$ rpki-client -vvf repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft File: B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft (raw, json) Hash identifier: xOrX+tvk7mICGTTWNywXAMS+75hkUZH9MZhxkoioah0= Subject key identifier: AD:48:5F:C7:2A:59:E8:30:BC:32:02:00:D9:C1:C8:60:F9:77:35:97 Authority key identifier: B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94 Certificate issuer: /CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094 Certificate serial: 5ED48DEAE54859442506AAE63B6917753C0DAECF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft Manifest number: 01B4 Signing time: Fri 22 Aug 2025 04:50:05 +0000 Manifest this update: Fri 22 Aug 2025 04:45:05 +0000 Manifest next update: Mon 25 Aug 2025 05:06:05 +0000 Files and hashes: 1: 3130332e312e35312e302f32342d3234203d3e20313432333532.roa (hash: Lx6mbXqTbsqqqJEaZ6Ptl1cSIXULA4hNI34A7lM8ago=) 2: B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl (hash: M+z88VGcFQ9z5pP3OBan+I4Bn9BOm1TZEul04L3/SfE=) 3: 3130332e312e35302e302f32342d3234203d3e20313432333532.roa (hash: 13a296YbpXPKiDroOx9RoYtV5Gqcvos+cOx12thufiw=) 4: 3130332e312e35302e302f32332d3233203d3e20313432333532.roa (hash: Pk+CfBb09D2NLm+w/mIdTLsk/cAe1V1lpiWgoIeGFHc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 05:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:d4:8d:ea:e5:48:59:44:25:06:aa:e6:3b:69:17:75:3c:0d:ae:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094 Validity Not Before: Aug 22 04:45:05 2025 GMT Not After : Aug 25 05:06:05 2025 GMT Subject: CN=AD485FC72A59E830BC320200D9C1C860F9773597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d5:5f:92:7d:f9:d4:c1:e2:c4:c7:93:6c:d5: 49:2a:64:a1:1d:b2:da:0f:d0:aa:62:d5:fe:1d:03: 4c:2b:60:bf:33:10:72:5f:5e:4e:d6:70:cd:5d:f6: 74:d9:c6:dc:50:2b:87:db:65:c9:d2:58:ba:7f:d2: c6:c5:47:c4:e8:36:14:05:cc:36:0d:f0:9c:07:c9: e2:51:24:2c:16:f7:e0:d1:de:4e:1a:b6:73:c7:5f: 82:27:74:a2:fd:04:a7:de:21:69:0a:7e:a5:23:eb: a9:47:83:09:80:54:3d:35:03:c3:3e:9d:cc:d6:b7: 4c:d9:91:e3:21:5b:bb:2b:0e:c5:5e:a1:a2:d7:10: aa:e0:93:9b:28:50:75:21:1b:06:98:6d:3f:e0:92: 60:6d:32:85:6b:d6:98:a0:02:fc:37:06:c1:82:87: ca:53:33:cf:a2:d8:0a:41:2e:fc:1f:7f:f4:3a:d4: c5:0f:6f:95:b3:c3:55:7b:eb:14:33:f6:3b:de:d4: 9f:77:d0:c8:0f:c3:51:ec:f0:01:d6:05:6c:34:6d: b1:aa:be:8f:aa:ed:b4:84:92:b3:eb:3c:25:21:8b: 33:4f:5c:de:65:3a:71:6c:81:15:18:37:80:09:12: 0b:6c:d0:a1:0e:64:81:de:5d:22:b9:8e:37:41:3e: 2e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:48:5F:C7:2A:59:E8:30:BC:32:02:00:D9:C1:C8:60:F9:77:35:97 X509v3 Authority Key Identifier: keyid:B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:10:ce:48:a9:29:8b:da:fb:1f:8f:ef:e2:5b:3a:bd:a4:53: ae:bb:81:d5:d4:51:32:5b:9a:e0:e8:65:a8:dd:5e:bf:45:12: c0:9a:8f:ac:b0:e4:57:60:01:35:7a:51:7c:9d:a1:99:48:47: 30:cd:6d:a5:3f:71:50:5c:d1:d5:3c:37:f1:9e:54:36:c1:1d: 91:30:10:64:e0:b1:e6:58:e3:5e:1a:d6:a4:25:85:5d:db:02: 15:ca:d9:e2:d4:ad:ef:d0:a7:f6:09:ef:62:05:15:8b:83:73: 58:58:82:44:b5:2e:30:dd:9b:ff:73:60:b0:04:28:33:a3:3e: 67:40:db:19:27:2d:99:ef:a2:89:19:40:0d:5d:29:fd:5b:47: 6e:1f:5a:ae:fd:75:68:ba:01:87:a7:26:07:47:ed:1c:63:6a: d7:10:d9:bf:4c:99:26:cf:57:56:db:a8:f7:3a:90:83:a5:db: 82:47:a9:1b:d4:ad:4f:20:ec:e5:89:18:c9:85:36:94:0d:bc: 06:f9:7b:4f:2f:da:e1:b4:8e:32:3f:1a:a7:b2:e7:4f:30:f8: 8a:f5:63:7f:6b:b1:37:83:a9:85:7e:2f:fd:12:29:44:fe:69: 7c:69:3f:36:41:3e:d0:c9:d6:13:b1:ae:3d:82:b0:8b:14:1a: 9b:75:37:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXtSN6uVIWUQlBqrmO2kXdTwNrs8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1RDJB MDk5MzA5NDAeFw0yNTA4MjIwNDQ1MDVaFw0yNTA4MjUwNTA2MDVaMDMxMTAvBgNV BAMTKEFENDg1RkM3MkE1OUU4MzBCQzMyMDIwMEQ5QzFDODYwRjk3NzM1OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc1V+SffnUweLEx5Ns1UkqZKEd stoP0Kpi1f4dA0wrYL8zEHJfXk7WcM1d9nTZxtxQK4fbZcnSWLp/0sbFR8ToNhQF zDYN8JwHyeJRJCwW9+DR3k4atnPHX4IndKL9BKfeIWkKfqUj66lHgwmAVD01A8M+ nczWt0zZkeMhW7srDsVeoaLXEKrgk5soUHUhGwaYbT/gkmBtMoVr1pigAvw3BsGC h8pTM8+i2ApBLvwff/Q61MUPb5Wzw1V76xQz9jve1J930MgPw1Hs8AHWBWw0bbGq vo+q7bSEkrPrPCUhizNPXN5lOnFsgRUYN4AJEgts0KEOZIHeXSK5jjdBPi6bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrUhfxypZ6DC8MgIA2cHIYPl3NZcwHwYDVR0j BBgwFoAUtINF9/n7TxT//ovFt0aF0qCZMJQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjUyYmY5Yy02MzRiLTQwYjktYWMwYy1hODdiNDdkNTlmOTEvMC9CNDgzNDVGN0Y5 RkI0RjE0RkZGRThCQzVCNzQ2ODVEMkEwOTkzMDk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1RDJBMDk5 MzA5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY1MmJmOWMtNjM0Yi00MGI5LWFj MGMtYTg3YjQ3ZDU5ZjkxLzAvQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1 RDJBMDk5MzA5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE4QzkipKYva+x+P7+JbOr2kU667gdXUUTJb muDoZajdXr9FEsCaj6yw5FdgATV6UXydoZlIRzDNbaU/cVBc0dU8N/GeVDbBHZEw EGTgseZY414a1qQlhV3bAhXK2eLUre/Qp/YJ72IFFYuDc1hYgkS1LjDdm/9zYLAE KDOjPmdA2xknLZnvookZQA1dKf1bR24fWq79dWi6AYenJgdH7RxjatcQ2b9MmSbP V1bbqPc6kIOl24JHqRvUrU8g7OWJGMmFNpQNvAb5e08v2uG0jjI/Gqey508w+Ir1 Y39rsTeDqYV+L/0SKUT+aXxpPzZBPtDJ1hOxrj2CsIsUGpt1N1w= -----END CERTIFICATE-----Generated at Sat Aug 23 11:56:47 2025 by rpki-client