$ rpki-client -vvf repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft File: B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft (raw, json) Hash identifier: Nipisp8V8Iw7/R3ayrb1Cfv71RgHH6nLyiyo6nXtWmg= Subject key identifier: 67:DA:79:2C:00:50:47:71:0B:5A:3A:5F:70:84:23:50:86:FB:3B:CF Authority key identifier: B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6 Certificate issuer: /CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6 Certificate serial: 05FA8815ED4F40C9FB8BDEC453EE526D3F9BBF09 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft Manifest number: D3 Signing time: Sat 23 Aug 2025 12:31:59 +0000 Manifest this update: Sat 23 Aug 2025 12:26:59 +0000 Manifest next update: Tue 26 Aug 2025 13:32:59 +0000 Files and hashes: 1: 3130332e372e3130372e302f32342d3234203d3e20313531353939.roa (hash: ZOp7UUJVVpn+HE+2CW6AOz2wc15ptx3FxJXIlhX1FTo=) 2: B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl (hash: fxHqrQUND+CXixQhvbehLOsHgbuaHwhguDa/v8cZrmA=) 3: 3130332e372e3130362e302f32332d3233203d3e20313531353939.roa (hash: gKuzS0cjEmgd3PQlr3qETih9wH6v1uECgkfmF5qpn9s=) 4: 3130332e372e3130362e302f32342d3234203d3e20313531353939.roa (hash: 0rbZlrsZPTaqVhI90ea5Mcg8UbhZvU1fUTVZXNAKo74=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 13:32:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:fa:88:15:ed:4f:40:c9:fb:8b:de:c4:53:ee:52:6d:3f:9b:bf:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6 Validity Not Before: Aug 23 12:26:59 2025 GMT Not After : Aug 26 13:32:59 2025 GMT Subject: CN=67DA792C005047710B5A3A5F7084235086FB3BCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:91:56:29:f7:1a:23:d4:8e:c3:e0:b5:69:72: 28:9f:ad:3a:1d:78:25:51:16:99:95:a9:82:b8:f2: ed:e7:cc:bd:f3:7e:43:40:76:e2:f4:79:27:58:95: bd:12:f4:ef:90:e9:1e:a2:9c:86:ba:89:b7:34:73: eb:5a:3f:d2:12:b3:76:62:dc:f1:a6:b4:78:af:66: 3b:8b:25:ce:89:1a:1b:06:e2:c7:3f:fb:c6:43:93: c4:f7:18:ba:54:d4:f7:fb:28:4b:8f:77:21:90:76: 86:76:53:17:9f:ba:e8:12:b7:7b:7c:8e:59:51:04: 79:bd:45:77:a3:ce:75:ff:64:5d:29:97:bc:4b:5b: 5c:da:5e:15:6b:ab:3d:b8:66:9d:b0:ca:83:0e:79: 31:77:28:92:48:b6:58:c8:14:8b:6f:33:66:f1:52: e9:f1:05:c0:31:55:b8:f4:1c:8b:d4:89:84:bf:5d: ee:e1:7b:fe:01:47:ef:5b:0b:75:a4:a0:f5:0a:2d: c0:f2:af:95:bb:77:8c:80:5c:73:ff:4d:85:32:54: ba:df:a9:a1:c2:f1:60:0f:b0:bd:e0:f8:f5:7e:72: 8a:26:47:54:d4:a8:aa:ff:c7:ab:a7:d1:df:02:40: 78:d8:89:b5:af:94:da:b3:85:a8:03:b7:18:0a:3c: 85:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:DA:79:2C:00:50:47:71:0B:5A:3A:5F:70:84:23:50:86:FB:3B:CF X509v3 Authority Key Identifier: keyid:B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:f2:65:1d:9b:28:b6:1b:13:f5:de:62:6b:92:8d:fa:64:a5: 0d:84:5b:55:1c:0e:bb:bd:d0:16:ee:17:f7:27:be:4a:d1:61: 8d:37:c6:ec:3e:eb:b8:09:4b:2a:d1:8e:70:37:3c:b8:3f:3e: 63:58:f3:eb:2a:ab:2a:74:f9:71:e8:48:f4:0e:0f:cf:1b:0a: e2:1a:3b:40:52:de:24:c5:c9:9f:50:0e:a1:ec:05:3e:b0:ab: 5b:4c:3b:c4:1a:57:3b:d4:5f:7b:4f:ea:af:7e:a5:76:40:02: 78:93:f0:83:c2:20:e0:9e:d3:ce:40:e9:d9:82:a2:51:80:71: 0f:3c:d0:1b:7c:fc:71:53:2a:ea:b3:ba:5d:79:b2:48:70:72: b6:43:90:25:03:c0:7b:a0:47:1b:b5:2c:48:95:fa:d9:e9:90: e8:24:c7:91:c2:99:9f:cd:64:3f:fb:4a:10:ed:57:03:8c:b3: 39:8f:ae:32:23:fc:e2:29:1a:fc:c5:e0:55:ab:9b:98:cc:89: 13:71:23:e0:64:a2:c5:03:45:42:ec:13:a9:07:08:7a:2d:08: 37:e1:96:c0:04:e5:a1:7c:00:0b:7f:4e:45:85:b4:72:b4:f8: 21:61:9f:0e:b2:a1:3e:5d:c1:e7:2e:7d:63:08:a6:3f:d7:37: 29:c2:96:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBfqIFe1PQMn7i97EU+5SbT+bvwkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZBMTM2 MEMwNkFGNjAeFw0yNTA4MjMxMjI2NTlaFw0yNTA4MjYxMzMyNTlaMDMxMTAvBgNV BAMTKDY3REE3OTJDMDA1MDQ3NzEwQjVBM0E1RjcwODQyMzUwODZGQjNCQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTkVYp9xoj1I7D4LVpciifrTod eCVRFpmVqYK48u3nzL3zfkNAduL0eSdYlb0S9O+Q6R6inIa6ibc0c+taP9ISs3Zi 3PGmtHivZjuLJc6JGhsG4sc/+8ZDk8T3GLpU1Pf7KEuPdyGQdoZ2UxefuugSt3t8 jllRBHm9RXejznX/ZF0pl7xLW1zaXhVrqz24Zp2wyoMOeTF3KJJItljIFItvM2bx UunxBcAxVbj0HIvUiYS/Xe7he/4BR+9bC3WkoPUKLcDyr5W7d4yAXHP/TYUyVLrf qaHC8WAPsL3g+PV+coomR1TUqKr/x6un0d8CQHjYibWvlNqzhagDtxgKPIUXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ9p5LABQR3ELWjpfcIQjUIb7O88wHwYDVR0j BBgwFoAUsXhAK+3j7Fpe4uDnH3NqE2DAavYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTEyNGU2YS1mNTFiLTQ2ZDAtOGVhMy03NmIyNzQ0NTU4YTYvMC9CMTc4NDAyQkVE RTNFQzVBNUVFMkUwRTcxRjczNkExMzYwQzA2QUY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZBMTM2MEMw NkFGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ExMjRlNmEtZjUxYi00NmQwLThl YTMtNzZiMjc0NDU1OGE2LzAvQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZB MTM2MEMwNkFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAILyZR2bKLYbE/XeYmuSjfpkpQ2EW1UcDru9 0BbuF/cnvkrRYY03xuw+67gJSyrRjnA3PLg/PmNY8+sqqyp0+XHoSPQOD88bCuIa O0BS3iTFyZ9QDqHsBT6wq1tMO8QaVzvUX3tP6q9+pXZAAniT8IPCIOCe085A6dmC olGAcQ880Bt8/HFTKuqzul15skhwcrZDkCUDwHugRxu1LEiV+tnpkOgkx5HCmZ/N ZD/7ShDtVwOMszmPrjIj/OIpGvzF4FWrm5jMiRNxI+BkosUDRULsE6kHCHotCDfh lsAE5aF8AAt/TkWFtHK0+CFhnw6yoT5dwecufWMIpj/XNynCltk= -----END CERTIFICATE-----Generated at Sat Aug 23 22:05:42 2025 by rpki-client