$ rpki-client -vvf repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft File: B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft (raw, json) Hash identifier: xwpQSIAkFFc7tLa2A+R57xIq04VhuAlKJpaXZgx0Mts= Subject key identifier: BF:F8:01:4D:93:05:CB:BC:57:25:61:FB:94:68:C7:D0:01:C6:60:A7 Authority key identifier: B0:D6:73:B7:8D:BE:21:9F:1E:EE:F0:56:E3:E4:9F:B6:D5:8A:55:50 Certificate issuer: /CN=B0D673B78DBE219F1EEEF056E3E49FB6D58A5550 Certificate serial: 181FED01AFA7A5C0F1AEDB7E542F48940DD6E84F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft Manifest number: C4 Signing time: Thu 21 Aug 2025 19:30:55 +0000 Manifest this update: Thu 21 Aug 2025 19:25:55 +0000 Manifest next update: Mon 25 Aug 2025 02:15:55 +0000 Files and hashes: 1: 3136302e32322e32322e302f32332d3234203d3e20313532383032.roa (hash: 1cb+dRF1cCmzlK2LUqHDHTpgVi9SG86amprY/lPnWU4=) 2: B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl (hash: fH9mta0UMmpFVjUZV5XfXguOAEQ+6BSEKLu+k925lug=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 02:15:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:1f:ed:01:af:a7:a5:c0:f1:ae:db:7e:54:2f:48:94:0d:d6:e8:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0D673B78DBE219F1EEEF056E3E49FB6D58A5550 Validity Not Before: Aug 21 19:25:55 2025 GMT Not After : Aug 25 02:15:55 2025 GMT Subject: CN=BFF8014D9305CBBC572561FB9468C7D001C660A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:da:08:c7:0f:5f:e4:57:e3:a8:8e:16:30:b9: 22:8c:f4:7d:ab:0b:82:75:9a:e4:c3:cb:1e:ca:21: 29:93:35:09:bf:ee:bc:cf:ed:3b:de:0a:e5:2a:a0: d2:a4:d9:f0:2b:77:49:ce:ec:e3:4b:14:27:6d:eb: 7e:44:32:ef:b9:f9:0e:67:c6:74:73:7b:96:c9:9a: 1e:07:ba:a7:e1:ca:fe:dc:c2:56:9a:2d:d2:dc:0d: 99:d7:16:74:53:65:e8:8d:e5:e8:d9:ec:6c:d3:9b: c8:68:4f:d4:f7:fc:59:df:25:17:46:14:cd:7d:0e: 99:9a:a7:c6:92:f5:70:25:83:f4:ab:28:33:bf:51: 3d:2d:f0:8a:ab:72:0d:32:b1:c6:21:ed:9d:da:90: fd:2a:13:4d:65:ef:78:f8:7d:46:2e:83:5d:69:dc: c3:72:b1:2c:3c:49:8f:16:d7:04:05:8f:99:ce:e7: 24:08:b2:61:76:0f:6b:8d:5d:ac:43:7e:f9:68:44: 0d:50:33:7a:9f:df:89:c2:4e:ba:7c:62:1e:84:f2: 41:25:62:00:d6:27:99:d4:ec:70:73:f5:22:45:cd: 31:45:69:10:18:41:87:a6:67:1d:0e:43:e1:47:c6: 33:ae:da:4c:59:94:c2:f5:ad:46:db:c7:bc:f7:34: 60:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F8:01:4D:93:05:CB:BC:57:25:61:FB:94:68:C7:D0:01:C6:60:A7 X509v3 Authority Key Identifier: keyid:B0:D6:73:B7:8D:BE:21:9F:1E:EE:F0:56:E3:E4:9F:B6:D5:8A:55:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:8b:bd:5b:b9:57:83:22:6a:90:0c:fd:01:51:ea:32:c2:91: e9:86:32:5e:6e:26:ca:8e:bf:ac:4e:87:1c:57:f0:1f:74:f2: 91:21:56:6e:4b:11:26:10:7d:27:62:ad:f3:cb:a8:0a:fa:52: f9:ce:3b:65:16:fe:08:8b:e0:5b:e2:6b:b1:f2:42:c7:26:78: b6:78:ab:2f:88:77:41:80:c0:28:5d:00:65:6a:4e:f5:31:ae: bb:bf:17:fb:17:6f:ee:74:f5:ea:90:13:98:41:16:3c:7f:2f: 16:17:cc:46:ed:ce:96:e5:fa:bb:0a:90:7e:f3:98:c2:97:8f: 78:73:32:a8:06:69:c5:83:bc:3d:f4:9b:7a:62:4f:dd:4a:ae: 68:1c:e0:b0:05:40:9d:da:ed:ad:16:8c:e4:54:04:28:9b:97: 4e:51:c1:7d:dc:ca:62:41:c6:ce:b3:1b:1d:db:c7:e2:a6:67: f4:32:ca:fd:80:5f:0a:fb:8a:29:6b:2b:d4:dd:db:2e:3f:48: db:86:4a:6f:00:3a:bc:ba:de:82:40:04:d9:42:72:c3:8e:70: 61:c4:ca:8f:37:46:37:47:06:ed:83:7c:41:07:16:7c:6c:ba: d5:a4:8a:7d:3c:68:98:91:fa:81:71:bd:06:8b:9b:59:ab:58: fa:7f:52:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGB/tAa+npcDxrtt+VC9IlA3W6E8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBENjczQjc4REJFMjE5RjFFRUVGMDU2RTNFNDlGQjZE NThBNTU1MDAeFw0yNTA4MjExOTI1NTVaFw0yNTA4MjUwMjE1NTVaMDMxMTAvBgNV BAMTKEJGRjgwMTREOTMwNUNCQkM1NzI1NjFGQjk0NjhDN0QwMDFDNjYwQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd2gjHD1/kV+OojhYwuSKM9H2r C4J1muTDyx7KISmTNQm/7rzP7TveCuUqoNKk2fArd0nO7ONLFCdt635EMu+5+Q5n xnRze5bJmh4Huqfhyv7cwlaaLdLcDZnXFnRTZeiN5ejZ7GzTm8hoT9T3/FnfJRdG FM19Dpmap8aS9XAlg/SrKDO/UT0t8Iqrcg0yscYh7Z3akP0qE01l73j4fUYug11p 3MNysSw8SY8W1wQFj5nO5yQIsmF2D2uNXaxDfvloRA1QM3qf34nCTrp8Yh6E8kEl YgDWJ5nU7HBz9SJFzTFFaRAYQYemZx0OQ+FHxjOu2kxZlML1rUbbx7z3NGDjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv/gBTZMFy7xXJWH7lGjH0AHGYKcwHwYDVR0j BBgwFoAUsNZzt42+IZ8e7vBW4+SfttWKVVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjdkMjg5NC1jMDc3LTQyMWMtYmMxZC0zN2Q2ZjlkOTg5N2QvMC9CMEQ2NzNCNzhE QkUyMTlGMUVFRUYwNTZFM0U0OUZCNkQ1OEE1NTUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjBENjczQjc4REJFMjE5RjFFRUVGMDU2RTNFNDlGQjZENThB NTU1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY3ZDI4OTQtYzA3Ny00MjFjLWJj MWQtMzdkNmY5ZDk4OTdkLzAvQjBENjczQjc4REJFMjE5RjFFRUVGMDU2RTNFNDlG QjZENThBNTU1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK2LvVu5V4MiapAM/QFR6jLCkemGMl5uJsqO v6xOhxxX8B908pEhVm5LESYQfSdirfPLqAr6UvnOO2UW/giL4Fvia7HyQscmeLZ4 qy+Id0GAwChdAGVqTvUxrru/F/sXb+509eqQE5hBFjx/LxYXzEbtzpbl+rsKkH7z mMKXj3hzMqgGacWDvD30m3piT91Krmgc4LAFQJ3a7a0WjORUBCibl05RwX3cymJB xs6zGx3bx+KmZ/Qyyv2AXwr7iilrK9Td2y4/SNuGSm8AOry63oJABNlCcsOOcGHE yo83RjdHBu2DfEEHFnxsutWkin08aJiR+oFxvQaLm1mrWPp/Upw= -----END CERTIFICATE-----Generated at Sat Aug 23 22:49:02 2025 by rpki-client