$ rpki-client -vvf repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft File: B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft (raw, json) Hash identifier: 4y+GC6O49PRkxvJProWnptH8qNCsgMXstTflycFWG68= Subject key identifier: 66:30:88:8E:3C:05:9C:D8:50:D8:87:AC:8F:21:0D:45:6B:C3:8B:27 Authority key identifier: B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94 Certificate issuer: /CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094 Certificate serial: 35173723C62F9625B62CAD249B7FCD2B1769D5E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft Manifest number: 01AD Signing time: Tue 05 Aug 2025 22:00:04 +0000 Manifest this update: Tue 05 Aug 2025 21:55:04 +0000 Manifest next update: Sat 09 Aug 2025 04:59:04 +0000 Files and hashes: 1: 3130332e312e35302e302f32332d3233203d3e20313432333532.roa (hash: Pk+CfBb09D2NLm+w/mIdTLsk/cAe1V1lpiWgoIeGFHc=) 2: 3130332e312e35302e302f32342d3234203d3e20313432333532.roa (hash: 13a296YbpXPKiDroOx9RoYtV5Gqcvos+cOx12thufiw=) 3: B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl (hash: 8pdaUOOaYN44lzgaMHQg0umyXaH0qA0gbDKpJgEbcLA=) 4: 3130332e312e35312e302f32342d3234203d3e20313432333532.roa (hash: Lx6mbXqTbsqqqJEaZ6Ptl1cSIXULA4hNI34A7lM8ago=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 04:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:17:37:23:c6:2f:96:25:b6:2c:ad:24:9b:7f:cd:2b:17:69:d5:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094 Validity Not Before: Aug 5 21:55:04 2025 GMT Not After : Aug 9 04:59:04 2025 GMT Subject: CN=6630888E3C059CD850D887AC8F210D456BC38B27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:80:62:13:0b:23:8c:d0:18:e2:08:d7:91:12: a2:00:c4:b4:39:fa:f7:c4:25:ce:d0:80:02:ff:57: f3:cf:9f:66:45:5e:03:c9:01:a6:8f:ab:fa:a4:e3: 2f:61:7a:9b:07:25:0c:c9:ed:1d:b0:de:63:13:c4: 7f:ae:bf:cd:72:ed:08:4d:cf:23:d2:55:f2:a6:2e: f6:17:5e:b2:1b:e9:db:9c:09:79:3c:4b:8c:fc:fe: 79:f9:d7:59:39:6a:89:88:8d:80:dd:6a:45:f3:2e: b7:5c:f2:30:a7:cc:2b:c6:5f:77:9d:49:56:05:8a: 0d:d8:d2:88:40:27:db:29:91:44:a3:95:0f:01:0e: 97:cf:d3:86:5c:f4:cb:60:06:f0:c6:f9:dd:60:ed: 70:f9:7f:04:f7:ed:41:77:d3:97:b0:a2:64:a0:97: 58:2a:db:36:bf:70:98:31:92:51:68:7d:5d:69:52: 67:b3:d7:37:0f:5e:bb:09:a6:d2:82:90:91:5a:6c: d1:5b:a4:02:79:b1:3a:41:ac:7d:8c:5d:64:3c:79: c1:9d:48:10:5a:c8:eb:97:eb:b2:13:61:39:b5:1f: cf:e9:de:a5:85:16:95:53:76:6f:19:e5:02:24:b0: 2d:05:f8:82:cd:61:a5:29:96:eb:32:8f:45:f2:ce: 24:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:30:88:8E:3C:05:9C:D8:50:D8:87:AC:8F:21:0D:45:6B:C3:8B:27 X509v3 Authority Key Identifier: keyid:B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:ad:9b:df:7b:d9:a7:95:b6:3e:50:ce:da:97:21:40:27:d7: bb:1a:d6:9d:cd:29:69:09:d7:19:dc:e0:e1:9f:5c:1b:d4:41: 03:ee:a3:37:21:85:ea:86:cd:61:47:ab:f6:e7:9b:4c:e8:cf: db:17:e3:7e:ef:a2:35:8e:c8:9c:29:b3:42:34:cd:42:ed:93: db:4f:db:bd:82:4a:42:4e:95:4f:e1:60:43:28:e2:3b:ce:7a: d8:1c:87:e8:ef:cf:59:8d:ea:45:b7:09:39:b3:f8:03:ae:4e: d7:19:99:58:dc:6b:6d:6c:b3:cd:a0:d8:56:c3:e6:6f:67:a9: 60:db:7f:39:c4:93:41:62:27:41:fd:41:36:d4:a1:b7:9a:3f: 22:6c:43:56:3f:5b:39:fc:d1:93:12:f1:bb:ae:41:b4:5b:ec: 94:13:26:74:db:05:f0:eb:2f:67:55:31:b0:c4:2c:40:a3:84: 38:18:92:b4:bb:9f:50:fd:7b:1f:81:a9:1e:02:40:42:19:cd: 34:2a:da:9c:41:27:e4:fb:4c:db:c8:b6:e8:f6:2e:d5:cc:0f: 43:47:a5:0d:02:62:51:b0:fd:b1:a4:1b:ce:38:01:6a:e3:b7: 9b:5f:d5:4b:3e:01:8e:88:71:7a:7e:ac:83:08:77:26:98:5b: 8e:a0:29:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNRc3I8YvliW2LK0km3/NKxdp1eYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1RDJB MDk5MzA5NDAeFw0yNTA4MDUyMTU1MDRaFw0yNTA4MDkwNDU5MDRaMDMxMTAvBgNV BAMTKDY2MzA4ODhFM0MwNTlDRDg1MEQ4ODdBQzhGMjEwRDQ1NkJDMzhCMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDigGITCyOM0BjiCNeREqIAxLQ5 +vfEJc7QgAL/V/PPn2ZFXgPJAaaPq/qk4y9hepsHJQzJ7R2w3mMTxH+uv81y7QhN zyPSVfKmLvYXXrIb6ducCXk8S4z8/nn511k5aomIjYDdakXzLrdc8jCnzCvGX3ed SVYFig3Y0ohAJ9spkUSjlQ8BDpfP04Zc9MtgBvDG+d1g7XD5fwT37UF305ewomSg l1gq2za/cJgxklFofV1pUmez1zcPXrsJptKCkJFabNFbpAJ5sTpBrH2MXWQ8ecGd SBBayOuX67ITYTm1H8/p3qWFFpVTdm8Z5QIksC0F+ILNYaUplusyj0XyziSRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZjCIjjwFnNhQ2IesjyENRWvDiycwHwYDVR0j BBgwFoAUtINF9/n7TxT//ovFt0aF0qCZMJQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjUyYmY5Yy02MzRiLTQwYjktYWMwYy1hODdiNDdkNTlmOTEvMC9CNDgzNDVGN0Y5 RkI0RjE0RkZGRThCQzVCNzQ2ODVEMkEwOTkzMDk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1RDJBMDk5 MzA5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY1MmJmOWMtNjM0Yi00MGI5LWFj MGMtYTg3YjQ3ZDU5ZjkxLzAvQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1 RDJBMDk5MzA5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAECtm9972aeVtj5QztqXIUAn17sa1p3NKWkJ 1xnc4OGfXBvUQQPuozchheqGzWFHq/bnm0zoz9sX437vojWOyJwps0I0zULtk9tP 272CSkJOlU/hYEMo4jvOetgch+jvz1mN6kW3CTmz+AOuTtcZmVjca21ss82g2FbD 5m9nqWDbfznEk0FiJ0H9QTbUobeaPyJsQ1Y/Wzn80ZMS8buuQbRb7JQTJnTbBfDr L2dVMbDELECjhDgYkrS7n1D9ex+BqR4CQEIZzTQq2pxBJ+T7TNvItuj2LtXMD0NH pQ0CYlGw/bGkG844AWrjt5tf1Us+AY6IcXp+rIMIdyaYW46gKYE= -----END CERTIFICATE-----Generated at Thu Aug 7 11:08:01 2025 by rpki-client