$ rpki-client -vvf repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft File: B7959E04EF090801395CE53E099D09F7AF2EF81B.mft (raw, json) Hash identifier: w9tlDrEl/vXldLTM0owyXm6YFAs4Fv05dCX4PCvx+g4= Subject key identifier: F3:F4:2F:B7:4D:BB:96:94:C5:A0:D0:92:AF:B0:76:33:CF:E0:1D:A7 Authority key identifier: B7:95:9E:04:EF:09:08:01:39:5C:E5:3E:09:9D:09:F7:AF:2E:F8:1B Certificate issuer: /CN=B7959E04EF090801395CE53E099D09F7AF2EF81B Certificate serial: 40D4C9AD0F96090732435737AFBC26572D6EA7F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft Manifest number: 01EA Signing time: Fri 08 Aug 2025 23:31:00 +0000 Manifest this update: Fri 08 Aug 2025 23:26:00 +0000 Manifest next update: Tue 12 Aug 2025 00:55:00 +0000 Files and hashes: 1: 3230332e3131342e3232372e302f32342d3234203d3e203435373033.roa (hash: S8koCw5Zpdz9WUfwrWHvdyG3BqQzOLzzd7o5WN4coH4=) 2: 3230332e3131342e3232362e302f32342d3234203d3e203435373033.roa (hash: 1cX8i6kVHz142LzobmEyC/+1K1VM1wldny1qyaPLfIA=) 3: B7959E04EF090801395CE53E099D09F7AF2EF81B.crl (hash: 0iOQ8vDAyAMJiKnPFASIYBgsD/0N5+UvwJaExi2uKU4=) 4: 3230332e3131342e3232362e302f32332d3233203d3e203435373033.roa (hash: 6Ec3PjRbQ83AgMPSDqdSdFcRTMZUzCno6pS4ublkNCA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.crl rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 00:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:d4:c9:ad:0f:96:09:07:32:43:57:37:af:bc:26:57:2d:6e:a7:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7959E04EF090801395CE53E099D09F7AF2EF81B Validity Not Before: Aug 8 23:26:00 2025 GMT Not After : Aug 12 00:55:00 2025 GMT Subject: CN=F3F42FB74DBB9694C5A0D092AFB07633CFE01DA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f5:c7:03:e5:57:4c:6e:a2:09:39:f8:c7:3a: 78:52:3a:0a:2e:82:f9:1f:e9:2d:14:8f:7e:5a:df: ec:c8:55:94:10:4f:1b:85:ef:92:25:12:42:88:b6: e9:a9:29:f2:36:fa:54:78:a1:b6:9f:0d:b4:e6:46: bf:a9:05:3a:e1:9b:50:a2:f0:8d:0c:7d:03:02:95: bf:7c:a6:aa:07:e4:40:91:f4:39:80:d7:71:fa:ec: 43:69:4a:2f:99:84:b1:5e:73:e6:fa:b2:a5:5e:c4: 1a:0c:6b:d9:f0:76:2e:a8:d5:a1:fa:56:22:83:e4: 15:15:52:18:b3:ef:3b:9c:4b:17:fa:36:ec:fb:06: 7c:d7:0e:01:6c:d5:19:94:f6:e9:85:95:e2:00:49: 7b:6d:66:06:07:a9:c4:01:20:c7:ac:b2:e1:6d:f9: 5f:3f:d3:e8:31:92:7c:08:bc:00:56:87:86:99:eb: d2:b0:5f:ae:d0:ec:26:9b:81:63:5f:61:97:b3:fa: 58:e4:02:83:95:ea:29:b7:d5:0f:12:e6:60:a6:2c: da:5f:4b:4a:85:5d:52:54:5b:23:86:4a:b0:3f:b1: 23:5d:2b:b9:84:60:ec:10:48:4c:ef:bd:91:b5:88: 2e:22:ce:a8:b7:bc:2d:fc:2c:24:68:3d:6a:33:d4: c1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F4:2F:B7:4D:BB:96:94:C5:A0:D0:92:AF:B0:76:33:CF:E0:1D:A7 X509v3 Authority Key Identifier: keyid:B7:95:9E:04:EF:09:08:01:39:5C:E5:3E:09:9D:09:F7:AF:2E:F8:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:8d:80:49:95:9e:3d:e5:17:0c:0b:8c:fd:47:4f:f4:df:44: 93:49:d6:50:db:e9:28:ec:3b:b2:dc:2b:74:15:45:cc:c0:c7: 08:b7:43:6e:98:43:e7:20:b4:60:06:ea:3c:27:c3:e8:9f:e9: ae:69:1c:aa:6a:63:ba:b1:ba:cb:44:ce:43:cb:83:54:19:a2: cb:d1:3e:f3:44:9d:f6:3d:fc:43:5e:d6:f9:92:13:43:68:3d: 57:f8:07:45:46:92:31:39:70:63:a9:50:1b:08:8e:72:ab:4e: a8:35:1f:35:ad:c1:3d:36:8c:83:bf:94:1a:bd:b7:1c:e1:c7: 1b:00:b7:3f:81:31:6c:44:2e:39:c6:88:2a:b6:94:4e:d4:b9: 5b:ee:09:75:00:27:c7:63:19:29:b6:f8:b8:90:46:4c:3a:e1: a1:f6:38:ab:3c:0a:3f:b3:3d:a5:bc:74:ec:3e:fc:e5:83:73: f9:15:67:cd:57:e5:0b:70:18:92:3f:3d:1a:73:e1:34:b1:f2: c7:cd:3f:2e:ea:d3:6e:cb:9e:f2:b2:45:a1:4d:de:85:86:36: 3e:49:de:fc:8d:c7:56:2f:83:3a:2f:06:28:9f:a6:18:81:11: 31:a7:b7:66:8c:e2:35:be:fd:02:30:f8:df:ba:11:ef:a0:db: 65:ea:4b:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQNTJrQ+WCQcyQ1c3r7wmVy1up/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc5NTlFMDRFRjA5MDgwMTM5NUNFNTNFMDk5RDA5RjdB RjJFRjgxQjAeFw0yNTA4MDgyMzI2MDBaFw0yNTA4MTIwMDU1MDBaMDMxMTAvBgNV BAMTKEYzRjQyRkI3NERCQjk2OTRDNUEwRDA5MkFGQjA3NjMzQ0ZFMDFEQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+9ccD5VdMbqIJOfjHOnhSOgou gvkf6S0Uj35a3+zIVZQQTxuF75IlEkKItumpKfI2+lR4obafDbTmRr+pBTrhm1Ci 8I0MfQMClb98pqoH5ECR9DmA13H67ENpSi+ZhLFec+b6sqVexBoMa9nwdi6o1aH6 ViKD5BUVUhiz7zucSxf6Nuz7BnzXDgFs1RmU9umFleIASXttZgYHqcQBIMessuFt +V8/0+gxknwIvABWh4aZ69KwX67Q7CabgWNfYZez+ljkAoOV6im31Q8S5mCmLNpf S0qFXVJUWyOGSrA/sSNdK7mEYOwQSEzvvZG1iC4izqi3vC38LCRoPWoz1MHbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8/Qvt027lpTFoNCSr7B2M8/gHacwHwYDVR0j BBgwFoAUt5WeBO8JCAE5XOU+CZ0J968u+BswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDYzYWU3Yy1hNmZmLTRmZDgtOTZmMi0wYmExODgwMTMzYzcvMC9CNzk1OUUwNEVG MDkwODAxMzk1Q0U1M0UwOTlEMDlGN0FGMkVGODFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjc5NTlFMDRFRjA5MDgwMTM5NUNFNTNFMDk5RDA5RjdBRjJF RjgxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ2M2FlN2MtYTZmZi00ZmQ4LTk2 ZjItMGJhMTg4MDEzM2M3LzAvQjc5NTlFMDRFRjA5MDgwMTM5NUNFNTNFMDk5RDA5 RjdBRjJFRjgxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmNgEmVnj3lFwwLjP1HT/TfRJNJ1lDb6Sjs O7LcK3QVRczAxwi3Q26YQ+cgtGAG6jwnw+if6a5pHKpqY7qxustEzkPLg1QZosvR PvNEnfY9/ENe1vmSE0NoPVf4B0VGkjE5cGOpUBsIjnKrTqg1HzWtwT02jIO/lBq9 txzhxxsAtz+BMWxELjnGiCq2lE7UuVvuCXUAJ8djGSm2+LiQRkw64aH2OKs8Cj+z PaW8dOw+/OWDc/kVZ81X5QtwGJI/PRpz4TSx8sfNPy7q027LnvKyRaFN3oWGNj5J 3vyNx1YvgzovBiifphiBETGnt2aM4jW+/QIw+N+6Ee+g22XqS7g= -----END CERTIFICATE-----Generated at Sat Aug 9 14:17:01 2025 by rpki-client