$ rpki-client -vvf repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft File: B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft (raw, json) Hash identifier: w9OiEoxOuubRehzVpI7AVGe/s8m5j8fLyV8QHPw7n28= Subject key identifier: BB:60:76:03:C7:59:BD:CE:1D:FE:40:DB:F4:7E:EB:53:93:DE:C9:BF Authority key identifier: B7:6C:EE:66:CD:32:9E:4E:DD:33:E6:D3:45:2A:33:FB:BE:00:D7:41 Certificate issuer: /CN=B76CEE66CD329E4EDD33E6D3452A33FBBE00D741 Certificate serial: 7586C3448807F48CD40762BCE69FA1F14A10A506 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft Manifest number: 0219 Signing time: Thu 21 Aug 2025 05:10:52 +0000 Manifest this update: Thu 21 Aug 2025 05:05:52 +0000 Manifest next update: Sun 24 Aug 2025 13:34:52 +0000 Files and hashes: 1: 3130332e3138362e39342e302f32332d3234203d3e20313439373430.roa (hash: 36f1oVCDIma5/edGeBmPtM2U4zeHtnBlVDsNRr5sez8=) 2: B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.crl (hash: 2/RmL0YFIc/G9tZBs1ibfAYWSwwU6WsugS6DUVpEj0s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.crl rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:34:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:86:c3:44:88:07:f4:8c:d4:07:62:bc:e6:9f:a1:f1:4a:10:a5:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B76CEE66CD329E4EDD33E6D3452A33FBBE00D741 Validity Not Before: Aug 21 05:05:52 2025 GMT Not After : Aug 24 13:34:52 2025 GMT Subject: CN=BB607603C759BDCE1DFE40DBF47EEB5393DEC9BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:17:a4:32:8b:76:5c:c5:e9:a2:69:3a:e5:d7: e0:3b:9b:3e:b7:36:9f:3d:b4:79:26:be:5e:1b:0d: 21:0f:56:88:0f:77:6e:d9:5e:a5:fe:61:68:ae:18: 84:c4:e0:7e:e8:a5:6c:19:ef:d9:6a:7c:d4:78:02: 43:4c:00:29:3d:53:2e:e4:ce:a9:7b:49:81:29:bf: 94:e1:b9:90:88:e0:31:0a:0f:bb:fc:6a:0c:45:9e: 61:1f:14:17:99:0d:d4:24:f0:3c:05:75:ec:96:79: 60:e9:84:21:87:06:3c:d9:83:aa:de:39:db:bd:63: 5e:53:72:86:7e:da:e1:5a:d7:1b:38:ec:ee:e6:9c: b0:ae:ba:0a:03:66:5c:fc:aa:18:91:9b:80:22:52: 72:28:70:ee:5f:1a:b4:99:61:e5:67:50:a9:0e:0e: 31:5b:c1:02:01:de:c4:3a:8b:1f:17:bd:44:74:f5: 1e:ff:6b:54:6e:58:33:da:d8:9b:26:66:e7:4a:83: e8:48:cb:39:8a:dc:ec:e7:be:5e:2e:d2:f7:ee:7c: 99:27:f9:a7:f2:9e:10:51:7f:0c:35:af:75:4d:85: fc:e3:b3:7f:34:6a:86:15:4a:f5:c1:01:70:82:a6: aa:93:8f:7f:19:db:55:4b:a9:e6:9a:05:6a:01:df: 5b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:60:76:03:C7:59:BD:CE:1D:FE:40:DB:F4:7E:EB:53:93:DE:C9:BF X509v3 Authority Key Identifier: keyid:B7:6C:EE:66:CD:32:9E:4E:DD:33:E6:D3:45:2A:33:FB:BE:00:D7:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:6f:8a:2a:80:0b:cc:60:90:23:f4:83:e5:8c:84:96:ff:41: 9b:80:99:ff:bd:5f:2e:ec:de:8b:da:4e:90:2d:83:8c:52:6c: 0f:a3:8e:e8:88:64:79:01:f6:55:f7:8f:03:cb:8a:8b:c6:00: 19:44:e7:8a:56:f2:2c:ef:06:e6:3d:3d:17:50:34:f5:a1:e6: f4:36:07:e7:6c:83:0c:ad:e4:41:02:28:91:85:b2:24:bb:f4: de:67:bc:83:83:16:48:dc:e6:16:3c:03:f5:a6:4b:46:b0:87: 33:62:8a:58:2b:c3:b1:ee:09:d3:4e:d3:5f:64:e7:3c:74:3a: 19:45:94:de:aa:72:7f:da:92:9b:ed:17:e6:7d:55:1b:c2:0b: d1:06:cc:19:34:a6:f7:67:58:d1:f3:12:43:80:ed:1f:6a:c6: 9d:a6:ce:b8:12:5d:a2:ed:37:ee:17:07:fd:c7:91:e6:de:5c: d9:51:3a:48:17:70:54:39:08:08:ae:d4:a7:f6:27:f1:17:58: 63:8e:05:37:3c:8e:8b:b4:7e:96:cd:6c:f1:4c:03:89:cd:ba: 65:0e:c5:d7:98:80:f7:6d:83:05:8d:33:43:41:3e:f6:ff:71: 62:a1:2d:34:3b:1f:26:39:27:8b:db:07:ff:d1:be:55:16:86: 25:2a:24:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdYbDRIgH9IzUB2K85p+h8UoQpQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc2Q0VFNjZDRDMyOUU0RUREMzNFNkQzNDUyQTMzRkJC RTAwRDc0MTAeFw0yNTA4MjEwNTA1NTJaFw0yNTA4MjQxMzM0NTJaMDMxMTAvBgNV BAMTKEJCNjA3NjAzQzc1OUJEQ0UxREZFNDBEQkY0N0VFQjUzOTNERUM5QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqF6Qyi3ZcxemiaTrl1+A7mz63 Np89tHkmvl4bDSEPVogPd27ZXqX+YWiuGITE4H7opWwZ79lqfNR4AkNMACk9Uy7k zql7SYEpv5ThuZCI4DEKD7v8agxFnmEfFBeZDdQk8DwFdeyWeWDphCGHBjzZg6re Odu9Y15TcoZ+2uFa1xs47O7mnLCuugoDZlz8qhiRm4AiUnIocO5fGrSZYeVnUKkO DjFbwQIB3sQ6ix8XvUR09R7/a1RuWDPa2JsmZudKg+hIyzmK3Oznvl4u0vfufJkn +afynhBRfww1r3VNhfzjs380aoYVSvXBAXCCpqqTj38Z21VLqeaaBWoB31uVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu2B2A8dZvc4d/kDb9H7rU5Peyb8wHwYDVR0j BBgwFoAUt2zuZs0ynk7dM+bTRSoz+74A10EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjdiNzY3Ny02MjA0LTQwNWYtOGJhMi1lNzE0MzI0YzE1ZDcvMC9CNzZDRUU2NkNE MzI5RTRFREQzM0U2RDM0NTJBMzNGQkJFMDBENzQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjc2Q0VFNjZDRDMyOUU0RUREMzNFNkQzNDUyQTMzRkJCRTAw RDc0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y3Yjc2NzctNjIwNC00MDVmLThi YTItZTcxNDMyNGMxNWQ3LzAvQjc2Q0VFNjZDRDMyOUU0RUREMzNFNkQzNDUyQTMz RkJCRTAwRDc0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI9viiqAC8xgkCP0g+WMhJb/QZuAmf+9Xy7s 3ovaTpAtg4xSbA+jjuiIZHkB9lX3jwPLiovGABlE54pW8izvBuY9PRdQNPWh5vQ2 B+dsgwyt5EECKJGFsiS79N5nvIODFkjc5hY8A/WmS0awhzNiilgrw7HuCdNO019k 5zx0OhlFlN6qcn/akpvtF+Z9VRvCC9EGzBk0pvdnWNHzEkOA7R9qxp2mzrgSXaLt N+4XB/3HkebeXNlROkgXcFQ5CAiu1Kf2J/EXWGOOBTc8jou0fpbNbPFMA4nNumUO xdeYgPdtgwWNM0NBPvb/cWKhLTQ7HyY5J4vbB//RvlUWhiUqJDA= -----END CERTIFICATE-----Generated at Sat Aug 23 12:55:49 2025 by rpki-client