$ rpki-client -vvf repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft File: B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft (raw, json) Hash identifier: 2e1g+lwW3X3Z3ZQQ+vn7+dZs7P3LQALpu3nXLQ/gCKE= Subject key identifier: 96:DC:50:04:A8:6A:4C:4D:A1:F7:A1:D1:15:A1:44:E7:66:C8:AD:9B Authority key identifier: B2:FA:6D:D6:2C:0D:60:EA:AD:64:F6:B4:71:D2:2D:29:44:32:B7:B8 Certificate issuer: /CN=B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8 Certificate serial: 30B6D36C024A8AA2344690E5F64EAF585741245B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft Manifest number: 0501 Signing time: Fri 22 Aug 2025 11:00:42 +0000 Manifest this update: Fri 22 Aug 2025 10:55:42 +0000 Manifest next update: Mon 25 Aug 2025 11:47:42 +0000 Files and hashes: 1: B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl (hash: 3lGipdbzeA0qJeuB7S66IIPa6QOjTKyd2BwRmESzDfk=) 2: 3130332e3130362e3137322e302f32332d3234203d3e20313336383838.roa (hash: DZlWR7tuLnpwDkeYEthZYN05oc1IXglcFF75rJ6G2+c=) 3: 3130332e3130362e3137342e302f32342d3234203d3e20313336383838.roa (hash: gCxomhlXPqJzdF7SJ3iSXnHHdDE1CzdM3fX39z9NSbw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 11:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:b6:d3:6c:02:4a:8a:a2:34:46:90:e5:f6:4e:af:58:57:41:24:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8 Validity Not Before: Aug 22 10:55:42 2025 GMT Not After : Aug 25 11:47:42 2025 GMT Subject: CN=96DC5004A86A4C4DA1F7A1D115A144E766C8AD9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:69:f3:89:d6:a6:5d:3d:2f:55:dd:ee:b0:68: 76:fe:8d:d6:91:20:76:a8:2b:cb:58:f0:00:4a:81: f8:c0:9f:06:b6:ea:b1:90:0b:87:fa:1f:90:91:a2: 04:c1:06:4d:f0:97:ea:a1:bc:18:5f:ee:1c:c5:b9: 72:2b:5c:a5:db:d0:99:4a:47:09:6f:fa:a3:60:c2: 52:cf:b7:b8:c3:ef:bb:c4:20:66:f7:81:59:37:cd: a4:dc:0c:4c:4b:51:ed:de:b2:41:31:e3:6f:ce:db: b5:f6:51:96:3d:33:65:25:f1:0f:42:d7:ee:72:ed: a4:a0:c7:5c:b1:b0:e9:43:88:e1:e1:6d:87:c8:78: 4a:35:9d:b5:98:fa:78:b9:50:dd:3f:92:c9:cc:ad: 3e:5e:19:ed:cd:a7:b8:0b:fc:f5:c8:fb:de:ef:d2: ed:51:b4:30:67:68:04:c8:9a:df:a1:1c:85:f9:57: 75:72:71:4c:64:ed:6f:7e:08:83:5b:54:22:21:3b: ae:f3:c8:ff:ed:27:e4:1e:03:ed:5b:bb:c8:40:88: 25:25:31:ab:95:05:1c:2b:13:e7:8f:d9:76:cc:fa: 35:b3:6d:c9:1f:56:43:d8:d6:fc:3d:7c:2e:26:0f: 16:12:1b:c4:51:90:91:5f:f0:91:ae:ba:23:9b:8c: a1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:DC:50:04:A8:6A:4C:4D:A1:F7:A1:D1:15:A1:44:E7:66:C8:AD:9B X509v3 Authority Key Identifier: keyid:B2:FA:6D:D6:2C:0D:60:EA:AD:64:F6:B4:71:D2:2D:29:44:32:B7:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:0f:f2:8f:b9:e8:f5:ed:c8:14:9e:be:2a:ef:53:4d:69:ac: 84:d5:66:a1:91:c8:4a:4d:8c:d0:68:5b:c9:07:0a:48:5a:0a: 12:28:83:dc:dd:ee:df:40:95:60:c4:1c:43:3f:3d:a9:90:4a: 37:d2:21:44:60:96:04:bd:77:d7:7f:25:d0:74:f1:e4:56:67: 60:31:24:67:52:de:d4:69:2a:3e:ce:61:4d:49:03:8e:04:50: 46:fa:f7:bb:80:ed:2b:ff:8b:65:d4:1d:2c:29:37:61:b9:15: c5:fd:76:89:a1:c4:c6:5e:83:b8:57:56:f0:32:65:da:33:bf: a2:3a:b7:c8:04:40:15:7c:1d:a1:1a:f5:4e:b7:e4:15:8a:79: cb:bf:b4:1c:66:67:cb:2d:f5:52:3d:a0:4b:c8:6c:8f:e1:a5: 01:3a:67:1e:cf:b3:04:34:68:97:63:c2:55:03:f7:81:b5:06: 58:e5:71:9e:2a:53:07:e2:e2:e9:35:e5:9f:97:de:d4:ef:98: 28:06:b8:78:84:aa:c1:bc:3d:f9:63:55:2f:8b:05:7a:b7:bb: 63:0c:16:6c:0f:c8:b3:3f:79:2e:fc:82:8a:11:2a:85:df:f0: c1:38:c7:bb:5e:3d:aa:86:a8:5c:07:86:6d:5e:0a:ce:f2:74: 3d:a5:95:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMLbTbAJKiqI0RpDl9k6vWFdBJFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJGQTZERDYyQzBENjBFQUFENjRGNkI0NzFEMjJEMjk0 NDMyQjdCODAeFw0yNTA4MjIxMDU1NDJaFw0yNTA4MjUxMTQ3NDJaMDMxMTAvBgNV BAMTKDk2REM1MDA0QTg2QTRDNERBMUY3QTFEMTE1QTE0NEU3NjZDOEFEOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAafOJ1qZdPS9V3e6waHb+jdaR IHaoK8tY8ABKgfjAnwa26rGQC4f6H5CRogTBBk3wl+qhvBhf7hzFuXIrXKXb0JlK Rwlv+qNgwlLPt7jD77vEIGb3gVk3zaTcDExLUe3eskEx42/O27X2UZY9M2Ul8Q9C 1+5y7aSgx1yxsOlDiOHhbYfIeEo1nbWY+ni5UN0/ksnMrT5eGe3Np7gL/PXI+97v 0u1RtDBnaATImt+hHIX5V3VycUxk7W9+CINbVCIhO67zyP/tJ+QeA+1bu8hAiCUl MauVBRwrE+eP2XbM+jWzbckfVkPY1vw9fC4mDxYSG8RRkJFf8JGuuiObjKE5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUltxQBKhqTE2h96HRFaFE52bIrZswHwYDVR0j BBgwFoAUsvpt1iwNYOqtZPa0cdItKUQyt7gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmJkN2NmNi1mNTVhLTRiNzgtYTU4OC1kOTI2MWYxNWY3NjMvMC9CMkZBNkRENjJD MEQ2MEVBQUQ2NEY2QjQ3MUQyMkQyOTQ0MzJCN0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJGQTZERDYyQzBENjBFQUFENjRGNkI0NzFEMjJEMjk0NDMy QjdCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZiZDdjZjYtZjU1YS00Yjc4LWE1 ODgtZDkyNjFmMTVmNzYzLzAvQjJGQTZERDYyQzBENjBFQUFENjRGNkI0NzFEMjJE Mjk0NDMyQjdCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAP8o+56PXtyBSevirvU01prITVZqGRyEpN jNBoW8kHCkhaChIog9zd7t9AlWDEHEM/PamQSjfSIURglgS9d9d/JdB08eRWZ2Ax JGdS3tRpKj7OYU1JA44EUEb697uA7Sv/i2XUHSwpN2G5FcX9domhxMZeg7hXVvAy Zdozv6I6t8gEQBV8HaEa9U635BWKecu/tBxmZ8st9VI9oEvIbI/hpQE6Zx7PswQ0 aJdjwlUD94G1BljlcZ4qUwfi4uk15Z+X3tTvmCgGuHiEqsG8PfljVS+LBXq3u2MM FmwPyLM/eS78gooRKoXf8ME4x7tePaqGqFwHhm1eCs7ydD2llUw= -----END CERTIFICATE-----Generated at Sat Aug 23 10:07:31 2025 by rpki-client