$ rpki-client -vvf repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft File: B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft (raw, json) Hash identifier: hJ4ooMboY4AN1pRKOCvJ+rOkjTxKJsQ5Q0oozxyOb4Y= Subject key identifier: 17:18:D7:7F:0E:07:11:D5:19:C6:EB:0E:F4:49:8F:CF:93:42:71:82 Authority key identifier: B0:73:4A:32:D1:3A:96:FC:B3:FD:F9:82:C2:EE:C5:00:15:04:11:CA Certificate issuer: /CN=B0734A32D13A96FCB3FDF982C2EEC500150411CA Certificate serial: 0B8A60133EAA7F6331268A14B226B78CB7D573D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft Manifest number: 020B Signing time: Thu 21 Aug 2025 17:01:14 +0000 Manifest this update: Thu 21 Aug 2025 16:56:14 +0000 Manifest next update: Sun 24 Aug 2025 20:08:14 +0000 Files and hashes: 1: 3130332e3138372e3232362e302f32332d3234203d3e20313439373238.roa (hash: fcX6dDB/6jZr5p1excLhOSLezwfpNz/DNvOt6VHyTLo=) 2: B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl (hash: kmgcatCtf5p/v6mm8+X7GWFCPdLy/NYWaMCyho0W7dE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 20:08:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:8a:60:13:3e:aa:7f:63:31:26:8a:14:b2:26:b7:8c:b7:d5:73:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0734A32D13A96FCB3FDF982C2EEC500150411CA Validity Not Before: Aug 21 16:56:14 2025 GMT Not After : Aug 24 20:08:14 2025 GMT Subject: CN=1718D77F0E0711D519C6EB0EF4498FCF93427182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:45:62:ba:87:3d:50:b0:01:42:a6:4b:81:0a: 4e:70:29:dd:d2:99:8c:c9:f7:05:6e:e2:4c:3d:14: e8:ec:11:cd:1b:fe:1f:83:2d:b2:b5:93:b1:af:83: 88:e7:e8:8c:bd:99:4b:ea:eb:ba:4f:75:1a:eb:ec: d6:8c:71:b1:36:2f:e6:53:13:dd:17:d4:50:17:be: 5a:27:78:ab:fb:08:71:a0:3f:c7:8d:aa:2b:19:8b: 91:14:a7:a0:82:99:9b:0f:b3:e9:32:01:a7:f2:e1: a4:be:11:e9:e1:7c:48:5a:8d:88:9e:97:28:db:79: a7:9b:98:eb:29:ff:62:1e:d3:2e:37:94:54:bb:22: e8:af:bf:bf:63:eb:13:e2:35:31:c1:aa:c2:67:dc: fd:df:4e:03:c0:cd:89:d9:fb:31:19:43:a0:c0:9e: 00:82:7a:91:d0:0b:17:69:dd:e4:da:84:dc:60:40: 4f:d3:4c:4f:9c:e6:5c:cd:db:46:fb:e7:69:c6:92: 9f:39:77:91:18:4c:be:28:1b:d7:e9:27:28:33:19: 48:5c:17:00:30:f9:3a:2c:4d:f1:80:62:5d:07:63: 67:ac:03:6c:b9:10:26:63:c7:c4:b8:bd:b8:8c:3e: ca:f5:84:76:a6:b8:7e:f0:ea:15:ba:8a:35:57:75: 92:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:18:D7:7F:0E:07:11:D5:19:C6:EB:0E:F4:49:8F:CF:93:42:71:82 X509v3 Authority Key Identifier: keyid:B0:73:4A:32:D1:3A:96:FC:B3:FD:F9:82:C2:EE:C5:00:15:04:11:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:4d:52:80:35:0d:bb:e9:59:2c:d4:b3:eb:77:e8:bc:e4:94: 3e:65:df:33:5b:70:4a:7a:46:26:0e:5d:51:77:f4:3a:cb:2e: a2:c9:37:c5:d4:e1:8f:56:15:d2:2a:5b:4f:ef:fd:67:6e:ca: e7:38:0a:d9:4c:20:51:41:f5:66:df:d4:56:7f:28:e3:f0:26: 3b:c8:eb:77:50:95:ec:d0:05:d5:fe:a8:48:e7:d2:fb:47:21: ef:ff:c8:b7:f4:17:27:e4:85:db:68:38:a5:bb:c7:26:72:88: 98:ba:d4:70:6c:fe:41:d5:c6:59:96:de:95:0e:e8:eb:c5:48: af:95:95:c4:9a:db:3b:64:b9:09:05:b2:3b:ce:76:ab:a1:45: 5c:44:76:2b:78:b3:50:4b:49:97:fe:5d:41:a5:42:12:d6:f3: 5c:08:33:ba:1c:15:84:9c:f4:e6:3f:51:24:94:d1:cc:6a:2d: ba:fd:e3:88:f9:89:7b:f3:f2:df:fa:e0:2d:81:e6:27:5d:6d: 33:ef:ab:e0:68:c3:c1:a2:3c:72:7e:57:3e:c6:23:0e:08:40: 29:f5:75:5e:31:da:6b:bf:ba:48:3c:d7:38:39:f9:f4:94:c6: d8:69:91:81:be:c7:4c:3e:2c:9b:c5:44:37:54:8b:dd:3d:f8: e5:f4:f7:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC4pgEz6qf2MxJooUsia3jLfVc9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1MDAx NTA0MTFDQTAeFw0yNTA4MjExNjU2MTRaFw0yNTA4MjQyMDA4MTRaMDMxMTAvBgNV BAMTKDE3MThENzdGMEUwNzExRDUxOUM2RUIwRUY0NDk4RkNGOTM0MjcxODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBRWK6hz1QsAFCpkuBCk5wKd3S mYzJ9wVu4kw9FOjsEc0b/h+DLbK1k7Gvg4jn6Iy9mUvq67pPdRrr7NaMcbE2L+ZT E90X1FAXvloneKv7CHGgP8eNqisZi5EUp6CCmZsPs+kyAafy4aS+EenhfEhajYie lyjbeaebmOsp/2Ie0y43lFS7Iuivv79j6xPiNTHBqsJn3P3fTgPAzYnZ+zEZQ6DA ngCCepHQCxdp3eTahNxgQE/TTE+c5lzN20b752nGkp85d5EYTL4oG9fpJygzGUhc FwAw+TosTfGAYl0HY2esA2y5ECZjx8S4vbiMPsr1hHamuH7w6hW6ijVXdZLtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFxjXfw4HEdUZxusO9EmPz5NCcYIwHwYDVR0j BBgwFoAUsHNKMtE6lvyz/fmCwu7FABUEEcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjMwOTdmMC0zOTc4LTQ5Y2UtYjY5Yy00YjIwYjRkY2ZiN2UvMC9CMDczNEEzMkQx M0E5NkZDQjNGREY5ODJDMkVFQzUwMDE1MDQxMUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1MDAxNTA0 MTFDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzMDk3ZjAtMzk3OC00OWNlLWI2 OWMtNGIyMGI0ZGNmYjdlLzAvQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1 MDAxNTA0MTFDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZNUoA1DbvpWSzUs+t36LzklD5l3zNbcEp6 RiYOXVF39DrLLqLJN8XU4Y9WFdIqW0/v/Wduyuc4CtlMIFFB9Wbf1FZ/KOPwJjvI 63dQlezQBdX+qEjn0vtHIe//yLf0FyfkhdtoOKW7xyZyiJi61HBs/kHVxlmW3pUO 6OvFSK+VlcSa2ztkuQkFsjvOdquhRVxEdit4s1BLSZf+XUGlQhLW81wIM7ocFYSc 9OY/USSU0cxqLbr944j5iXvz8t/64C2B5iddbTPvq+Bow8GiPHJ+Vz7GIw4IQCn1 dV4x2mu/ukg81zg5+fSUxthpkYG+x0w+LJvFRDdUi909+OX09/k= -----END CERTIFICATE-----Generated at Sat Aug 23 14:14:53 2025 by rpki-client