$ rpki-client -vvf repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft File: B956E5764D9917A7389654D67836D02779ED9E22.mft (raw, json) Hash identifier: ZSI00kemujLgWcjTSqJhhoGk4xCYJtuDa18r4T61LZo= Subject key identifier: 92:40:D9:20:EF:BC:77:6C:47:00:AA:A4:41:51:CB:BB:B4:F9:18:7B Authority key identifier: B9:56:E5:76:4D:99:17:A7:38:96:54:D6:78:36:D0:27:79:ED:9E:22 Certificate issuer: /CN=B956E5764D9917A7389654D67836D02779ED9E22 Certificate serial: 2938BB220DDCF519D92CD8757C4FC6ED6E95369B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft Manifest number: 01E4 Signing time: Fri 22 Aug 2025 08:41:09 +0000 Manifest this update: Fri 22 Aug 2025 08:36:09 +0000 Manifest next update: Mon 25 Aug 2025 12:15:09 +0000 Files and hashes: 1: B956E5764D9917A7389654D67836D02779ED9E22.crl (hash: JKoPFC8tO2+DcjzZvnTwlumzWeDSzAKI07AxVCuGuLE=) 2: 3130332e34342e31392e302f32342d3234203d3e20313530313931.roa (hash: xRSXhth5RPLQDUpDjvFyriqelwPeLnjETcyxKSf1xt8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.crl rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 12:15:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:38:bb:22:0d:dc:f5:19:d9:2c:d8:75:7c:4f:c6:ed:6e:95:36:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B956E5764D9917A7389654D67836D02779ED9E22 Validity Not Before: Aug 22 08:36:09 2025 GMT Not After : Aug 25 12:15:09 2025 GMT Subject: CN=9240D920EFBC776C4700AAA44151CBBBB4F9187B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:41:19:ac:49:d5:4d:f0:42:16:c7:4e:d6:58: ab:57:97:d1:3c:ae:fa:62:ce:cf:fb:06:d0:c9:8d: f5:4e:03:73:da:51:27:80:69:fc:4f:07:b9:b3:dd: 5a:38:c2:81:49:42:1c:d8:32:95:d3:fd:34:84:c5: 8d:f1:64:c5:38:c8:e9:c8:df:64:e0:f0:de:13:1d: bc:05:2f:1b:9e:74:dc:94:03:a6:41:25:4d:a9:a2: 6d:3d:f0:f3:d5:78:a7:f4:f5:c7:dc:f9:ed:00:bc: 7d:2d:7c:f9:b6:d9:a5:54:e0:c8:79:60:fb:b6:d5: 42:79:04:95:15:1d:02:d9:6f:36:97:84:6d:23:99: ee:40:f7:5b:0d:16:19:c8:c0:97:e8:13:31:2b:97: a8:da:76:9a:72:b4:c5:f5:5c:68:28:ab:5f:6a:40: 21:e5:2a:e8:17:d9:92:4c:90:85:e0:4e:f3:8e:75: 5d:97:0a:d7:3c:cb:48:e7:af:55:0d:e5:f0:41:b9: a0:13:ba:6c:12:43:c8:0f:1d:62:8a:e1:37:36:46: 46:68:bc:d8:24:f6:f1:6f:bb:38:e2:e2:1b:23:25: 70:6a:9f:15:b8:f2:f5:61:36:07:78:11:ad:b4:77: 5d:0c:f8:5e:e9:88:ac:89:de:0c:ae:ec:0b:ac:5b: 46:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:40:D9:20:EF:BC:77:6C:47:00:AA:A4:41:51:CB:BB:B4:F9:18:7B X509v3 Authority Key Identifier: keyid:B9:56:E5:76:4D:99:17:A7:38:96:54:D6:78:36:D0:27:79:ED:9E:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:be:2c:cf:a5:d9:65:9c:b4:08:c2:3d:27:8c:4c:d8:ac:5c: 8e:82:dc:4e:fd:61:8a:f1:de:16:26:61:4e:1d:a3:83:7c:ce: 5f:7c:1c:f0:70:95:ac:5d:8a:53:30:80:a3:84:d1:45:af:24: bb:56:97:b4:d7:7a:36:03:ea:1d:b4:8e:76:d7:86:89:b1:4b: 56:c4:e8:0d:c8:5f:99:10:9e:bb:1d:fc:4d:8d:1d:39:65:51: 75:02:4d:62:a0:0d:61:9a:92:cf:a2:d6:2e:11:0d:b0:24:a9: d6:21:1b:fd:2e:2e:25:f2:71:14:fc:0f:6c:39:b8:b4:ab:16: 1c:ed:2a:12:83:79:41:13:8c:45:c0:44:46:23:ad:73:d6:60: 97:be:e3:98:6b:cc:87:b9:40:5e:98:73:26:ff:3c:03:26:a6: c3:9d:6f:9e:7c:a8:02:fd:65:98:49:73:d3:02:80:1c:da:37: b9:0c:18:60:f4:66:68:1f:d7:97:c5:9a:ac:1d:81:ae:6b:d3: 03:c0:78:96:05:9b:1e:52:c3:e5:fb:4a:f3:d8:31:d1:7d:57: 4b:c7:a2:0c:e7:3e:09:67:3b:28:3f:1a:9a:f4:6f:35:f5:d8: a1:b4:b0:ad:8b:7f:9f:b3:69:b2:4d:61:ee:e2:2a:db:0b:87: 80:65:3c:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKTi7Ig3c9RnZLNh1fE/G7W6VNpswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk1NkU1NzY0RDk5MTdBNzM4OTY1NEQ2NzgzNkQwMjc3 OUVEOUUyMjAeFw0yNTA4MjIwODM2MDlaFw0yNTA4MjUxMjE1MDlaMDMxMTAvBgNV BAMTKDkyNDBEOTIwRUZCQzc3NkM0NzAwQUFBNDQxNTFDQkJCQjRGOTE4N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1QRmsSdVN8EIWx07WWKtXl9E8 rvpizs/7BtDJjfVOA3PaUSeAafxPB7mz3Vo4woFJQhzYMpXT/TSExY3xZMU4yOnI 32Tg8N4THbwFLxuedNyUA6ZBJU2pom098PPVeKf09cfc+e0AvH0tfPm22aVU4Mh5 YPu21UJ5BJUVHQLZbzaXhG0jme5A91sNFhnIwJfoEzErl6jadppytMX1XGgoq19q QCHlKugX2ZJMkIXgTvOOdV2XCtc8y0jnr1UN5fBBuaATumwSQ8gPHWKK4Tc2RkZo vNgk9vFvuzji4hsjJXBqnxW48vVhNgd4Ea20d10M+F7piKyJ3gyu7AusW0b1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkkDZIO+8d2xHAKqkQVHLu7T5GHswHwYDVR0j BBgwFoAUuVbldk2ZF6c4llTWeDbQJ3ntniIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODExN2NhOC1iNGU1LTQ2N2EtODhhOC1hNGI2M2U0MGMzZWQvMC9COTU2RTU3NjRE OTkxN0E3Mzg5NjU0RDY3ODM2RDAyNzc5RUQ5RTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjk1NkU1NzY0RDk5MTdBNzM4OTY1NEQ2NzgzNkQwMjc3OUVE OUUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjgxMTdjYTgtYjRlNS00NjdhLTg4 YTgtYTRiNjNlNDBjM2VkLzAvQjk1NkU1NzY0RDk5MTdBNzM4OTY1NEQ2NzgzNkQw Mjc3OUVEOUUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFW+LM+l2WWctAjCPSeMTNisXI6C3E79YYrx 3hYmYU4do4N8zl98HPBwlaxdilMwgKOE0UWvJLtWl7TXejYD6h20jnbXhomxS1bE 6A3IX5kQnrsd/E2NHTllUXUCTWKgDWGaks+i1i4RDbAkqdYhG/0uLiXycRT8D2w5 uLSrFhztKhKDeUETjEXAREYjrXPWYJe+45hrzIe5QF6Ycyb/PAMmpsOdb558qAL9 ZZhJc9MCgBzaN7kMGGD0Zmgf15fFmqwdga5r0wPAeJYFmx5Sw+X7SvPYMdF9V0vH ogznPglnOyg/Gpr0bzX12KG0sK2Lf5+zabJNYe7iKtsLh4BlPLw= -----END CERTIFICATE-----Generated at Sat Aug 23 16:57:36 2025 by rpki-client