$ rpki-client -vvf repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft File: B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft (raw, json) Hash identifier: YRnlaTWDN+3T5dMgfoMeaDz9YpoEBRbNJ8IXC6Qgp+g= Subject key identifier: D0:D4:5A:B8:81:27:DB:7B:63:B7:6E:32:59:BC:76:B0:09:F3:BC:93 Authority key identifier: B2:07:7B:9B:AF:0B:F3:E5:FC:B8:45:13:B1:D7:44:5E:30:CE:65:82 Certificate issuer: /CN=B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582 Certificate serial: 6E965715FC6CBB7EFE2CE166BE8DE1BBAAF7BE0C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft Manifest number: 0474 Signing time: Thu 21 Aug 2025 09:32:05 +0000 Manifest this update: Thu 21 Aug 2025 09:27:05 +0000 Manifest next update: Sun 24 Aug 2025 16:53:05 +0000 Files and hashes: 1: B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl (hash: Dlu3AV8hYM37gDyL1rjNuQ2YZQmKK9WHyOc/NMX0XE8=) 2: 3130332e3135372e362e302f32342d3234203d3e20313431313036.roa (hash: /7z2+JC7qoPzUqAK7WiZ8hM8Bf1dEmgOqji6pvEw+hI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 16:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:96:57:15:fc:6c:bb:7e:fe:2c:e1:66:be:8d:e1:bb:aa:f7:be:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582 Validity Not Before: Aug 21 09:27:05 2025 GMT Not After : Aug 24 16:53:05 2025 GMT Subject: CN=D0D45AB88127DB7B63B76E3259BC76B009F3BC93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:35:78:66:ad:29:d8:4c:ce:f4:48:f1:8e:42: d4:55:12:b3:21:06:77:8c:b0:b2:80:b7:4f:8a:a4: cb:b8:94:a4:f1:ee:5f:03:08:af:af:d3:29:f1:43: bf:ca:48:c3:bc:dc:ab:87:ba:41:30:de:a8:fe:05: d7:e7:57:a0:66:20:df:e5:93:a5:b3:92:7d:80:37: b2:9e:16:41:0e:2e:81:aa:16:bd:58:e2:40:77:47: 83:85:19:50:1e:24:c6:ae:0a:dc:83:ff:7c:14:6c: 45:b2:20:24:de:d0:94:e6:a8:fa:20:a0:d0:f5:80: bd:8b:fd:ff:16:85:3b:65:2d:a9:35:b3:7e:5b:64: 85:f0:7b:11:31:6c:d0:e2:06:57:de:ad:11:2b:47: ce:57:f5:33:5a:f6:93:b0:b8:a0:b7:33:08:93:97: d3:31:7e:4e:94:df:94:5e:b7:78:d8:9b:bf:1a:8b: 0d:b7:cc:e3:e3:68:80:2b:05:3d:37:0f:0d:d9:7f: f8:7f:6a:43:5c:a4:c4:b0:74:3b:cf:65:94:6e:01: b9:1a:01:c6:0f:db:4f:ca:27:1d:f0:2e:3c:c3:b5: 11:68:32:27:71:2f:55:ed:68:41:56:15:05:34:5d: 18:62:b6:3f:81:01:01:2d:9b:a8:69:3a:be:69:2e: f6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D4:5A:B8:81:27:DB:7B:63:B7:6E:32:59:BC:76:B0:09:F3:BC:93 X509v3 Authority Key Identifier: keyid:B2:07:7B:9B:AF:0B:F3:E5:FC:B8:45:13:B1:D7:44:5E:30:CE:65:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption eb:34:8e:9f:11:25:6f:f2:17:9c:0d:61:e1:90:09:5d:e5:62: 12:ef:40:1a:0e:c1:45:3a:05:c1:68:02:d5:cc:5c:70:ef:c2: 2f:1b:23:17:eb:6b:9c:eb:79:45:ff:d2:35:5c:43:50:10:9f: 22:71:67:ae:9e:e9:7c:de:08:70:43:ab:52:12:1a:fd:f2:46: ae:2a:ff:fd:b9:36:e8:c5:56:0f:59:a1:3d:da:a3:6d:3f:22: 20:c5:72:7c:38:98:6f:bf:72:47:04:19:e0:34:00:9f:8d:64: 74:0e:5e:95:c6:73:f7:7a:a0:74:f5:63:9d:84:df:ef:98:3d: 2c:b6:26:bc:18:d3:cf:9f:a5:99:23:8f:11:9d:2c:04:e1:7c: ac:ba:77:d6:b0:66:e3:76:90:2f:22:2e:45:eb:af:5d:30:e3: b0:80:8c:d0:1c:e7:e3:c7:29:49:d6:75:e2:e2:ca:ea:fa:df: 89:2d:3d:d9:c7:2f:88:f7:4a:0e:30:0a:c2:d7:42:ee:66:bc: 41:e1:2b:02:f5:01:d6:cb:9a:bf:77:28:e1:20:c5:ed:18:dc: fd:df:de:67:ef:ae:b8:d1:0a:e8:26:fe:21:77:cd:ea:c9:a9: d9:73:3b:5f:c6:a8:ab:b3:f3:1c:4b:37:98:32:ae:3b:4b:6a: e0:1c:b3:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbpZXFfxsu37+LOFmvo3hu6r3vgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0NUUz MENFNjU4MjAeFw0yNTA4MjEwOTI3MDVaFw0yNTA4MjQxNjUzMDVaMDMxMTAvBgNV BAMTKEQwRDQ1QUI4ODEyN0RCN0I2M0I3NkUzMjU5QkM3NkIwMDlGM0JDOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpNXhmrSnYTM70SPGOQtRVErMh BneMsLKAt0+KpMu4lKTx7l8DCK+v0ynxQ7/KSMO83KuHukEw3qj+BdfnV6BmIN/l k6Wzkn2AN7KeFkEOLoGqFr1Y4kB3R4OFGVAeJMauCtyD/3wUbEWyICTe0JTmqPog oND1gL2L/f8WhTtlLak1s35bZIXwexExbNDiBlferRErR85X9TNa9pOwuKC3MwiT l9Mxfk6U35Ret3jYm78aiw23zOPjaIArBT03Dw3Zf/h/akNcpMSwdDvPZZRuAbka AcYP20/KJx3wLjzDtRFoMidxL1XtaEFWFQU0XRhitj+BAQEtm6hpOr5pLvYHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0NRauIEn23tjt24yWbx2sAnzvJMwHwYDVR0j BBgwFoAUsgd7m68L8+X8uEUTsddEXjDOZYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWRkNGYxNi01NzBlLTRjOGMtYTk5Mi1kYjg5ZWEzYmFkMzYvMC9CMjA3N0I5QkFG MEJGM0U1RkNCODQ1MTNCMUQ3NDQ1RTMwQ0U2NTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0NUUzMENF NjU4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVkZDRmMTYtNTcwZS00YzhjLWE5 OTItZGI4OWVhM2JhZDM2LzAvQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0 NUUzMENFNjU4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOs0jp8RJW/yF5wNYeGQCV3lYhLvQBoOwUU6 BcFoAtXMXHDvwi8bIxfra5zreUX/0jVcQ1AQnyJxZ66e6XzeCHBDq1ISGv3yRq4q //25NujFVg9ZoT3ao20/IiDFcnw4mG+/ckcEGeA0AJ+NZHQOXpXGc/d6oHT1Y52E 3++YPSy2JrwY08+fpZkjjxGdLAThfKy6d9awZuN2kC8iLkXrr10w47CAjNAc5+PH KUnWdeLiyur634ktPdnHL4j3Sg4wCsLXQu5mvEHhKwL1AdbLmr93KOEgxe0Y3P3f 3mfvrrjRCugm/iF3zerJqdlzO1/GqKuz8xxLN5gyrjtLauAcsyM= -----END CERTIFICATE-----Generated at Sat Aug 23 15:23:22 2025 by rpki-client