$ rpki-client -vvf repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft File: B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft (raw, json) Hash identifier: vCByBIMV6a8ubD20jS4CX+HlYpihsj7dnkcWVDf6WNA= Subject key identifier: E8:42:39:F6:81:18:32:7A:4C:B2:84:80:42:12:D2:8E:1E:00:AE:10 Authority key identifier: B4:38:1C:63:67:4B:5D:9A:9B:8C:44:C1:3C:F1:9E:7D:D3:21:F7:C0 Certificate issuer: /CN=B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0 Certificate serial: 39607224A76BDB3E235E4C4C3FD9F6B595CBE0AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft Manifest number: 019B Signing time: Fri 22 Aug 2025 19:31:34 +0000 Manifest this update: Fri 22 Aug 2025 19:26:34 +0000 Manifest next update: Tue 26 Aug 2025 07:01:34 +0000 Files and hashes: 1: 3130332e32302e3231392e302f32342d3234203d3e20313439393638.roa (hash: O7tUFKX21rX6gYwZ1ZrwxitGOTUDY0G4VWaDfkWzuZ4=) 2: B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.crl (hash: xRT0xOnuxkaEqlxiwrSCqqTo6f+7QsFnm8ThYjQmbBk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.crl rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 07:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:60:72:24:a7:6b:db:3e:23:5e:4c:4c:3f:d9:f6:b5:95:cb:e0:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0 Validity Not Before: Aug 22 19:26:34 2025 GMT Not After : Aug 26 07:01:34 2025 GMT Subject: CN=E84239F68118327A4CB284804212D28E1E00AE10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9b:26:87:b3:f0:f6:8e:7a:0d:b0:08:66:55: 72:47:bc:7a:5e:40:92:7c:e9:db:a6:23:30:4f:c7: 0a:c6:0a:6c:bd:65:70:ff:6b:da:71:3d:a6:a3:11: a3:05:a5:d9:79:ed:e8:da:de:c1:53:96:b0:1d:37: b2:ed:5d:5c:43:e0:31:d3:ee:f6:99:77:a8:d8:dd: f5:fb:b0:31:60:40:43:02:14:44:25:6c:39:8f:a7: 36:58:52:f3:a1:af:44:b6:c5:e7:6d:2e:db:a3:c1: cc:0a:ba:91:5a:43:2e:8f:6e:b7:01:9a:18:0f:f0: b8:0d:90:9e:c6:34:ed:f7:4f:a3:9b:e9:de:2e:55: 8e:69:c0:6a:52:4d:0c:5b:7d:bc:6d:7a:65:d9:5e: 6a:59:ab:09:f7:19:9c:30:d0:f6:f8:9b:ee:a3:61: e8:9d:bc:c2:e6:a6:84:8a:ea:1a:e8:e6:59:42:6c: e8:2b:09:72:76:82:ba:71:50:40:55:54:b8:85:de: 77:5d:06:cc:c7:06:04:0c:61:97:78:43:a4:8a:3f: 7d:e4:f5:17:81:a2:30:d0:7b:30:01:99:4e:83:b4: 69:7a:b9:15:fe:53:10:95:94:cc:2e:51:b0:76:67: df:a5:bb:be:57:f2:28:16:04:32:32:43:cb:7a:78: d2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:42:39:F6:81:18:32:7A:4C:B2:84:80:42:12:D2:8E:1E:00:AE:10 X509v3 Authority Key Identifier: keyid:B4:38:1C:63:67:4B:5D:9A:9B:8C:44:C1:3C:F1:9E:7D:D3:21:F7:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:27:c6:44:99:6f:7e:44:a0:d3:af:86:8a:63:ad:e0:31:eb: 39:ad:c0:1e:a6:b1:7c:23:31:ac:21:08:c6:52:69:1a:2b:09: 56:7a:f8:f0:85:ba:31:dc:79:69:70:c5:3b:eb:56:c0:cd:6a: 89:24:9a:c8:7a:ab:78:f2:a7:f9:e7:36:a6:8d:7a:74:28:c7: e2:ba:bf:af:b2:28:d6:40:12:37:4f:80:f6:81:d8:61:82:b6: b6:e5:6a:6a:83:c7:1c:43:48:92:1d:80:8d:b2:db:25:00:2b: 2e:a8:17:9a:21:95:68:a8:47:a9:58:7b:87:7f:a7:b5:f7:56: 03:e1:79:da:7b:92:18:24:58:9d:63:b6:c2:39:d2:da:0b:47: fb:e8:97:1b:ac:bd:34:27:4c:40:fb:d8:06:d0:6e:ff:d3:5a: 94:be:05:b9:95:15:39:74:6e:5b:21:66:34:bf:ce:dd:7e:9f: ed:67:60:0a:9e:c9:94:e6:27:53:36:15:31:6e:f5:3e:cb:b5: 91:df:99:23:a3:6f:38:5b:82:58:9d:77:ab:52:77:0a:57:f2: 7a:33:c0:ae:3b:30:cb:31:73:f8:0f:02:90:e2:02:4e:10:a0: c7:b9:4a:0e:2d:13:8d:ea:b7:a6:6b:3c:4e:d7:a7:ef:35:19: ff:57:cd:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOWByJKdr2z4jXkxMP9n2tZXL4K4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQzODFDNjM2NzRCNUQ5QTlCOEM0NEMxM0NGMTlFN0RE MzIxRjdDMDAeFw0yNTA4MjIxOTI2MzRaFw0yNTA4MjYwNzAxMzRaMDMxMTAvBgNV BAMTKEU4NDIzOUY2ODExODMyN0E0Q0IyODQ4MDQyMTJEMjhFMUUwMEFFMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBmyaHs/D2jnoNsAhmVXJHvHpe QJJ86dumIzBPxwrGCmy9ZXD/a9pxPaajEaMFpdl57eja3sFTlrAdN7LtXVxD4DHT 7vaZd6jY3fX7sDFgQEMCFEQlbDmPpzZYUvOhr0S2xedtLtujwcwKupFaQy6PbrcB mhgP8LgNkJ7GNO33T6Ob6d4uVY5pwGpSTQxbfbxtemXZXmpZqwn3GZww0Pb4m+6j YeidvMLmpoSK6hro5llCbOgrCXJ2grpxUEBVVLiF3nddBszHBgQMYZd4Q6SKP33k 9ReBojDQezABmU6DtGl6uRX+UxCVlMwuUbB2Z9+lu75X8igWBDIyQ8t6eNLBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6EI59oEYMnpMsoSAQhLSjh4ArhAwHwYDVR0j BBgwFoAUtDgcY2dLXZqbjETBPPGefdMh98AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWIzYmU2Mi0zNTk3LTRmZTgtYTc5NS1mYzliYTEyMDIzNDQvMC9CNDM4MUM2MzY3 NEI1RDlBOUI4QzQ0QzEzQ0YxOUU3REQzMjFGN0MwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQzODFDNjM2NzRCNUQ5QTlCOEM0NEMxM0NGMTlFN0REMzIx RjdDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjliM2JlNjItMzU5Ny00ZmU4LWE3 OTUtZmM5YmExMjAyMzQ0LzAvQjQzODFDNjM2NzRCNUQ5QTlCOEM0NEMxM0NGMTlF N0REMzIxRjdDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0nxkSZb35EoNOvhopjreAx6zmtwB6msXwj MawhCMZSaRorCVZ6+PCFujHceWlwxTvrVsDNaokkmsh6q3jyp/nnNqaNenQox+K6 v6+yKNZAEjdPgPaB2GGCtrblamqDxxxDSJIdgI2y2yUAKy6oF5ohlWioR6lYe4d/ p7X3VgPhedp7khgkWJ1jtsI50toLR/volxusvTQnTED72AbQbv/TWpS+BbmVFTl0 blshZjS/zt1+n+1nYAqeyZTmJ1M2FTFu9T7LtZHfmSOjbzhbglidd6tSdwpX8noz wK47MMsxc/gPApDiAk4QoMe5Sg4tE43qt6ZrPE7Xp+81Gf9XzX0= -----END CERTIFICATE-----Generated at Sat Aug 23 12:20:53 2025 by rpki-client