$ rpki-client -vvf repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft File: B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft (raw, json) Hash identifier: jxfPpsEjD1tEQ8DXWNn4BZH0PWds+N6vHqOcbEUrkP8= Subject key identifier: CD:4B:87:BB:1C:95:D3:D4:2D:27:32:10:C8:84:B8:5F:1E:E0:4E:B6 Authority key identifier: B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7 Certificate issuer: /CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7 Certificate serial: 263115EF8A8A87B8A5360F9C855C0F5DC605374E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft Manifest number: 018C Signing time: Sat 23 Aug 2025 05:00:37 +0000 Manifest this update: Sat 23 Aug 2025 04:55:37 +0000 Manifest next update: Tue 26 Aug 2025 14:07:37 +0000 Files and hashes: 1: 3130332e3138352e3139372e302f32342d3234203d3e20313333333535.roa (hash: PjJ5xaEmVECnvYiFxtFmdeDestY/+54rJNs+3F7mqcY=) 2: 3130332e3230392e3133312e302f32342d3234203d3e20313333333535.roa (hash: j+U4AErtYzwumrbJ7yEuFWr2i7wA+4c75xZyRtRhbQ4=) 3: B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl (hash: X+hm19dJjrQRMLjOoNmSsraIJznOaYP+5ASP9+Va8PE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 14:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:31:15:ef:8a:8a:87:b8:a5:36:0f:9c:85:5c:0f:5d:c6:05:37:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7 Validity Not Before: Aug 23 04:55:37 2025 GMT Not After : Aug 26 14:07:37 2025 GMT Subject: CN=CD4B87BB1C95D3D42D273210C884B85F1EE04EB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:73:3e:e2:82:cd:f3:6a:0e:5c:2c:6a:3c:85: 6c:74:92:53:cd:1c:4c:60:8b:7d:26:b3:4e:4e:62: e9:24:b0:9f:24:2a:10:8f:c8:8d:02:fd:89:6e:00: 65:bb:08:49:41:b5:57:1b:48:4a:ff:d6:ab:ff:cc: bd:64:72:1a:e0:a9:b3:49:95:62:3e:11:03:a2:ce: ac:c6:3b:9f:37:8c:6b:bc:d9:6d:7b:46:fc:d4:07: 94:45:3f:f5:2a:f2:f2:d7:77:80:93:8a:c5:76:04: 33:8c:0f:b2:a5:bd:87:91:2e:4c:d3:2e:d9:8e:1a: 01:5f:7d:cb:8c:06:b3:df:6e:67:78:e3:be:a1:4a: a6:4f:b3:3c:7f:f5:7c:f8:f5:bb:ec:73:4e:6a:5d: 1f:3b:3f:31:6d:e5:2b:3e:ae:ba:bc:b0:71:95:20: cd:68:97:d7:30:21:39:47:d0:76:26:18:de:62:4b: 11:6d:59:47:94:fb:b5:23:36:ce:48:a9:16:40:df: a8:81:ff:15:43:79:b2:77:84:ad:1c:20:ee:18:4e: bd:44:86:37:03:ca:81:13:cc:ab:17:44:53:d8:1e: 8f:b8:5f:7f:5a:cc:4e:69:23:44:87:82:f0:01:10: 38:07:35:f4:b6:66:12:a0:7d:db:3d:4c:c2:24:4b: d0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:4B:87:BB:1C:95:D3:D4:2D:27:32:10:C8:84:B8:5F:1E:E0:4E:B6 X509v3 Authority Key Identifier: keyid:B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:10:59:d8:04:1e:37:db:f3:d0:de:e2:cc:69:43:81:e2:86: f8:e9:c6:ed:cc:3b:ab:3e:b4:8b:b2:6e:10:5a:f7:23:f2:43: 25:ab:51:22:b0:0f:48:c6:d1:17:22:a5:31:5e:8d:6e:70:bf: 74:9a:ea:43:54:3f:81:0c:0f:ff:be:a8:f6:d1:59:04:85:0c: 18:4c:12:52:5c:3d:3a:bf:4a:a7:51:97:78:4c:be:a6:57:ce: b8:27:56:56:71:c5:45:53:6e:5e:b4:21:2c:15:dc:77:20:29: 9b:17:22:c1:91:c9:af:8e:41:1b:91:8b:8c:47:3d:f5:a2:48: 3e:5b:68:4c:2f:f3:45:be:28:25:8a:ae:b6:56:97:35:0a:dd: ee:1a:1c:b3:84:30:35:1c:4e:9b:50:9c:54:a2:0f:fa:de:3d: 7c:7e:f4:6a:43:8d:6d:18:0a:89:b6:44:97:39:e6:64:17:3d: 9e:30:cc:2b:e2:55:b7:09:1c:d2:65:77:16:0c:d3:d4:7c:9c: 3c:7f:a8:d1:70:40:39:30:0d:4d:f1:26:40:16:f8:5c:e2:8b: 73:45:cb:cb:96:d5:ed:fe:1d:e0:56:6c:d8:d2:eb:d7:bc:1c: 81:06:fd:8b:08:37:b8:79:37:70:54:b4:2e:07:79:a3:de:3c: 03:ac:b5:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJjEV74qKh7ilNg+chVwPXcYFN04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYwQUYz QTgxRkZGNzAeFw0yNTA4MjMwNDU1MzdaFw0yNTA4MjYxNDA3MzdaMDMxMTAvBgNV BAMTKENENEI4N0JCMUM5NUQzRDQyRDI3MzIxMEM4ODRCODVGMUVFMDRFQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvcz7igs3zag5cLGo8hWx0klPN HExgi30ms05OYukksJ8kKhCPyI0C/YluAGW7CElBtVcbSEr/1qv/zL1kchrgqbNJ lWI+EQOizqzGO583jGu82W17RvzUB5RFP/Uq8vLXd4CTisV2BDOMD7KlvYeRLkzT LtmOGgFffcuMBrPfbmd4476hSqZPszx/9Xz49bvsc05qXR87PzFt5Ss+rrq8sHGV IM1ol9cwITlH0HYmGN5iSxFtWUeU+7UjNs5IqRZA36iB/xVDebJ3hK0cIO4YTr1E hjcDyoETzKsXRFPYHo+4X39azE5pI0SHgvABEDgHNfS2ZhKgfds9TMIkS9C7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzUuHuxyV09QtJzIQyIS4Xx7gTrYwHwYDVR0j BBgwFoAUub62DNYiTUHzM6B+GCDwrzqB//cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MWY4N2Y1YS1mNmY5LTQ2OGQtODk1ZS0zMTQ0ODdmNWUyNWUvMC9COUJFQjYwQ0Q2 MjI0RDQxRjMzM0EwN0UxODIwRjBBRjNBODFGRkY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYwQUYzQTgx RkZGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjFmODdmNWEtZjZmOS00NjhkLTg5 NWUtMzE0NDg3ZjVlMjVlLzAvQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYw QUYzQTgxRkZGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJcQWdgEHjfb89De4sxpQ4Hihvjpxu3MO6s+ tIuybhBa9yPyQyWrUSKwD0jG0RcipTFejW5wv3Sa6kNUP4EMD/++qPbRWQSFDBhM ElJcPTq/SqdRl3hMvqZXzrgnVlZxxUVTbl60ISwV3HcgKZsXIsGRya+OQRuRi4xH PfWiSD5baEwv80W+KCWKrrZWlzUK3e4aHLOEMDUcTptQnFSiD/rePXx+9GpDjW0Y Com2RJc55mQXPZ4wzCviVbcJHNJldxYM09R8nDx/qNFwQDkwDU3xJkAW+Fzii3NF y8uW1e3+HeBWbNjS69e8HIEG/YsIN7h5N3BUtC4HeaPePAOstRY= -----END CERTIFICATE-----Generated at Sat Aug 23 10:15:52 2025 by rpki-client