$ rpki-client -vvf repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft File: B1F0A7585ED1882783C6AF802B826607ABB92671.mft (raw, json) Hash identifier: W80Z95HUOzS7Edb4RG/MN3oJ3eOq+RMyHGuclzd19wM= Subject key identifier: 6D:DB:D5:BB:74:C4:11:BF:FA:50:48:24:86:90:73:D4:C7:2F:34:42 Authority key identifier: B1:F0:A7:58:5E:D1:88:27:83:C6:AF:80:2B:82:66:07:AB:B9:26:71 Certificate issuer: /CN=B1F0A7585ED1882783C6AF802B826607ABB92671 Certificate serial: 3EE454F270EB02A143F938BB389A4B497F35D053 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft Manifest number: 9A Signing time: Thu 21 Aug 2025 20:42:32 +0000 Manifest this update: Thu 21 Aug 2025 20:37:32 +0000 Manifest next update: Sun 24 Aug 2025 23:11:32 +0000 Files and hashes: 1: 3136302e3138372e33362e302f32342d3234203d3e20313533333237.roa (hash: VqrWW5xSvGuewi8vAHFbQ7GGTuJaYVxqsL6i06spXCU=) 2: B1F0A7585ED1882783C6AF802B826607ABB92671.crl (hash: 0u4624jWIUCVWAf5ZwgXtnnldYN4MQqg/n10Yoc8OSs=) 3: 3136302e3138372e33372e302f32342d3234203d3e20313533333237.roa (hash: 2s2hT2RFc51pEXZc8X5XI589aylunZVhY45QaHon1Ao=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.crl rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 23:11:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:e4:54:f2:70:eb:02:a1:43:f9:38:bb:38:9a:4b:49:7f:35:d0:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1F0A7585ED1882783C6AF802B826607ABB92671 Validity Not Before: Aug 21 20:37:32 2025 GMT Not After : Aug 24 23:11:32 2025 GMT Subject: CN=6DDBD5BB74C411BFFA504824869073D4C72F3442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:af:cf:67:69:d3:fd:ec:bb:02:16:f2:d3:38: 7d:6f:41:8a:7e:39:d6:cb:9e:b5:e6:b4:5e:70:69: 1a:df:d6:f2:0b:2f:73:5f:59:af:75:fe:c7:4c:a6: b9:15:8e:58:3c:ef:4e:b1:76:99:b7:f1:6a:48:64: cb:25:d7:ff:ac:c3:cb:35:d0:d1:8f:23:11:da:60: b4:e7:13:07:12:4a:c3:73:87:eb:6d:48:43:33:d7: 6a:aa:59:89:c7:a1:c5:bc:9f:53:d0:03:a7:11:5a: bd:3d:76:fc:13:ba:93:7e:28:89:35:e9:95:f5:35: 66:d2:6c:63:85:3c:a1:8b:0a:69:0d:f9:e8:d6:cf: b9:56:f8:7f:55:d9:39:af:99:ab:a9:01:f5:8c:c1: cd:c1:db:57:cd:26:82:60:5b:31:02:fb:87:c6:ff: 53:a5:0f:64:1b:3a:92:53:a6:7f:49:70:91:88:a6: c3:b0:81:bd:37:f0:04:b0:0f:0e:ea:bc:1f:3f:3c: 52:52:26:79:9a:80:a6:f7:2f:d9:74:a6:61:bc:22: 9a:36:12:a1:89:e9:a0:5d:0c:65:1f:fb:9d:dc:ac: b0:ae:81:13:51:15:90:78:7c:c4:cb:c6:97:85:45: 90:06:19:15:51:e5:32:c5:8b:de:8f:73:a9:7e:ed: 12:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:DB:D5:BB:74:C4:11:BF:FA:50:48:24:86:90:73:D4:C7:2F:34:42 X509v3 Authority Key Identifier: keyid:B1:F0:A7:58:5E:D1:88:27:83:C6:AF:80:2B:82:66:07:AB:B9:26:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:9d:f0:e6:8d:38:8a:5a:73:bd:c3:72:97:d3:0e:ea:17:44: f5:9f:7c:85:2f:41:a2:32:f9:a9:32:f7:45:0b:f9:30:a9:6a: 33:d6:b2:78:b7:9e:9c:df:5d:82:ea:28:84:1a:0a:b7:e2:1a: 91:4f:fc:9c:ef:17:28:af:52:ec:1e:c6:0f:82:f4:b2:42:f6: b3:f0:b9:d3:f6:20:59:65:ac:74:a9:5d:64:3b:52:16:c8:95: 67:14:90:8c:f4:cb:51:4c:ed:26:f0:00:e8:1c:0c:f9:77:6b: 47:83:de:f3:d1:ea:d2:2d:30:74:71:27:e2:18:7a:f3:f1:80: c1:03:1d:0e:43:b4:dd:b9:ef:df:84:74:cd:08:6d:bc:8b:e9: 95:c9:9a:50:32:15:79:66:21:27:91:b5:96:05:a5:dc:1f:d0: fc:f7:c3:e4:fe:89:aa:35:a2:cd:30:5a:1c:13:ab:b4:b3:5f: 2b:d3:ae:f3:c4:e7:2a:98:16:8f:e7:81:5f:8d:59:e2:bf:4f: 8d:87:be:90:7d:a6:be:0d:f7:26:3f:36:7b:81:a6:57:29:77: b8:36:bf:6a:ce:5d:17:40:89:3c:8a:75:31:84:ee:d1:77:ff: b8:e2:37:77:81:6f:4b:5d:40:5c:37:60:f6:37:3d:cd:88:f1: ba:63:6b:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPuRU8nDrAqFD+Ti7OJpLSX810FMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2MDdB QkI5MjY3MTAeFw0yNTA4MjEyMDM3MzJaFw0yNTA4MjQyMzExMzJaMDMxMTAvBgNV BAMTKDZEREJENUJCNzRDNDExQkZGQTUwNDgyNDg2OTA3M0Q0QzcyRjM0NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/r89nadP97LsCFvLTOH1vQYp+ OdbLnrXmtF5waRrf1vILL3NfWa91/sdMprkVjlg8706xdpm38WpIZMsl1/+sw8s1 0NGPIxHaYLTnEwcSSsNzh+ttSEMz12qqWYnHocW8n1PQA6cRWr09dvwTupN+KIk1 6ZX1NWbSbGOFPKGLCmkN+ejWz7lW+H9V2TmvmaupAfWMwc3B21fNJoJgWzEC+4fG /1OlD2QbOpJTpn9JcJGIpsOwgb038ASwDw7qvB8/PFJSJnmagKb3L9l0pmG8Ipo2 EqGJ6aBdDGUf+53crLCugRNRFZB4fMTLxpeFRZAGGRVR5TLFi96Pc6l+7RJhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbdvVu3TEEb/6UEgkhpBz1McvNEIwHwYDVR0j BBgwFoAUsfCnWF7RiCeDxq+AK4JmB6u5JnEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODkxMzg5My01ZjY0LTRhNWUtYThkMi01ZDUxZWJkZTQ3M2YvMC9CMUYwQTc1ODVF RDE4ODI3ODNDNkFGODAyQjgyNjYwN0FCQjkyNjcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2MDdBQkI5 MjY3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzg5MTM4OTMtNWY2NC00YTVlLWE4 ZDItNWQ1MWViZGU0NzNmLzAvQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2 MDdBQkI5MjY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADqd8OaNOIpac73DcpfTDuoXRPWffIUvQaIy +aky90UL+TCpajPWsni3npzfXYLqKIQaCrfiGpFP/JzvFyivUuwexg+C9LJC9rPw udP2IFllrHSpXWQ7UhbIlWcUkIz0y1FM7SbwAOgcDPl3a0eD3vPR6tItMHRxJ+IY evPxgMEDHQ5DtN2579+EdM0IbbyL6ZXJmlAyFXlmISeRtZYFpdwf0Pz3w+T+iao1 os0wWhwTq7SzXyvTrvPE5yqYFo/ngV+NWeK/T42HvpB9pr4N9yY/NnuBplcpd7g2 v2rOXRdAiTyKdTGE7tF3/7jiN3eBb0tdQFw3YPY3Pc2I8bpja/g= -----END CERTIFICATE-----Generated at Sat Aug 23 19:46:08 2025 by rpki-client