$ rpki-client -vvf repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft File: B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft (raw, json) Hash identifier: abpCQGbYD7Q0T0qKXbHyNXStR0sLBzliJWEWA1rm0o0= Subject key identifier: BF:5F:A8:00:78:3A:20:7C:5E:6B:74:A8:12:1A:75:44:A7:9E:3C:85 Authority key identifier: B0:73:4A:32:D1:3A:96:FC:B3:FD:F9:82:C2:EE:C5:00:15:04:11:CA Certificate issuer: /CN=B0734A32D13A96FCB3FDF982C2EEC500150411CA Certificate serial: 14A86E9E421AB07A4E7CB4B196C945484E32DBC3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft Manifest number: 0204 Signing time: Wed 06 Aug 2025 19:11:10 +0000 Manifest this update: Wed 06 Aug 2025 19:06:10 +0000 Manifest next update: Sun 10 Aug 2025 00:38:10 +0000 Files and hashes: 1: B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl (hash: eDLCAUF2tj8/1Vdm2VrBUOwJL8g2j+RhP9rWF97/FzU=) 2: 3130332e3138372e3232362e302f32332d3234203d3e20313439373238.roa (hash: fcX6dDB/6jZr5p1excLhOSLezwfpNz/DNvOt6VHyTLo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 00:38:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:a8:6e:9e:42:1a:b0:7a:4e:7c:b4:b1:96:c9:45:48:4e:32:db:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0734A32D13A96FCB3FDF982C2EEC500150411CA Validity Not Before: Aug 6 19:06:10 2025 GMT Not After : Aug 10 00:38:10 2025 GMT Subject: CN=BF5FA800783A207C5E6B74A8121A7544A79E3C85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ed:06:2a:e0:25:9a:fa:96:cc:93:a0:a9:73: 1e:f2:d1:9f:84:6d:b6:77:9d:bb:7e:5e:0f:31:a0: c7:15:fc:f7:2a:fe:11:36:b9:79:40:37:89:df:17: 2e:18:d0:dd:e9:82:ef:73:c7:bc:07:6e:5b:64:be: 0d:b5:80:ee:03:64:8f:56:35:7b:5c:15:c8:89:c4: fe:82:3f:4f:72:a2:ad:cb:00:eb:e8:35:6a:8a:ec: b7:87:d8:05:65:b9:3e:85:b9:4d:38:93:22:02:32: 54:ff:b9:79:b6:e7:2f:24:b6:d9:fe:2d:93:e6:61: ac:e6:d6:90:4a:af:e6:64:5d:d0:19:68:eb:6a:41: 4e:33:de:af:18:be:2d:85:99:23:e8:d3:24:6c:e9: 0b:e8:6f:7b:96:e5:c4:22:21:fc:c8:a5:02:4f:09: 93:c5:d7:7b:bb:38:7a:65:f8:18:f9:a5:d1:de:42: df:78:bc:b3:c9:37:98:65:a9:cf:64:23:4b:0a:d6: 19:e6:ba:89:25:35:de:96:fe:41:96:7e:70:5b:0d: 2d:24:9d:a9:92:ab:6c:35:2b:41:79:9f:78:fa:d5: f7:2e:53:ee:7f:b5:83:ca:3b:ac:71:37:22:83:03: 3d:6c:2c:45:6a:20:90:17:5d:90:a4:9d:5c:95:80: 5e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:5F:A8:00:78:3A:20:7C:5E:6B:74:A8:12:1A:75:44:A7:9E:3C:85 X509v3 Authority Key Identifier: keyid:B0:73:4A:32:D1:3A:96:FC:B3:FD:F9:82:C2:EE:C5:00:15:04:11:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:f2:a2:ed:f2:75:73:cd:2d:13:bc:37:1e:18:f5:f3:63:54: 1f:65:15:4e:03:a8:a1:68:e0:5c:aa:8e:3e:24:17:9b:8c:68: d9:36:43:f9:0a:a0:5b:f5:b0:97:55:e3:15:dc:7e:5c:89:2b: a0:c2:84:d4:f7:77:12:11:de:0b:d8:d2:78:19:da:8a:e8:79: ee:e6:0c:a7:eb:7e:f2:be:d0:9b:19:70:63:83:85:59:43:80: 92:e0:94:39:a9:50:c9:fa:d4:1e:01:df:a0:7b:a2:8a:51:1f: 66:1d:d9:ed:f7:49:bd:38:6e:a3:87:65:5d:54:d9:b4:45:18: 41:25:1e:1e:aa:85:58:28:8d:f0:9d:ea:26:97:18:7a:e6:7f: b8:1d:64:82:2e:e9:f4:3d:74:6b:b1:03:ff:5d:19:09:1c:54: 57:c9:3f:4e:bd:8d:ea:10:d7:52:b7:27:d6:16:ab:a5:fb:0a: 9a:3b:8b:8f:42:4e:71:d9:11:69:ce:f6:8a:a1:83:a8:60:a0: c5:87:31:aa:01:76:06:7b:24:14:f0:8f:0d:d1:23:5d:c9:cc: 05:19:77:5a:69:a1:91:b6:06:1d:f9:e6:cc:2a:e9:57:84:97: 5a:46:ac:4e:cf:2e:fd:6b:cf:b0:16:09:53:7e:8c:e8:59:22: 04:cd:4d:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFKhunkIasHpOfLSxlslFSE4y28MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1MDAx NTA0MTFDQTAeFw0yNTA4MDYxOTA2MTBaFw0yNTA4MTAwMDM4MTBaMDMxMTAvBgNV BAMTKEJGNUZBODAwNzgzQTIwN0M1RTZCNzRBODEyMUE3NTQ0QTc5RTNDODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk7QYq4CWa+pbMk6Cpcx7y0Z+E bbZ3nbt+Xg8xoMcV/Pcq/hE2uXlAN4nfFy4Y0N3pgu9zx7wHbltkvg21gO4DZI9W NXtcFciJxP6CP09yoq3LAOvoNWqK7LeH2AVluT6FuU04kyICMlT/uXm25y8kttn+ LZPmYazm1pBKr+ZkXdAZaOtqQU4z3q8Yvi2FmSPo0yRs6Qvob3uW5cQiIfzIpQJP CZPF13u7OHpl+Bj5pdHeQt94vLPJN5hlqc9kI0sK1hnmuoklNd6W/kGWfnBbDS0k namSq2w1K0F5n3j61fcuU+5/tYPKO6xxNyKDAz1sLEVqIJAXXZCknVyVgF4vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv1+oAHg6IHxea3SoEhp1RKeePIUwHwYDVR0j BBgwFoAUsHNKMtE6lvyz/fmCwu7FABUEEcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjMwOTdmMC0zOTc4LTQ5Y2UtYjY5Yy00YjIwYjRkY2ZiN2UvMC9CMDczNEEzMkQx M0E5NkZDQjNGREY5ODJDMkVFQzUwMDE1MDQxMUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1MDAxNTA0 MTFDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzMDk3ZjAtMzk3OC00OWNlLWI2 OWMtNGIyMGI0ZGNmYjdlLzAvQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1 MDAxNTA0MTFDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/you3ydXPNLRO8Nx4Y9fNjVB9lFU4DqKFo 4Fyqjj4kF5uMaNk2Q/kKoFv1sJdV4xXcflyJK6DChNT3dxIR3gvY0ngZ2oroee7m DKfrfvK+0JsZcGODhVlDgJLglDmpUMn61B4B36B7oopRH2Yd2e33Sb04bqOHZV1U 2bRFGEElHh6qhVgojfCd6iaXGHrmf7gdZIIu6fQ9dGuxA/9dGQkcVFfJP069jeoQ 11K3J9YWq6X7Cpo7i49CTnHZEWnO9oqhg6hgoMWHMaoBdgZ7JBTwjw3RI13JzAUZ d1ppoZG2Bh355swq6VeEl1pGrE7PLv1rz7AWCVN+jOhZIgTNTVU= -----END CERTIFICATE-----Generated at Thu Aug 7 17:32:34 2025 by rpki-client