$ rpki-client -vvf repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft File: B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft (raw, json) Hash identifier: bQwz9PQwepgzIOYaFtqbfpzS5ctS7+nddzDSXTQAdlk= Subject key identifier: 32:72:03:8C:46:9A:37:3F:DF:0B:F5:29:2A:DA:94:95:AD:98:A3:CD Authority key identifier: B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4 Certificate issuer: /CN=B877CD1C542C3DE2CBB8EF151F179B857E9376E4 Certificate serial: 0B537C35DF49DE52BAC2FA8F66ACB9FB788B9453 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft Manifest number: 017B Signing time: Thu 21 Aug 2025 21:32:17 +0000 Manifest this update: Thu 21 Aug 2025 21:27:17 +0000 Manifest next update: Mon 25 Aug 2025 02:08:17 +0000 Files and hashes: 1: B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl (hash: pYSIN+nNRKQxo5kyOaNJR/JjWY8mzC5rR3mgHHR0uyk=) 2: 3136302e32302e3232322e302f32342d3234203d3e20313338303737.roa (hash: Khtj9hE0U7S7GxsTQLAztRkAFMW84uHyWmMZ0EjXpnw=) 3: 3130332e3133302e3139382e302f32332d3234203d3e20313338303737.roa (hash: Mwvu/CaE5deApG/isN7cjUZhnbfHoZ3qdsbJEM4tty0=) 4: 3131372e3130332e3131362e302f32342d3234203d3e20313339333838.roa (hash: SSiq3G+RuqOFkkVg6s948sz9LneDSoc/8S7pdjqZm9U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 02:08:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:53:7c:35:df:49:de:52:ba:c2:fa:8f:66:ac:b9:fb:78:8b:94:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B877CD1C542C3DE2CBB8EF151F179B857E9376E4 Validity Not Before: Aug 21 21:27:17 2025 GMT Not After : Aug 25 02:08:17 2025 GMT Subject: CN=3272038C469A373FDF0BF5292ADA9495AD98A3CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dc:fb:0c:1a:9f:d7:dc:dd:09:85:8e:86:cd: 91:38:fd:92:36:53:28:16:71:f7:bd:78:91:71:87: fa:f7:ad:f0:4f:88:63:f5:c4:af:5a:da:49:d9:27: 70:70:be:5b:ff:32:00:80:ce:5d:b4:66:81:f7:98: f3:1d:81:f9:6c:d5:3d:99:a7:c9:ff:6e:09:94:4f: c7:81:de:f4:b7:67:f2:c3:dc:14:ef:4e:2a:e0:b5: 8a:f4:38:b0:43:76:98:10:89:8f:af:e2:cd:de:b2: ae:c9:b4:73:75:77:f9:07:6a:d3:7c:d2:66:0d:77: 7c:ed:58:64:d3:45:ed:be:7d:f5:b4:2e:8b:0b:c0: f6:18:87:56:ca:55:9d:89:ac:e1:47:63:51:40:01: 29:4a:9e:bf:bb:f4:06:13:70:2c:9e:85:81:24:8c: c8:79:56:d8:28:34:c3:4e:28:64:83:b2:81:07:4c: b5:f1:f4:33:50:3b:5d:34:e0:87:86:ce:2f:d3:ec: 19:fc:cf:7f:53:45:bc:cd:38:d4:f6:03:1c:f8:c9: 55:0f:02:99:e0:74:f7:17:81:a0:d6:91:38:93:18: 7f:ce:a9:50:3d:34:77:e6:c0:6e:b9:a0:f6:82:73: c5:ea:36:4f:ac:14:d9:75:cc:fa:25:b3:9b:82:ec: e4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:72:03:8C:46:9A:37:3F:DF:0B:F5:29:2A:DA:94:95:AD:98:A3:CD X509v3 Authority Key Identifier: keyid:B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:0e:74:d3:6f:05:9e:7b:08:5d:f9:46:62:22:e6:c4:90:96: ee:00:f4:61:94:82:43:9e:8e:87:94:fc:8d:34:25:38:91:4d: 91:da:09:1e:10:da:f1:cf:f7:fb:18:a3:0f:65:6c:f9:e5:62: 9f:68:68:9b:ac:96:d8:7d:06:f7:69:f4:26:42:15:61:dd:6b: 8d:ef:0e:b3:ee:d6:5e:8c:b3:37:74:16:39:ff:e4:f1:15:ce: 5a:d7:ca:6b:a4:7e:87:e5:e5:83:03:9d:65:09:70:89:9b:8c: 63:ca:58:c2:57:e3:7e:ff:4a:1b:be:98:b2:21:7a:bb:15:e8: 01:76:ce:a8:30:99:c5:e8:c1:02:e5:61:e6:95:8a:53:9f:40: 08:30:4d:e8:22:c3:42:21:e0:52:cc:51:31:f8:12:9a:a7:49: 50:a0:0a:84:fb:e8:11:c1:32:1c:fc:ba:d6:ba:fc:30:3d:ee: f9:3d:0a:8e:e1:b8:50:0d:16:eb:77:d4:3b:e1:4d:1d:84:1b: e2:ff:48:ff:6a:01:99:a5:a2:ba:03:1a:7e:71:2d:eb:cf:bd: 92:e2:50:7a:46:90:02:e8:f4:d2:dc:e1:97:72:8c:74:86:f1: 4d:8c:2e:c9:e4:6f:7b:83:96:ba:f5:9e:54:24:a4:d7:f7:c3: ff:a2:2b:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC1N8Nd9J3lK6wvqPZqy5+3iLlFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg3N0NEMUM1NDJDM0RFMkNCQjhFRjE1MUYxNzlCODU3 RTkzNzZFNDAeFw0yNTA4MjEyMTI3MTdaFw0yNTA4MjUwMjA4MTdaMDMxMTAvBgNV BAMTKDMyNzIwMzhDNDY5QTM3M0ZERjBCRjUyOTJBREE5NDk1QUQ5OEEzQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE3PsMGp/X3N0JhY6GzZE4/ZI2 UygWcfe9eJFxh/r3rfBPiGP1xK9a2knZJ3Bwvlv/MgCAzl20ZoH3mPMdgfls1T2Z p8n/bgmUT8eB3vS3Z/LD3BTvTirgtYr0OLBDdpgQiY+v4s3esq7JtHN1d/kHatN8 0mYNd3ztWGTTRe2+ffW0LosLwPYYh1bKVZ2JrOFHY1FAASlKnr+79AYTcCyehYEk jMh5VtgoNMNOKGSDsoEHTLXx9DNQO1004IeGzi/T7Bn8z39TRbzNONT2Axz4yVUP ApngdPcXgaDWkTiTGH/OqVA9NHfmwG65oPaCc8XqNk+sFNl1zPols5uC7OSZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMnIDjEaaNz/fC/UpKtqUla2Yo80wHwYDVR0j BBgwFoAUuHfNHFQsPeLLuO8VHxebhX6TduQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjZkMTg1ZS1kNGY0LTQ4MjAtYjRiNi03OThjMzA3YWQ3ZTUvMC9CODc3Q0QxQzU0 MkMzREUyQ0JCOEVGMTUxRjE3OUI4NTdFOTM3NkU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg3N0NEMUM1NDJDM0RFMkNCQjhFRjE1MUYxNzlCODU3RTkz NzZFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWY2ZDE4NWUtZDRmNC00ODIwLWI0 YjYtNzk4YzMwN2FkN2U1LzAvQjg3N0NEMUM1NDJDM0RFMkNCQjhFRjE1MUYxNzlC ODU3RTkzNzZFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQOdNNvBZ57CF35RmIi5sSQlu4A9GGUgkOe joeU/I00JTiRTZHaCR4Q2vHP9/sYow9lbPnlYp9oaJuslth9Bvdp9CZCFWHda43v DrPu1l6Mszd0Fjn/5PEVzlrXymukfofl5YMDnWUJcImbjGPKWMJX437/Shu+mLIh ersV6AF2zqgwmcXowQLlYeaVilOfQAgwTegiw0Ih4FLMUTH4EpqnSVCgCoT76BHB Mhz8uta6/DA97vk9Co7huFANFut31DvhTR2EG+L/SP9qAZmloroDGn5xLevPvZLi UHpGkALo9NLc4ZdyjHSG8U2MLsnkb3uDlrr1nlQkpNf3w/+iKwQ= -----END CERTIFICATE-----Generated at Sat Aug 23 12:15:17 2025 by rpki-client