$ rpki-client -vvf repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft File: B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft (raw, json) Hash identifier: ti6JZfkLHVi+UO3RFMPSb/gmWqGTxMZ35wXf3TniGMg= Subject key identifier: 62:5A:FB:11:70:EC:A0:0D:FB:CF:B3:BC:85:15:79:64:51:95:A3:FC Authority key identifier: B9:2F:0F:B3:E1:41:D5:2E:D2:A7:1F:A4:83:ED:3C:6D:72:3F:60:E2 Certificate issuer: /CN=B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2 Certificate serial: 7293014F28B1142A5FF00B8CD01D6938F00716D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft Manifest number: 78 Signing time: Fri 22 Aug 2025 22:01:33 +0000 Manifest this update: Fri 22 Aug 2025 21:56:33 +0000 Manifest next update: Tue 26 Aug 2025 07:23:33 +0000 Files and hashes: 1: B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl (hash: AL+3LIZo1px4aUOYpDzVp7FzhRyY/OSadBJ0NONNSDo=) 2: 323030313a6466343a363463303a3a2f34382d3438203d3e20313533313430.roa (hash: yyzmdDb8FTjdC+THNvwdhgAOOXsuzFTHgJxxHYpFD6k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 07:23:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:93:01:4f:28:b1:14:2a:5f:f0:0b:8c:d0:1d:69:38:f0:07:16:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2 Validity Not Before: Aug 22 21:56:33 2025 GMT Not After : Aug 26 07:23:33 2025 GMT Subject: CN=625AFB1170ECA00DFBCFB3BC851579645195A3FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e2:5b:c4:db:8d:98:30:a2:2c:25:3b:f6:79: b2:15:e0:d5:69:5b:1d:f6:7e:8e:7b:3d:69:aa:2d: f3:05:48:cf:b8:9e:33:7b:e2:35:d8:fe:3c:87:b4: 95:c6:67:77:2a:98:17:62:01:0a:8a:e0:04:a7:92: 79:af:0a:0f:6c:e2:f9:c8:49:7a:f1:a5:f9:f0:2b: d6:3e:ad:03:f9:ba:52:c4:b1:ba:af:62:bd:fe:e2: a4:1b:a7:d9:2e:0e:1c:69:f7:58:d9:25:48:8a:5a: 2f:ce:f9:96:d3:45:be:7b:83:79:c1:a5:fc:73:a9: ca:4f:f1:20:f8:69:c4:84:75:85:39:39:1b:6d:ec: 36:4f:2e:76:a8:34:0e:06:f3:fb:4e:be:7f:1d:77: 97:da:78:5f:6a:09:ae:8a:79:15:78:ae:88:00:63: b3:65:e5:44:1d:a8:9c:ec:47:68:db:a1:7a:96:f5: 1e:68:a3:4f:9d:fa:c7:e6:be:16:d0:76:50:fb:b0: f4:94:c4:8f:b4:56:31:08:42:28:41:e2:14:45:c6: b7:98:1f:8e:d9:74:bc:bb:0f:cc:d6:39:d5:08:6b: 74:c6:fd:a4:bf:b7:d8:09:0f:59:6f:8b:8b:76:16: 40:db:22:ae:c3:58:6e:9b:67:58:85:a6:f4:fc:a1: 43:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:5A:FB:11:70:EC:A0:0D:FB:CF:B3:BC:85:15:79:64:51:95:A3:FC X509v3 Authority Key Identifier: keyid:B9:2F:0F:B3:E1:41:D5:2E:D2:A7:1F:A4:83:ED:3C:6D:72:3F:60:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:f0:12:47:19:a8:85:4a:90:b2:17:6e:a8:73:58:84:80:ec: a1:30:4f:bc:9d:95:54:a6:2d:8e:c3:37:fa:9a:bb:6f:b3:a5: 17:b9:5b:e1:3d:2c:fe:b1:1b:5b:38:5b:aa:dd:57:f7:d6:b9: 31:3e:29:01:ac:fb:bc:80:6e:f6:18:4a:0f:d5:a8:ee:96:cc: 73:f2:84:74:e4:37:96:86:a6:15:37:61:41:11:e9:83:d2:cd: 1a:26:d9:a5:b9:8f:e0:9d:0b:2c:08:cd:45:da:eb:ae:dd:24: 0a:f6:cc:4c:44:76:7d:2d:53:0d:c6:40:36:ed:e5:20:df:c4: 20:5c:fd:b9:24:6d:f5:6f:20:b7:1a:3b:39:1c:07:c0:76:b3: 67:86:87:0d:5e:d1:d0:69:77:e1:89:15:4c:24:28:a3:71:84: 36:93:8b:12:2b:d1:50:8c:da:eb:2f:18:f1:ac:2a:3d:10:b2: d1:15:d1:0c:6a:10:b9:fe:f4:15:8d:5b:ce:d4:a7:0b:0d:ef: e8:59:a0:fe:14:17:4c:84:2a:a9:17:b9:8a:8a:50:19:18:69: a9:69:c1:f1:d2:95:00:bc:7a:8c:71:f3:db:96:97:b2:48:6d: ee:c1:84:20:af:ed:42:fc:c2:90:d4:b3:25:22:26:a9:41:f7: 06:dd:85:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcpMBTyixFCpf8AuM0B1pOPAHFtcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDNDNkQ3 MjNGNjBFMjAeFw0yNTA4MjIyMTU2MzNaFw0yNTA4MjYwNzIzMzNaMDMxMTAvBgNV BAMTKDYyNUFGQjExNzBFQ0EwMERGQkNGQjNCQzg1MTU3OTY0NTE5NUEzRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC54lvE242YMKIsJTv2ebIV4NVp Wx32fo57PWmqLfMFSM+4njN74jXY/jyHtJXGZ3cqmBdiAQqK4ASnknmvCg9s4vnI SXrxpfnwK9Y+rQP5ulLEsbqvYr3+4qQbp9kuDhxp91jZJUiKWi/O+ZbTRb57g3nB pfxzqcpP8SD4acSEdYU5ORtt7DZPLnaoNA4G8/tOvn8dd5faeF9qCa6KeRV4rogA Y7Nl5UQdqJzsR2jboXqW9R5oo0+d+sfmvhbQdlD7sPSUxI+0VjEIQihB4hRFxreY H47ZdLy7D8zWOdUIa3TG/aS/t9gJD1lvi4t2FkDbIq7DWG6bZ1iFpvT8oUOxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYlr7EXDsoA37z7O8hRV5ZFGVo/wwHwYDVR0j BBgwFoAUuS8Ps+FB1S7Spx+kg+08bXI/YOIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWZjYmZiYi1iYTNmLTRkNTMtYTA0Zi0xNGQ2ZjRiZTBjYjEvMS9COTJGMEZCM0Ux NDFENTJFRDJBNzFGQTQ4M0VEM0M2RDcyM0Y2MEUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDNDNkQ3MjNG NjBFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzEvQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDND NkQ3MjNGNjBFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGLwEkcZqIVKkLIXbqhzWISA7KEwT7ydlVSm LY7DN/qau2+zpRe5W+E9LP6xG1s4W6rdV/fWuTE+KQGs+7yAbvYYSg/VqO6WzHPy hHTkN5aGphU3YUER6YPSzRom2aW5j+CdCywIzUXa667dJAr2zExEdn0tUw3GQDbt 5SDfxCBc/bkkbfVvILcaOzkcB8B2s2eGhw1e0dBpd+GJFUwkKKNxhDaTixIr0VCM 2usvGPGsKj0QstEV0QxqELn+9BWNW87UpwsN7+hZoP4UF0yEKqkXuYqKUBkYaalp wfHSlQC8eoxx89uWl7JIbe7BhCCv7UL8wpDUsyUiJqlB9wbdhTI= -----END CERTIFICATE-----Generated at Sat Aug 23 20:02:41 2025 by rpki-client