$ rpki-client -vvf repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft File: B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft (raw, json) Hash identifier: 9089KDRDQaNKkc/1dXFAsLpSQPUm2qFvNtA6b1Y7xaM= Subject key identifier: 42:42:91:E9:55:E0:EB:67:E5:A6:27:F7:B7:E0:61:BF:52:FC:21:66 Authority key identifier: B7:25:35:E4:EB:8B:31:C6:79:4C:4D:F3:1F:F5:3E:4E:64:91:4C:56 Certificate issuer: /CN=B72535E4EB8B31C6794C4DF31FF53E4E64914C56 Certificate serial: 453F12087CF2C622D8B3DC8D0E7D2BA0EBE720F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft Manifest number: C1 Signing time: Tue 05 Aug 2025 14:31:16 +0000 Manifest this update: Tue 05 Aug 2025 14:26:16 +0000 Manifest next update: Sat 09 Aug 2025 01:24:16 +0000 Files and hashes: 1: 3135372e36362e35302e302f32332d3234203d3e20313532343338.roa (hash: 0z+OlDe1hua3zv7OtVHMMPyi/MvPOJjdEV9nI71654g=) 2: B72535E4EB8B31C6794C4DF31FF53E4E64914C56.crl (hash: fuh3XnCgN52suZzJJuI7sVc9MWR8iG1nqOrUY9ADHBs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.crl rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 09:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:3f:12:08:7c:f2:c6:22:d8:b3:dc:8d:0e:7d:2b:a0:eb:e7:20:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B72535E4EB8B31C6794C4DF31FF53E4E64914C56 Validity Not Before: Aug 5 14:26:16 2025 GMT Not After : Aug 9 01:24:16 2025 GMT Subject: CN=424291E955E0EB67E5A627F7B7E061BF52FC2166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3f:60:20:6e:c1:14:71:53:1a:19:59:a5:f8: 89:da:95:19:80:ad:a9:d7:76:2a:40:a9:71:7d:04: 78:58:f2:26:2c:3f:2d:14:59:e2:df:d5:9d:df:f8: d4:b7:e3:91:d7:a7:26:d2:79:cd:54:3b:6e:bc:8f: 02:bb:dc:0e:60:ab:f0:4f:a0:5f:d9:39:04:8c:52: e1:90:c3:3a:fa:82:7c:cf:88:a3:36:ad:0c:ee:88: f6:f9:00:90:44:dc:c3:39:71:55:37:77:42:04:40: 8d:8d:ce:a3:34:cb:06:a4:e4:f6:c4:1c:3f:7e:11: bf:d3:ce:0f:db:fe:f7:ba:3d:2e:c8:d6:c2:8a:85: 6e:6f:4a:d2:2e:cb:12:60:1b:79:f3:c2:88:cc:22: 0a:0d:6e:0a:6c:d9:b2:60:bc:f9:c0:ca:5a:79:95: 4f:36:9b:9a:61:1e:23:2c:fe:27:ad:fa:66:17:d8: fd:54:f5:32:05:f0:a1:f4:13:c1:14:c2:ad:29:51: 46:7f:02:5d:2a:80:a4:53:84:6e:06:f9:84:ae:9a: d6:08:48:59:42:ff:65:0b:e7:87:00:fc:f1:e7:36: e5:e2:ef:20:32:9b:ae:d4:05:ea:a9:17:f5:58:3f: 62:cb:8d:99:d8:17:f9:8a:23:20:0e:b2:00:1c:e0: 8f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:42:91:E9:55:E0:EB:67:E5:A6:27:F7:B7:E0:61:BF:52:FC:21:66 X509v3 Authority Key Identifier: keyid:B7:25:35:E4:EB:8B:31:C6:79:4C:4D:F3:1F:F5:3E:4E:64:91:4C:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:d4:ab:1a:a0:56:42:6d:dd:9d:42:7f:77:1d:84:a7:72:e4: f9:71:1a:45:e0:d1:ee:20:ac:b9:14:9e:05:54:a3:d5:77:4d: bb:4c:32:7d:c5:d3:3c:8d:59:84:ac:f1:ba:9b:a1:7b:25:19: 90:f4:a7:89:ae:0b:8d:75:63:83:c0:16:02:7e:d5:c6:9c:a4: 8e:83:5a:ea:27:80:aa:24:a5:69:62:70:3b:07:50:a8:58:c3: a3:60:2e:f1:03:3a:f7:89:48:b9:94:0c:c1:7f:eb:8d:3f:a9: 79:d0:fe:4e:d4:af:a9:f3:ac:25:8a:f6:dc:b8:fc:a0:eb:f7: 76:5d:19:a7:6a:22:fc:8a:72:3b:6e:70:66:d7:45:ca:75:f2: 86:38:04:a8:00:89:ed:b9:45:17:2c:a5:ef:4e:8b:c6:7b:7a: c2:e2:b6:f9:b9:e6:67:12:32:4b:a8:23:9e:5e:99:ac:a1:c8: bc:5c:60:fc:b2:9e:15:8c:aa:5d:97:29:61:ae:d3:24:b5:2c: 28:bd:da:3c:13:37:b9:0e:02:0b:39:ff:e2:c4:49:0e:32:15: f6:61:99:c1:38:a6:7d:89:cb:af:d7:29:43:a8:df:ea:6e:10: ca:4a:f3:37:31:a5:d3:36:6c:5e:01:1d:db:d5:66:ed:40:1a: 0e:e8:2c:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURT8SCHzyxiLYs9yNDn0roOvnIPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcyNTM1RTRFQjhCMzFDNjc5NEM0REYzMUZGNTNFNEU2 NDkxNEM1NjAeFw0yNTA4MDUxNDI2MTZaFw0yNTA4MDkwMTI0MTZaMDMxMTAvBgNV BAMTKDQyNDI5MUU5NTVFMEVCNjdFNUE2MjdGN0I3RTA2MUJGNTJGQzIxNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnP2AgbsEUcVMaGVml+InalRmA ranXdipAqXF9BHhY8iYsPy0UWeLf1Z3f+NS345HXpybSec1UO268jwK73A5gq/BP oF/ZOQSMUuGQwzr6gnzPiKM2rQzuiPb5AJBE3MM5cVU3d0IEQI2NzqM0ywak5PbE HD9+Eb/Tzg/b/ve6PS7I1sKKhW5vStIuyxJgG3nzwojMIgoNbgps2bJgvPnAylp5 lU82m5phHiMs/iet+mYX2P1U9TIF8KH0E8EUwq0pUUZ/Al0qgKRThG4G+YSumtYI SFlC/2UL54cA/PHnNuXi7yAym67UBeqpF/VYP2LLjZnYF/mKIyAOsgAc4I/vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQkKR6VXg62flpif3t+Bhv1L8IWYwHwYDVR0j BBgwFoAUtyU15OuLMcZ5TE3zH/U+TmSRTFYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmZhOTU4NC02Zjk3LTQwNDEtOWM4ZC04YjM5NTllNGY5YjMvMC9CNzI1MzVFNEVC OEIzMUM2Nzk0QzRERjMxRkY1M0U0RTY0OTE0QzU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjcyNTM1RTRFQjhCMzFDNjc5NEM0REYzMUZGNTNFNEU2NDkx NEM1Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjZmYTk1ODQtNmY5Ny00MDQxLTlj OGQtOGIzOTU5ZTRmOWIzLzAvQjcyNTM1RTRFQjhCMzFDNjc5NEM0REYzMUZGNTNF NEU2NDkxNEM1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKnUqxqgVkJt3Z1Cf3cdhKdy5PlxGkXg0e4g rLkUngVUo9V3TbtMMn3F0zyNWYSs8bqboXslGZD0p4muC411Y4PAFgJ+1cacpI6D WuongKokpWlicDsHUKhYw6NgLvEDOveJSLmUDMF/640/qXnQ/k7Ur6nzrCWK9ty4 /KDr93ZdGadqIvyKcjtucGbXRcp18oY4BKgAie25RRcspe9Oi8Z7esLitvm55mcS MkuoI55emayhyLxcYPyynhWMql2XKWGu0yS1LCi92jwTN7kOAgs5/+LESQ4yFfZh mcE4pn2Jy6/XKUOo3+puEMpK8zcxpdM2bF4BHdvVZu1AGg7oLL8= -----END CERTIFICATE-----Generated at Thu Aug 7 01:15:06 2025 by rpki-client