$ rpki-client -vvf repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft File: B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft (raw, json) Hash identifier: a0kvyrTy0w+KM0nvZKzGlQaK37cxK9CBmXCP1Awyw2g= Subject key identifier: 85:6D:73:1E:5D:B9:10:13:79:30:EE:E4:39:30:2B:4E:0B:DF:C3:E8 Authority key identifier: B7:25:35:E4:EB:8B:31:C6:79:4C:4D:F3:1F:F5:3E:4E:64:91:4C:56 Certificate issuer: /CN=B72535E4EB8B31C6794C4DF31FF53E4E64914C56 Certificate serial: 4E3F437C8764380BBD6127BDCC7508AB7F456743 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft Manifest number: C9 Signing time: Sat 23 Aug 2025 11:31:18 +0000 Manifest this update: Sat 23 Aug 2025 11:26:18 +0000 Manifest next update: Tue 26 Aug 2025 13:26:18 +0000 Files and hashes: 1: B72535E4EB8B31C6794C4DF31FF53E4E64914C56.crl (hash: T1/dlBBOQAWb/mWQYC1uJ+VJW8YhZMA6SrDCyz6NxGc=) 2: 3135372e36362e35302e302f32332d3234203d3e20313532343338.roa (hash: 0z+OlDe1hua3zv7OtVHMMPyi/MvPOJjdEV9nI71654g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.crl rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:3f:43:7c:87:64:38:0b:bd:61:27:bd:cc:75:08:ab:7f:45:67:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B72535E4EB8B31C6794C4DF31FF53E4E64914C56 Validity Not Before: Aug 23 11:26:18 2025 GMT Not After : Aug 26 13:26:18 2025 GMT Subject: CN=856D731E5DB910137930EEE439302B4E0BDFC3E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:60:9b:a6:3b:c2:d8:b5:94:82:11:18:f9:41: 0c:83:8e:f0:85:96:84:bb:c7:6e:8f:fd:39:75:24: c6:2c:f9:76:be:ef:6a:c8:ae:35:51:a3:99:30:e6: 5c:12:b2:a7:5e:23:f3:39:6f:97:19:51:b9:62:61: aa:3e:fc:9c:1a:b5:9b:58:26:7c:5a:6f:60:73:88: 2a:2b:ef:6a:57:66:82:d7:ac:80:c9:6c:69:67:1c: e0:92:49:29:b0:6c:3e:ca:fe:cf:c5:1d:de:f8:76: 26:d9:93:d1:cd:f2:69:bf:42:90:ea:42:cd:f1:8e: cc:35:38:f6:8c:9b:cb:97:10:f7:49:ce:b5:dc:a1: 2a:c1:15:3f:59:2b:cc:ca:19:17:e2:75:72:b2:1c: 77:c2:bf:df:02:49:fb:c9:d0:a9:bb:4b:b0:bb:ff: 9c:1c:f8:27:8d:20:d8:8c:cc:12:58:f5:37:29:ab: 5d:fd:20:58:5b:36:00:77:30:a6:e4:50:ac:07:9f: a7:00:4d:d2:77:a0:84:db:3d:ad:28:6f:f5:23:9a: ef:92:01:f0:c6:0d:df:ae:4f:42:15:ba:af:f8:79: 9a:5b:c9:8f:27:ba:5f:2b:9e:8e:c4:58:c2:65:e2: 99:45:a3:48:9d:52:c6:11:60:62:e5:b4:ef:d7:69: e9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6D:73:1E:5D:B9:10:13:79:30:EE:E4:39:30:2B:4E:0B:DF:C3:E8 X509v3 Authority Key Identifier: keyid:B7:25:35:E4:EB:8B:31:C6:79:4C:4D:F3:1F:F5:3E:4E:64:91:4C:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:79:84:c0:28:0c:e2:ff:fa:e6:8c:12:ca:61:47:e3:6b:ae: c2:a9:7a:38:68:2d:51:3f:62:bd:b1:9a:52:6a:91:03:c3:e3: 3e:94:ed:ff:5a:75:a8:46:00:0b:5c:9e:48:ce:47:f7:ac:b6: 5a:60:7c:08:2c:fe:d0:0a:86:c4:21:35:32:14:ea:57:c3:c0: bc:1c:19:ab:52:62:0c:2e:95:32:be:95:9d:1b:7c:94:c7:c6: 49:9a:1c:d7:da:c4:8f:58:28:ba:c4:cf:29:31:4c:30:5d:4b: a7:6e:33:46:10:6f:22:b5:99:95:24:5f:e8:b1:ee:a2:dc:5c: 13:fb:c5:2e:40:1d:b4:48:de:f3:ff:66:d1:f1:00:42:43:99: d4:ec:c4:61:ff:bc:92:b2:30:58:6c:1e:05:6f:45:81:ef:8d: 24:94:13:0c:eb:24:b4:37:7d:34:59:8b:98:0f:ce:d7:f8:92: cd:63:31:46:cd:15:41:44:d1:ca:78:e7:74:1a:8f:7b:3e:95: 7b:8c:0e:e3:87:c9:52:c6:a7:26:c4:ef:22:f0:10:b8:4a:77: cd:be:22:f2:6c:8f:88:32:70:7e:30:7d:ef:6e:a5:07:3c:bc: 89:92:4d:0d:d8:5f:f3:4c:47:98:87:7d:0e:13:17:b9:cd:0b: ca:16:f6:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTj9DfIdkOAu9YSe9zHUIq39FZ0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcyNTM1RTRFQjhCMzFDNjc5NEM0REYzMUZGNTNFNEU2 NDkxNEM1NjAeFw0yNTA4MjMxMTI2MThaFw0yNTA4MjYxMzI2MThaMDMxMTAvBgNV BAMTKDg1NkQ3MzFFNURCOTEwMTM3OTMwRUVFNDM5MzAyQjRFMEJERkMzRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxYJumO8LYtZSCERj5QQyDjvCF loS7x26P/Tl1JMYs+Xa+72rIrjVRo5kw5lwSsqdeI/M5b5cZUbliYao+/JwatZtY Jnxab2BziCor72pXZoLXrIDJbGlnHOCSSSmwbD7K/s/FHd74dibZk9HN8mm/QpDq Qs3xjsw1OPaMm8uXEPdJzrXcoSrBFT9ZK8zKGRfidXKyHHfCv98CSfvJ0Km7S7C7 /5wc+CeNINiMzBJY9Tcpq139IFhbNgB3MKbkUKwHn6cATdJ3oITbPa0ob/Ujmu+S AfDGDd+uT0IVuq/4eZpbyY8nul8rno7EWMJl4plFo0idUsYRYGLltO/XaekjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhW1zHl25EBN5MO7kOTArTgvfw+gwHwYDVR0j BBgwFoAUtyU15OuLMcZ5TE3zH/U+TmSRTFYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmZhOTU4NC02Zjk3LTQwNDEtOWM4ZC04YjM5NTllNGY5YjMvMC9CNzI1MzVFNEVC OEIzMUM2Nzk0QzRERjMxRkY1M0U0RTY0OTE0QzU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjcyNTM1RTRFQjhCMzFDNjc5NEM0REYzMUZGNTNFNEU2NDkx NEM1Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjZmYTk1ODQtNmY5Ny00MDQxLTlj OGQtOGIzOTU5ZTRmOWIzLzAvQjcyNTM1RTRFQjhCMzFDNjc5NEM0REYzMUZGNTNF NEU2NDkxNEM1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL15hMAoDOL/+uaMEsphR+NrrsKpejhoLVE/ Yr2xmlJqkQPD4z6U7f9adahGAAtcnkjOR/estlpgfAgs/tAKhsQhNTIU6lfDwLwc GatSYgwulTK+lZ0bfJTHxkmaHNfaxI9YKLrEzykxTDBdS6duM0YQbyK1mZUkX+ix 7qLcXBP7xS5AHbRI3vP/ZtHxAEJDmdTsxGH/vJKyMFhsHgVvRYHvjSSUEwzrJLQ3 fTRZi5gPztf4ks1jMUbNFUFE0cp453Qaj3s+lXuMDuOHyVLGpybE7yLwELhKd82+ IvJsj4gycH4wfe9upQc8vImSTQ3YX/NMR5iHfQ4TF7nNC8oW9lU= -----END CERTIFICATE-----Generated at Sat Aug 23 22:09:19 2025 by rpki-client