$ rpki-client -vvf repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft File: B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft (raw, json) Hash identifier: beM9uXrI3QhrQ7miIAf9YC+F0sSova+RcixODN8M5I0= Subject key identifier: AC:1A:87:09:B9:02:CF:9E:D6:60:D9:19:6D:97:C0:19:2E:92:26:E9 Authority key identifier: B0:D7:26:41:9F:BF:35:E7:C6:EB:43:7E:23:8F:3D:2A:3F:06:3B:4C Certificate issuer: /CN=B0D726419FBF35E7C6EB437E238F3D2A3F063B4C Certificate serial: 36786184A218FE94077F55F6315F0E132BE9D396 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft Manifest number: B3 Signing time: Fri 22 Aug 2025 19:00:06 +0000 Manifest this update: Fri 22 Aug 2025 18:55:06 +0000 Manifest next update: Mon 25 Aug 2025 22:10:06 +0000 Files and hashes: 1: 3136302e32352e35382e302f32332d3234203d3e20313532383333.roa (hash: 7IuV0NhxXlp455EXe3FaAoXVfJrAOl6E2yru0xUglkI=) 2: B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.crl (hash: PaNe22uyHyf+vj7VeL4rs/cHcp7E918Co98Qu0FvQ8Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.crl rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 22:10:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:78:61:84:a2:18:fe:94:07:7f:55:f6:31:5f:0e:13:2b:e9:d3:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0D726419FBF35E7C6EB437E238F3D2A3F063B4C Validity Not Before: Aug 22 18:55:06 2025 GMT Not After : Aug 25 22:10:06 2025 GMT Subject: CN=AC1A8709B902CF9ED660D9196D97C0192E9226E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ca:d6:b1:84:00:f8:ac:0d:72:87:f6:ff:64: 69:01:89:a6:d9:28:94:ae:6d:65:39:a5:e9:7b:22: 19:c0:15:a4:a9:ff:11:50:3d:3d:2e:07:07:1b:e3: d9:cc:e8:09:e1:78:5c:b4:ea:5a:48:1b:e8:15:93: d5:50:57:92:88:61:3d:00:ff:36:ce:9e:50:51:36: 01:f3:76:55:6f:34:eb:d5:10:f3:85:92:11:c3:e9: 74:17:0c:a2:26:a6:b9:1b:48:47:dc:b3:df:e2:a0: c4:0c:3c:61:c7:16:c4:c7:7e:36:4b:52:ce:4a:73: 8c:7b:39:25:3c:18:7e:aa:04:05:44:8d:26:a2:dc: 58:d2:51:a5:61:d8:5c:70:bf:c8:16:41:71:d5:9a: 73:e8:7f:6f:f8:80:3f:11:01:6f:f2:85:9a:07:4f: 99:68:7f:96:d8:f0:d1:9c:eb:b1:b2:17:3b:87:11: 08:1b:9d:94:60:80:ee:4a:6e:4f:bb:79:57:1c:44: b6:2f:44:58:cb:bc:3d:ee:9c:c9:b5:82:04:41:0f: 15:26:57:5c:62:f8:4c:9d:48:47:bb:1b:5d:42:c6: 7e:fe:c5:3d:d7:1b:37:67:34:ba:61:1c:a8:7b:f5: 09:8c:45:29:04:33:90:92:a4:8e:8d:fd:06:fe:e6: 11:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:1A:87:09:B9:02:CF:9E:D6:60:D9:19:6D:97:C0:19:2E:92:26:E9 X509v3 Authority Key Identifier: keyid:B0:D7:26:41:9F:BF:35:E7:C6:EB:43:7E:23:8F:3D:2A:3F:06:3B:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:7a:c6:b2:de:0c:66:b5:71:2a:37:2b:0d:76:c0:86:01:62: 14:c7:b1:74:1e:09:da:71:d5:97:a0:46:c5:a5:5f:c6:d4:cb: 3e:a5:aa:0c:a9:50:c3:c1:c8:95:51:d3:6e:a3:ea:9e:2f:cc: 4f:af:95:53:e2:80:41:86:c4:69:c5:8c:85:e2:14:b8:8d:db: d5:09:e1:af:93:ee:34:3e:1d:96:46:42:a0:b7:29:22:da:f1: 67:2e:8e:00:96:e7:a8:f0:5c:a9:47:cb:4b:ce:1a:5b:a8:ae: 0b:87:72:3b:2f:1d:c3:42:28:fb:bd:b6:34:bf:75:45:1e:a9: 26:df:f6:3b:c3:56:cc:58:cf:c7:13:e2:33:aa:43:b7:20:bf: 28:04:96:ca:86:b6:91:2b:54:db:49:80:b3:30:af:ff:96:58: b0:59:88:6b:36:6e:70:9f:4d:2b:14:9b:af:67:ba:61:af:c6: f5:ba:20:37:08:69:1e:5b:48:60:48:27:a7:76:58:4c:3b:88: 8f:0c:04:15:d8:f9:c6:c0:df:5d:ae:67:81:a1:c1:65:ca:a6: 97:d8:6a:ff:c1:85:44:ab:cd:3f:24:df:25:71:a3:ac:84:a2: 59:37:57:6d:de:88:33:99:20:32:fa:29:00:ea:73:ec:c0:ab: 14:42:27:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNnhhhKIY/pQHf1X2MV8OEyvp05YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBENzI2NDE5RkJGMzVFN0M2RUI0MzdFMjM4RjNEMkEz RjA2M0I0QzAeFw0yNTA4MjIxODU1MDZaFw0yNTA4MjUyMjEwMDZaMDMxMTAvBgNV BAMTKEFDMUE4NzA5QjkwMkNGOUVENjYwRDkxOTZEOTdDMDE5MkU5MjI2RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyytaxhAD4rA1yh/b/ZGkBiabZ KJSubWU5pel7IhnAFaSp/xFQPT0uBwcb49nM6AnheFy06lpIG+gVk9VQV5KIYT0A /zbOnlBRNgHzdlVvNOvVEPOFkhHD6XQXDKImprkbSEfcs9/ioMQMPGHHFsTHfjZL Us5Kc4x7OSU8GH6qBAVEjSai3FjSUaVh2Fxwv8gWQXHVmnPof2/4gD8RAW/yhZoH T5lof5bY8NGc67GyFzuHEQgbnZRggO5Kbk+7eVccRLYvRFjLvD3unMm1ggRBDxUm V1xi+EydSEe7G11Cxn7+xT3XGzdnNLphHKh79QmMRSkEM5CSpI6N/Qb+5hEVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrBqHCbkCz57WYNkZbZfAGS6SJukwHwYDVR0j BBgwFoAUsNcmQZ+/NefG60N+I489Kj8GO0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MmRhYjQ2YS0wODVlLTQ0MzItOTgzMy03MWI4ZGIxNDRkOTQvMC9CMEQ3MjY0MTlG QkYzNUU3QzZFQjQzN0UyMzhGM0QyQTNGMDYzQjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjBENzI2NDE5RkJGMzVFN0M2RUI0MzdFMjM4RjNEMkEzRjA2 M0I0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDJkYWI0NmEtMDg1ZS00NDMyLTk4 MzMtNzFiOGRiMTQ0ZDk0LzAvQjBENzI2NDE5RkJGMzVFN0M2RUI0MzdFMjM4RjNE MkEzRjA2M0I0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZ6xrLeDGa1cSo3Kw12wIYBYhTHsXQeCdpx 1ZegRsWlX8bUyz6lqgypUMPByJVR026j6p4vzE+vlVPigEGGxGnFjIXiFLiN29UJ 4a+T7jQ+HZZGQqC3KSLa8WcujgCW56jwXKlHy0vOGluorguHcjsvHcNCKPu9tjS/ dUUeqSbf9jvDVsxYz8cT4jOqQ7cgvygElsqGtpErVNtJgLMwr/+WWLBZiGs2bnCf TSsUm69numGvxvW6IDcIaR5bSGBIJ6d2WEw7iI8MBBXY+cbA312uZ4GhwWXKppfY av/BhUSrzT8k3yVxo6yEolk3V23eiDOZIDL6KQDqc+zAqxRCJ3g= -----END CERTIFICATE-----Generated at Sun Aug 24 03:12:50 2025 by rpki-client