$ rpki-client -vvf repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft File: B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft (raw, json) Hash identifier: 7kir3Fisg3vHFnlgswThjMrHSPMUD0HSsXqRprZU0Z0= Subject key identifier: 85:D2:D4:18:56:B7:E4:7F:C0:BF:1C:EE:07:21:AC:B6:42:38:82:BE Authority key identifier: B9:11:D3:4F:2E:80:14:0D:63:AE:02:F4:CB:E7:19:E7:D9:72:C6:F6 Certificate issuer: /CN=B911D34F2E80140D63AE02F4CBE719E7D972C6F6 Certificate serial: 3688D31DCE9C13292CDFA1D5ACD85098599C07A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft Manifest number: B4 Signing time: Sat 23 Aug 2025 09:21:09 +0000 Manifest this update: Sat 23 Aug 2025 09:16:09 +0000 Manifest next update: Tue 26 Aug 2025 15:30:09 +0000 Files and hashes: 1: 3130332e3135302e32322e302f32342d3234203d3e20313430333938.roa (hash: obby+PvQrLWYC3NU3QI0xYtZDC2hJcWlETHv+KWDEWM=) 2: B911D34F2E80140D63AE02F4CBE719E7D972C6F6.crl (hash: lM4CbznJ5PEI3xVkn9CioacCyTf9pfBIObeq/1pkMuA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.crl rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:88:d3:1d:ce:9c:13:29:2c:df:a1:d5:ac:d8:50:98:59:9c:07:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B911D34F2E80140D63AE02F4CBE719E7D972C6F6 Validity Not Before: Aug 23 09:16:09 2025 GMT Not After : Aug 26 15:30:09 2025 GMT Subject: CN=85D2D41856B7E47FC0BF1CEE0721ACB6423882BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2e:ba:cd:13:32:5c:25:9e:ef:51:e2:7f:a5: 20:0b:25:64:91:3b:fc:23:54:0c:54:61:7e:7e:9b: 8c:1f:b0:11:5d:34:64:4e:7f:3d:58:2a:1e:a5:88: ae:a2:7b:f7:0d:bd:8d:62:69:90:71:cb:a2:f7:7a: 1a:bc:6e:c6:d1:e3:29:5f:60:cc:39:b8:06:8f:62: ea:e4:c6:ee:54:4f:07:4b:9c:8e:4e:27:e4:4b:e4: 44:62:d7:24:f4:a6:ce:ae:1f:4a:c6:10:8f:71:7a: d0:5a:9f:da:a9:76:e2:d6:d9:b3:fe:90:6a:4c:aa: ec:a0:e9:d5:7e:c6:fc:1f:10:dd:4c:90:f2:e9:e2: 81:d0:41:91:96:e9:c8:29:5e:c1:6c:f7:9e:a4:50: f2:c0:1b:67:04:9a:d4:c4:69:01:15:34:3d:5e:bd: 52:aa:a0:59:c2:1f:f4:d5:e6:71:a6:f0:ed:28:da: 2f:93:d3:90:7f:b1:26:10:15:46:e0:20:84:0f:a5: 2f:12:a5:c1:2c:74:0f:ff:89:6c:94:ad:57:e2:57: 5d:f1:d5:f2:33:93:07:7c:14:98:3e:29:f0:95:d2: 0f:61:48:f0:d3:38:15:58:97:02:62:7a:89:ad:6a: bc:e5:59:a3:69:6f:e7:c7:bf:20:43:8c:df:d9:36: 67:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D2:D4:18:56:B7:E4:7F:C0:BF:1C:EE:07:21:AC:B6:42:38:82:BE X509v3 Authority Key Identifier: keyid:B9:11:D3:4F:2E:80:14:0D:63:AE:02:F4:CB:E7:19:E7:D9:72:C6:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:c9:01:c4:b9:4d:4d:f8:e7:81:77:32:5e:f8:a3:50:03:57: 02:70:d2:d7:2c:89:09:21:c5:63:1b:ec:89:b0:26:85:a0:ba: 95:31:ce:62:cb:73:31:92:25:12:95:2f:94:5c:c4:47:65:5c: 5c:4c:3b:1f:0c:39:99:55:0a:97:05:0a:eb:08:75:92:3f:64: 5c:83:6f:0c:14:94:fc:bd:07:7a:2d:88:94:7e:6e:fc:64:38: 2f:20:c5:97:bc:57:c9:fd:ab:8a:b4:7b:ea:e0:4f:cc:36:56: b6:4d:2c:b6:7a:8d:46:f2:8d:49:9d:ca:42:1d:4b:b5:2b:88: ca:6c:a8:c6:37:d4:97:8e:00:9d:32:98:6b:fb:4c:14:fd:d6: be:3c:99:aa:76:3b:08:1c:c2:88:23:45:81:14:0b:c8:5a:63: 1b:17:50:fc:16:bc:db:80:33:63:0a:b9:dc:ad:8b:6e:51:23: 01:df:f2:5e:99:59:51:e0:ee:74:91:03:8c:98:fe:d3:e7:18: 3c:2e:56:a3:76:62:45:9e:5d:ab:2e:69:d5:2e:46:36:1c:22: a4:17:10:c4:56:09:72:22:52:15:8a:c3:02:3b:e1:2c:94:f4: d5:b5:fb:cf:20:12:1c:04:f2:bc:a1:00:e0:44:6b:31:8f:2e: ea:ab:cd:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNojTHc6cEyks36HVrNhQmFmcB6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkxMUQzNEYyRTgwMTQwRDYzQUUwMkY0Q0JFNzE5RTdE OTcyQzZGNjAeFw0yNTA4MjMwOTE2MDlaFw0yNTA4MjYxNTMwMDlaMDMxMTAvBgNV BAMTKDg1RDJENDE4NTZCN0U0N0ZDMEJGMUNFRTA3MjFBQ0I2NDIzODgyQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNLrrNEzJcJZ7vUeJ/pSALJWSR O/wjVAxUYX5+m4wfsBFdNGROfz1YKh6liK6ie/cNvY1iaZBxy6L3ehq8bsbR4ylf YMw5uAaPYurkxu5UTwdLnI5OJ+RL5ERi1yT0ps6uH0rGEI9xetBan9qpduLW2bP+ kGpMquyg6dV+xvwfEN1MkPLp4oHQQZGW6cgpXsFs956kUPLAG2cEmtTEaQEVND1e vVKqoFnCH/TV5nGm8O0o2i+T05B/sSYQFUbgIIQPpS8SpcEsdA//iWyUrVfiV13x 1fIzkwd8FJg+KfCV0g9hSPDTOBVYlwJieomtarzlWaNpb+fHvyBDjN/ZNmerAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhdLUGFa35H/AvxzuByGstkI4gr4wHwYDVR0j BBgwFoAUuRHTTy6AFA1jrgL0y+cZ59lyxvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NmE4NGRlNS02MWQxLTQ2MTgtOWZiNC00M2Y2MzFhMTI4OWEvMC9COTExRDM0RjJF ODAxNDBENjNBRTAyRjRDQkU3MTlFN0Q5NzJDNkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkxMUQzNEYyRTgwMTQwRDYzQUUwMkY0Q0JFNzE5RTdEOTcy QzZGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDZhODRkZTUtNjFkMS00NjE4LTlm YjQtNDNmNjMxYTEyODlhLzAvQjkxMUQzNEYyRTgwMTQwRDYzQUUwMkY0Q0JFNzE5 RTdEOTcyQzZGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABLJAcS5TU3454F3Ml74o1ADVwJw0tcsiQkh xWMb7ImwJoWgupUxzmLLczGSJRKVL5RcxEdlXFxMOx8MOZlVCpcFCusIdZI/ZFyD bwwUlPy9B3otiJR+bvxkOC8gxZe8V8n9q4q0e+rgT8w2VrZNLLZ6jUbyjUmdykId S7UriMpsqMY31JeOAJ0ymGv7TBT91r48map2OwgcwogjRYEUC8haYxsXUPwWvNuA M2MKudyti25RIwHf8l6ZWVHg7nSRA4yY/tPnGDwuVqN2YkWeXasuadUuRjYcIqQX EMRWCXIiUhWKwwI74SyU9NW1+88gEhwE8ryhAOBEazGPLuqrzew= -----END CERTIFICATE-----Generated at Sat Aug 23 14:03:41 2025 by rpki-client