$ rpki-client -vvf repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.mft File: B88116E180F32C03362804A81CB0CF2EB0C261B6.mft (raw, json) Hash identifier: M1PDsVoPugcsIYer6L88jy2FYvv4nZ+vmCOC8/LWRew= Subject key identifier: BD:57:38:8D:94:9C:74:E9:1C:78:9B:BC:DB:75:C6:FE:E2:40:F8:F6 Authority key identifier: B8:81:16:E1:80:F3:2C:03:36:28:04:A8:1C:B0:CF:2E:B0:C2:61:B6 Certificate issuer: /CN=B88116E180F32C03362804A81CB0CF2EB0C261B6 Certificate serial: 5B072B5C1679A4C694E9A42D0209567400FE3831 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.mft Manifest number: 0156 Signing time: Wed 06 Aug 2025 02:32:06 +0000 Manifest this update: Wed 06 Aug 2025 02:27:06 +0000 Manifest next update: Sat 09 Aug 2025 03:27:06 +0000 Files and hashes: 1: B88116E180F32C03362804A81CB0CF2EB0C261B6.crl (hash: JEpP4tq6lUZ1Ej5jABKiqPdOeR7u+pKFckn5zIaeoy4=) 2: 3130332e3133322e35322e302f32342d3234203d3e20313338313233.roa (hash: 61PqzbefMCe104GH4tvsaNnjc51GZYX3PE2lw6vf/AE=) 3: 3130332e3133322e35352e302f32342d3234203d3e20313338313233.roa (hash: CIgXNrGi+SDH5ijMaMYNAYeOpi7DzjTKmeB4Y5/uAfQ=) 4: 3130332e3133322e35342e302f32342d3234203d3e20313338313233.roa (hash: xRhm+ztLVPsT2+vuoKMwBZMT/FF6d5r60ZpTwX3FlUw=) 5: 3130332e3133322e35322e302f32322d3234203d3e20313338313233.roa (hash: pzNE22UpG1Jt2+Owlsq87q7swwQXq2gUn384QTqpP2M=) 6: 3130332e3133322e35332e302f32342d3234203d3e20313338313233.roa (hash: 0WXWQlb4tMBzSZgjns1zengdeTcdVp1QSefZx39KHLE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.crl rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 03:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:07:2b:5c:16:79:a4:c6:94:e9:a4:2d:02:09:56:74:00:fe:38:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B88116E180F32C03362804A81CB0CF2EB0C261B6 Validity Not Before: Aug 6 02:27:06 2025 GMT Not After : Aug 9 03:27:06 2025 GMT Subject: CN=BD57388D949C74E91C789BBCDB75C6FEE240F8F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:97:a8:88:78:d6:ea:10:35:62:5c:cd:93:83: 36:22:2f:6c:4a:0a:f8:66:83:12:5e:7a:09:aa:e4: 64:86:5a:80:12:c5:ae:05:4e:a0:8d:b9:d3:01:9d: 6a:e6:f8:4d:43:bf:e5:b6:e3:79:18:09:06:14:f5: d2:3e:88:4b:a9:4f:cf:0a:46:5c:b8:88:30:3b:3d: 29:4c:9f:1d:db:64:7d:2f:83:c3:f8:79:44:94:44: 93:34:17:43:c8:5a:ec:d9:33:72:60:c4:19:bc:c9: e9:1f:2e:58:99:df:07:0f:33:9c:00:86:31:70:97: 82:f6:3a:ad:f4:b7:fd:c0:94:e8:2f:7b:f1:1e:ee: 4c:a0:57:30:d6:4f:6f:5e:94:aa:35:84:c9:a4:a2: 95:92:c5:a3:6b:ef:05:45:26:c0:a9:39:cb:20:92: 28:36:3d:de:69:6c:2b:5c:02:b1:4a:9c:05:c8:07: cf:06:c4:1c:d5:74:15:02:b8:22:b9:0a:8b:b1:76: c9:37:36:cd:31:69:a2:37:78:29:78:98:76:76:fc: f2:40:f4:73:12:08:d5:9f:aa:d8:73:ca:fd:83:16: cf:4e:6d:9b:3a:18:8a:68:4b:3a:f4:88:19:c9:b7: 83:77:d4:78:ec:75:d6:2f:55:99:f7:ab:99:fb:99: 93:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:57:38:8D:94:9C:74:E9:1C:78:9B:BC:DB:75:C6:FE:E2:40:F8:F6 X509v3 Authority Key Identifier: keyid:B8:81:16:E1:80:F3:2C:03:36:28:04:A8:1C:B0:CF:2E:B0:C2:61:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:8e:f3:0c:3f:42:ac:0d:e0:6c:87:ed:67:0f:9e:2a:61:7a: 47:9f:4a:85:42:cd:20:1e:cc:7e:df:2d:40:e1:88:24:c8:76: e8:91:6e:63:0e:c7:c5:d4:5c:78:bc:4a:3f:6b:e0:17:8a:4d: d6:f8:0c:54:d2:ff:49:e3:d6:0c:f6:aa:0d:ac:cc:74:2e:5e: e0:79:07:94:35:58:b7:15:54:c9:86:fa:b7:c5:e4:0b:3b:6d: e3:9e:42:79:db:af:25:9f:67:da:bf:f7:38:27:bd:f3:68:84: 39:b5:86:c6:ce:f0:e5:e0:b7:6c:22:14:23:f0:ea:81:18:e6: a5:be:ea:53:8e:47:86:66:a6:b6:a2:25:e0:33:9a:ed:e7:42: e2:ad:81:31:a6:2b:e2:35:4d:f9:38:bc:27:d1:5a:98:f5:f7: e7:e0:54:21:2a:78:90:ef:d1:a4:69:b1:94:fd:82:ee:b7:06: c3:3c:2c:8e:0f:00:b3:92:2b:1a:13:fb:a5:87:be:ec:f4:1d: aa:f2:8b:28:f7:3b:e4:9e:27:64:17:fe:e3:67:2c:55:4a:4d: 1d:86:45:53:eb:e2:bd:3e:73:ca:cf:16:16:01:04:bd:18:aa: c3:51:07:ee:0c:bf:dd:f7:6a:e2:b5:2d:47:5a:fd:b2:cd:cc: be:c6:e9:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWwcrXBZ5pMaU6aQtAglWdAD+ODEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg4MTE2RTE4MEYzMkMwMzM2MjgwNEE4MUNCMENGMkVC MEMyNjFCNjAeFw0yNTA4MDYwMjI3MDZaFw0yNTA4MDkwMzI3MDZaMDMxMTAvBgNV BAMTKEJENTczODhEOTQ5Qzc0RTkxQzc4OUJCQ0RCNzVDNkZFRTI0MEY4RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzl6iIeNbqEDViXM2TgzYiL2xK CvhmgxJeegmq5GSGWoASxa4FTqCNudMBnWrm+E1Dv+W243kYCQYU9dI+iEupT88K Rly4iDA7PSlMnx3bZH0vg8P4eUSURJM0F0PIWuzZM3JgxBm8yekfLliZ3wcPM5wA hjFwl4L2Oq30t/3AlOgve/Ee7kygVzDWT29elKo1hMmkopWSxaNr7wVFJsCpOcsg kig2Pd5pbCtcArFKnAXIB88GxBzVdBUCuCK5Couxdsk3Ns0xaaI3eCl4mHZ2/PJA 9HMSCNWfqthzyv2DFs9ObZs6GIpoSzr0iBnJt4N31HjsddYvVZn3q5n7mZM5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvVc4jZScdOkceJu823XG/uJA+PYwHwYDVR0j BBgwFoAUuIEW4YDzLAM2KASoHLDPLrDCYbYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTk2ZWQ4OS0yYTE2LTQxNTEtYmY4My01OWRjZTU2MTQ2MGMvMC9CODgxMTZFMTgw RjMyQzAzMzYyODA0QTgxQ0IwQ0YyRUIwQzI2MUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg4MTE2RTE4MEYzMkMwMzM2MjgwNEE4MUNCMENGMkVCMEMy NjFCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU5NmVkODktMmExNi00MTUxLWJm ODMtNTlkY2U1NjE0NjBjLzAvQjg4MTE2RTE4MEYzMkMwMzM2MjgwNEE4MUNCMENG MkVCMEMyNjFCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAESO8ww/QqwN4GyH7WcPniphekefSoVCzSAe zH7fLUDhiCTIduiRbmMOx8XUXHi8Sj9r4BeKTdb4DFTS/0nj1gz2qg2szHQuXuB5 B5Q1WLcVVMmG+rfF5As7beOeQnnbryWfZ9q/9zgnvfNohDm1hsbO8OXgt2wiFCPw 6oEY5qW+6lOOR4ZmpraiJeAzmu3nQuKtgTGmK+I1Tfk4vCfRWpj19+fgVCEqeJDv 0aRpsZT9gu63BsM8LI4PALOSKxoT+6WHvuz0Haryiyj3O+SeJ2QX/uNnLFVKTR2G RVPr4r0+c8rPFhYBBL0YqsNRB+4Mv933auK1LUda/bLNzL7G6f8= -----END CERTIFICATE-----Generated at Wed Aug 6 19:24:32 2025 by rpki-client