$ rpki-client -vvf repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft File: B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft (raw, json) Hash identifier: UkhDcQZtRGIAs/ZhfgLSqW15cBymnICsfSXIO+keDHg= Subject key identifier: 92:EE:91:91:01:25:85:36:D2:91:BB:52:18:C5:A7:57:D0:82:54:86 Authority key identifier: B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7 Certificate issuer: /CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7 Certificate serial: 34ADCD18B2810E94F8999671AC3B916FD9250100 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft Manifest number: 0173 Signing time: Sat 28 Jun 2025 01:30:36 +0000 Manifest this update: Sat 28 Jun 2025 01:25:36 +0000 Manifest next update: Tue 01 Jul 2025 09:30:36 +0000 Files and hashes: 1: B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl (hash: GJrH/3B+AaRwPLEOv+Rsc/CXAgiOxSsCU1ioe51ZJ7A=) 2: 3130332e3230392e3133312e302f32342d3234203d3e20313333333535.roa (hash: j+U4AErtYzwumrbJ7yEuFWr2i7wA+4c75xZyRtRhbQ4=) 3: 3130332e3138352e3139372e302f32342d3234203d3e20313333333535.roa (hash: PjJ5xaEmVECnvYiFxtFmdeDestY/+54rJNs+3F7mqcY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 09:30:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:ad:cd:18:b2:81:0e:94:f8:99:96:71:ac:3b:91:6f:d9:25:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7 Validity Not Before: Jun 28 01:25:36 2025 GMT Not After : Jul 1 09:30:36 2025 GMT Subject: CN=92EE919101258536D291BB5218C5A757D0825486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d0:47:93:73:7d:55:04:66:85:64:ae:23:4f: 5f:ac:a6:1b:6f:42:21:46:8f:86:93:93:23:e9:ce: d7:42:01:e9:fa:ba:75:f8:e8:cb:a7:24:e2:a3:ad: fa:fc:8c:36:cc:d2:2d:23:0a:6b:52:48:17:32:a9: 3c:4f:a3:92:af:99:e7:8f:ca:5a:11:14:cf:af:5f: e4:43:00:69:61:cf:fd:64:17:87:34:77:cf:1a:11: 62:46:58:66:25:6c:a6:28:14:05:1b:62:42:80:06: c7:a0:e1:2f:17:b4:60:53:ab:96:4c:9b:c1:a0:0d: 11:e0:b9:71:85:1d:0d:b0:70:60:f5:0f:98:f7:de: 70:ed:3a:09:93:60:a9:b4:51:e8:6f:a7:4c:60:5a: 4a:9a:69:ca:12:6a:1e:1c:8f:2c:06:8a:47:8d:61: 93:b0:76:0c:48:5f:63:68:bd:d6:02:29:a5:d1:a8: 80:73:41:18:8d:3e:07:3b:ee:63:51:bc:0b:59:a3: 6d:a9:1d:f0:2f:ec:a6:b3:fb:0a:01:40:e6:1d:02: 89:b9:cf:4a:a8:be:6f:60:4d:51:a1:29:21:f0:da: 83:b1:1b:7a:f3:c3:1a:52:e1:9b:a6:6d:04:54:83: cc:72:c5:d4:7b:b6:91:b2:1b:4d:1e:c4:f2:6b:f0: a0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:EE:91:91:01:25:85:36:D2:91:BB:52:18:C5:A7:57:D0:82:54:86 X509v3 Authority Key Identifier: keyid:B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:9e:1b:07:49:0c:8c:30:74:8f:8b:d3:58:c4:d7:11:3d:86: bf:aa:aa:6d:4f:37:71:c5:e8:c4:4d:26:59:6b:71:19:1d:af: 49:c8:de:d3:03:ae:84:13:94:ca:47:fe:04:bf:6e:ce:8e:2c: 5e:14:d5:43:74:0b:9c:ed:cf:84:39:53:fd:03:05:88:28:e0: 02:04:92:62:82:c2:bf:b0:da:ce:07:ec:93:68:f6:29:a4:4e: 66:1f:57:76:32:ac:aa:e6:9b:14:d5:6d:40:67:48:b2:32:76: b1:83:b0:24:98:b9:b4:4b:55:1b:87:0f:ca:b6:95:3b:b6:a0: ad:96:39:d9:a1:b1:bd:c4:e5:74:2b:c4:f1:35:64:94:66:fa: 21:56:64:72:6c:d9:cd:06:e8:5e:ed:f0:6a:6c:24:cd:61:94: c6:b7:46:47:03:f1:91:af:9c:0a:9d:8d:d8:f3:c6:d4:43:e5: 45:c3:f8:a1:e0:b3:b5:ca:4d:59:a8:77:4a:4e:aa:c1:7b:6a: ac:e3:80:f6:17:ea:8d:bd:96:c1:e4:c3:32:d3:93:8d:1b:81: f7:26:eb:6a:8b:f3:17:ee:29:92:20:72:6f:6d:73:6f:25:71: dd:04:fa:be:1b:27:4d:00:e6:33:20:d3:e6:06:63:78:47:e0: 2f:eb:c7:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNK3NGLKBDpT4mZZxrDuRb9klAQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYwQUYz QTgxRkZGNzAeFw0yNTA2MjgwMTI1MzZaFw0yNTA3MDEwOTMwMzZaMDMxMTAvBgNV BAMTKDkyRUU5MTkxMDEyNTg1MzZEMjkxQkI1MjE4QzVBNzU3RDA4MjU0ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC30EeTc31VBGaFZK4jT1+sphtv QiFGj4aTkyPpztdCAen6unX46MunJOKjrfr8jDbM0i0jCmtSSBcyqTxPo5KvmeeP yloRFM+vX+RDAGlhz/1kF4c0d88aEWJGWGYlbKYoFAUbYkKABseg4S8XtGBTq5ZM m8GgDRHguXGFHQ2wcGD1D5j33nDtOgmTYKm0Uehvp0xgWkqaacoSah4cjywGikeN YZOwdgxIX2NovdYCKaXRqIBzQRiNPgc77mNRvAtZo22pHfAv7Kaz+woBQOYdAom5 z0qovm9gTVGhKSHw2oOxG3rzwxpS4ZumbQRUg8xyxdR7tpGyG00exPJr8KA3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUku6RkQElhTbSkbtSGMWnV9CCVIYwHwYDVR0j BBgwFoAUub62DNYiTUHzM6B+GCDwrzqB//cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MWY4N2Y1YS1mNmY5LTQ2OGQtODk1ZS0zMTQ0ODdmNWUyNWUvMC9COUJFQjYwQ0Q2 MjI0RDQxRjMzM0EwN0UxODIwRjBBRjNBODFGRkY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYwQUYzQTgx RkZGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjFmODdmNWEtZjZmOS00NjhkLTg5 NWUtMzE0NDg3ZjVlMjVlLzAvQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYw QUYzQTgxRkZGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWeGwdJDIwwdI+L01jE1xE9hr+qqm1PN3HF 6MRNJllrcRkdr0nI3tMDroQTlMpH/gS/bs6OLF4U1UN0C5ztz4Q5U/0DBYgo4AIE kmKCwr+w2s4H7JNo9imkTmYfV3YyrKrmmxTVbUBnSLIydrGDsCSYubRLVRuHD8q2 lTu2oK2WOdmhsb3E5XQrxPE1ZJRm+iFWZHJs2c0G6F7t8GpsJM1hlMa3RkcD8ZGv nAqdjdjzxtRD5UXD+KHgs7XKTVmod0pOqsF7aqzjgPYX6o29lsHkwzLTk40bgfcm 62qL8xfuKZIgcm9tc28lcd0E+r4bJ00A5jMg0+YGY3hH4C/rx5I= -----END CERTIFICATE-----Generated at Sun Jun 29 23:34:01 2025 by rpki-client