$ rpki-client -vvf repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft File: B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft (raw, json) Hash identifier: QCpJHQ3hsXUlq8DiCRlvnHCYxm7QJt58Oq4YJAr5tMA= Subject key identifier: 67:F9:99:3D:A2:9F:9D:3C:02:18:4C:8D:F6:F2:4B:FE:F3:D7:66:7B Authority key identifier: B4:15:3D:CE:E8:7E:15:F9:2A:AB:AC:0D:F6:72:9C:9A:5D:E5:CF:CC Certificate issuer: /CN=B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC Certificate serial: 67951D55CD68A8C0FB7823E027A251EFB658ECD5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft Manifest number: 04F7 Signing time: Wed 06 Aug 2025 05:01:12 +0000 Manifest this update: Wed 06 Aug 2025 04:56:12 +0000 Manifest next update: Sat 09 Aug 2025 12:53:12 +0000 Files and hashes: 1: B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.crl (hash: yu0vWFTOhOqfKdpkAuMCdLdghuSjHl8k3JK0V1suHfE=) 2: 323030313a6466363a643730303a3a2f34382d3438203d3e20313338303738.roa (hash: O7ms2O+UhtZVKkE81cuQDtuTyN3BEIVlVc+cc3/gZMg=) 3: 3130332e3132332e3233362e302f32342d3234203d3e20313338303738.roa (hash: RmlnKYQXWGOfP+UEgb2aQ4Zckhx5L2Ib8Jbz3UBAKro=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.crl rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 12:53:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:95:1d:55:cd:68:a8:c0:fb:78:23:e0:27:a2:51:ef:b6:58:ec:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC Validity Not Before: Aug 6 04:56:12 2025 GMT Not After : Aug 9 12:53:12 2025 GMT Subject: CN=67F9993DA29F9D3C02184C8DF6F24BFEF3D7667B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:03:6a:5f:76:e7:af:76:6d:13:8a:16:c8:a6: 84:6b:3c:e0:0d:37:88:57:3f:6d:ee:d4:b2:25:16: b8:75:1a:84:7e:57:dc:3d:91:6c:7e:03:57:3a:b4: bf:1e:21:d5:5b:e8:12:7a:98:35:fe:97:39:0b:9c: 3e:87:12:4d:94:be:3a:5b:7d:2c:b7:e3:32:40:56: 69:2e:77:23:b4:e0:90:ad:f3:97:ef:cf:a5:7a:0e: 6f:80:52:70:33:54:0a:96:9f:45:43:aa:88:8a:52: 4f:5b:b0:2b:5d:42:30:2f:37:29:d4:9c:4c:17:b8: e1:b8:c0:1f:94:5f:78:55:c4:6f:5a:1d:97:0c:14: 19:00:3e:43:14:ff:64:af:25:14:d3:d9:bf:8f:c8: ff:38:74:b2:ad:1f:d9:a2:a5:ff:84:80:24:50:13: a2:54:92:1f:a0:37:06:46:14:3c:6f:cc:6c:56:27: e2:ff:a4:65:00:dd:1a:97:7d:75:26:cb:1c:43:c1: 3f:e9:26:d5:4e:c6:9a:dc:6c:d3:08:bf:f4:ff:0a: 04:c7:9b:a2:30:5c:83:55:56:2d:29:d6:f9:df:64: 3c:a3:8d:51:77:34:ae:35:b0:3d:45:15:1b:8e:9f: 2a:02:c2:95:e5:3e:a7:6a:71:d0:3b:cc:11:d5:52: b9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F9:99:3D:A2:9F:9D:3C:02:18:4C:8D:F6:F2:4B:FE:F3:D7:66:7B X509v3 Authority Key Identifier: keyid:B4:15:3D:CE:E8:7E:15:F9:2A:AB:AC:0D:F6:72:9C:9A:5D:E5:CF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:c0:dc:c0:c6:9a:48:6f:cd:6b:d4:7b:32:4c:e5:ed:66:98: 90:cf:c1:bb:50:02:db:44:46:20:e8:bb:d3:eb:81:46:56:6c: 83:15:53:c8:bf:2c:93:35:e2:82:5b:80:53:df:f1:c2:48:11: fa:44:ac:66:4d:79:de:f8:b3:36:af:e6:99:13:0d:2f:8e:fa: d9:46:06:13:54:e7:65:7b:5e:e9:da:ee:cd:34:52:cf:27:d4: 48:91:44:46:3d:79:28:a2:d6:bc:72:3b:aa:11:91:c9:35:e4: 9d:d1:b5:29:f9:62:e0:58:b6:75:d5:d2:40:b3:c1:56:c8:63: bb:c0:a4:c4:4b:e1:91:24:6a:91:7c:db:3c:94:44:03:59:b5: 35:60:93:9e:a3:42:b1:7a:08:7f:5c:d5:e7:04:b5:72:b4:5f: 2c:1e:fe:d6:5d:5b:9a:7d:56:21:5f:5f:dd:74:5c:5d:eb:23: b7:4b:80:59:58:47:8b:eb:4c:f9:ce:ca:41:4a:c6:76:c4:02: d3:dd:49:bd:98:18:d5:09:0b:d1:b7:53:41:85:8b:44:8f:33: 57:2d:2a:0c:43:19:32:76:2e:90:47:bb:51:08:c1:11:d3:5b: b6:7b:04:38:42:4f:64:2b:7e:3f:4f:fd:ff:1e:34:e5:b6:e7: cb:82:cb:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ5UdVc1oqMD7eCPgJ6JR77ZY7NUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQxNTNEQ0VFODdFMTVGOTJBQUJBQzBERjY3MjlDOUE1 REU1Q0ZDQzAeFw0yNTA4MDYwNDU2MTJaFw0yNTA4MDkxMjUzMTJaMDMxMTAvBgNV BAMTKDY3Rjk5OTNEQTI5RjlEM0MwMjE4NEM4REY2RjI0QkZFRjNENzY2N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxA2pfduevdm0TihbIpoRrPOAN N4hXP23u1LIlFrh1GoR+V9w9kWx+A1c6tL8eIdVb6BJ6mDX+lzkLnD6HEk2Uvjpb fSy34zJAVmkudyO04JCt85fvz6V6Dm+AUnAzVAqWn0VDqoiKUk9bsCtdQjAvNynU nEwXuOG4wB+UX3hVxG9aHZcMFBkAPkMU/2SvJRTT2b+PyP84dLKtH9mipf+EgCRQ E6JUkh+gNwZGFDxvzGxWJ+L/pGUA3RqXfXUmyxxDwT/pJtVOxprcbNMIv/T/CgTH m6IwXINVVi0p1vnfZDyjjVF3NK41sD1FFRuOnyoCwpXlPqdqcdA7zBHVUrkJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ/mZPaKfnTwCGEyN9vJL/vPXZnswHwYDVR0j BBgwFoAUtBU9zuh+Ffkqq6wN9nKcml3lz8wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NWM5YzM5NC1mY2QwLTRiNGItYmIxYS04MjQ3NzBmNDAzNDIvMC9CNDE1M0RDRUU4 N0UxNUY5MkFBQkFDMERGNjcyOUM5QTVERTVDRkNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQxNTNEQ0VFODdFMTVGOTJBQUJBQzBERjY3MjlDOUE1REU1 Q0ZDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjVjOWMzOTQtZmNkMC00YjRiLWJi MWEtODI0NzcwZjQwMzQyLzAvQjQxNTNEQ0VFODdFMTVGOTJBQUJBQzBERjY3MjlD OUE1REU1Q0ZDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACfA3MDGmkhvzWvUezJM5e1mmJDPwbtQAttE RiDou9PrgUZWbIMVU8i/LJM14oJbgFPf8cJIEfpErGZNed74szav5pkTDS+O+tlG BhNU52V7Xuna7s00Us8n1EiRREY9eSii1rxyO6oRkck15J3RtSn5YuBYtnXV0kCz wVbIY7vApMRL4ZEkapF82zyURANZtTVgk56jQrF6CH9c1ecEtXK0Xywe/tZdW5p9 ViFfX910XF3rI7dLgFlYR4vrTPnOykFKxnbEAtPdSb2YGNUJC9G3U0GFi0SPM1ct KgxDGTJ2LpBHu1EIwRHTW7Z7BDhCT2Qrfj9P/f8eNOW258uCyyU= -----END CERTIFICATE-----Generated at Thu Aug 7 01:06:51 2025 by rpki-client