$ rpki-client -vvf repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft File: B9A55DD123C2F224C4E245856905F78F2F354D92.mft (raw, json) Hash identifier: eX3Dg1u2rl7/Vmzr0elq+bkUea+IJoQTydZu2Tv8HzE= Subject key identifier: 9A:17:93:93:FF:BD:3E:D9:F6:82:CE:01:82:2B:97:6A:25:AF:96:2E Authority key identifier: B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92 Certificate issuer: /CN=B9A55DD123C2F224C4E245856905F78F2F354D92 Certificate serial: 6C5D6EB100C7EC3902BD484F97D68A1D7615640D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft Manifest number: C7 Signing time: Mon 04 Aug 2025 14:01:01 +0000 Manifest this update: Mon 04 Aug 2025 13:56:01 +0000 Manifest next update: Fri 08 Aug 2025 01:58:01 +0000 Files and hashes: 1: 3135372e31302e39372e302f32342d3234203d3e203538383231.roa (hash: UPR5y8V0jVDX7lorT6sk4sYb0YCh+EKPNMakCdOkBwI=) 2: B9A55DD123C2F224C4E245856905F78F2F354D92.crl (hash: rIa+NMa18zS4y/s7qSTVM2jS5DaY+5gDsAJtABXdkzY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.crl rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 01:58:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:5d:6e:b1:00:c7:ec:39:02:bd:48:4f:97:d6:8a:1d:76:15:64:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9A55DD123C2F224C4E245856905F78F2F354D92 Validity Not Before: Aug 4 13:56:01 2025 GMT Not After : Aug 8 01:58:01 2025 GMT Subject: CN=9A179393FFBD3ED9F682CE01822B976A25AF962E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:50:00:b4:ec:2c:1d:fa:5c:7d:07:cc:60:1f: 86:e1:71:1d:88:bd:1f:30:38:d3:ec:dc:9d:c6:d7: bb:a6:af:c3:32:1d:d0:4e:5b:30:e3:9e:ba:91:1a: 6c:a3:87:ac:30:3c:57:c2:cf:6c:2c:e7:a5:e6:38: 9d:2c:d2:8d:72:75:05:28:29:ed:c2:c2:af:75:4b: b1:a6:b6:36:55:7c:32:ce:98:49:f6:c9:fb:04:20: f0:fc:95:72:c4:f7:78:55:2c:4d:ef:76:bf:55:c4: fe:98:b5:97:68:83:c0:c6:97:20:9a:7a:67:a2:c1: 0d:12:57:89:fb:8f:bd:70:3d:df:89:64:0d:c4:f2: cf:6d:bf:27:06:00:47:f9:ff:6e:ee:e0:7f:0f:73: aa:ab:d0:93:05:2a:6e:1b:7b:88:9e:e6:fc:1d:4a: 04:e8:1a:2f:c5:74:3c:ad:d7:bb:38:98:1d:77:16: f6:d4:20:11:51:6a:92:0a:6a:4c:39:96:a4:57:11: 53:64:b9:79:e1:50:96:96:9e:ef:40:55:95:e2:6d: 0b:56:51:16:49:1a:19:3b:66:a0:8e:cf:55:f4:7e: b3:68:8c:3c:0f:c6:c4:62:25:eb:55:fd:72:9b:2d: 60:7b:b3:77:80:56:f3:1f:17:d7:34:ef:a5:0f:ed: 3f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:17:93:93:FF:BD:3E:D9:F6:82:CE:01:82:2B:97:6A:25:AF:96:2E X509v3 Authority Key Identifier: keyid:B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:6c:ff:66:8f:fa:e7:8b:54:5e:93:6c:de:42:ab:ea:7f:03: 3b:fd:ee:d7:eb:e9:7e:51:76:5e:b9:93:51:59:c9:74:ce:1c: 58:4e:5b:74:ca:69:4e:8c:b5:80:1a:fb:8c:ba:76:43:8d:df: a2:a3:53:0e:f8:a0:8c:26:42:4a:b6:7f:c4:76:88:2b:ad:34: ab:de:92:41:e1:c0:de:0e:02:4d:9a:24:90:93:cd:47:30:69: 3e:70:9b:4f:69:68:08:ba:5f:f5:c9:71:b6:7a:58:95:4a:38: 62:81:0e:b3:e3:cd:20:d7:cf:2b:3e:b2:49:9e:55:c5:1a:2c: db:c7:7b:00:ce:71:b2:7c:13:96:8c:57:bb:38:48:b0:db:de: 72:4d:42:f5:c8:79:39:5a:bd:f2:72:88:d8:bd:42:8e:f9:49: 2b:4a:3b:21:10:77:12:d0:19:e1:cb:a0:77:7b:95:22:fb:34: 6b:db:9c:6b:8a:32:19:0c:ad:01:72:0a:df:9b:a9:39:3c:6f: df:35:26:e9:29:91:ab:91:63:98:a2:1b:db:b6:ab:0f:3b:0c: 51:ca:9f:75:55:0d:15:d3:a9:0b:e3:7f:e0:5c:3d:58:3c:3b: 35:8a:4a:bd:8c:bc:82:9b:c4:3e:69:e1:a4:68:7d:43:9f:2b: ff:39:2c:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbF1usQDH7DkCvUhPl9aKHXYVZA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3OEYy RjM1NEQ5MjAeFw0yNTA4MDQxMzU2MDFaFw0yNTA4MDgwMTU4MDFaMDMxMTAvBgNV BAMTKDlBMTc5MzkzRkZCRDNFRDlGNjgyQ0UwMTgyMkI5NzZBMjVBRjk2MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEUAC07Cwd+lx9B8xgH4bhcR2I vR8wONPs3J3G17umr8MyHdBOWzDjnrqRGmyjh6wwPFfCz2ws56XmOJ0s0o1ydQUo Ke3Cwq91S7GmtjZVfDLOmEn2yfsEIPD8lXLE93hVLE3vdr9VxP6YtZdog8DGlyCa emeiwQ0SV4n7j71wPd+JZA3E8s9tvycGAEf5/27u4H8Pc6qr0JMFKm4be4ie5vwd SgToGi/FdDyt17s4mB13FvbUIBFRapIKakw5lqRXEVNkuXnhUJaWnu9AVZXibQtW URZJGhk7ZqCOz1X0frNojDwPxsRiJetV/XKbLWB7s3eAVvMfF9c076UP7T/dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmheTk/+9Ptn2gs4BgiuXaiWvli4wHwYDVR0j BBgwFoAUuaVd0SPC8iTE4kWFaQX3jy81TZIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZjJmNjRjYS1mYTU0LTQ5OWUtYmMzMy00ODYyZGNhNzk0ZjcvMC9COUE1NUREMTIz QzJGMjI0QzRFMjQ1ODU2OTA1Rjc4RjJGMzU0RDkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3OEYyRjM1 NEQ5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWYyZjY0Y2EtZmE1NC00OTllLWJj MzMtNDg2MmRjYTc5NGY3LzAvQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3 OEYyRjM1NEQ5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMts/2aP+ueLVF6TbN5Cq+p/Azv97tfr6X5R dl65k1FZyXTOHFhOW3TKaU6MtYAa+4y6dkON36KjUw74oIwmQkq2f8R2iCutNKve kkHhwN4OAk2aJJCTzUcwaT5wm09paAi6X/XJcbZ6WJVKOGKBDrPjzSDXzys+skme VcUaLNvHewDOcbJ8E5aMV7s4SLDb3nJNQvXIeTlavfJyiNi9Qo75SStKOyEQdxLQ GeHLoHd7lSL7NGvbnGuKMhkMrQFyCt+bqTk8b981JukpkauRY5iiG9u2qw87DFHK n3VVDRXTqQvjf+BcPVg8OzWKSr2MvIKbxD5p4aRofUOfK/85LHY= -----END CERTIFICATE-----Generated at Thu Aug 7 00:34:45 2025 by rpki-client