$ rpki-client -vvf repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft File: B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft (raw, json) Hash identifier: aKTxvv1Btd7W5uDs/TO/tzA9embN9eky/EkoMxZ6P2o= Subject key identifier: 1B:43:67:36:E8:8F:F8:88:CA:C1:3C:82:4B:8E:AD:36:C0:83:4E:92 Authority key identifier: B8:B4:7D:E5:74:D4:4D:4C:C9:A3:E4:E2:E1:F7:AC:9C:B0:AE:A0:B5 Certificate issuer: /CN=B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5 Certificate serial: 40C37FCB0563507F3229DC50BFC225B6504D7800 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft Manifest number: 0171 Signing time: Sat 28 Jun 2025 18:12:11 +0000 Manifest this update: Sat 28 Jun 2025 18:07:11 +0000 Manifest next update: Wed 02 Jul 2025 01:36:11 +0000 Files and hashes: 1: 3130332e3131372e35362e302f32332d3234203d3e20313336303532.roa (hash: BAM070FvjGLMXJWAH9pbtiKqBzEQlvrgCYvemvA5CUw=) 2: B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl (hash: 2Ata1bpocYjPekZGn9ynKCmsSsTz6BTGm9/6sBei6As=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 01:36:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:c3:7f:cb:05:63:50:7f:32:29:dc:50:bf:c2:25:b6:50:4d:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5 Validity Not Before: Jun 28 18:07:11 2025 GMT Not After : Jul 2 01:36:11 2025 GMT Subject: CN=1B436736E88FF888CAC13C824B8EAD36C0834E92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:4c:0a:93:3d:a4:d4:1e:66:b3:61:8c:3b:a5: 6f:02:ac:c0:97:f4:ea:ef:9c:18:21:f4:8e:23:a3: 62:e8:f1:11:6b:62:96:c9:91:09:b9:b0:16:63:2c: dc:f8:78:44:bb:ee:5a:5c:2e:30:01:75:af:93:60: b0:64:be:ae:12:08:89:bb:c2:86:07:00:e2:6a:f6: 2d:1f:37:72:a6:d4:08:95:90:4d:d0:87:be:b7:fc: b6:46:50:70:bc:e3:89:ca:c0:37:e0:89:96:91:88: 21:f5:ec:ce:09:40:6f:2c:d0:e6:ca:5e:45:40:5a: a2:6b:17:97:fd:23:19:8f:29:5c:84:26:2d:76:46: 8c:b9:23:37:aa:8a:c3:30:69:f4:36:28:74:a3:66: 5a:17:b4:03:cd:b8:0e:45:97:b3:c8:2d:58:6f:a6: b2:5d:95:d0:58:e8:48:a0:af:b7:52:61:61:2e:8c: 95:39:63:21:ac:ed:e2:df:f7:2b:c7:33:70:62:ce: af:16:d0:12:04:e2:13:3c:37:b0:cf:19:03:22:4f: 3c:fc:fc:cf:2a:b1:ce:52:85:8b:44:ee:de:88:fc: 29:2a:9d:49:5b:63:92:e9:33:d2:23:f6:a1:5a:14: 6a:18:69:56:04:a8:9e:95:fc:94:fa:38:8d:3b:84: a5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:43:67:36:E8:8F:F8:88:CA:C1:3C:82:4B:8E:AD:36:C0:83:4E:92 X509v3 Authority Key Identifier: keyid:B8:B4:7D:E5:74:D4:4D:4C:C9:A3:E4:E2:E1:F7:AC:9C:B0:AE:A0:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:20:58:4c:0f:03:ea:78:60:3f:9a:4b:12:dd:74:26:33:cb: d4:ee:3a:5c:bc:e7:31:ca:6f:9c:f2:93:e5:2c:12:67:bc:64: c7:a2:ca:c3:fb:d4:48:bb:3a:4b:23:dc:da:bf:18:cd:0a:2a: a3:30:f6:68:1d:62:44:b4:17:9e:23:dc:5a:97:22:21:fc:97: 45:52:b6:eb:08:2a:18:78:40:d3:37:3c:fa:5e:4c:70:81:5b: 09:41:d5:9c:28:84:9f:6c:6e:86:2d:c7:84:65:6e:5f:bb:c6: fd:b5:41:fe:fd:42:d5:1a:d3:88:b0:0c:80:2d:11:d4:de:3c: 42:26:f1:69:17:ce:24:cc:8a:ce:9c:45:45:96:55:b6:77:1f: 24:29:72:b5:51:56:04:4e:2b:a0:2a:c0:32:5b:80:2c:11:b6: f4:5d:40:42:63:1e:46:2c:a9:b0:b5:e7:3c:f8:29:4c:53:17: 42:d0:c4:57:86:97:3a:3d:d1:22:bc:64:c0:96:ce:91:98:9f: 7f:58:18:dd:67:10:14:1d:0c:96:07:32:c4:06:d2:0d:7f:33: 14:50:a3:5f:c6:6a:29:86:ec:54:78:2b:ba:d9:60:c4:13:1f: 02:ba:48:f3:5a:46:e1:4d:d2:33:84:f6:bd:20:e5:46:8f:f5: 12:4c:10:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQMN/ywVjUH8yKdxQv8IltlBNeAAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FDOUNC MEFFQTBCNTAeFw0yNTA2MjgxODA3MTFaFw0yNTA3MDIwMTM2MTFaMDMxMTAvBgNV BAMTKDFCNDM2NzM2RTg4RkY4ODhDQUMxM0M4MjRCOEVBRDM2QzA4MzRFOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5TAqTPaTUHmazYYw7pW8CrMCX 9OrvnBgh9I4jo2Lo8RFrYpbJkQm5sBZjLNz4eES77lpcLjABda+TYLBkvq4SCIm7 woYHAOJq9i0fN3Km1AiVkE3Qh763/LZGUHC844nKwDfgiZaRiCH17M4JQG8s0ObK XkVAWqJrF5f9IxmPKVyEJi12Roy5IzeqisMwafQ2KHSjZloXtAPNuA5Fl7PILVhv prJdldBY6Eigr7dSYWEujJU5YyGs7eLf9yvHM3Bizq8W0BIE4hM8N7DPGQMiTzz8 /M8qsc5ShYtE7t6I/CkqnUlbY5LpM9Ij9qFaFGoYaVYEqJ6V/JT6OI07hKVJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG0NnNuiP+IjKwTyCS46tNsCDTpIwHwYDVR0j BBgwFoAUuLR95XTUTUzJo+Ti4fesnLCuoLUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YTY3NDY2OC0wNjEzLTRhNjQtOTMyMy01NDc2MzZiN2Q4YjAvMC9COEI0N0RFNTc0 RDQ0RDRDQzlBM0U0RTJFMUY3QUM5Q0IwQUVBMEI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FDOUNCMEFF QTBCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmE2NzQ2NjgtMDYxMy00YTY0LTkz MjMtNTQ3NjM2YjdkOGIwLzAvQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FD OUNCMEFFQTBCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKEgWEwPA+p4YD+aSxLddCYzy9TuOly85zHK b5zyk+UsEme8ZMeiysP71Ei7Oksj3Nq/GM0KKqMw9mgdYkS0F54j3FqXIiH8l0VS tusIKhh4QNM3PPpeTHCBWwlB1ZwohJ9sboYtx4Rlbl+7xv21Qf79QtUa04iwDIAt EdTePEIm8WkXziTMis6cRUWWVbZ3HyQpcrVRVgROK6AqwDJbgCwRtvRdQEJjHkYs qbC15zz4KUxTF0LQxFeGlzo90SK8ZMCWzpGYn39YGN1nEBQdDJYHMsQG0g1/MxRQ o1/GaimG7FR4K7rZYMQTHwK6SPNaRuFN0jOE9r0g5UaP9RJMEIk= -----END CERTIFICATE-----Generated at Mon Jun 30 11:38:09 2025 by rpki-client