$ rpki-client -vvf repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft File: B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft (raw, json) Hash identifier: vHSdQvxioTWSk2Jp7XtAFQG7sSbx6REwR8abhPHnNn4= Subject key identifier: 15:4A:C7:09:58:C1:5A:86:9B:9F:04:C1:FD:21:8E:5F:08:86:5F:08 Authority key identifier: B2:FA:6D:D6:2C:0D:60:EA:AD:64:F6:B4:71:D2:2D:29:44:32:B7:B8 Certificate issuer: /CN=B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8 Certificate serial: 42B00C092DFA3B3D85F3C3743D702D3D0F552BA1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft Manifest number: 04FA Signing time: Wed 06 Aug 2025 06:20:41 +0000 Manifest this update: Wed 06 Aug 2025 06:15:41 +0000 Manifest next update: Sat 09 Aug 2025 14:28:41 +0000 Files and hashes: 1: B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl (hash: c5+rRAD2Q0O80BM2nQKahuOs5RclssRAgByq5nlQRWc=) 2: 3130332e3130362e3137342e302f32342d3234203d3e20313336383838.roa (hash: gCxomhlXPqJzdF7SJ3iSXnHHdDE1CzdM3fX39z9NSbw=) 3: 3130332e3130362e3137322e302f32332d3234203d3e20313336383838.roa (hash: DZlWR7tuLnpwDkeYEthZYN05oc1IXglcFF75rJ6G2+c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 14:28:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:b0:0c:09:2d:fa:3b:3d:85:f3:c3:74:3d:70:2d:3d:0f:55:2b:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8 Validity Not Before: Aug 6 06:15:41 2025 GMT Not After : Aug 9 14:28:41 2025 GMT Subject: CN=154AC70958C15A869B9F04C1FD218E5F08865F08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:90:f5:0f:71:d1:ac:90:d3:6a:bc:a8:fe:3d: 05:30:54:8f:7b:d2:f9:ae:ae:8b:03:4e:da:fc:a1: 4b:c0:ce:d1:ca:2f:6c:1a:99:c2:e8:a7:c4:23:75: e9:0e:d3:11:eb:56:c0:77:47:23:a2:70:f2:ca:a9: df:2e:6f:54:05:e3:b1:79:84:99:7d:d7:b1:6f:ed: b3:9f:a7:a2:c9:40:1a:45:8e:8c:1e:ed:90:ed:d1: 0f:53:d6:d9:b8:52:a9:70:ac:3e:84:bc:f9:a2:e8: 80:8d:94:9d:e3:29:0b:a3:8f:bf:37:c3:9b:2f:f3: 03:64:db:59:ad:5e:72:de:87:f8:d3:e1:e3:94:4f: 1f:ad:c7:45:02:1c:a4:95:bb:cf:64:93:79:53:b7: 3c:19:aa:eb:cd:0f:85:50:5f:ae:48:25:79:e3:ab: cb:96:09:4b:88:4b:f1:b3:60:53:1f:dc:8e:b7:48: 71:d6:a3:58:70:d4:d3:5a:09:a0:ac:00:8b:69:99: c5:ac:8a:47:41:5b:82:0f:9c:4f:71:49:fb:64:62: e9:ac:e7:29:31:72:0c:21:93:51:3a:04:0f:2e:75: 27:65:26:60:a6:9a:87:ac:a0:c5:67:af:5f:44:58: 7f:f8:54:c3:a6:85:8a:af:8d:68:29:5a:75:f5:6c: f8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:4A:C7:09:58:C1:5A:86:9B:9F:04:C1:FD:21:8E:5F:08:86:5F:08 X509v3 Authority Key Identifier: keyid:B2:FA:6D:D6:2C:0D:60:EA:AD:64:F6:B4:71:D2:2D:29:44:32:B7:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:9f:3f:ac:ba:21:b2:64:ce:5d:9e:93:1d:b2:72:fd:5d:be: 0e:03:21:14:c3:a9:d8:02:8d:c2:29:f6:87:d4:97:bd:17:1f: 6a:f4:82:87:c5:7e:94:62:4f:83:c7:0d:0e:c9:3d:40:60:a9: cd:82:21:f4:36:96:3d:71:da:46:da:d5:31:b1:6a:e5:01:6d: d1:8e:f5:b4:b9:13:2e:b5:f7:46:27:0f:76:5c:3d:b7:7d:d0: 5d:e9:ef:f6:a2:95:ad:8c:63:17:30:1a:c8:78:16:9e:cb:49: 52:c6:9e:bd:1b:d4:49:be:fc:91:37:a0:cf:ce:c8:3a:e0:92: df:d3:88:db:0e:30:d4:e5:e1:72:2f:68:3b:d6:66:d9:95:44: 39:5d:fb:8f:73:47:9d:13:b2:b5:80:c2:64:3a:39:a9:30:03: 52:17:33:96:a4:85:e9:6a:48:05:07:8f:83:29:ce:5f:f3:c1: a8:1d:0e:76:4f:01:a8:07:71:9b:30:84:14:5f:eb:ec:bc:23: e2:f7:f3:c6:f0:3f:8b:13:e2:64:9c:4d:04:cf:ae:7e:77:a2: ec:4f:ed:57:89:5f:ec:0c:6a:c3:71:1c:4c:9b:eb:02:a6:9f: 75:bb:ac:59:3c:04:47:fa:20:25:bb:fa:cc:1a:38:90:b1:de: 79:dd:aa:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQrAMCS36Oz2F88N0PXAtPQ9VK6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJGQTZERDYyQzBENjBFQUFENjRGNkI0NzFEMjJEMjk0 NDMyQjdCODAeFw0yNTA4MDYwNjE1NDFaFw0yNTA4MDkxNDI4NDFaMDMxMTAvBgNV BAMTKDE1NEFDNzA5NThDMTVBODY5QjlGMDRDMUZEMjE4RTVGMDg4NjVGMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZkPUPcdGskNNqvKj+PQUwVI97 0vmurosDTtr8oUvAztHKL2wamcLop8QjdekO0xHrVsB3RyOicPLKqd8ub1QF47F5 hJl917Fv7bOfp6LJQBpFjowe7ZDt0Q9T1tm4UqlwrD6EvPmi6ICNlJ3jKQujj783 w5sv8wNk21mtXnLeh/jT4eOUTx+tx0UCHKSVu89kk3lTtzwZquvND4VQX65IJXnj q8uWCUuIS/GzYFMf3I63SHHWo1hw1NNaCaCsAItpmcWsikdBW4IPnE9xSftkYums 5ykxcgwhk1E6BA8udSdlJmCmmoesoMVnr19EWH/4VMOmhYqvjWgpWnX1bPjfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFUrHCVjBWoabnwTB/SGOXwiGXwgwHwYDVR0j BBgwFoAUsvpt1iwNYOqtZPa0cdItKUQyt7gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmJkN2NmNi1mNTVhLTRiNzgtYTU4OC1kOTI2MWYxNWY3NjMvMC9CMkZBNkRENjJD MEQ2MEVBQUQ2NEY2QjQ3MUQyMkQyOTQ0MzJCN0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJGQTZERDYyQzBENjBFQUFENjRGNkI0NzFEMjJEMjk0NDMy QjdCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZiZDdjZjYtZjU1YS00Yjc4LWE1 ODgtZDkyNjFmMTVmNzYzLzAvQjJGQTZERDYyQzBENjBFQUFENjRGNkI0NzFEMjJE Mjk0NDMyQjdCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKfP6y6IbJkzl2ekx2ycv1dvg4DIRTDqdgC jcIp9ofUl70XH2r0gofFfpRiT4PHDQ7JPUBgqc2CIfQ2lj1x2kba1TGxauUBbdGO 9bS5Ey6190YnD3ZcPbd90F3p7/aila2MYxcwGsh4Fp7LSVLGnr0b1Em+/JE3oM/O yDrgkt/TiNsOMNTl4XIvaDvWZtmVRDld+49zR50TsrWAwmQ6OakwA1IXM5akhelq SAUHj4Mpzl/zwagdDnZPAagHcZswhBRf6+y8I+L388bwP4sT4mScTQTPrn53ouxP 7VeJX+wMasNxHEyb6wKmn3W7rFk8BEf6ICW7+swaOJCx3nndqkw= -----END CERTIFICATE-----Generated at Thu Aug 7 01:03:05 2025 by rpki-client