$ rpki-client -vvf repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft File: B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft (raw, json) Hash identifier: t/S8huET+vml6Wx4PJLC9783UHiKX29H3DRzwA0fmQc= Subject key identifier: 2A:CC:ED:B7:3A:DF:2E:E3:8D:0D:6A:BD:C9:BB:10:8B:0B:2D:9E:2A Authority key identifier: B9:14:C6:1A:5D:B1:C6:5E:66:CE:5A:F6:4C:3E:20:C2:01:96:2B:5B Certificate issuer: /CN=B914C61A5DB1C65E66CE5AF64C3E20C201962B5B Certificate serial: 22A1A5D3AC9CF0BEE1AE72F621D1E1029CEE2636 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft Manifest number: A3 Signing time: Mon 04 Aug 2025 08:41:42 +0000 Manifest this update: Mon 04 Aug 2025 08:36:42 +0000 Manifest next update: Thu 07 Aug 2025 14:26:42 +0000 Files and hashes: 1: 3135372e31302e3137392e302f32342d3234203d3e20313532333436.roa (hash: I8nLPluTJWLYyGtu9yBeYoUlVfCol4rqRzuAbdB/G2g=) 2: B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.crl (hash: QkskIUZrF8G2Wb8uzADfoNu6k+/Ps5QB5HhXPH132mc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.crl rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 14:26:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:a1:a5:d3:ac:9c:f0:be:e1:ae:72:f6:21:d1:e1:02:9c:ee:26:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B914C61A5DB1C65E66CE5AF64C3E20C201962B5B Validity Not Before: Aug 4 08:36:42 2025 GMT Not After : Aug 7 14:26:42 2025 GMT Subject: CN=2ACCEDB73ADF2EE38D0D6ABDC9BB108B0B2D9E2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a9:57:b4:9f:f8:34:ae:bb:28:6c:1e:b3:c1: 0e:a8:9e:b3:f2:96:61:50:4b:d8:3a:5e:a0:c4:9b: e5:f9:b0:7e:3a:39:b5:c8:5a:5b:90:0d:85:46:3a: 16:29:c7:ff:e2:2e:5d:22:1a:86:05:84:71:4c:fe: 40:11:42:07:e2:25:75:10:c8:46:9a:2f:38:e1:02: 9b:0d:5d:22:f6:bc:27:53:fd:2a:e4:cb:21:e4:ab: 6d:29:b8:4e:97:cb:3a:b2:4e:8d:48:2b:54:ef:fb: e6:29:ae:7a:13:cf:ff:61:93:6c:8e:67:a4:f4:78: ff:a0:6a:a0:fc:f3:d5:66:2e:81:6b:63:15:e4:1d: 59:5c:9b:46:07:eb:86:53:5b:c5:6e:fb:94:17:0f: 9a:e2:e2:3b:50:73:03:bc:ef:8b:4d:83:cf:e8:4a: 8d:14:68:0a:b5:a7:a8:99:00:d1:d7:2b:8f:c0:42: 77:da:19:e1:be:ed:dd:89:f4:bd:15:94:ac:19:28: af:be:64:15:9b:cd:d5:4a:50:c3:9e:83:c1:3f:55: 74:32:57:bb:b6:0e:22:11:90:12:4e:0d:2f:d8:0b: f2:5f:b2:70:c4:65:8f:94:6b:c4:13:3e:54:62:6b: 2e:29:d0:77:85:3f:0f:09:6d:26:4e:c9:67:f9:5e: 1e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:CC:ED:B7:3A:DF:2E:E3:8D:0D:6A:BD:C9:BB:10:8B:0B:2D:9E:2A X509v3 Authority Key Identifier: keyid:B9:14:C6:1A:5D:B1:C6:5E:66:CE:5A:F6:4C:3E:20:C2:01:96:2B:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:6a:d9:0c:0e:74:e4:45:6b:d1:a7:48:68:db:a7:89:9b:7d: 94:b6:c1:95:c8:01:4b:51:bf:76:df:22:40:31:4c:b3:94:9b: 9e:68:26:f6:f5:55:4d:20:d0:ad:06:ca:6f:55:51:8d:a1:bc: 59:03:5b:14:b6:6b:a0:95:7f:11:6d:b4:cf:c3:c2:42:a8:82: f4:dd:af:ba:92:e3:15:2e:ce:00:6d:e4:28:0d:6d:dd:3a:5b: 30:59:9f:e1:aa:b8:53:97:97:2a:fe:79:ca:94:38:4e:55:1e: 09:a3:96:7e:a5:3c:de:24:f0:c4:8b:ea:b5:72:96:45:99:1c: 9f:30:1b:c8:54:a8:f9:78:f7:59:a9:4e:65:43:b2:96:73:43: 46:ff:b5:1d:d2:46:ba:a3:32:09:5d:78:5c:fc:27:23:da:68: 5f:fa:cd:a4:94:08:8c:6c:39:22:4c:d9:84:f5:16:f1:10:32: 35:97:66:3b:45:a1:ab:a6:d8:a0:d5:c6:df:58:43:ae:89:58: 14:ee:44:14:8d:2c:c0:6e:4e:9e:e6:3f:e8:df:bd:9a:b0:88: 64:c6:18:8b:d5:54:66:d0:fb:5b:1c:c1:44:e8:03:f7:72:01: d3:ad:27:3e:95:e1:30:6d:8d:80:5b:bf:f6:1f:e3:3f:b0:d3: 6b:00:bb:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIqGl06yc8L7hrnL2IdHhApzuJjYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkxNEM2MUE1REIxQzY1RTY2Q0U1QUY2NEMzRTIwQzIw MTk2MkI1QjAeFw0yNTA4MDQwODM2NDJaFw0yNTA4MDcxNDI2NDJaMDMxMTAvBgNV BAMTKDJBQ0NFREI3M0FERjJFRTM4RDBENkFCREM5QkIxMDhCMEIyRDlFMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/qVe0n/g0rrsobB6zwQ6onrPy lmFQS9g6XqDEm+X5sH46ObXIWluQDYVGOhYpx//iLl0iGoYFhHFM/kARQgfiJXUQ yEaaLzjhApsNXSL2vCdT/SrkyyHkq20puE6XyzqyTo1IK1Tv++YprnoTz/9hk2yO Z6T0eP+gaqD889VmLoFrYxXkHVlcm0YH64ZTW8Vu+5QXD5ri4jtQcwO874tNg8/o So0UaAq1p6iZANHXK4/AQnfaGeG+7d2J9L0VlKwZKK++ZBWbzdVKUMOeg8E/VXQy V7u2DiIRkBJODS/YC/JfsnDEZY+Ua8QTPlRiay4p0HeFPw8JbSZOyWf5Xh4NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKszttzrfLuONDWq9ybsQiwstniowHwYDVR0j BBgwFoAUuRTGGl2xxl5mzlr2TD4gwgGWK1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OGRjMTNmZi01YjEwLTQ0YTYtYjZmMy04ZjAzNWU1ODk3ZDgvMC9COTE0QzYxQTVE QjFDNjVFNjZDRTVBRjY0QzNFMjBDMjAxOTYyQjVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjkxNEM2MUE1REIxQzY1RTY2Q0U1QUY2NEMzRTIwQzIwMTk2 MkI1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYThkYzEzZmYtNWIxMC00NGE2LWI2 ZjMtOGYwMzVlNTg5N2Q4LzAvQjkxNEM2MUE1REIxQzY1RTY2Q0U1QUY2NEMzRTIw QzIwMTk2MkI1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJlq2QwOdORFa9GnSGjbp4mbfZS2wZXIAUtR v3bfIkAxTLOUm55oJvb1VU0g0K0Gym9VUY2hvFkDWxS2a6CVfxFttM/DwkKogvTd r7qS4xUuzgBt5CgNbd06WzBZn+GquFOXlyr+ecqUOE5VHgmjln6lPN4k8MSL6rVy lkWZHJ8wG8hUqPl491mpTmVDspZzQ0b/tR3SRrqjMgldeFz8JyPaaF/6zaSUCIxs OSJM2YT1FvEQMjWXZjtFoaum2KDVxt9YQ66JWBTuRBSNLMBuTp7mP+jfvZqwiGTG GIvVVGbQ+1scwUToA/dyAdOtJz6V4TBtjYBbv/Yf4z+w02sAu3s= -----END CERTIFICATE-----Generated at Wed Aug 6 09:23:47 2025 by rpki-client