$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft File: B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft (raw, json) Hash identifier: /g5AWdJ9t5jGK3ODZGuFNvUTSJtmQemEE+LcJfmVgJs= Subject key identifier: C3:DD:D2:52:D6:21:39:DB:6E:D9:A6:AC:E1:E3:93:F6:A9:AE:8F:A1 Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA Certificate serial: 4E78A444D92887B95C2B365EB37EB3360E785D66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft Manifest number: 05CB Signing time: Sun 03 Aug 2025 18:50:03 +0000 Manifest this update: Sun 03 Aug 2025 18:45:03 +0000 Manifest next update: Thu 07 Aug 2025 04:00:03 +0000 Files and hashes: 1: B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl (hash: g05QSh+R9rl22jQpoTqmpAUGPE+6EAQDgIulWkCkYWY=) 2: AS17885.roa (hash: +GO2dMXskkTZVI0G/x5c/tJuemAtakjNsz3wmOidFEQ=) 3: AS24203.roa (hash: PiioCRun01W3USZE21jLudCAK52GzKjTWQkIrQ39VD0=) 4: AS139994.roa (hash: F7hIwzPI2Ea9gB0Xp4Xk6YhQEbDGp6jagSlzZiZywSc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 04:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:78:a4:44:d9:28:87:b9:5c:2b:36:5e:b3:7e:b3:36:0e:78:5d:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA Validity Not Before: Aug 3 18:45:03 2025 GMT Not After : Aug 7 04:00:03 2025 GMT Subject: CN=C3DDD252D62139DB6ED9A6ACE1E393F6A9AE8FA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3b:1c:c1:37:72:3d:07:f6:7c:36:44:e1:7b: 02:10:05:9a:6d:9a:4e:85:8f:39:84:66:65:13:98: 04:bf:cf:65:d4:bc:ff:37:92:17:93:bc:ba:5d:d3: 41:de:c5:74:81:5a:cf:d5:7a:91:6c:35:fd:ed:a1: 85:fe:00:54:31:ff:d1:28:d8:87:91:5f:3f:17:05: 8d:08:02:f2:1d:21:5d:7d:5e:99:2d:fb:ed:c1:e5: ba:c3:1c:80:7e:a3:db:e5:10:ab:a7:d0:38:9e:82: f1:e2:fb:e5:de:35:18:f4:9a:c6:e7:42:b8:df:a3: a1:fd:9d:09:72:53:30:86:0e:0f:9c:1d:96:f9:62: 54:62:ef:fa:7a:0f:ee:7d:d5:2c:45:bb:54:67:c0: 0f:ee:fc:30:01:f3:ef:5a:f3:8d:9d:1b:cc:a9:52: 3e:d7:2a:6f:88:b3:12:55:1a:09:df:00:ca:22:66: 46:3e:a0:9e:03:e1:71:38:d3:a0:7b:d6:bc:16:8e: 9f:15:30:46:74:62:b2:66:29:d0:95:3c:88:d4:40: 96:66:54:ec:89:79:11:00:53:db:b0:4e:b7:cf:ec: fd:06:ed:5b:54:02:60:c2:9d:39:f0:4c:11:7e:26: e6:7a:55:a0:e8:4c:bd:57:42:a2:2b:57:9a:d8:47: f2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DD:D2:52:D6:21:39:DB:6E:D9:A6:AC:E1:E3:93:F6:A9:AE:8F:A1 X509v3 Authority Key Identifier: keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:74:80:e8:7d:03:55:3a:19:1f:26:c3:c7:32:51:38:d4:66: 0d:a2:db:37:57:0d:91:7d:ea:0c:7f:58:a4:69:69:1a:01:ff: e2:a9:1d:e8:19:39:d4:63:43:8e:fd:3d:7c:0e:d2:bc:2d:8b: 02:3a:9f:0f:c2:25:12:fb:17:60:a0:70:33:b0:64:77:36:f0: 96:07:cb:4a:ec:8c:f4:3a:93:2e:91:9b:45:69:1f:52:97:e9: 9d:b8:31:1b:45:7b:28:b7:ce:e5:62:4c:3f:cb:08:7f:f8:5b: 26:a5:fa:36:d1:bd:b8:3a:88:c6:bc:99:de:97:14:fc:f6:bf: 56:07:ac:98:9d:88:cb:7b:4e:f4:54:ba:d3:f2:bb:be:7d:6c: cb:b0:01:f8:fe:10:3a:a9:a1:af:6d:fa:8c:2a:5a:a6:71:df: d6:a1:e8:fd:96:c5:50:c1:53:85:01:9c:0f:f0:32:c6:11:87: f0:ba:d7:6a:1d:ef:48:b0:f8:b3:d7:63:29:71:b8:0b:31:48: ac:e2:f9:3c:99:18:65:99:b1:b1:4a:bd:28:5b:50:a3:fe:e9: cc:e6:dc:22:8f:89:47:fa:ce:3a:9b:d4:97:a0:9b:a0:d3:79: 3d:fd:d3:06:c5:60:6d:9f:e5:fc:69:9a:20:5b:78:67:54:65: ea:03:e7:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTnikRNkoh7lcKzZes36zNg54XWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIw OTU2ODdEQTAeFw0yNTA4MDMxODQ1MDNaFw0yNTA4MDcwNDAwMDNaMDMxMTAvBgNV BAMTKEMzREREMjUyRDYyMTM5REI2RUQ5QTZBQ0UxRTM5M0Y2QTlBRThGQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClOxzBN3I9B/Z8NkThewIQBZpt mk6FjzmEZmUTmAS/z2XUvP83kheTvLpd00HexXSBWs/VepFsNf3toYX+AFQx/9Eo 2IeRXz8XBY0IAvIdIV19Xpkt++3B5brDHIB+o9vlEKun0DiegvHi++XeNRj0msbn Qrjfo6H9nQlyUzCGDg+cHZb5YlRi7/p6D+591SxFu1RnwA/u/DAB8+9a842dG8yp Uj7XKm+IsxJVGgnfAMoiZkY+oJ4D4XE406B71rwWjp8VMEZ0YrJmKdCVPIjUQJZm VOyJeREAU9uwTrfP7P0G7VtUAmDCnTnwTBF+JuZ6VaDoTL1XQqIrV5rYR/ITAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw93SUtYhOdtu2aas4eOT9qmuj6EwHwYDVR0j BBgwFoAUtJOlzr8J4QvDXZrCIR2v0glWh9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMC9CNDkzQTVDRUJG MDlFMTBCQzM1RDlBQzIyMTFEQUZEMjA5NTY4N0RBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIwOTU2 ODdEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzAvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFG RDIwOTU2ODdEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADt0gOh9A1U6GR8mw8cyUTjUZg2i2zdXDZF9 6gx/WKRpaRoB/+KpHegZOdRjQ479PXwO0rwtiwI6nw/CJRL7F2CgcDOwZHc28JYH y0rsjPQ6ky6Rm0VpH1KX6Z24MRtFeyi3zuViTD/LCH/4Wyal+jbRvbg6iMa8md6X FPz2v1YHrJidiMt7TvRUutPyu759bMuwAfj+EDqpoa9t+owqWqZx39ah6P2WxVDB U4UBnA/wMsYRh/C612od70iw+LPXYylxuAsxSKzi+TyZGGWZsbFKvShbUKP+6czm 3CKPiUf6zjqb1Jegm6DTeT390wbFYG2f5fxpmiBbeGdUZeoD50g= -----END CERTIFICATE-----Generated at Tue Aug 5 23:04:29 2025 by rpki-client