$ rpki-client -vvf repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft File: B2650BD2D997B6C198A4B362B7395AC364683312.mft (raw, json) Hash identifier: Tblj3vHNF1VN0uy5VExfQnCeY1u9FvXtBZg9qDy/zWc= Subject key identifier: 26:14:97:97:54:FE:7D:7D:3E:C4:DA:FA:81:AD:7D:AB:83:81:72:B6 Authority key identifier: B2:65:0B:D2:D9:97:B6:C1:98:A4:B3:62:B7:39:5A:C3:64:68:33:12 Certificate issuer: /CN=B2650BD2D997B6C198A4B362B7395AC364683312 Certificate serial: 65E117ACC1DF1A62AFA6C69C07857E77EA3EC98D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft Manifest number: 01CE Signing time: Wed 06 Aug 2025 11:10:57 +0000 Manifest this update: Wed 06 Aug 2025 11:05:56 +0000 Manifest next update: Sat 09 Aug 2025 16:55:56 +0000 Files and hashes: 1: 3130332e31372e33322e302f32342d3234203d3e20313530323238.roa (hash: PXsuVPLEzGme/TvSRalwKMlC1hWsjOPUgK0Lgy+M/Is=) 2: B2650BD2D997B6C198A4B362B7395AC364683312.crl (hash: nvYj8tYGbaPaMcI4q+Yp+GYomoXVQDxVwgwjPGXgGuk=) 3: 3130332e31372e33332e302f32342d3234203d3e20313530323238.roa (hash: JLuyTnkAd9LdVP7Ap7TsyT3WybJ3uwYm9GdHPUO4P9s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.crl rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 16:55:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:e1:17:ac:c1:df:1a:62:af:a6:c6:9c:07:85:7e:77:ea:3e:c9:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2650BD2D997B6C198A4B362B7395AC364683312 Validity Not Before: Aug 6 11:05:56 2025 GMT Not After : Aug 9 16:55:56 2025 GMT Subject: CN=2614979754FE7D7D3EC4DAFA81AD7DAB838172B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f4:29:c9:da:fe:db:01:e1:ee:ad:b5:e7:e2: 59:30:eb:90:2e:10:6f:6b:bf:c9:98:b5:a4:8e:c9: aa:f1:d9:3c:7a:cc:f7:06:b4:7c:4c:12:6f:9e:d8: 3f:87:80:bd:b3:17:28:92:e7:f3:4b:21:a1:3c:cc: ea:6f:42:fe:e0:14:f9:36:50:a1:6f:2d:82:7e:b5: f1:f1:b0:8b:cc:55:a4:05:a3:1e:39:83:58:c2:60: 18:74:86:51:f1:0b:63:f3:d9:eb:9f:e0:e4:8b:ad: c0:5f:c9:87:85:b8:b4:ba:1c:24:59:09:9c:44:68: 56:ef:e0:56:d8:ba:10:5a:45:a8:4a:3c:ba:45:75: 90:17:b7:f2:96:18:d3:93:e3:06:5b:06:14:e8:67: 10:76:a0:30:0c:3b:79:5b:e2:0c:47:23:33:8a:f4: 03:41:4a:4f:61:48:32:d9:42:78:97:99:e2:54:da: 4c:b9:3e:30:dc:54:4e:f5:cb:62:3e:2a:d8:56:df: 6e:52:0b:cc:fb:42:a0:05:a6:19:54:9c:cd:c3:19: bc:db:66:db:16:38:8f:f5:e6:ed:56:dc:7a:a6:aa: d8:79:50:1b:32:4f:58:2d:ef:b9:47:0a:b2:76:54: 0f:c3:77:7b:24:cf:84:fc:9f:ba:b6:3a:94:fb:3c: 39:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:14:97:97:54:FE:7D:7D:3E:C4:DA:FA:81:AD:7D:AB:83:81:72:B6 X509v3 Authority Key Identifier: keyid:B2:65:0B:D2:D9:97:B6:C1:98:A4:B3:62:B7:39:5A:C3:64:68:33:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:de:41:ea:15:37:ed:9e:97:8e:d3:f2:2e:fc:36:b1:30:08: 17:c9:ab:b3:84:e4:05:8b:56:9c:6b:ce:5a:26:89:1d:91:02: ea:97:ec:4f:93:c7:4c:39:5b:7c:e8:ff:29:eb:e5:47:f9:40: 33:62:18:98:c3:ba:0f:d7:bb:76:fb:57:85:dd:0c:e3:4e:44: aa:40:a1:5a:16:e5:1b:35:06:69:35:1a:1a:59:87:49:4b:71: 18:92:92:a2:7d:25:d3:88:96:f6:4f:d2:9e:7a:ed:01:22:8c: b5:b1:9d:e1:c0:06:42:51:23:db:33:b7:61:1e:8c:60:0a:e4: 25:b9:80:06:ef:ee:0a:7f:08:4f:75:49:f5:56:bf:da:4b:9c: 37:24:c1:8c:fc:68:62:73:5a:4f:e8:76:04:5f:60:82:96:89: 06:78:58:12:66:1d:99:52:b0:2c:84:eb:35:ec:13:8d:b5:91: 78:88:da:46:27:ea:ed:c0:64:aa:95:11:52:85:ad:4d:34:dd: 25:87:a9:c6:74:b3:39:a0:c0:84:9c:33:84:ca:1b:21:49:6f: 51:38:d6:bd:ae:04:1e:db:cb:ed:84:5a:d8:98:a0:4f:93:b1: ba:eb:e9:e3:02:ef:8d:36:39:f9:b3:6a:cd:f3:71:b1:4a:59: 27:45:7e:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZeEXrMHfGmKvpsacB4V+d+o+yY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVBQzM2 NDY4MzMxMjAeFw0yNTA4MDYxMTA1NTZaFw0yNTA4MDkxNjU1NTZaMDMxMTAvBgNV BAMTKDI2MTQ5Nzk3NTRGRTdEN0QzRUM0REFGQTgxQUQ3REFCODM4MTcyQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF9CnJ2v7bAeHurbXn4lkw65Au EG9rv8mYtaSOyarx2Tx6zPcGtHxMEm+e2D+HgL2zFyiS5/NLIaE8zOpvQv7gFPk2 UKFvLYJ+tfHxsIvMVaQFox45g1jCYBh0hlHxC2Pz2euf4OSLrcBfyYeFuLS6HCRZ CZxEaFbv4FbYuhBaRahKPLpFdZAXt/KWGNOT4wZbBhToZxB2oDAMO3lb4gxHIzOK 9ANBSk9hSDLZQniXmeJU2ky5PjDcVE71y2I+KthW325SC8z7QqAFphlUnM3DGbzb ZtsWOI/15u1W3Hqmqth5UBsyT1gt77lHCrJ2VA/Dd3skz4T8n7q2OpT7PDnrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJhSXl1T+fX0+xNr6ga19q4OBcrYwHwYDVR0j BBgwFoAUsmUL0tmXtsGYpLNitzlaw2RoMxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjkwNTc2Ni00NDBlLTRiY2ItYWU3Mi0zZTc4ODMxY2U5ZGMvMC9CMjY1MEJEMkQ5 OTdCNkMxOThBNEIzNjJCNzM5NUFDMzY0NjgzMzEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVBQzM2NDY4 MzMxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2I5MDU3NjYtNDQwZS00YmNiLWFl NzItM2U3ODgzMWNlOWRjLzAvQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVB QzM2NDY4MzMxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbeQeoVN+2el47T8i78NrEwCBfJq7OE5AWL VpxrzlomiR2RAuqX7E+Tx0w5W3zo/ynr5Uf5QDNiGJjDug/Xu3b7V4XdDONORKpA oVoW5Rs1Bmk1GhpZh0lLcRiSkqJ9JdOIlvZP0p567QEijLWxneHABkJRI9szt2Ee jGAK5CW5gAbv7gp/CE91SfVWv9pLnDckwYz8aGJzWk/odgRfYIKWiQZ4WBJmHZlS sCyE6zXsE421kXiI2kYn6u3AZKqVEVKFrU003SWHqcZ0szmgwIScM4TKGyFJb1E4 1r2uBB7by+2EWtiYoE+Tsbrr6eMC7402Ofmzas3zcbFKWSdFfv4= -----END CERTIFICATE-----Generated at Thu Aug 7 23:57:14 2025 by rpki-client