$ rpki-client -vvf repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft File: B2D1CBD015A419010845E6F56D8385C8647B5390.mft (raw, json) Hash identifier: /zkZO1ajdS2JGbd6uTh0HG0onycMUlMarzSh9ksB9kk= Subject key identifier: DC:4D:D3:75:62:3D:0C:A4:8E:0E:85:8E:DB:7E:71:90:CE:CA:4E:2A Authority key identifier: B2:D1:CB:D0:15:A4:19:01:08:45:E6:F5:6D:83:85:C8:64:7B:53:90 Certificate issuer: /CN=B2D1CBD015A419010845E6F56D8385C8647B5390 Certificate serial: 3D46A962EA9A659DCB64DEADCD35C59249491CB7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft Manifest number: 02AF Signing time: Thu 21 Aug 2025 16:32:06 +0000 Manifest this update: Thu 21 Aug 2025 16:27:06 +0000 Manifest next update: Sun 24 Aug 2025 17:43:06 +0000 Files and hashes: 1: 323430363a343534303a3a2f33322d3332203d3e20313430343634.roa (hash: fW6me2gng7+RFAgwfv3lcoF9Ov98BB9yIZ6/btVVKsw=) 2: 3130332e3135332e3133342e302f32332d3233203d3e20313430343634.roa (hash: bAHbnIP0Wicgt74YcQMMyo48qnOQtogRe4ndD6XNQrg=) 3: 3130332e3135332e3133352e302f32342d3234203d3e20313430343634.roa (hash: oUlQyF3I0zLJjLl9EcH8NBVRAz863HrDlDUllspbny0=) 4: 3130332e3135332e3133342e302f32342d3234203d3e20313430343634.roa (hash: cn1hAJHYGCMSOghgviiiSzFiPXYh8mLQKkzicGhK/aE=) 5: B2D1CBD015A419010845E6F56D8385C8647B5390.crl (hash: qACL2R2J8LBROVckpxD3F3OFTkA0ixGkM4yXuUfnVd0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.crl rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:43:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:46:a9:62:ea:9a:65:9d:cb:64:de:ad:cd:35:c5:92:49:49:1c:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2D1CBD015A419010845E6F56D8385C8647B5390 Validity Not Before: Aug 21 16:27:06 2025 GMT Not After : Aug 24 17:43:06 2025 GMT Subject: CN=DC4DD375623D0CA48E0E858EDB7E7190CECA4E2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:40:49:a4:00:1b:f3:ea:f0:d1:c1:95:5c:51: e0:c9:a3:31:ba:2e:e8:a6:f9:1f:e3:87:d5:1e:9c: 0f:80:4f:76:d6:5d:c9:a7:93:7a:6c:5f:53:33:ce: 37:07:e5:72:ed:8f:9d:e7:2f:87:d6:95:7f:ba:3b: f6:f7:69:4e:46:b0:f5:35:97:c1:af:c5:84:fd:c2: 2d:cc:33:e6:42:0b:16:0b:23:5f:0f:b3:ef:bf:ac: a9:31:da:7e:e2:fc:b0:83:91:f9:f4:1f:1f:5c:01: 69:02:68:cc:f6:e3:a3:a6:bb:d1:de:1c:4a:66:99: ed:13:fd:b8:67:d9:db:a4:2b:92:e1:ff:e2:da:7c: 7c:0c:34:6f:0c:4a:d2:45:c6:0e:ed:e6:f9:01:40: 53:ab:ca:d0:fc:8b:76:fd:92:90:d3:20:ff:59:0a: 07:4f:ee:e5:58:76:e2:58:cb:18:6d:6f:5e:f2:dd: 51:0b:64:f5:db:bf:04:3a:60:dc:00:a3:8b:5f:a9: 42:2f:29:d6:dd:a6:54:94:e7:3f:6a:8f:5d:ee:2d: 72:f5:75:79:b2:1a:23:74:4b:f1:b1:e1:5f:40:71: 12:2b:e8:c3:6a:49:21:7f:69:50:b7:eb:42:2b:39: d1:ac:69:b7:1f:a7:a0:7c:e1:10:eb:8e:19:77:89: 84:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:4D:D3:75:62:3D:0C:A4:8E:0E:85:8E:DB:7E:71:90:CE:CA:4E:2A X509v3 Authority Key Identifier: keyid:B2:D1:CB:D0:15:A4:19:01:08:45:E6:F5:6D:83:85:C8:64:7B:53:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:56:b5:b1:74:8d:cf:b5:b2:cc:80:c6:84:c7:be:1e:72:98: e1:c7:d8:d0:4c:6d:72:f8:ed:51:16:74:24:45:1f:b9:c0:39: 21:be:9b:62:c8:25:6c:64:8e:10:99:23:d7:29:4b:de:6d:f7: ed:67:e7:d8:16:67:b1:db:a9:a7:88:69:f9:3b:e8:a8:e2:53: 1f:ec:6f:c0:8a:04:b7:82:86:0b:c2:e1:b3:3f:42:3a:37:48: 1f:00:76:0e:13:d8:c5:c3:83:c4:3b:31:8e:bc:97:83:d8:5e: fd:bf:8b:8c:d7:74:d3:92:ad:2b:68:84:7b:97:04:c9:25:d7: 67:7e:7b:2a:24:f4:b6:bc:31:84:af:94:a9:e4:3b:9d:0f:aa: 78:22:9a:c6:31:c6:3a:8d:16:61:ec:62:36:96:62:f4:78:8a: 0c:6a:9f:53:b4:84:1c:5f:39:bc:ee:d0:42:72:03:84:89:e6: 76:17:7a:3e:28:d1:80:19:cb:58:6a:2a:02:94:6a:9d:14:9a: 9f:79:82:94:8c:5a:cd:8e:dd:38:c2:16:ea:4e:53:2b:f8:65: 81:b5:14:46:94:cf:23:17:8b:61:d2:b9:69:f1:f4:7b:43:45: 1a:8a:b2:f8:4d:ac:3d:c7:2d:b6:bd:29:63:3d:af:05:89:8a: ae:a0:c7:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPUapYuqaZZ3LZN6tzTXFkklJHLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1Qzg2 NDdCNTM5MDAeFw0yNTA4MjExNjI3MDZaFw0yNTA4MjQxNzQzMDZaMDMxMTAvBgNV BAMTKERDNEREMzc1NjIzRDBDQTQ4RTBFODU4RURCN0U3MTkwQ0VDQTRFMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcQEmkABvz6vDRwZVcUeDJozG6 Luim+R/jh9UenA+AT3bWXcmnk3psX1MzzjcH5XLtj53nL4fWlX+6O/b3aU5GsPU1 l8GvxYT9wi3MM+ZCCxYLI18Ps++/rKkx2n7i/LCDkfn0Hx9cAWkCaMz246Omu9He HEpmme0T/bhn2dukK5Lh/+LafHwMNG8MStJFxg7t5vkBQFOrytD8i3b9kpDTIP9Z CgdP7uVYduJYyxhtb17y3VELZPXbvwQ6YNwAo4tfqUIvKdbdplSU5z9qj13uLXL1 dXmyGiN0S/Gx4V9AcRIr6MNqSSF/aVC360IrOdGsabcfp6B84RDrjhl3iYSnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3E3TdWI9DKSODoWO235xkM7KTiowHwYDVR0j BBgwFoAUstHL0BWkGQEIReb1bYOFyGR7U5AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjhiZTkwNS1mMjk2LTQ1ZDEtYTg3OS00YTRkZTUyY2IyZDYvMC9CMkQxQ0JEMDE1 QTQxOTAxMDg0NUU2RjU2RDgzODVDODY0N0I1MzkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1Qzg2NDdC NTM5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4YmU5MDUtZjI5Ni00NWQxLWE4 NzktNGE0ZGU1MmNiMmQ2LzAvQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1 Qzg2NDdCNTM5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFBWtbF0jc+1ssyAxoTHvh5ymOHH2NBMbXL4 7VEWdCRFH7nAOSG+m2LIJWxkjhCZI9cpS95t9+1n59gWZ7HbqaeIafk76KjiUx/s b8CKBLeChgvC4bM/Qjo3SB8Adg4T2MXDg8Q7MY68l4PYXv2/i4zXdNOSrStohHuX BMkl12d+eyok9La8MYSvlKnkO50PqngimsYxxjqNFmHsYjaWYvR4igxqn1O0hBxf Obzu0EJyA4SJ5nYXej4o0YAZy1hqKgKUap0Ump95gpSMWs2O3TjCFupOUyv4ZYG1 FEaUzyMXi2HSuWnx9HtDRRqKsvhNrD3HLba9KWM9rwWJiq6gxwM= -----END CERTIFICATE-----Generated at Sat Aug 23 10:34:22 2025 by rpki-client