$ rpki-client -vvf repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft File: B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft (raw, json) Hash identifier: gOgbl24La7jxLkBn7uyos+58epkZCehH6TOzb/OyQb8= Subject key identifier: 8E:A4:A5:7F:7F:04:62:A1:0B:37:6A:F3:7F:2E:83:FB:BC:22:23:1E Authority key identifier: B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1 Certificate issuer: /CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1 Certificate serial: 33C26D02F9A35927FBCF69E7D6A3FB23C2E90A7A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft Manifest number: 0235 Signing time: Fri 08 Aug 2025 00:32:20 +0000 Manifest this update: Fri 08 Aug 2025 00:27:20 +0000 Manifest next update: Mon 11 Aug 2025 09:20:20 +0000 Files and hashes: 1: 3130332e3136382e3138342e302f32342d3234203d3e203438343635.roa (hash: 1UJAHonWaadwHYuLef8BFUV8SSyJkucgr+FB5CesNHg=) 2: B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl (hash: en5mOP7EkiKe2wIuY6uyZ0OLN8I6JmLjrdttteCFjeA=) 3: 3130332e3136382e3138342e302f32332d3233203d3e20313432333231.roa (hash: WwW9nUa1rmjUn7BCAW+1oX9KPadjU43XCXkkj1toOfQ=) 4: 3130332e3136382e3138342e302f32342d3234203d3e20313432333231.roa (hash: YwiS5nlm2sACVNb5Xfq0EOTBtueDgKIv6RAnbgfUwRk=) 5: 3130332e3136382e3138352e302f32342d3234203d3e20313432333231.roa (hash: KAd16ldutYh48OLbDnroVNt1O/HTzAA/aCmbtAP1Odw=) 6: 3130332e3136382e3138352e302f32342d3234203d3e203438343635.roa (hash: hum6PwDa+tJlyU75JQFBXd7LlyucqEnCFxIhwk7g/uE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 09:20:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:c2:6d:02:f9:a3:59:27:fb:cf:69:e7:d6:a3:fb:23:c2:e9:0a:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1 Validity Not Before: Aug 8 00:27:20 2025 GMT Not After : Aug 11 09:20:20 2025 GMT Subject: CN=8EA4A57F7F0462A10B376AF37F2E83FBBC22231E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:32:18:d6:57:ee:6c:a2:34:80:28:de:d8:e0: b0:fa:b1:ff:1e:e5:2e:8d:1f:bc:2c:74:54:73:69: f1:fe:7c:f1:18:81:95:a6:34:38:52:b4:b1:b5:b4: f8:94:38:b2:50:6c:0f:23:a2:4c:c0:66:56:a3:35: 81:cc:3d:e3:55:d8:ec:6b:52:4c:d8:05:f8:bb:52: bc:38:19:d5:4e:9c:e9:f6:2e:93:d0:20:97:45:c8: 7d:f3:3d:9a:56:ed:0e:81:9a:7f:bd:b1:00:2d:71: ea:6c:54:50:76:a1:68:b5:a9:09:9c:00:d5:ff:80: a4:95:2d:09:80:5b:c0:95:3f:de:42:1c:63:45:d6: d3:8d:51:42:fc:62:34:d9:c4:08:cd:a0:f5:57:81: c6:9c:ac:73:4f:ac:fe:03:db:b2:1c:60:31:9e:ea: 3e:07:e2:2a:87:d7:6f:63:49:cf:eb:01:63:18:56: dc:2a:97:be:5d:43:14:82:ca:2c:a6:ed:32:cf:02: e7:9a:4d:b8:86:c3:e1:83:e1:a7:4b:5e:64:69:7e: 7d:12:7e:af:dc:11:ad:12:91:8e:35:58:96:21:e0: 78:b2:c0:f7:53:98:e2:6e:a8:10:99:4f:3d:f3:36: 8e:1c:14:9f:3f:b2:c5:6b:23:d8:45:65:05:ce:bd: 88:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A4:A5:7F:7F:04:62:A1:0B:37:6A:F3:7F:2E:83:FB:BC:22:23:1E X509v3 Authority Key Identifier: keyid:B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:dc:12:c9:49:6c:2f:c2:db:c0:65:f6:d2:80:a9:3c:40:ad: e8:9b:46:13:58:0d:2b:88:4d:e5:39:08:22:79:70:13:49:fb: 72:b4:b9:83:c3:b1:a4:34:ed:8a:7a:cf:1c:45:97:7e:0a:aa: eb:f2:61:2d:58:3a:b0:bf:bd:cd:27:92:bc:38:62:b2:a9:19: 0a:b5:9a:f2:2a:7b:a0:1d:cd:a5:22:ae:9a:92:62:ff:c3:7d: 72:4c:cb:4f:c0:2d:b7:94:2b:d8:f5:e0:62:62:b8:12:e2:ad: 17:35:6c:ca:68:8c:73:a3:53:19:21:32:4b:f7:24:b2:62:3c: 14:6e:d1:5b:fa:20:9f:4b:f4:0f:54:1b:56:5c:78:19:cd:41: 71:d2:cb:0b:7d:cb:78:ae:ee:f0:90:50:68:f4:58:8e:f8:e8: be:44:65:8a:db:23:fd:c9:c2:59:1b:34:95:9e:51:9d:12:8d: a1:dd:2e:d2:f1:36:c7:4f:4d:45:06:d7:f4:64:c6:9b:7e:47: 7e:94:77:cc:d8:d6:2d:b9:6f:11:f0:f6:6a:9f:95:a7:d4:02: c9:5b:b0:37:0c:6a:25:87:71:5a:08:7e:19:89:4b:f9:a5:75: a1:ed:16:33:ba:9c:a9:17:69:1e:3e:f9:3b:da:bf:8c:42:52: 2e:e9:1a:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM8JtAvmjWSf7z2nn1qP7I8LpCnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFENEY1NDk1QkU0RjlEOTk1RUE5QzE1NDU0NjlDQTJC OTgzMzRGMTAeFw0yNTA4MDgwMDI3MjBaFw0yNTA4MTEwOTIwMjBaMDMxMTAvBgNV BAMTKDhFQTRBNTdGN0YwNDYyQTEwQjM3NkFGMzdGMkU4M0ZCQkMyMjIzMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUMhjWV+5sojSAKN7Y4LD6sf8e 5S6NH7wsdFRzafH+fPEYgZWmNDhStLG1tPiUOLJQbA8jokzAZlajNYHMPeNV2Oxr UkzYBfi7Urw4GdVOnOn2LpPQIJdFyH3zPZpW7Q6Bmn+9sQAtcepsVFB2oWi1qQmc ANX/gKSVLQmAW8CVP95CHGNF1tONUUL8YjTZxAjNoPVXgcacrHNPrP4D27IcYDGe 6j4H4iqH129jSc/rAWMYVtwql75dQxSCyiym7TLPAueaTbiGw+GD4adLXmRpfn0S fq/cEa0SkY41WJYh4HiywPdTmOJuqBCZTz3zNo4cFJ8/ssVrI9hFZQXOvYiPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjqSlf38EYqELN2rzfy6D+7wiIx4wHwYDVR0j BBgwFoAUsdT1SVvk+dmV6pwVRUacormDNPEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OGU3OGVlMC0wMDAyLTRhNjctYTczOS0zMDMzZDViNWJhNjEvMC9CMUQ0RjU0OTVC RTRGOUQ5OTVFQTlDMTU0NTQ2OUNBMkI5ODMzNEYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjFENEY1NDk1QkU0RjlEOTk1RUE5QzE1NDU0NjlDQTJCOTgz MzRGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzhlNzhlZTAtMDAwMi00YTY3LWE3 MzktMzAzM2Q1YjViYTYxLzAvQjFENEY1NDk1QkU0RjlEOTk1RUE5QzE1NDU0NjlD QTJCOTgzMzRGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANjcEslJbC/C28Bl9tKAqTxAreibRhNYDSuI TeU5CCJ5cBNJ+3K0uYPDsaQ07Yp6zxxFl34KquvyYS1YOrC/vc0nkrw4YrKpGQq1 mvIqe6AdzaUirpqSYv/DfXJMy0/ALbeUK9j14GJiuBLirRc1bMpojHOjUxkhMkv3 JLJiPBRu0Vv6IJ9L9A9UG1ZceBnNQXHSywt9y3iu7vCQUGj0WI746L5EZYrbI/3J wlkbNJWeUZ0SjaHdLtLxNsdPTUUG1/Rkxpt+R36Ud8zY1i25bxHw9mqflafUAslb sDcMaiWHcVoIfhmJS/mldaHtFjO6nKkXaR4++Tvav4xCUi7pGjg= -----END CERTIFICATE-----Generated at Sun Aug 10 03:44:35 2025 by rpki-client