$ rpki-client -vvf repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.mft File: B2BCF7264F89246583B384F354CB350DF3B6AADB.mft (raw, json) Hash identifier: vmOIUGrgb1l4o58AHDzofxiqp1vCVsLZqjgfQZFG4hQ= Subject key identifier: 3A:44:4B:57:55:EF:2C:A9:AA:0C:CC:53:BB:FF:4A:09:CA:0C:50:4A Authority key identifier: B2:BC:F7:26:4F:89:24:65:83:B3:84:F3:54:CB:35:0D:F3:B6:AA:DB Certificate issuer: /CN=B2BCF7264F89246583B384F354CB350DF3B6AADB Certificate serial: 6E48DE14CD04FBAF8F5B27DF9F6342AFEFC0C537 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2BCF7264F89246583B384F354CB350DF3B6AADB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.mft Manifest number: 04FE Signing time: Sat 23 Aug 2025 15:22:04 +0000 Manifest this update: Sat 23 Aug 2025 15:17:04 +0000 Manifest next update: Tue 26 Aug 2025 22:44:04 +0000 Files and hashes: 1: B2BCF7264F89246583B384F354CB350DF3B6AADB.crl (hash: X7kaUHLNNR/EPMToqp9w2cLUHitEQd/NPC4E1wPGl8w=) 2: 3230322e34372e39302e302f32332d3234203d3e203436303230.roa (hash: f31WSeSw8w1qVqSz7UZlMp3AZocd9nv655saAh7fViI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.crl rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2BCF7264F89246583B384F354CB350DF3B6AADB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 22:44:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:48:de:14:cd:04:fb:af:8f:5b:27:df:9f:63:42:af:ef:c0:c5:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2BCF7264F89246583B384F354CB350DF3B6AADB Validity Not Before: Aug 23 15:17:04 2025 GMT Not After : Aug 26 22:44:04 2025 GMT Subject: CN=3A444B5755EF2CA9AA0CCC53BBFF4A09CA0C504A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ff:cc:29:51:95:f9:dc:18:12:bd:2f:f5:21: 41:3a:82:04:ed:7b:82:11:36:00:65:c2:20:b6:3c: a4:f7:38:bb:60:cb:ef:be:f4:07:f9:37:a2:a4:74: 99:b5:90:ac:a9:ce:8e:3a:0a:2f:2e:bb:29:b4:92: f8:60:1e:33:25:13:d2:54:dd:41:e4:03:c1:02:88: 18:22:46:73:31:8b:27:15:89:66:a3:3b:cf:77:10: af:bb:0e:28:03:bb:cc:15:28:f4:fd:35:9e:b1:2b: bb:7e:7f:b8:59:fe:8d:5f:9f:13:27:70:c6:b6:7e: 29:9e:7d:f6:6d:cc:26:92:41:bc:86:56:32:2b:35: 57:e5:f4:9b:69:a4:be:a1:0a:94:1a:d0:9a:d2:e6: 00:36:9f:11:10:7f:4f:af:86:8d:95:dd:90:dc:bc: 9d:14:77:ee:b9:90:6d:b6:01:1b:b4:8c:6a:fa:81: 8d:97:58:75:32:d9:3d:fe:51:c3:8f:28:fc:20:3d: 26:01:37:e2:ce:13:7b:04:ba:74:50:37:3d:53:a2: 51:dd:ab:98:e3:60:53:4b:d8:ff:10:b8:37:f2:3c: ef:b2:e1:cf:18:e4:dd:f8:27:c5:6b:b8:25:fb:03: 9a:2b:b3:be:80:22:a8:6f:f0:b9:b6:61:cc:02:c0: a5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:44:4B:57:55:EF:2C:A9:AA:0C:CC:53:BB:FF:4A:09:CA:0C:50:4A X509v3 Authority Key Identifier: keyid:B2:BC:F7:26:4F:89:24:65:83:B3:84:F3:54:CB:35:0D:F3:B6:AA:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2BCF7264F89246583B384F354CB350DF3B6AADB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:8f:c4:f4:e3:a5:3d:f3:4a:9d:3a:7a:d4:3b:89:3c:10:82: a1:ff:90:c0:67:ea:9d:c8:ba:6f:6d:18:3a:e1:fc:cb:41:af: 87:e8:9e:5b:ee:6f:2a:d8:09:ba:46:50:e3:39:df:a7:a7:f4: 36:d5:6d:b0:9c:86:ea:0a:fc:dc:94:2b:ef:59:aa:a8:67:ae: e9:6c:85:ce:ed:cd:8e:c5:e5:18:f4:c9:f1:6a:36:a3:70:59: 8d:cd:fd:71:a7:55:0e:0f:ac:be:5e:27:0c:57:71:89:d9:6f: a7:57:56:4f:b9:ca:6c:99:b6:d4:9c:08:4f:dc:61:db:9a:02: 23:d5:eb:f2:44:9d:3d:e3:05:5c:b5:8f:35:fd:c8:90:f9:ab: 17:18:84:33:16:75:3b:7e:d4:99:11:2f:97:cd:ba:a4:b7:33: 2d:7b:e2:2b:5d:42:56:1a:e7:b4:99:64:37:d5:91:71:1d:28: 83:5c:71:1f:d1:24:07:aa:3e:16:ba:5c:e6:ba:25:ba:53:02: ea:7f:9f:e0:66:20:0c:63:65:15:9e:a8:10:86:f8:d9:82:a7: 85:0e:d1:d3:35:4a:6f:36:32:9b:ff:25:19:3f:e2:39:b6:18: 1d:a3:05:f7:e7:4a:57:2c:45:b3:90:30:fa:3e:ac:dc:a6:4c: 9b:61:20:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbkjeFM0E+6+PWyffn2NCr+/AxTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJCQ0Y3MjY0Rjg5MjQ2NTgzQjM4NEYzNTRDQjM1MERG M0I2QUFEQjAeFw0yNTA4MjMxNTE3MDRaFw0yNTA4MjYyMjQ0MDRaMDMxMTAvBgNV BAMTKDNBNDQ0QjU3NTVFRjJDQTlBQTBDQ0M1M0JCRkY0QTA5Q0EwQzUwNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN/8wpUZX53BgSvS/1IUE6ggTt e4IRNgBlwiC2PKT3OLtgy+++9Af5N6KkdJm1kKypzo46Ci8uuym0kvhgHjMlE9JU 3UHkA8ECiBgiRnMxiycViWajO893EK+7DigDu8wVKPT9NZ6xK7t+f7hZ/o1fnxMn cMa2fimeffZtzCaSQbyGVjIrNVfl9JtppL6hCpQa0JrS5gA2nxEQf0+vho2V3ZDc vJ0Ud+65kG22ARu0jGr6gY2XWHUy2T3+UcOPKPwgPSYBN+LOE3sEunRQNz1TolHd q5jjYFNL2P8QuDfyPO+y4c8Y5N34J8VruCX7A5ors76AIqhv8Lm2YcwCwKWLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOkRLV1XvLKmqDMxTu/9KCcoMUEowHwYDVR0j BBgwFoAUsrz3Jk+JJGWDs4TzVMs1DfO2qtswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmEwYTc3MS02MmQyLTQyMzgtYTQwNi03OTk5ZjIyNDg0OWMvMC9CMkJDRjcyNjRG ODkyNDY1ODNCMzg0RjM1NENCMzUwREYzQjZBQURCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJCQ0Y3MjY0Rjg5MjQ2NTgzQjM4NEYzNTRDQjM1MERGM0I2 QUFEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJhMGE3NzEtNjJkMi00MjM4LWE0 MDYtNzk5OWYyMjQ4NDljLzAvQjJCQ0Y3MjY0Rjg5MjQ2NTgzQjM4NEYzNTRDQjM1 MERGM0I2QUFEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWPxPTjpT3zSp06etQ7iTwQgqH/kMBn6p3I um9tGDrh/MtBr4fonlvubyrYCbpGUOM536en9DbVbbCchuoK/NyUK+9Zqqhnruls hc7tzY7F5Rj0yfFqNqNwWY3N/XGnVQ4PrL5eJwxXcYnZb6dXVk+5ymyZttScCE/c YduaAiPV6/JEnT3jBVy1jzX9yJD5qxcYhDMWdTt+1JkRL5fNuqS3My174itdQlYa 57SZZDfVkXEdKINccR/RJAeqPha6XOa6JbpTAup/n+BmIAxjZRWeqBCG+NmCp4UO 0dM1Sm82Mpv/JRk/4jm2GB2jBffnSlcsRbOQMPo+rNymTJthIO4= -----END CERTIFICATE-----Generated at Sat Aug 23 20:18:08 2025 by rpki-client