$ rpki-client -vvf repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft File: B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft (raw, json) Hash identifier: HXdNDZeI2dsl4UkTxDVZPwW/cMfL9wOPghvU5Jb62Sg= Subject key identifier: 68:1C:46:55:B9:9C:47:00:2F:17:06:6C:D4:7F:7E:B1:45:D3:99:4C Authority key identifier: B2:A7:61:D6:1C:BF:02:4F:24:CD:3A:18:BE:96:E5:8F:7E:D6:C9:09 Certificate issuer: /CN=B2A761D61CBF024F24CD3A18BE96E58F7ED6C909 Certificate serial: 36E837466DE3071E268182DF29D89D02544B2600 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft Manifest number: 04C6 Signing time: Fri 22 Aug 2025 19:31:15 +0000 Manifest this update: Fri 22 Aug 2025 19:26:15 +0000 Manifest next update: Mon 25 Aug 2025 20:45:15 +0000 Files and hashes: 1: B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.crl (hash: 9DnsGU16nXNHldeyLNZBogW1IfYDDalr+07kjUQmsxI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.crl rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 20:45:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:e8:37:46:6d:e3:07:1e:26:81:82:df:29:d8:9d:02:54:4b:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2A761D61CBF024F24CD3A18BE96E58F7ED6C909 Validity Not Before: Aug 22 19:26:15 2025 GMT Not After : Aug 25 20:45:15 2025 GMT Subject: CN=681C4655B99C47002F17066CD47F7EB145D3994C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:12:90:ee:9e:f9:38:b2:2d:cf:04:3b:65:75: 4e:d7:a5:a4:1a:7d:f4:be:fc:7d:25:20:c3:4f:19: 4d:60:72:96:74:52:7c:5c:21:c7:08:96:c3:df:3c: 9e:47:c2:55:45:8f:78:b2:3e:22:9c:e4:fe:fb:6e: fb:77:2b:b0:b8:66:fc:1e:72:e8:db:38:61:63:9b: 72:b7:0a:e1:f7:21:5e:a8:00:53:ba:d6:3e:7c:21: 39:53:08:c7:c4:8f:dd:4d:3a:ee:ef:79:29:f4:3a: 82:14:ca:c2:9b:7a:e6:4b:fe:81:d2:40:17:9f:de: fc:6e:f3:0c:7a:8c:0f:5d:92:7f:f8:a8:01:eb:c7: f0:e6:c0:c3:19:87:db:a5:a9:e8:87:4a:a6:9c:c5: fd:a0:9f:77:b8:38:86:8f:7f:9d:f7:b2:b1:b8:bb: e6:10:04:8f:f8:ae:f9:7a:4e:00:22:da:2b:e1:77: b4:e3:d4:ea:30:f1:59:dc:b5:01:b3:ee:9e:be:7c: 0d:9f:e6:b6:00:2b:72:06:d5:fe:dd:03:08:b5:f6: ab:1d:19:dc:a9:92:b8:39:2b:31:b6:43:10:8d:a4: ef:1a:1d:05:aa:2d:32:d9:eb:67:4a:e5:91:4c:c4: 61:16:1c:8f:c3:07:4a:a2:15:24:02:97:dc:24:fb: 77:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:1C:46:55:B9:9C:47:00:2F:17:06:6C:D4:7F:7E:B1:45:D3:99:4C X509v3 Authority Key Identifier: keyid:B2:A7:61:D6:1C:BF:02:4F:24:CD:3A:18:BE:96:E5:8F:7E:D6:C9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:74:bd:04:15:4b:38:c4:14:8f:3c:68:1d:c0:34:f5:c8:8a: d2:0d:c6:2a:77:9d:4a:22:21:b5:36:8f:c6:f1:b4:19:91:cb: 10:f0:02:52:0c:9c:ad:cf:1c:6a:7c:53:5b:d0:4d:65:bd:d9: 0f:60:69:d8:94:ae:e2:fd:1a:7f:9e:4a:60:69:61:1d:77:23: 15:df:29:93:fb:b9:b1:79:dc:25:60:04:bf:6b:00:96:ec:6a: ec:02:f0:e6:cf:70:ae:cb:e5:0e:bb:52:cd:65:29:e8:50:04: c4:ca:a3:94:5f:c0:ed:e5:5a:5b:36:d4:39:3f:b7:33:70:cd: 36:8f:1e:35:45:d3:28:34:f4:d5:ce:e6:ce:10:ca:a5:d1:6c: 9b:1f:6c:1e:c7:36:c8:fa:72:07:e7:09:c5:68:fa:7b:8e:57: 89:e5:65:bf:05:32:5d:e0:63:7f:d3:f6:bb:51:4f:34:47:66: ea:1c:4e:da:53:eb:80:99:89:4d:26:b6:3e:66:2d:0a:e9:bc: 87:59:55:54:68:65:bb:b7:4f:03:66:d4:80:1a:6e:7b:39:46: cb:98:2f:33:8b:4b:2a:0c:92:1c:29:90:3c:1b:e0:28:b6:b6: 70:93:20:0a:26:8d:51:5b:84:b3:93:6d:be:20:81:49:55:c1: fe:60:5e:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNug3Rm3jBx4mgYLfKdidAlRLJgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJBNzYxRDYxQ0JGMDI0RjI0Q0QzQTE4QkU5NkU1OEY3 RUQ2QzkwOTAeFw0yNTA4MjIxOTI2MTVaFw0yNTA4MjUyMDQ1MTVaMDMxMTAvBgNV BAMTKDY4MUM0NjU1Qjk5QzQ3MDAyRjE3MDY2Q0Q0N0Y3RUIxNDVEMzk5NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7EpDunvk4si3PBDtldU7XpaQa ffS+/H0lIMNPGU1gcpZ0UnxcIccIlsPfPJ5HwlVFj3iyPiKc5P77bvt3K7C4Zvwe cujbOGFjm3K3CuH3IV6oAFO61j58ITlTCMfEj91NOu7veSn0OoIUysKbeuZL/oHS QBef3vxu8wx6jA9dkn/4qAHrx/DmwMMZh9ulqeiHSqacxf2gn3e4OIaPf533srG4 u+YQBI/4rvl6TgAi2ivhd7Tj1Oow8VnctQGz7p6+fA2f5rYAK3IG1f7dAwi19qsd Gdypkrg5KzG2QxCNpO8aHQWqLTLZ62dK5ZFMxGEWHI/DB0qiFSQCl9wk+3fHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaBxGVbmcRwAvFwZs1H9+sUXTmUwwHwYDVR0j BBgwFoAUsqdh1hy/Ak8kzToYvpblj37WyQkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YmE5N2IwYi0zOWFlLTRjMmMtYjEzYi0wMWUzOTViN2EyNGIvMC9CMkE3NjFENjFD QkYwMjRGMjRDRDNBMThCRTk2RTU4RjdFRDZDOTA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJBNzYxRDYxQ0JGMDI0RjI0Q0QzQTE4QkU5NkU1OEY3RUQ2 QzkwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmJhOTdiMGItMzlhZS00YzJjLWIx M2ItMDFlMzk1YjdhMjRiLzAvQjJBNzYxRDYxQ0JGMDI0RjI0Q0QzQTE4QkU5NkU1 OEY3RUQ2QzkwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC10vQQVSzjEFI88aB3ANPXIitINxip3nUoi IbU2j8bxtBmRyxDwAlIMnK3PHGp8U1vQTWW92Q9gadiUruL9Gn+eSmBpYR13IxXf KZP7ubF53CVgBL9rAJbsauwC8ObPcK7L5Q67Us1lKehQBMTKo5RfwO3lWls21Dk/ tzNwzTaPHjVF0yg09NXO5s4QyqXRbJsfbB7HNsj6cgfnCcVo+nuOV4nlZb8FMl3g Y3/T9rtRTzRHZuocTtpT64CZiU0mtj5mLQrpvIdZVVRoZbu3TwNm1IAabns5RsuY LzOLSyoMkhwpkDwb4Ci2tnCTIAomjVFbhLOTbb4ggUlVwf5gXpw= -----END CERTIFICATE-----Generated at Sat Aug 23 12:09:31 2025 by rpki-client