$ rpki-client -vvf repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft File: B9A55DD123C2F224C4E245856905F78F2F354D92.mft (raw, json) Hash identifier: 8HXA1yOlrbLRNUsmkyC70kmKIynFjlsoy8CwAIBymRs= Subject key identifier: 8E:58:7F:71:A2:99:7C:EE:EF:C3:4F:FB:13:7C:88:10:B2:2E:4D:D8 Authority key identifier: B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92 Certificate issuer: /CN=B9A55DD123C2F224C4E245856905F78F2F354D92 Certificate serial: 1DA5B7096717D945157BF67BC8D13B420D64DFF6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft Manifest number: CF Signing time: Fri 22 Aug 2025 18:10:59 +0000 Manifest this update: Fri 22 Aug 2025 18:05:59 +0000 Manifest next update: Tue 26 Aug 2025 03:05:59 +0000 Files and hashes: 1: B9A55DD123C2F224C4E245856905F78F2F354D92.crl (hash: KfY0SU4w5k2TYNEDMTiLFYhG/Tvv/cCh88D3yIIu8AE=) 2: 3135372e31302e39372e302f32342d3234203d3e203538383231.roa (hash: UPR5y8V0jVDX7lorT6sk4sYb0YCh+EKPNMakCdOkBwI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.crl rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 03:05:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:a5:b7:09:67:17:d9:45:15:7b:f6:7b:c8:d1:3b:42:0d:64:df:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9A55DD123C2F224C4E245856905F78F2F354D92 Validity Not Before: Aug 22 18:05:59 2025 GMT Not After : Aug 26 03:05:59 2025 GMT Subject: CN=8E587F71A2997CEEEFC34FFB137C8810B22E4DD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d0:20:de:20:03:28:04:3f:d7:aa:be:9d:e0: fa:24:9a:79:f3:94:96:b7:7c:f2:e4:98:f8:a3:37: 94:f6:c4:4b:e9:b5:f3:94:f9:d6:4f:04:b2:95:11: 43:ae:ae:49:c6:8a:11:df:8e:05:f7:4a:23:34:9c: 67:ef:0c:2c:cd:f3:3f:b1:60:71:4e:5e:b4:39:7b: 85:28:91:56:79:2b:50:e9:01:38:e4:3b:3a:42:d1: b5:24:1a:b4:68:63:ea:9e:29:41:cb:82:c2:02:a0: 2a:46:4e:6e:9c:bf:6b:b4:92:f8:b1:f0:01:2e:f5: 86:9a:ab:28:5c:24:45:6f:38:a5:79:1f:05:fd:43: 12:a9:3b:41:7c:99:b4:2e:71:0c:95:2e:69:83:da: 31:a8:51:ad:a1:3a:54:c8:5e:6b:13:86:1f:16:66: 26:89:ba:98:1e:8d:8a:d0:0e:db:0b:ea:ff:29:93: 3a:a9:18:9b:19:d0:a9:d8:a3:18:9c:05:fe:21:ff: 57:34:91:99:40:e2:1f:ee:1e:b0:a0:27:80:5d:49: de:c0:df:dd:d5:2a:a0:98:c0:83:37:94:49:9d:3b: ad:18:95:b8:0b:0c:fd:ff:d6:1e:9c:98:f7:35:98: 29:ef:e9:a4:fe:3d:c0:e5:f0:a2:91:e6:28:78:5c: 8e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:58:7F:71:A2:99:7C:EE:EF:C3:4F:FB:13:7C:88:10:B2:2E:4D:D8 X509v3 Authority Key Identifier: keyid:B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:0a:aa:42:80:55:35:98:0e:09:7a:d6:89:48:ab:9c:a7:10: da:9b:a5:73:3f:19:e9:62:04:a8:7a:47:d4:f5:10:69:64:7c: e6:62:15:95:7e:9d:34:8e:41:e9:a2:f7:b2:72:1d:89:d5:65: 66:7b:59:57:65:14:12:81:dd:f5:d2:1a:0b:2b:e5:46:fe:6a: b0:34:69:85:7a:3b:eb:45:e4:fc:2e:fb:8b:99:6f:e5:8b:68: 31:e0:3a:7a:89:18:d8:60:e7:b6:f7:d7:9d:2b:fa:54:91:d0: a9:2d:57:07:5e:02:a7:94:9d:0c:3b:6b:66:40:e8:3e:96:0b: e9:90:8b:ee:48:ff:92:4c:ac:a2:ae:ec:ef:42:8d:29:94:d4: 59:d5:ff:3d:86:37:53:c9:f5:33:cb:70:9b:42:34:14:2e:da: 2d:63:ec:2c:40:49:3f:09:38:e5:02:5b:7c:f8:8d:cb:18:70: 55:89:3c:61:b1:b5:7a:2d:90:95:5a:9d:46:c3:f6:c9:0d:bf: 4e:0f:0a:76:11:ad:fb:56:1b:29:f4:2c:0b:8f:fd:68:95:7d: 7b:86:c7:86:6d:ec:f9:b7:cd:58:f4:01:3c:c5:b9:6e:45:2e: 89:c8:f5:53:19:a1:3f:96:33:12:45:7c:e6:28:51:5d:55:2d: ae:b0:43:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHaW3CWcX2UUVe/Z7yNE7Qg1k3/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3OEYy RjM1NEQ5MjAeFw0yNTA4MjIxODA1NTlaFw0yNTA4MjYwMzA1NTlaMDMxMTAvBgNV BAMTKDhFNTg3RjcxQTI5OTdDRUVFRkMzNEZGQjEzN0M4ODEwQjIyRTRERDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu0CDeIAMoBD/Xqr6d4Pokmnnz lJa3fPLkmPijN5T2xEvptfOU+dZPBLKVEUOurknGihHfjgX3SiM0nGfvDCzN8z+x YHFOXrQ5e4UokVZ5K1DpATjkOzpC0bUkGrRoY+qeKUHLgsICoCpGTm6cv2u0kvix 8AEu9YaaqyhcJEVvOKV5HwX9QxKpO0F8mbQucQyVLmmD2jGoUa2hOlTIXmsThh8W ZiaJupgejYrQDtsL6v8pkzqpGJsZ0KnYoxicBf4h/1c0kZlA4h/uHrCgJ4BdSd7A 393VKqCYwIM3lEmdO60YlbgLDP3/1h6cmPc1mCnv6aT+PcDl8KKR5ih4XI5LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjlh/caKZfO7vw0/7E3yIELIuTdgwHwYDVR0j BBgwFoAUuaVd0SPC8iTE4kWFaQX3jy81TZIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZjJmNjRjYS1mYTU0LTQ5OWUtYmMzMy00ODYyZGNhNzk0ZjcvMC9COUE1NUREMTIz QzJGMjI0QzRFMjQ1ODU2OTA1Rjc4RjJGMzU0RDkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3OEYyRjM1 NEQ5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWYyZjY0Y2EtZmE1NC00OTllLWJj MzMtNDg2MmRjYTc5NGY3LzAvQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3 OEYyRjM1NEQ5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJoKqkKAVTWYDgl61olIq5ynENqbpXM/Geli BKh6R9T1EGlkfOZiFZV+nTSOQemi97JyHYnVZWZ7WVdlFBKB3fXSGgsr5Ub+arA0 aYV6O+tF5Pwu+4uZb+WLaDHgOnqJGNhg57b3150r+lSR0KktVwdeAqeUnQw7a2ZA 6D6WC+mQi+5I/5JMrKKu7O9CjSmU1FnV/z2GN1PJ9TPLcJtCNBQu2i1j7CxAST8J OOUCW3z4jcsYcFWJPGGxtXotkJVanUbD9skNv04PCnYRrftWGyn0LAuP/WiVfXuG x4Zt7Pm3zVj0ATzFuW5FLonI9VMZoT+WMxJFfOYoUV1VLa6wQ8c= -----END CERTIFICATE-----Generated at Sat Aug 23 21:57:15 2025 by rpki-client