$ rpki-client -vvf repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft File: B392381083372148D0977D0066CFF38FD5A32CDB.mft (raw, json) Hash identifier: y9wZPV5u0sbMVIUQbFXzKorz4ZG53mD88h3GZyXO7wg= Subject key identifier: 6C:8F:42:2F:B1:4C:47:4F:7B:CD:F8:12:13:71:60:EF:80:14:CF:29 Authority key identifier: B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB Certificate issuer: /CN=B392381083372148D0977D0066CFF38FD5A32CDB Certificate serial: 3A0F0C7BB8F4BE27D84BF619079CCF01B27C5CD7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft Manifest number: 0229 Signing time: Fri 22 Aug 2025 17:31:59 +0000 Manifest this update: Fri 22 Aug 2025 17:26:59 +0000 Manifest next update: Tue 26 Aug 2025 03:27:59 +0000 Files and hashes: 1: B392381083372148D0977D0066CFF38FD5A32CDB.crl (hash: My7+r3hBbELSipH5/5uR4r1aI+LbLS979XG6hdQV7vM=) 2: 3130332e3138352e38322e302f32332d3234203d3e203538383230.roa (hash: HSEFfxxLTR9pPfTqUIYx4lI4vavTZEpGUjc26Y26XRA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.crl rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 03:27:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:0f:0c:7b:b8:f4:be:27:d8:4b:f6:19:07:9c:cf:01:b2:7c:5c:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B392381083372148D0977D0066CFF38FD5A32CDB Validity Not Before: Aug 22 17:26:59 2025 GMT Not After : Aug 26 03:27:59 2025 GMT Subject: CN=6C8F422FB14C474F7BCDF812137160EF8014CF29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:b0:39:50:46:6b:d7:0e:91:b1:94:5f:85:dd: 41:db:4e:ab:61:c1:b4:74:ab:90:da:a4:bd:72:16: f8:88:cf:41:c1:8b:46:5a:74:4f:d9:16:11:56:bf: bc:8b:9f:50:79:c6:42:aa:68:c0:7e:3e:3c:f9:d1: ec:9b:cb:90:99:f8:35:3e:bb:35:27:93:b2:58:0b: 1c:4c:d2:4b:db:0b:49:a8:6f:ec:40:1b:2d:d3:10: ab:60:79:80:c8:da:9a:bb:09:60:36:97:5d:1e:f0: ec:2e:ac:9c:f5:5b:39:c9:e2:34:50:ab:f9:45:14: 0e:4a:d5:5f:6f:77:a1:35:1b:60:7c:88:c1:3f:ee: 65:26:b7:22:9d:30:b9:bf:41:58:e7:0a:7a:3e:db: 4f:f3:0a:61:0e:51:ff:5f:64:05:88:41:b0:65:1a: aa:64:8e:14:6e:56:9e:e3:67:53:d8:71:6b:92:65: 84:1a:9d:54:62:c4:bb:bf:15:d9:59:47:aa:1b:66: 24:11:3b:ce:0d:b6:ad:4b:8d:6f:f2:82:62:eb:5b: 68:38:aa:aa:57:c2:e5:89:23:63:46:b4:c4:2d:f7: 09:13:11:0b:f8:30:29:68:a1:9d:76:23:0d:81:66: cf:5f:30:6f:dd:fe:f6:a2:43:86:fc:95:5c:d7:16: 4c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:8F:42:2F:B1:4C:47:4F:7B:CD:F8:12:13:71:60:EF:80:14:CF:29 X509v3 Authority Key Identifier: keyid:B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:aa:be:3e:bf:07:34:e0:de:b1:36:2d:42:06:c0:a1:fb:85: 54:17:f1:e9:2f:1d:d4:69:ba:43:15:ad:b7:e5:cf:a6:56:b0: 68:42:b6:76:1b:43:12:b3:a7:b0:5c:bf:2a:3b:38:03:4b:41: e5:3b:b0:04:5f:d2:7d:53:7b:c2:4a:7a:1f:ac:de:ab:d9:f5: 4a:73:dd:74:77:75:99:c3:16:b8:69:bb:2d:94:74:94:3b:7d: 18:3f:af:40:cf:bd:42:ba:d4:43:3f:a1:d7:5b:4c:83:6a:d5: 23:37:1b:0d:f2:d0:4c:57:25:d3:28:56:9c:bf:5d:cc:54:cc: 0b:f9:ad:db:76:89:57:44:22:e4:c8:8d:93:c8:41:c1:7b:38: 84:f8:b9:e9:97:6d:61:23:8a:e6:8d:23:59:0b:d6:6a:b4:11: 41:c3:4f:7f:c8:39:de:e6:9b:51:5e:14:55:c7:64:4f:da:97: 47:a2:eb:7b:38:99:27:99:65:c8:36:4e:88:1d:69:7a:a2:c0: 89:0d:ad:41:f5:30:b4:f5:a0:14:a6:d0:ce:30:f1:80:a7:b0: 3e:e6:33:b5:78:18:4d:64:63:21:a6:a5:6c:15:1e:ac:87:92: 6b:ec:20:65:e3:dc:a2:6a:e1:e7:83:61:0a:6c:a9:c1:7f:d6: 97:97:1c:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOg8Me7j0vifYS/YZB5zPAbJ8XNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM5MjM4MTA4MzM3MjE0OEQwOTc3RDAwNjZDRkYzOEZE NUEzMkNEQjAeFw0yNTA4MjIxNzI2NTlaFw0yNTA4MjYwMzI3NTlaMDMxMTAvBgNV BAMTKDZDOEY0MjJGQjE0QzQ3NEY3QkNERjgxMjEzNzE2MEVGODAxNENGMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1sDlQRmvXDpGxlF+F3UHbTqth wbR0q5DapL1yFviIz0HBi0ZadE/ZFhFWv7yLn1B5xkKqaMB+Pjz50eyby5CZ+DU+ uzUnk7JYCxxM0kvbC0mob+xAGy3TEKtgeYDI2pq7CWA2l10e8OwurJz1WznJ4jRQ q/lFFA5K1V9vd6E1G2B8iME/7mUmtyKdMLm/QVjnCno+20/zCmEOUf9fZAWIQbBl GqpkjhRuVp7jZ1PYcWuSZYQanVRixLu/FdlZR6obZiQRO84Ntq1LjW/ygmLrW2g4 qqpXwuWJI2NGtMQt9wkTEQv4MClooZ12Iw2BZs9fMG/d/vaiQ4b8lVzXFkyJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbI9CL7FMR097zfgSE3Fg74AUzykwHwYDVR0j BBgwFoAUs5I4EIM3IUjQl30AZs/zj9WjLNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmYyY2YwMy1mOWY5LTRiY2EtOGMyYy02MDczMjgwZGZlYTgvMC9CMzkyMzgxMDgz MzcyMTQ4RDA5NzdEMDA2NkNGRjM4RkQ1QTMyQ0RCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjM5MjM4MTA4MzM3MjE0OEQwOTc3RDAwNjZDRkYzOEZENUEz MkNEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJmMmNmMDMtZjlmOS00YmNhLThj MmMtNjA3MzI4MGRmZWE4LzAvQjM5MjM4MTA4MzM3MjE0OEQwOTc3RDAwNjZDRkYz OEZENUEzMkNEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABCqvj6/BzTg3rE2LUIGwKH7hVQX8ekvHdRp ukMVrbflz6ZWsGhCtnYbQxKzp7Bcvyo7OANLQeU7sARf0n1Te8JKeh+s3qvZ9Upz 3XR3dZnDFrhpuy2UdJQ7fRg/r0DPvUK61EM/oddbTINq1SM3Gw3y0ExXJdMoVpy/ XcxUzAv5rdt2iVdEIuTIjZPIQcF7OIT4uemXbWEjiuaNI1kL1mq0EUHDT3/IOd7m m1FeFFXHZE/al0ei63s4mSeZZcg2TogdaXqiwIkNrUH1MLT1oBSm0M4w8YCnsD7m M7V4GE1kYyGmpWwVHqyHkmvsIGXj3KJq4eeDYQpsqcF/1peXHGc= -----END CERTIFICATE-----Generated at Sat Aug 23 12:07:59 2025 by rpki-client