$ rpki-client -vvf repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft File: B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft (raw, json) Hash identifier: 0PEiO6G/N4Hc7V2VTyXh+qBgTEZ4VRyO0GHszrGzibw= Subject key identifier: 5B:40:22:54:80:98:C0:9B:A4:D6:59:FA:E5:4E:C7:3A:26:E6:E7:71 Authority key identifier: B2:07:7B:9B:AF:0B:F3:E5:FC:B8:45:13:B1:D7:44:5E:30:CE:65:82 Certificate issuer: /CN=B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582 Certificate serial: 7DCD7AF2B3791D54965E8D105A3D75E8B7F16155 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft Manifest number: 046D Signing time: Tue 05 Aug 2025 08:56:03 +0000 Manifest this update: Tue 05 Aug 2025 08:51:03 +0000 Manifest next update: Fri 08 Aug 2025 15:33:03 +0000 Files and hashes: 1: 3130332e3135372e362e302f32342d3234203d3e20313431313036.roa (hash: /7z2+JC7qoPzUqAK7WiZ8hM8Bf1dEmgOqji6pvEw+hI=) 2: B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl (hash: xtAoK8lDNn+8fQQS/7MYUK8gfajwbCRIFGPGEDmAvKk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 15:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:cd:7a:f2:b3:79:1d:54:96:5e:8d:10:5a:3d:75:e8:b7:f1:61:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582 Validity Not Before: Aug 5 08:51:03 2025 GMT Not After : Aug 8 15:33:03 2025 GMT Subject: CN=5B4022548098C09BA4D659FAE54EC73A26E6E771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:82:85:a4:e9:cb:01:1e:7c:b6:65:79:6c:df: cd:02:39:02:f1:41:89:68:62:f6:cd:04:f5:56:3e: 30:4c:d1:66:0c:ec:e1:dd:c3:b1:d6:aa:64:02:fc: 1d:3b:d5:d8:ed:86:a0:2e:56:81:96:96:d8:07:b9: e0:4b:58:77:ba:23:06:31:32:d0:24:d5:0e:a8:63: 13:66:b2:e5:20:65:cc:e0:80:15:56:ef:ca:c2:ff: 6f:c3:85:50:5c:49:9e:8b:02:3a:1e:7d:3c:b0:26: 98:bb:db:88:cb:06:32:72:dc:b8:39:d8:5e:97:fe: e2:f6:06:0c:28:da:a1:1d:aa:1c:dc:ae:4d:02:81: ec:33:d0:ed:b4:b9:97:db:07:86:e6:38:44:86:1d: e3:8e:ef:98:c0:ba:7c:f7:b8:8d:19:6c:57:76:1f: 4d:83:1b:44:50:7b:e4:b5:7a:aa:f3:85:fe:2c:a1: b3:7e:fd:2f:e0:84:9d:07:38:7c:83:5e:8c:c2:2f: ec:1c:c3:c8:34:fc:00:89:4d:54:0b:22:60:0d:4c: 71:22:7d:d2:93:b8:2e:7a:e0:ed:2f:ad:cc:f2:e1: 41:54:cc:66:a9:ec:a9:b4:29:92:9e:99:a2:35:94: 28:ad:36:d3:5e:f3:1e:aa:a6:48:5b:2f:7b:e5:fd: 94:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:40:22:54:80:98:C0:9B:A4:D6:59:FA:E5:4E:C7:3A:26:E6:E7:71 X509v3 Authority Key Identifier: keyid:B2:07:7B:9B:AF:0B:F3:E5:FC:B8:45:13:B1:D7:44:5E:30:CE:65:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:8c:12:7a:09:44:d9:06:ae:4a:00:b1:8c:e7:d6:95:7a:a5: 98:3c:3f:ca:19:2e:dc:fc:e1:5a:a9:cc:68:81:ac:7a:c3:4a: 43:9e:88:bf:9c:25:7e:16:76:ff:43:f7:a6:ae:0b:23:f8:0c: 11:75:ca:60:91:6b:5b:30:97:ae:1f:77:e2:ce:14:33:24:5b: 46:7f:3d:da:08:c3:b9:db:cd:d3:5d:bf:83:61:67:84:d3:e3: 87:a5:d4:06:c4:b6:ad:96:52:0a:7f:1a:08:44:b3:5d:c8:36: 5e:2f:e5:d4:61:c6:94:39:97:ff:27:b9:f1:59:23:87:64:7d: cd:16:34:58:c5:57:c0:43:df:df:b3:12:cb:f3:b8:59:d6:7f: 5d:a2:b7:17:00:77:f2:21:67:08:37:32:fa:96:76:ea:32:b9: 1a:cb:c7:82:4f:cc:b6:c7:e5:8c:6e:65:f0:02:c7:63:0f:aa: ad:e9:e5:0d:ad:60:67:a4:60:9f:8e:e6:b8:f1:cd:03:4d:28: cd:a7:ce:d4:6a:bc:2e:94:38:b4:56:e3:01:32:63:f8:3c:14: 3d:be:48:6a:d7:9b:79:ee:41:b2:bb:f6:88:99:a8:c9:75:67: 01:c1:c7:01:67:4b:62:21:ae:c7:76:e9:ba:8d:f2:17:06:ec: da:32:67:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfc168rN5HVSWXo0QWj116LfxYVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0NUUz MENFNjU4MjAeFw0yNTA4MDUwODUxMDNaFw0yNTA4MDgxNTMzMDNaMDMxMTAvBgNV BAMTKDVCNDAyMjU0ODA5OEMwOUJBNEQ2NTlGQUU1NEVDNzNBMjZFNkU3NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+goWk6csBHny2ZXls380COQLx QYloYvbNBPVWPjBM0WYM7OHdw7HWqmQC/B071djthqAuVoGWltgHueBLWHe6IwYx MtAk1Q6oYxNmsuUgZczggBVW78rC/2/DhVBcSZ6LAjoefTywJpi724jLBjJy3Lg5 2F6X/uL2Bgwo2qEdqhzcrk0Cgewz0O20uZfbB4bmOESGHeOO75jAunz3uI0ZbFd2 H02DG0RQe+S1eqrzhf4sobN+/S/ghJ0HOHyDXozCL+wcw8g0/ACJTVQLImANTHEi fdKTuC564O0vrczy4UFUzGap7Km0KZKemaI1lCitNtNe8x6qpkhbL3vl/ZSVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW0AiVICYwJuk1ln65U7HOibm53EwHwYDVR0j BBgwFoAUsgd7m68L8+X8uEUTsddEXjDOZYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWRkNGYxNi01NzBlLTRjOGMtYTk5Mi1kYjg5ZWEzYmFkMzYvMC9CMjA3N0I5QkFG MEJGM0U1RkNCODQ1MTNCMUQ3NDQ1RTMwQ0U2NTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0NUUzMENF NjU4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVkZDRmMTYtNTcwZS00YzhjLWE5 OTItZGI4OWVhM2JhZDM2LzAvQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0 NUUzMENFNjU4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABaMEnoJRNkGrkoAsYzn1pV6pZg8P8oZLtz8 4VqpzGiBrHrDSkOeiL+cJX4Wdv9D96auCyP4DBF1ymCRa1swl64fd+LOFDMkW0Z/ PdoIw7nbzdNdv4NhZ4TT44el1AbEtq2WUgp/GghEs13INl4v5dRhxpQ5l/8nufFZ I4dkfc0WNFjFV8BD39+zEsvzuFnWf12itxcAd/IhZwg3MvqWduoyuRrLx4JPzLbH 5YxuZfACx2MPqq3p5Q2tYGekYJ+O5rjxzQNNKM2nztRqvC6UOLRW4wEyY/g8FD2+ SGrXm3nuQbK79oiZqMl1ZwHBxwFnS2Ihrsd26bqN8hcG7NoyZ0Y= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:04 2025 by rpki-client