$ rpki-client -vvf repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft File: B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft (raw, json) Hash identifier: oFicCtab+Qg+Lstke61wYdlIJKsFXB2KfyG2DI2CgFw= Subject key identifier: DC:C5:E5:B6:F3:FA:5A:EF:97:86:9B:C0:65:C4:2A:35:0A:D0:49:DB Authority key identifier: B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16 Certificate issuer: /CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416 Certificate serial: 5A45AF4EEBE18BC518219E55A7A3EA07CFCB98B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft Manifest number: 020F Signing time: Thu 21 Aug 2025 14:20:49 +0000 Manifest this update: Thu 21 Aug 2025 14:15:49 +0000 Manifest next update: Sun 24 Aug 2025 17:42:49 +0000 Files and hashes: 1: B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl (hash: XV+LnYPIwBiOYJNyw1mNCQqJpQjyRmXdLu1SNSy/KiI=) 2: 3130332e36382e3133372e302f32342d3234203d3e20313335343535.roa (hash: B/Oe9y1prQPdwN9dHWS523CLyIs4euOM6VNMTv5PS6I=) 3: 3130332e36382e3133362e302f32342d3234203d3e203338353131.roa (hash: /3OF733rpM3jdRT3EkKeOCDNT6qwcGILSfVrlznc0RM=) 4: 323030313a6466333a313230303a3a2f34382d3438203d3e20313335343535.roa (hash: PbwEzJXRFcDlg8qq7i8GVSnaGAPkcyZUmZy35AgEFf0=) 5: 3130332e36382e3133362e302f32332d3234203d3e20313335343535.roa (hash: 3shwJ2AKcESaufbVwJ1tBPOkyd6LqDrGvkFRzpot0c8=) 6: 3130332e36382e3133362e302f32332d3233203d3e203338353131.roa (hash: YKEJ6xXEXwkPYNOCuZQFtX9Ji/2UDJQxeQnbNUcl++Q=) 7: 3130332e36382e3133372e302f32342d3234203d3e203338353131.roa (hash: JVkCLbeZDJdwzZ2v3iR22hauCUbtGIEz6OcbZ/e1uz8=) 8: 3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa (hash: Vqh39P+3nWLH6GpYM+8FhU68z1hzASxU3wAlgsuT274=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:42:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:45:af:4e:eb:e1:8b:c5:18:21:9e:55:a7:a3:ea:07:cf:cb:98:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416 Validity Not Before: Aug 21 14:15:49 2025 GMT Not After : Aug 24 17:42:49 2025 GMT Subject: CN=DCC5E5B6F3FA5AEF97869BC065C42A350AD049DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f8:38:8b:c0:af:a2:50:76:bd:d4:31:a0:8c: 4f:53:12:5b:3e:d5:cf:41:ef:fd:4f:62:13:85:fd: 04:99:19:94:bf:08:b9:61:db:a5:f9:cd:a0:78:09: a5:1f:2d:c5:c3:cf:ae:94:45:a9:ac:0b:aa:5b:cb: 31:9f:04:a0:95:e6:28:a7:b7:61:e3:a5:aa:14:ec: b6:94:3b:8b:fd:46:14:b9:27:55:38:ed:3f:db:c8: e8:f1:93:94:8b:ab:7f:8e:81:4e:02:00:65:9e:9d: 8a:2a:0a:6a:f3:2c:7a:82:45:be:2d:d3:f5:c6:47: 8e:17:4e:51:37:2f:1b:54:4e:b7:38:26:1d:89:c3: 9d:90:9e:5d:3e:b6:c1:3f:9d:67:07:16:33:00:b5: 7d:ee:82:6a:44:84:d8:5e:25:f0:95:43:a6:67:cb: ec:cc:87:45:ad:91:4e:79:76:3e:0c:87:44:07:8d: 91:c3:f1:fe:e5:f2:ed:b6:24:9f:26:a0:e8:c1:38: 93:45:e3:eb:b5:a8:00:d2:b6:1f:5c:98:97:42:f8: cb:92:d8:5a:33:0d:db:67:60:6c:bb:37:ae:1f:26: 25:1a:a5:18:9e:95:0e:ff:cf:f5:4b:72:ad:3c:3b: 62:0a:2e:6c:4a:b6:94:fb:0a:09:3b:23:42:9e:bc: 8d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C5:E5:B6:F3:FA:5A:EF:97:86:9B:C0:65:C4:2A:35:0A:D0:49:DB X509v3 Authority Key Identifier: keyid:B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:35:e9:14:5d:62:7a:75:d7:ee:23:2a:54:e1:31:20:c4:4a: ef:ec:87:af:fe:12:6d:1f:12:ec:0a:ff:f1:d7:c7:36:49:1a: c4:95:b8:60:ea:8a:b6:49:e6:d1:90:30:d2:5e:3d:c2:3d:16: 8f:47:59:d0:f0:ee:a8:27:9c:18:68:15:f5:69:9d:f4:a6:08: 58:32:d7:0b:75:d8:0b:70:15:d3:ee:9b:e4:06:f3:71:dc:d4: 9a:9b:eb:57:1e:b3:14:4c:c0:39:54:cd:67:18:4b:6f:91:a5: a6:41:d5:c2:88:78:93:65:c8:7f:e0:de:48:7b:d7:5e:87:9c: b1:7c:ba:62:18:5d:83:a9:32:6d:b2:5e:b8:11:c0:a5:77:89: 19:45:cf:ea:d1:f6:75:fe:2d:82:f4:68:b0:3c:b8:ca:5c:9a: c4:79:49:e5:85:be:84:1e:34:78:dc:e1:96:d3:b6:fa:32:f9: 82:e0:78:29:ab:dc:67:5a:6a:69:9f:9a:89:a0:0b:cf:0e:ad: 6e:c8:6a:34:8d:3a:58:b7:2d:b5:1e:ff:7f:aa:ac:e9:46:98: 73:12:dd:73:8a:b2:e2:6d:92:0a:8b:ea:60:3e:e3:a7:ae:8a: a9:f8:6c:e8:a8:d8:a1:e2:26:75:57:45:a1:ff:84:f5:3c:97: 45:87:b4:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWkWvTuvhi8UYIZ5Vp6PqB8/LmLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJDMThFMTFDODUzMEJERjRFRTMzM0Y1REVCRDBCMDU1 RjlEQTQxNjAeFw0yNTA4MjExNDE1NDlaFw0yNTA4MjQxNzQyNDlaMDMxMTAvBgNV BAMTKERDQzVFNUI2RjNGQTVBRUY5Nzg2OUJDMDY1QzQyQTM1MEFEMDQ5REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX+DiLwK+iUHa91DGgjE9TEls+ 1c9B7/1PYhOF/QSZGZS/CLlh26X5zaB4CaUfLcXDz66URamsC6pbyzGfBKCV5iin t2HjpaoU7LaUO4v9RhS5J1U47T/byOjxk5SLq3+OgU4CAGWenYoqCmrzLHqCRb4t 0/XGR44XTlE3LxtUTrc4Jh2Jw52Qnl0+tsE/nWcHFjMAtX3ugmpEhNheJfCVQ6Zn y+zMh0WtkU55dj4Mh0QHjZHD8f7l8u22JJ8moOjBOJNF4+u1qADSth9cmJdC+MuS 2FozDdtnYGy7N64fJiUapRielQ7/z/VLcq08O2IKLmxKtpT7Cgk7I0KevI1fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3MXltvP6Wu+XhpvAZcQqNQrQSdswHwYDVR0j BBgwFoAUssGOEchTC99O4zP13r0LBV+dpBYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 M2RjMWIwNS0yYTY5LTQ1YjAtOGM0NC02MjY3NzIyNzZiZDkvMC9CMkMxOEUxMUM4 NTMwQkRGNEVFMzMzRjVERUJEMEIwNTVGOURBNDE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJDMThFMTFDODUzMEJERjRFRTMzM0Y1REVCRDBCMDU1RjlE QTQxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTNkYzFiMDUtMmE2OS00NWIwLThj NDQtNjI2NzcyMjc2YmQ5LzAvQjJDMThFMTFDODUzMEJERjRFRTMzM0Y1REVCRDBC MDU1RjlEQTQxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFs16RRdYnp11+4jKlThMSDESu/sh6/+Em0f EuwK//HXxzZJGsSVuGDqirZJ5tGQMNJePcI9Fo9HWdDw7qgnnBhoFfVpnfSmCFgy 1wt12AtwFdPum+QG83Hc1Jqb61cesxRMwDlUzWcYS2+RpaZB1cKIeJNlyH/g3kh7 116HnLF8umIYXYOpMm2yXrgRwKV3iRlFz+rR9nX+LYL0aLA8uMpcmsR5SeWFvoQe NHjc4ZbTtvoy+YLgeCmr3GdaammfmomgC88OrW7IajSNOli3LbUe/3+qrOlGmHMS 3XOKsuJtkgqL6mA+46euiqn4bOio2KHiJnVXRaH/hPU8l0WHtFA= -----END CERTIFICATE-----Generated at Sat Aug 23 18:41:36 2025 by rpki-client