$ rpki-client -vvf repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft File: C7840142ADE3E1876CB50EA3A410454EB3889153.mft (raw, json) Hash identifier: +Itzj8fEnRLPodIqivMUKTnps57YBOirrScSThu/trU= Subject key identifier: CB:EB:B1:99:59:29:95:FF:8C:DB:5B:31:F0:71:98:EC:89:18:1E:9A Authority key identifier: C7:84:01:42:AD:E3:E1:87:6C:B5:0E:A3:A4:10:45:4E:B3:88:91:53 Certificate issuer: /CN=C7840142ADE3E1876CB50EA3A410454EB3889153 Certificate serial: 2C0A4E077A1DE048A7768141073E7DE39F7B4CD6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7840142ADE3E1876CB50EA3A410454EB3889153.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft Manifest number: B2 Signing time: Wed 06 Aug 2025 06:40:02 +0000 Manifest this update: Wed 06 Aug 2025 06:35:02 +0000 Manifest next update: Sat 09 Aug 2025 07:28:02 +0000 Files and hashes: 1: 3130332e3234382e382e302f32332d3234203d3e20313531353338.roa (hash: H6s77RONQxfYVUNz4YRn/C2zSuIhVFg1GTTCJsiiK0o=) 2: 323030313a6466323a633963303a3a2f34382d3438203d3e20313531353338.roa (hash: IoIyP//hrQlYB+aIBKE8acsqetTnMXLdLd08/ax7yKA=) 3: C7840142ADE3E1876CB50EA3A410454EB3889153.crl (hash: XhRqapZ7OapV/iEJKZFJqPsQyQzfyJ08QqfNKeJUU6g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.crl rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7840142ADE3E1876CB50EA3A410454EB3889153.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 07:28:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:0a:4e:07:7a:1d:e0:48:a7:76:81:41:07:3e:7d:e3:9f:7b:4c:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7840142ADE3E1876CB50EA3A410454EB3889153 Validity Not Before: Aug 6 06:35:02 2025 GMT Not After : Aug 9 07:28:02 2025 GMT Subject: CN=CBEBB199592995FF8CDB5B31F07198EC89181E9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2b:fe:56:de:50:18:b2:c2:88:4c:1d:e2:73: 69:cc:b6:b5:b6:6d:87:86:7c:80:72:86:eb:6c:7c: c8:d6:4f:32:02:c6:cf:35:0e:2c:89:b8:01:09:15: 0c:91:c5:57:ad:42:7e:87:c0:34:1f:77:40:c9:86: 24:c4:29:a7:b1:23:cf:1f:8f:6e:2a:2c:ee:77:f0: fa:71:1c:37:a9:59:c7:68:68:16:ec:a1:f1:cc:93: c5:9f:fc:3e:2f:3e:18:0b:b3:cd:72:f8:c0:f7:41: 26:6c:68:07:3a:a7:5f:cc:bf:40:72:67:72:9d:07: ee:7c:3d:97:df:35:e1:e1:72:d9:f9:5a:52:a6:a6: a2:a2:63:e7:ca:25:b7:20:fe:79:78:8c:e7:e8:e1: 59:ed:35:9a:13:8a:63:f7:61:dc:75:dc:77:f6:3a: 79:36:6a:d6:88:11:48:8e:a6:d6:be:12:3a:2a:d8: 74:a1:1a:64:9c:22:6c:6f:d0:55:d4:60:93:6c:bf: 30:59:c9:dd:4d:ea:17:2c:25:4c:89:12:69:16:26: 5c:99:d9:56:ed:40:18:72:31:33:76:cc:e1:9c:de: 24:ad:16:f2:76:0b:62:d4:fe:e0:81:4d:23:42:4e: 13:e5:42:8d:f9:db:10:4c:19:54:a2:b1:d2:b5:75: dd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:EB:B1:99:59:29:95:FF:8C:DB:5B:31:F0:71:98:EC:89:18:1E:9A X509v3 Authority Key Identifier: keyid:C7:84:01:42:AD:E3:E1:87:6C:B5:0E:A3:A4:10:45:4E:B3:88:91:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7840142ADE3E1876CB50EA3A410454EB3889153.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:a7:e3:5f:92:83:e3:62:17:f2:bf:64:fb:d3:5b:ed:fb:6d: 92:73:d2:da:03:0a:e9:ea:d6:fe:79:b3:94:2a:e9:ff:98:66: bb:56:f7:e9:91:5c:a0:a0:74:45:8f:10:f7:0b:f0:5c:f1:c0: 79:64:73:e5:30:bf:12:0e:be:88:24:b7:4a:43:eb:28:03:67: bc:82:da:79:0a:e2:32:b8:c0:22:71:cd:14:7a:97:04:7d:a0: 62:13:30:7f:49:f4:8d:8b:85:d0:4d:3d:5f:b7:ea:a5:b7:10: 67:56:ae:9c:39:06:cf:48:ab:cc:bd:06:54:2b:5f:d4:bc:fd: 93:d9:67:2d:30:fe:23:b0:58:20:d5:fd:2f:55:42:fe:67:75: bb:0b:ea:04:d6:42:93:4f:98:7d:4e:3b:de:35:27:c6:0a:cf: 5f:46:fd:a0:61:ed:9f:1c:ef:b1:22:85:f5:d9:dc:7e:a9:6b: fe:ad:b3:e8:09:ea:c4:3e:36:bd:42:31:9e:4d:23:d5:2c:b7: 75:90:77:87:4b:ec:16:9c:dd:3c:70:9a:42:15:9a:fa:4f:69: fc:52:01:8a:33:4d:5a:31:f1:b1:0c:19:ef:15:aa:a6:75:bd: 1c:08:64:7e:67:28:ec:f0:cc:67:3f:71:fd:51:b4:fb:91:46: e2:16:09:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULApOB3od4EindoFBBz594597TNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc4NDAxNDJBREUzRTE4NzZDQjUwRUEzQTQxMDQ1NEVC Mzg4OTE1MzAeFw0yNTA4MDYwNjM1MDJaFw0yNTA4MDkwNzI4MDJaMDMxMTAvBgNV BAMTKENCRUJCMTk5NTkyOTk1RkY4Q0RCNUIzMUYwNzE5OEVDODkxODFFOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsK/5W3lAYssKITB3ic2nMtrW2 bYeGfIByhutsfMjWTzICxs81DiyJuAEJFQyRxVetQn6HwDQfd0DJhiTEKaexI88f j24qLO538PpxHDepWcdoaBbsofHMk8Wf/D4vPhgLs81y+MD3QSZsaAc6p1/Mv0By Z3KdB+58PZffNeHhctn5WlKmpqKiY+fKJbcg/nl4jOfo4VntNZoTimP3Ydx13Hf2 Onk2ataIEUiOpta+Ejoq2HShGmScImxv0FXUYJNsvzBZyd1N6hcsJUyJEmkWJlyZ 2VbtQBhyMTN2zOGc3iStFvJ2C2LU/uCBTSNCThPlQo352xBMGVSisdK1dd3zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy+uxmVkplf+M21sx8HGY7IkYHpowHwYDVR0j BBgwFoAUx4QBQq3j4YdstQ6jpBBFTrOIkVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGY1YmE1ZS0xZjVjLTQyODQtOWExNi0wMTM1YTlmZDRlMjgvMC9DNzg0MDE0MkFE RTNFMTg3NkNCNTBFQTNBNDEwNDU0RUIzODg5MTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzc4NDAxNDJBREUzRTE4NzZDQjUwRUEzQTQxMDQ1NEVCMzg4 OTE1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhmNWJhNWUtMWY1Yy00Mjg0LTlh MTYtMDEzNWE5ZmQ0ZTI4LzAvQzc4NDAxNDJBREUzRTE4NzZDQjUwRUEzQTQxMDQ1 NEVCMzg4OTE1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWn41+Sg+NiF/K/ZPvTW+37bZJz0toDCunq 1v55s5Qq6f+YZrtW9+mRXKCgdEWPEPcL8FzxwHlkc+UwvxIOvogkt0pD6ygDZ7yC 2nkK4jK4wCJxzRR6lwR9oGITMH9J9I2LhdBNPV+36qW3EGdWrpw5Bs9Iq8y9BlQr X9S8/ZPZZy0w/iOwWCDV/S9VQv5ndbsL6gTWQpNPmH1OO941J8YKz19G/aBh7Z8c 77EihfXZ3H6pa/6ts+gJ6sQ+Nr1CMZ5NI9Ust3WQd4dL7Bac3TxwmkIVmvpPafxS AYozTVox8bEMGe8VqqZ1vRwIZH5nKOzwzGc/cf1RtPuRRuIWCSE= -----END CERTIFICATE-----Generated at Wed Aug 6 12:26:30 2025 by rpki-client