$ rpki-client -vvf repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft File: B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft (raw, json) Hash identifier: jA3S0soROcPx1Z+5Z7UuJJ3cC9HcszCoxrTMkso4kTA= Subject key identifier: 3C:10:BB:FF:04:F4:C2:A9:B6:A1:1F:E3:2E:D1:DD:22:4C:4C:97:66 Authority key identifier: B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16 Certificate issuer: /CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416 Certificate serial: 535FDBB4A00B85D88FC681F2A2B06225DA5D502C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft Manifest number: 0208 Signing time: Tue 05 Aug 2025 22:40:49 +0000 Manifest this update: Tue 05 Aug 2025 22:35:49 +0000 Manifest next update: Sat 09 Aug 2025 03:17:49 +0000 Files and hashes: 1: 3130332e36382e3133362e302f32332d3233203d3e203338353131.roa (hash: YKEJ6xXEXwkPYNOCuZQFtX9Ji/2UDJQxeQnbNUcl++Q=) 2: 3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa (hash: Vqh39P+3nWLH6GpYM+8FhU68z1hzASxU3wAlgsuT274=) 3: 323030313a6466333a313230303a3a2f34382d3438203d3e20313335343535.roa (hash: PbwEzJXRFcDlg8qq7i8GVSnaGAPkcyZUmZy35AgEFf0=) 4: B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl (hash: iNUezllJ02SmFghIkqXU/JiAhfcpYw3vDVkV2KP+5h4=) 5: 3130332e36382e3133362e302f32332d3234203d3e20313335343535.roa (hash: 3shwJ2AKcESaufbVwJ1tBPOkyd6LqDrGvkFRzpot0c8=) 6: 3130332e36382e3133362e302f32342d3234203d3e203338353131.roa (hash: /3OF733rpM3jdRT3EkKeOCDNT6qwcGILSfVrlznc0RM=) 7: 3130332e36382e3133372e302f32342d3234203d3e20313335343535.roa (hash: B/Oe9y1prQPdwN9dHWS523CLyIs4euOM6VNMTv5PS6I=) 8: 3130332e36382e3133372e302f32342d3234203d3e203338353131.roa (hash: JVkCLbeZDJdwzZ2v3iR22hauCUbtGIEz6OcbZ/e1uz8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 03:17:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:5f:db:b4:a0:0b:85:d8:8f:c6:81:f2:a2:b0:62:25:da:5d:50:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416 Validity Not Before: Aug 5 22:35:49 2025 GMT Not After : Aug 9 03:17:49 2025 GMT Subject: CN=3C10BBFF04F4C2A9B6A11FE32ED1DD224C4C9766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:f8:9b:16:0b:b1:79:b0:d7:ec:99:ac:47:b7: 11:46:ae:b1:e4:a9:44:d3:2d:60:aa:74:dd:43:fa: 36:34:d5:e6:1f:9f:87:27:d1:24:ea:a9:17:05:38: 1b:86:e1:e5:99:a6:11:27:40:54:98:b8:27:70:dd: 2a:4f:de:f2:99:ef:45:47:db:95:4a:35:39:04:5b: 9b:c8:42:ec:36:2a:cd:46:24:93:38:c8:74:fa:e4: 97:b5:01:53:04:8e:21:29:f3:01:fd:1e:31:36:46: 5c:93:54:f0:d1:82:6f:37:dc:c7:29:5e:45:6c:64: 0d:d3:e7:6f:f8:f2:22:90:66:68:cf:a3:59:54:b0: 49:f7:1c:75:af:4c:1d:4d:27:a7:57:46:da:19:9e: ed:30:79:ef:3f:e5:bb:02:e8:e9:ef:56:27:30:4a: a9:88:85:32:18:25:af:b4:22:c4:3a:86:a5:44:1c: 49:07:38:e5:4b:54:e7:c1:43:46:87:91:7d:9e:be: 5a:23:ab:bd:bf:13:8e:2f:3b:88:9c:27:6e:8a:61: 66:af:43:68:e1:84:90:61:f1:70:15:10:73:2b:06: 31:b2:1e:4d:4a:d4:cb:02:8c:d0:71:9f:79:63:94: b6:bf:0e:e7:e6:bb:5c:61:c3:65:27:67:41:6b:2c: 1f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:10:BB:FF:04:F4:C2:A9:B6:A1:1F:E3:2E:D1:DD:22:4C:4C:97:66 X509v3 Authority Key Identifier: keyid:B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:1b:c0:7f:25:93:26:54:4b:4d:33:cb:2f:1d:eb:00:bf:12: 45:79:24:a7:6e:46:9c:d7:97:5a:85:55:bb:c8:64:4b:c9:18: cc:c5:67:01:b8:5b:b2:35:1f:54:ac:0c:a0:59:01:51:31:da: 11:63:32:0a:d8:87:21:16:a4:36:ab:65:21:86:48:88:8d:33: cf:f6:d2:64:d5:d0:06:00:31:85:5a:de:7e:40:b8:16:4d:0f: 64:03:40:7f:11:a5:9c:1c:97:8e:26:88:22:65:9d:10:60:ed: 33:07:38:53:87:97:cf:77:86:d3:ab:24:11:b8:72:79:e9:83: 82:70:61:53:8c:8f:20:7b:5d:2f:b9:cc:a3:1f:b3:23:3d:e7: c0:30:31:7d:16:0e:d0:e0:0e:56:a9:64:20:85:78:4a:c3:62: 97:55:b1:fe:24:b3:4c:4e:d7:93:5c:57:2f:70:57:a5:18:f8: 24:3f:fb:03:de:29:2f:a6:7c:89:d8:62:07:50:74:57:2a:bd: 30:c3:e0:6a:df:f4:65:ec:e4:38:77:4b:47:1a:f6:3a:4c:af: 93:9f:7d:d0:7d:97:64:08:c5:f3:dd:f0:00:fc:11:57:b8:ab: 25:c5:60:2b:3b:23:85:ac:11:63:11:b5:71:84:65:a6:16:99: ea:76:23:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU1/btKALhdiPxoHyorBiJdpdUCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJDMThFMTFDODUzMEJERjRFRTMzM0Y1REVCRDBCMDU1 RjlEQTQxNjAeFw0yNTA4MDUyMjM1NDlaFw0yNTA4MDkwMzE3NDlaMDMxMTAvBgNV BAMTKDNDMTBCQkZGMDRGNEMyQTlCNkExMUZFMzJFRDFERDIyNEM0Qzk3NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy+JsWC7F5sNfsmaxHtxFGrrHk qUTTLWCqdN1D+jY01eYfn4cn0STqqRcFOBuG4eWZphEnQFSYuCdw3SpP3vKZ70VH 25VKNTkEW5vIQuw2Ks1GJJM4yHT65Je1AVMEjiEp8wH9HjE2RlyTVPDRgm833Mcp XkVsZA3T52/48iKQZmjPo1lUsEn3HHWvTB1NJ6dXRtoZnu0wee8/5bsC6OnvVicw SqmIhTIYJa+0IsQ6hqVEHEkHOOVLVOfBQ0aHkX2evlojq72/E44vO4icJ26KYWav Q2jhhJBh8XAVEHMrBjGyHk1K1MsCjNBxn3ljlLa/Dufmu1xhw2UnZ0FrLB8JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPBC7/wT0wqm2oR/jLtHdIkxMl2YwHwYDVR0j BBgwFoAUssGOEchTC99O4zP13r0LBV+dpBYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 M2RjMWIwNS0yYTY5LTQ1YjAtOGM0NC02MjY3NzIyNzZiZDkvMC9CMkMxOEUxMUM4 NTMwQkRGNEVFMzMzRjVERUJEMEIwNTVGOURBNDE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJDMThFMTFDODUzMEJERjRFRTMzM0Y1REVCRDBCMDU1RjlE QTQxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTNkYzFiMDUtMmE2OS00NWIwLThj NDQtNjI2NzcyMjc2YmQ5LzAvQjJDMThFMTFDODUzMEJERjRFRTMzM0Y1REVCRDBC MDU1RjlEQTQxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACYbwH8lkyZUS00zyy8d6wC/EkV5JKduRpzX l1qFVbvIZEvJGMzFZwG4W7I1H1SsDKBZAVEx2hFjMgrYhyEWpDarZSGGSIiNM8/2 0mTV0AYAMYVa3n5AuBZND2QDQH8RpZwcl44miCJlnRBg7TMHOFOHl893htOrJBG4 cnnpg4JwYVOMjyB7XS+5zKMfsyM958AwMX0WDtDgDlapZCCFeErDYpdVsf4ks0xO 15NcVy9wV6UY+CQ/+wPeKS+mfInYYgdQdFcqvTDD4Grf9GXs5Dh3S0ca9jpMr5Of fdB9l2QIxfPd8AD8EVe4qyXFYCs7I4WsEWMRtXGEZaYWmep2I6A= -----END CERTIFICATE-----Generated at Fri Aug 8 00:18:54 2025 by rpki-client