$ rpki-client -vvf repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft File: B956E5764D9917A7389654D67836D02779ED9E22.mft (raw, json) Hash identifier: 1sobBLzdiUK+YgqKJXzMiIoy53nG63WSYJawbRrWidc= Subject key identifier: 65:4E:46:C2:D7:B7:4C:DD:1B:9F:28:FD:41:5A:8A:E9:E0:EF:8A:B9 Authority key identifier: B9:56:E5:76:4D:99:17:A7:38:96:54:D6:78:36:D0:27:79:ED:9E:22 Certificate issuer: /CN=B956E5764D9917A7389654D67836D02779ED9E22 Certificate serial: 44F0A7FFCD34C40DDBCFA2C095C3A053385A3AB4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft Manifest number: 01DE Signing time: Sat 09 Aug 2025 03:21:09 +0000 Manifest this update: Sat 09 Aug 2025 03:16:09 +0000 Manifest next update: Tue 12 Aug 2025 07:05:09 +0000 Files and hashes: 1: B956E5764D9917A7389654D67836D02779ED9E22.crl (hash: 2Z0vkGPEu0SPKCOtB6lDvAEdyc58CPEsI23KBDAGYls=) 2: 3130332e34342e31392e302f32342d3234203d3e20313530313931.roa (hash: xRSXhth5RPLQDUpDjvFyriqelwPeLnjETcyxKSf1xt8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.crl rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 07:05:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:f0:a7:ff:cd:34:c4:0d:db:cf:a2:c0:95:c3:a0:53:38:5a:3a:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B956E5764D9917A7389654D67836D02779ED9E22 Validity Not Before: Aug 9 03:16:09 2025 GMT Not After : Aug 12 07:05:09 2025 GMT Subject: CN=654E46C2D7B74CDD1B9F28FD415A8AE9E0EF8AB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5f:59:32:af:3e:a2:5c:32:6c:dc:03:8c:9d: a5:fd:69:bd:83:cd:79:f6:17:40:70:35:f3:93:bc: 39:d2:77:7e:91:87:59:fb:15:7d:a4:64:93:f4:ce: cc:d1:2f:ef:9f:2c:13:ce:06:43:f3:0f:2e:f0:ab: 94:ff:8c:51:c4:c3:9a:b0:b5:e8:a1:ee:b5:23:64: 1e:e1:cb:5c:38:06:b1:ad:58:3b:67:8c:a3:5b:b0: 51:fa:96:8a:a7:a1:b0:1c:23:25:a6:45:c0:bc:38: 56:3a:98:7c:28:26:31:2c:ea:6d:75:fc:bb:a2:59: 3f:c9:54:7c:4f:51:0f:a5:91:cc:f1:f2:74:c9:b7: 54:67:a6:0c:ba:c9:81:2a:e3:76:24:35:2b:18:a0: 5f:bb:63:93:ab:64:3a:28:b5:35:20:b8:69:0b:77: ba:c9:c9:57:89:e2:be:b7:30:9b:d7:3c:3d:91:f3: b0:c8:e9:59:e3:a7:ed:aa:7b:ce:1f:8d:02:83:af: a8:89:dc:7f:33:37:f3:d9:28:24:dc:31:88:9b:d3: d5:6c:48:43:12:15:7a:b7:3d:fa:10:6e:b3:f0:b0: ea:37:9c:fd:be:c7:7b:b7:cc:a9:67:84:a5:cf:c6: 03:0d:40:cb:36:d6:56:f8:06:9b:f7:e4:ad:72:f3: 68:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:4E:46:C2:D7:B7:4C:DD:1B:9F:28:FD:41:5A:8A:E9:E0:EF:8A:B9 X509v3 Authority Key Identifier: keyid:B9:56:E5:76:4D:99:17:A7:38:96:54:D6:78:36:D0:27:79:ED:9E:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:ac:1e:c8:b4:44:25:c7:83:32:ce:7f:f6:bf:c9:b9:5c:44: 4c:bb:89:98:45:8a:97:6d:4f:7f:ac:c2:de:0d:a6:dc:ac:fd: da:05:73:f3:93:7a:c8:a9:a8:ad:a5:bb:7d:33:47:7e:6e:f9: f3:0c:85:de:0a:cc:0c:57:ff:ac:dc:81:be:54:15:4a:bd:18: c8:11:76:c3:27:06:b7:3c:1c:31:e7:04:8c:0f:e4:66:ed:11: 19:9f:a0:f5:5a:8a:95:bc:56:16:f3:62:58:3b:1a:ec:f9:ac: 6b:75:5e:3d:f8:7b:51:50:7a:cc:72:fc:5b:83:a0:57:6b:96: f0:62:fd:92:59:66:b0:fa:19:7a:fe:a8:3b:8a:65:ab:fc:05: 85:90:91:b2:c5:d1:4b:5a:ce:ef:6a:67:f8:bd:01:ef:89:49: d6:14:74:99:ed:e8:34:6e:3c:cc:c2:b1:49:d8:52:d4:92:8b: c5:de:59:f0:cd:1e:44:4b:6b:7c:8f:9d:9f:0f:f3:80:f4:7a: 85:df:f0:26:1b:19:78:13:da:fc:4f:c3:c5:cc:d4:de:a6:40: a2:b8:f0:0a:5a:d7:8e:c8:30:ff:6a:54:56:57:de:27:77:74: 4a:69:fd:9d:b0:71:ba:ce:d0:12:ad:34:b9:2d:a4:1a:85:af: b3:03:08:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURPCn/800xA3bz6LAlcOgUzhaOrQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk1NkU1NzY0RDk5MTdBNzM4OTY1NEQ2NzgzNkQwMjc3 OUVEOUUyMjAeFw0yNTA4MDkwMzE2MDlaFw0yNTA4MTIwNzA1MDlaMDMxMTAvBgNV BAMTKDY1NEU0NkMyRDdCNzRDREQxQjlGMjhGRDQxNUE4QUU5RTBFRjhBQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrX1kyrz6iXDJs3AOMnaX9ab2D zXn2F0BwNfOTvDnSd36Rh1n7FX2kZJP0zszRL++fLBPOBkPzDy7wq5T/jFHEw5qw teih7rUjZB7hy1w4BrGtWDtnjKNbsFH6loqnobAcIyWmRcC8OFY6mHwoJjEs6m11 /LuiWT/JVHxPUQ+lkczx8nTJt1Rnpgy6yYEq43YkNSsYoF+7Y5OrZDootTUguGkL d7rJyVeJ4r63MJvXPD2R87DI6Vnjp+2qe84fjQKDr6iJ3H8zN/PZKCTcMYib09Vs SEMSFXq3PfoQbrPwsOo3nP2+x3u3zKlnhKXPxgMNQMs21lb4Bpv35K1y82hfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZU5Gwte3TN0bnyj9QVqK6eDvirkwHwYDVR0j BBgwFoAUuVbldk2ZF6c4llTWeDbQJ3ntniIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODExN2NhOC1iNGU1LTQ2N2EtODhhOC1hNGI2M2U0MGMzZWQvMC9COTU2RTU3NjRE OTkxN0E3Mzg5NjU0RDY3ODM2RDAyNzc5RUQ5RTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjk1NkU1NzY0RDk5MTdBNzM4OTY1NEQ2NzgzNkQwMjc3OUVE OUUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjgxMTdjYTgtYjRlNS00NjdhLTg4 YTgtYTRiNjNlNDBjM2VkLzAvQjk1NkU1NzY0RDk5MTdBNzM4OTY1NEQ2NzgzNkQw Mjc3OUVEOUUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJKsHsi0RCXHgzLOf/a/yblcREy7iZhFipdt T3+swt4Nptys/doFc/OTesipqK2lu30zR35u+fMMhd4KzAxX/6zcgb5UFUq9GMgR dsMnBrc8HDHnBIwP5GbtERmfoPVaipW8VhbzYlg7Guz5rGt1Xj34e1FQesxy/FuD oFdrlvBi/ZJZZrD6GXr+qDuKZav8BYWQkbLF0Utazu9qZ/i9Ae+JSdYUdJnt6DRu PMzCsUnYUtSSi8XeWfDNHkRLa3yPnZ8P84D0eoXf8CYbGXgT2vxPw8XM1N6mQKK4 8Apa147IMP9qVFZX3id3dEpp/Z2wcbrO0BKtNLktpBqFr7MDCBU= -----END CERTIFICATE-----Generated at Sat Aug 9 20:35:30 2025 by rpki-client