$ rpki-client -vvf repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft File: B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft (raw, json) Hash identifier: fsowiZO69anWqKH1jZZGaBe6/C80hgQS8K2K7OW+7yc= Subject key identifier: 7D:ED:73:AD:36:A9:ED:92:7C:A8:C7:E7:F5:18:D0:82:0B:31:EF:25 Authority key identifier: B0:FA:6C:3E:D4:78:0E:03:2B:0A:3F:16:1E:01:8A:7C:8F:A8:2B:45 Certificate issuer: /CN=B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45 Certificate serial: 1AAC0CFBD3F3954C93558E27A8A0F1205C1924EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft Manifest number: 0218 Signing time: Thu 21 Aug 2025 13:12:11 +0000 Manifest this update: Thu 21 Aug 2025 13:07:11 +0000 Manifest next update: Sun 24 Aug 2025 15:01:11 +0000 Files and hashes: 1: 3130332e3138362e3136392e302f32342d3234203d3e20313439333135.roa (hash: k0YtTjCvRfHkKBkEOTB9msrr0NImtoiaOd/b0Un02oI=) 2: 3130332e3138362e3136382e302f32342d3234203d3e20313439333135.roa (hash: cA/IXkQfExxLqkZklRIGA4Iq/8wfMruGPEzuyZnNgNM=) 3: 3130332e3138362e3136382e302f32332d3233203d3e20313439333135.roa (hash: 0o9IBgjEwrH3ZJGqMXSmtJgW+TONR3n1c/K3AjhSCz0=) 4: B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.crl (hash: ZwNgtSZKyaR5V1s2CmgtwrpKnFz5ZKri18/oSwd+uy4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.crl rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 15:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:ac:0c:fb:d3:f3:95:4c:93:55:8e:27:a8:a0:f1:20:5c:19:24:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45 Validity Not Before: Aug 21 13:07:11 2025 GMT Not After : Aug 24 15:01:11 2025 GMT Subject: CN=7DED73AD36A9ED927CA8C7E7F518D0820B31EF25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:42:cc:16:4b:8a:85:00:ac:19:a2:21:de:f7: 43:b2:74:c5:8b:c8:57:02:d3:7e:57:d5:66:e2:9f: e2:1f:dd:d8:8c:df:6f:51:8c:7d:20:84:aa:cf:ab: f2:94:9f:2a:75:10:ea:4b:6f:f7:30:fa:a1:81:3d: 7b:9f:43:9a:8e:27:0c:b9:42:b8:c3:fb:97:14:25: dd:66:55:f9:92:05:26:5d:1b:c4:0c:7b:c9:24:2f: 8b:ac:1e:fa:06:fd:a7:6a:d5:1f:fa:03:10:24:e8: d1:7a:1b:0c:ca:56:47:b1:2b:d4:22:fa:d4:d4:81: 90:ef:be:d1:12:6e:e0:c7:80:25:ec:ab:71:a2:b1: 2b:97:c0:0b:20:d3:72:3c:e1:b0:8b:fd:87:a6:11: fb:b3:0c:0e:4b:05:63:a8:3a:b4:2a:34:54:49:de: ed:69:5a:6b:f5:d5:94:4c:ba:3e:0a:6d:18:78:24: 50:4f:b2:f9:1d:44:b1:3a:e0:b2:8c:52:0b:e6:fe: 72:40:b5:db:5a:94:0d:97:51:36:dc:de:10:d8:45: a1:29:72:e3:6c:53:31:11:e6:2f:10:78:e5:19:31: 4c:2e:b5:5d:68:34:e3:00:e7:6c:46:94:06:3c:67: ea:cf:15:b3:fd:dd:71:75:ab:b1:64:8d:b0:53:d8: d9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:ED:73:AD:36:A9:ED:92:7C:A8:C7:E7:F5:18:D0:82:0B:31:EF:25 X509v3 Authority Key Identifier: keyid:B0:FA:6C:3E:D4:78:0E:03:2B:0A:3F:16:1E:01:8A:7C:8F:A8:2B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:c4:fa:2a:3f:04:7a:67:34:49:bf:c9:67:fb:6f:75:b7:ea: 51:e2:60:75:4c:2a:c9:9a:6c:fb:14:71:75:b3:07:aa:92:e3: af:dd:59:c9:5a:c4:cd:50:b3:57:85:41:fb:c9:48:8d:a4:ec: 44:9b:c3:a4:da:c6:fd:50:b2:e2:38:5f:e9:2c:b9:14:c1:25: b4:09:d7:53:41:85:51:fd:2b:ff:4b:d4:f3:1c:e6:1c:c8:f5: 80:4e:14:e3:c4:80:95:11:7f:bf:8d:d2:9d:41:60:b8:b7:a5: 24:cf:97:8e:01:c9:bc:9d:d8:99:f2:69:cc:83:3c:17:7d:96: 30:db:a4:63:65:da:42:78:9f:64:5f:09:7d:b4:43:06:b0:a6: 17:b2:85:1c:99:73:a9:a8:e6:60:69:1d:c8:dc:07:f8:8d:bb: 7a:25:7c:d5:d9:4f:59:14:83:c7:dd:51:52:c7:d1:95:1d:57: 8b:51:bd:30:72:3a:cb:1c:cc:ec:fe:8a:01:b9:c0:2e:13:16: 7f:0d:b0:a8:5d:56:63:ed:7b:94:50:0f:14:55:13:bd:42:6c: 43:81:33:4b:57:e6:07:4b:8a:ce:da:45:dc:87:da:b2:08:af: 65:1e:ba:6c:2c:3f:9d:6d:6d:7a:1e:b1:db:fb:0e:15:52:8b: 13:94:b9:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGqwM+9PzlUyTVY4nqKDxIFwZJO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBGQTZDM0VENDc4MEUwMzJCMEEzRjE2MUUwMThBN0M4 RkE4MkI0NTAeFw0yNTA4MjExMzA3MTFaFw0yNTA4MjQxNTAxMTFaMDMxMTAvBgNV BAMTKDdERUQ3M0FEMzZBOUVEOTI3Q0E4QzdFN0Y1MThEMDgyMEIzMUVGMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCQswWS4qFAKwZoiHe90OydMWL yFcC035X1Wbin+If3diM329RjH0ghKrPq/KUnyp1EOpLb/cw+qGBPXufQ5qOJwy5 QrjD+5cUJd1mVfmSBSZdG8QMe8kkL4usHvoG/adq1R/6AxAk6NF6GwzKVkexK9Qi +tTUgZDvvtESbuDHgCXsq3GisSuXwAsg03I84bCL/YemEfuzDA5LBWOoOrQqNFRJ 3u1pWmv11ZRMuj4KbRh4JFBPsvkdRLE64LKMUgvm/nJAtdtalA2XUTbc3hDYRaEp cuNsUzER5i8QeOUZMUwutV1oNOMA52xGlAY8Z+rPFbP93XF1q7FkjbBT2NnzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfe1zrTap7ZJ8qMfn9RjQggsx7yUwHwYDVR0j BBgwFoAUsPpsPtR4DgMrCj8WHgGKfI+oK0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjcxM2EzMi1mYWRhLTQ4NGUtYTY4ZC0wY2FjMGZmZmEzM2MvMC9CMEZBNkMzRUQ0 NzgwRTAzMkIwQTNGMTYxRTAxOEE3QzhGQTgyQjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjBGQTZDM0VENDc4MEUwMzJCMEEzRjE2MUUwMThBN0M4RkE4 MkI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI3MTNhMzItZmFkYS00ODRlLWE2 OGQtMGNhYzBmZmZhMzNjLzAvQjBGQTZDM0VENDc4MEUwMzJCMEEzRjE2MUUwMThB N0M4RkE4MkI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALE+io/BHpnNEm/yWf7b3W36lHiYHVMKsma bPsUcXWzB6qS46/dWclaxM1Qs1eFQfvJSI2k7ESbw6Taxv1QsuI4X+ksuRTBJbQJ 11NBhVH9K/9L1PMc5hzI9YBOFOPEgJURf7+N0p1BYLi3pSTPl44Bybyd2JnyacyD PBd9ljDbpGNl2kJ4n2RfCX20QwawpheyhRyZc6mo5mBpHcjcB/iNu3olfNXZT1kU g8fdUVLH0ZUdV4tRvTByOssczOz+igG5wC4TFn8NsKhdVmPte5RQDxRVE71CbEOB M0tX5gdLis7aRdyH2rIIr2UeumwsP51tbXoesdv7DhVSixOUuZc= -----END CERTIFICATE-----Generated at Sat Aug 23 10:34:28 2025 by rpki-client