:1a:2c:8b:38:6f:1f:5b:4a:f4:56:9d: 58:9b:0f:49:17:51:b9:5b:c8:3b:67:b8:b3:94:09:ed:31:8b: 72:3d:26:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf1/PlZ4NrtbCP6nXWdWWGOA3bc8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhBOUU0NUU3RTJERUE2NjI0MTQwQzAzREUwMjVEMTZC OTFDQjlEQzAeFw0yNTA2MzAxMzQ3MDVaFw0yNTA3MDMyMzUxMDVaMDMxMTAvBgNV BAMTKDk2QjFFQ0NCRDA1QjY0REI3QjIyMzcyRjQwQjc1RTI1MjUzMDAxRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7FSjBiwR+IaY2sRtVOoTeSFzF lBy7gmiYH3e5NbYcFd1KsBfFPxJxCc+teGd8/QGYkz8HuI0OovJ0mbVTMidT0m5+ m/TzkveWmcwstwmHQ6dt4XG4ZkvA6VFAc5uQd2h4DTSBOBvMS6GJqeciW+yhI9gk gLaGkM8DF/eI5xSffiKLyuzDWG/w9GdqhKf4gLZTw7yPRIAtZAKPbUFTLMNz6ygt ZO1HpKRrhd34Sy/hfnZ4X2OC08uGtHz87Wtmb0DIuQP3/L+0rdi1BqPUTcW+LXdJ P+l+Om7zraoE0fStWsPV2EirQkUQFrGKyATokJ/9ytL4th6MvkXnfQ3gVc3DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlrHsy9BbZNt7IjcvQLdeJSUwAfUwHwYDVR0j BBgwFoAUuKnkXn4t6mYkFAwD3gJdFrkcudwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2RhZTBhNS1iNGY2LTRlMDgtOGJlYi02M2ViZTA4NTNkZjMvMC9COEE5RTQ1RTdF MkRFQTY2MjQxNDBDMDNERTAyNUQxNkI5MUNCOURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhBOUU0NUU3RTJERUE2NjI0MTQwQzAzREUwMjVEMTZCOTFD QjlEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNkYWUwYTUtYjRmNi00ZTA4LThi ZWItNjNlYmUwODUzZGYzLzAvQjhBOUU0NUU3RTJERUE2NjI0MTQwQzAzREUwMjVE MTZCOTFDQjlEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMVh8xXMReoiYvuBjLCqBsMUBKWrHGaMcs1c CkMX9CtVKeUj0lPFfDsl133QL2bVm3K9NOBvtmzi3weMzBHHf0riM4fFn7aDv45I MvG/4sJWi5Bondpxvu7Q156+7ve5TozBWhOt5IjBs+V6Ovz6IZSJhV5UZgZFR7Nd aqdHOswavJriSculpotQW9umnktb0+wS0l0JwRrZ18zcjQhnEK83eV+q18YF9ECx gMtfLWXJ6s2YLUgswH9TGKWYyTVXraxE4MXCTQslojwTHzgSncDdKPgjAw4dP8J/ N5AvvqAaLIs4bx9bSvRWnVibD0kXUblbyDtnuLOUCe0xi3I9JpA= -----END CERTIFICATE-----Generated at Thu Jul 3 00:44:19 2025 by rpki-client