$ rpki-client -vvf repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft File: B0928A45D014D8D5FAD50314E828086F12B15610.mft (raw, json) Hash identifier: oqF6jJp/pBtF/+aPUCvhHj0g0igDNtNUV+x4gdK3BJg= Subject key identifier: 55:78:68:62:7D:41:40:E3:21:5D:AB:33:FD:7B:0C:1A:B5:85:BB:27 Authority key identifier: B0:92:8A:45:D0:14:D8:D5:FA:D5:03:14:E8:28:08:6F:12:B1:56:10 Certificate issuer: /CN=B0928A45D014D8D5FAD50314E828086F12B15610 Certificate serial: 051B38DBE6416FF78CDEDFA516466AB0FEE1C851 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft Manifest number: 0301 Signing time: Thu 21 Aug 2025 06:11:15 +0000 Manifest this update: Thu 21 Aug 2025 06:06:15 +0000 Manifest next update: Sun 24 Aug 2025 15:00:15 +0000 Files and hashes: 1: 3230322e37302e3133322e302f32342d3234203d3e20313430343433.roa (hash: hnSe2L9heULKYvVeefFY6CeCDXE6iTWu+s4r/qCo/4o=) 2: 3230322e3132352e38332e302f32342d3234203d3e20313430343433.roa (hash: Ky8MrLU9AvVMvZfrLkoaRO/9X/2qSweH3weFbcGoV3c=) 3: 3230322e37302e3133322e302f32332d3233203d3e20313430343433.roa (hash: unxNSSNtfbW/QtJSHv1+Jppsd16Z88+qlZSg2ZXLUc0=) 4: 3230322e37302e3133332e302f32342d3234203d3e20313430343433.roa (hash: wdtK/qmLPSYK98usl8We2OAmclE1Y5QskILTtOqsrh0=) 5: 3230322e3132352e38322e302f32332d3233203d3e20313430343433.roa (hash: g4b6/Xa0b41J+1gc8Xz+JaVY6mTt5QNosbt82K9ZCLY=) 6: B0928A45D014D8D5FAD50314E828086F12B15610.crl (hash: icfJH4PLs/1TX41J4Cdpoo8mQGHVc3wfZm0iYMMKLRQ=) 7: 3230322e3132352e38322e302f32342d3234203d3e20313430343433.roa (hash: svi5IuXnIA+13Wc0eQrV3WQdaOBiVClli1PIWM+ewGc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.crl rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 15:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:1b:38:db:e6:41:6f:f7:8c:de:df:a5:16:46:6a:b0:fe:e1:c8:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0928A45D014D8D5FAD50314E828086F12B15610 Validity Not Before: Aug 21 06:06:15 2025 GMT Not After : Aug 24 15:00:15 2025 GMT Subject: CN=557868627D4140E3215DAB33FD7B0C1AB585BB27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:15:c8:59:f0:70:da:34:16:ff:07:19:1a:fc: b1:f6:24:93:ac:87:f5:8a:ca:fc:de:80:83:25:97: 87:41:e7:3e:d7:fc:35:a7:52:34:d3:be:11:aa:71: 89:28:81:67:f2:91:49:80:65:02:55:11:4b:0a:02: 58:af:c2:5b:c1:cf:f0:b0:6a:d0:20:9c:74:35:8b: f9:f1:ab:4e:34:79:fc:98:96:fb:d7:e7:29:c5:49: ef:67:9b:e1:39:74:f6:20:36:68:ad:f5:7f:00:3c: 8a:c4:af:b7:d9:4c:55:05:55:d6:fc:30:c4:c3:8a: 99:4e:23:67:37:d2:78:3b:ee:9b:a1:c7:f4:83:30: f8:6f:2f:9b:24:1b:f5:3e:8e:77:b2:67:5f:7c:97: db:46:fa:bf:c3:0d:95:51:8d:a9:f5:07:da:b8:a6: 24:4f:41:98:dc:f6:9a:1b:e5:f9:1c:5d:a4:2b:4f: 30:61:6f:1a:87:ad:a8:7c:87:96:d5:cc:d0:c7:5d: af:14:4f:13:58:c7:97:7c:e6:13:6b:a4:13:5d:be: 6f:9c:dc:15:d9:a0:82:63:ea:72:95:f9:6a:56:49: ff:44:46:a0:10:21:b6:fe:2e:e2:88:45:d5:3f:45: bb:ef:0b:e6:0e:e4:08:bc:3c:a6:71:59:96:3f:d8: 4a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:78:68:62:7D:41:40:E3:21:5D:AB:33:FD:7B:0C:1A:B5:85:BB:27 X509v3 Authority Key Identifier: keyid:B0:92:8A:45:D0:14:D8:D5:FA:D5:03:14:E8:28:08:6F:12:B1:56:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:e1:69:5e:28:b2:b3:a3:42:41:08:97:ae:38:56:b3:a7:f6: 3a:fb:08:d9:62:84:9c:44:81:96:56:1f:b1:3c:cf:19:60:b5: 5d:b5:77:26:2b:12:83:08:6d:22:8f:81:a1:86:79:76:5a:4e: 59:c3:e2:cf:3b:1c:ad:d9:08:25:a7:28:e7:0b:0f:82:c0:1b: 4c:8a:2f:f7:ca:5b:87:fe:6a:85:82:81:ea:cc:e1:6e:dc:bf: 28:04:6a:ee:fe:91:14:2e:e4:9d:10:01:59:ca:d7:67:01:5d: 9f:6e:67:fb:83:1f:20:fd:0a:95:ad:44:b2:4c:1b:28:0e:b4: 0c:7f:a8:77:e7:2b:0e:bf:33:2b:a7:f1:6a:ff:2f:11:ae:e3: 27:54:e6:39:77:6c:70:6b:51:6f:b1:3a:86:45:12:dd:e8:40: 06:71:d9:31:a1:99:3a:ef:aa:e9:bb:06:8b:6a:2e:a9:6a:d4: e7:56:61:70:48:c8:d6:f9:85:71:c3:87:dc:19:37:6a:b8:f4: 09:30:c6:87:78:b7:03:74:80:da:b4:ed:00:00:38:a4:62:2c: 5f:0a:c1:56:f9:56:d0:fd:45:da:0a:c0:9d:29:0a:bf:d8:51: cf:65:3c:cf:e5:6f:3b:e4:50:be:2b:62:c6:0e:7e:be:98:40: bd:cd:4f:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBRs42+ZBb/eM3t+lFkZqsP7hyFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4NkYx MkIxNTYxMDAeFw0yNTA4MjEwNjA2MTVaFw0yNTA4MjQxNTAwMTVaMDMxMTAvBgNV BAMTKDU1Nzg2ODYyN0Q0MTQwRTMyMTVEQUIzM0ZEN0IwQzFBQjU4NUJCMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmFchZ8HDaNBb/Bxka/LH2JJOs h/WKyvzegIMll4dB5z7X/DWnUjTTvhGqcYkogWfykUmAZQJVEUsKAlivwlvBz/Cw atAgnHQ1i/nxq040efyYlvvX5ynFSe9nm+E5dPYgNmit9X8APIrEr7fZTFUFVdb8 MMTDiplOI2c30ng77puhx/SDMPhvL5skG/U+jneyZ198l9tG+r/DDZVRjan1B9q4 piRPQZjc9pob5fkcXaQrTzBhbxqHrah8h5bVzNDHXa8UTxNYx5d85hNrpBNdvm+c 3BXZoIJj6nKV+WpWSf9ERqAQIbb+LuKIRdU/RbvvC+YO5Ai8PKZxWZY/2Er9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVXhoYn1BQOMhXasz/XsMGrWFuycwHwYDVR0j BBgwFoAUsJKKRdAU2NX61QMU6CgIbxKxVhAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2QzMjNiZS04MzdkLTQyNDQtODQ2Yy03ZDIzOTNhOWEwMDkvMC9CMDkyOEE0NUQw MTREOEQ1RkFENTAzMTRFODI4MDg2RjEyQjE1NjEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4NkYxMkIx NTYxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NkMzIzYmUtODM3ZC00MjQ0LTg0 NmMtN2QyMzkzYTlhMDA5LzAvQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4 NkYxMkIxNTYxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHnhaV4osrOjQkEIl644VrOn9jr7CNlihJxE gZZWH7E8zxlgtV21dyYrEoMIbSKPgaGGeXZaTlnD4s87HK3ZCCWnKOcLD4LAG0yK L/fKW4f+aoWCgerM4W7cvygEau7+kRQu5J0QAVnK12cBXZ9uZ/uDHyD9CpWtRLJM GygOtAx/qHfnKw6/Myun8Wr/LxGu4ydU5jl3bHBrUW+xOoZFEt3oQAZx2TGhmTrv qum7BotqLqlq1OdWYXBIyNb5hXHDh9wZN2q49Akwxod4twN0gNq07QAAOKRiLF8K wVb5VtD9RdoKwJ0pCr/YUc9lPM/lbzvkUL4rYsYOfr6YQL3NT0Q= -----END CERTIFICATE-----Generated at Sat Aug 23 14:02:44 2025 by rpki-client