$ rpki-client -vvf repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft File: B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft (raw, json) Hash identifier: xAUNkXt15dgii+Cz1MoM4Zcb6Ytm2Ox92WwGkvan+rQ= Subject key identifier: FC:26:D5:E4:69:78:F7:0F:16:74:0E:2D:89:BF:BA:9D:9D:CD:BE:BB Authority key identifier: B9:2F:0F:B3:E1:41:D5:2E:D2:A7:1F:A4:83:ED:3C:6D:72:3F:60:E2 Certificate issuer: /CN=B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2 Certificate serial: 40DA0B54FBE2102C6749C8FCF7CBA2C41D2FD1BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft Manifest number: 70 Signing time: Mon 04 Aug 2025 22:31:37 +0000 Manifest this update: Mon 04 Aug 2025 22:26:37 +0000 Manifest next update: Fri 08 Aug 2025 06:10:37 +0000 Files and hashes: 1: B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl (hash: Y4cIwFrJMxnxcwq1SHzRunYQ9l6EgfF5MW4Tx8nP6Vo=) 2: 323030313a6466343a363463303a3a2f34382d3438203d3e20313533313430.roa (hash: yyzmdDb8FTjdC+THNvwdhgAOOXsuzFTHgJxxHYpFD6k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 06:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:da:0b:54:fb:e2:10:2c:67:49:c8:fc:f7:cb:a2:c4:1d:2f:d1:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2 Validity Not Before: Aug 4 22:26:37 2025 GMT Not After : Aug 8 06:10:37 2025 GMT Subject: CN=FC26D5E46978F70F16740E2D89BFBA9D9DCDBEBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7c:5d:7e:6d:0b:bb:5a:ef:6d:30:51:c7:a0: 0d:9b:68:a3:04:5a:6e:9a:e4:a8:f2:cb:8f:31:52: 27:a2:01:af:da:7d:64:95:55:67:c0:13:2b:cf:47: fb:30:5a:68:bb:a5:e0:62:19:a6:cb:5d:df:43:2e: 58:af:d9:da:26:1c:c8:24:1f:28:7f:79:96:1b:7c: a6:f2:ec:2f:9e:f5:7b:74:4a:66:25:ba:a8:4f:54: 68:52:fb:47:14:eb:87:d6:84:39:e3:8b:5b:12:5e: e6:b8:d6:b5:e8:75:f9:24:ad:33:ba:5d:68:87:0b: 5d:cf:63:e3:bd:5c:37:9a:d9:7e:1b:83:10:77:86: 6a:22:9b:b1:c0:cf:88:c5:ef:11:62:c0:e6:76:6f: 9a:dd:c4:29:c6:db:1f:83:e7:c4:ed:9c:68:d7:50: 1a:e7:46:88:cf:bf:f2:7b:f7:b3:da:5f:73:4c:0a: cf:1f:72:33:38:a6:cb:56:02:7a:a5:ef:fb:0a:f2: ac:cc:28:ca:ed:4d:5d:22:a4:96:ff:9e:44:61:86: 41:7c:83:46:ef:ab:31:2d:ab:4b:cf:b5:7b:2e:83: 9d:3a:90:24:70:1c:e1:d1:6c:ea:d4:07:83:cf:92: e0:76:ee:cd:9f:8b:1c:fd:59:65:6d:e3:62:21:18: 1c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:26:D5:E4:69:78:F7:0F:16:74:0E:2D:89:BF:BA:9D:9D:CD:BE:BB X509v3 Authority Key Identifier: keyid:B9:2F:0F:B3:E1:41:D5:2E:D2:A7:1F:A4:83:ED:3C:6D:72:3F:60:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:52:4c:f1:e4:2d:e5:5a:67:32:cf:79:2d:55:a8:ef:e0:42: 8f:1f:56:87:76:20:5d:ad:33:86:e0:09:a5:a4:a2:ad:4f:8d: aa:fa:27:8e:69:1d:04:05:b6:f6:c9:41:2d:09:05:a3:e6:48: 1f:b8:58:97:29:5c:44:61:02:2e:4f:a2:f3:7c:6c:96:ce:ab: 16:f7:af:10:e8:2a:ca:1e:db:c7:a1:fd:08:22:ef:28:45:4c: 9e:84:15:87:54:19:e5:bb:74:d2:44:38:30:22:8d:12:d1:2f: 2a:60:ba:1d:ea:e0:17:dc:da:e5:22:86:fa:2e:40:b5:2c:ea: 2c:1a:de:21:db:8a:90:47:af:7a:c8:a7:03:a4:18:59:c9:e1: 8f:75:5a:92:5a:3d:9a:aa:9b:ca:7e:d3:d5:f6:13:6b:6d:3f: 49:3b:d0:3a:8f:0f:9e:2e:73:d2:ae:1b:98:87:9d:1a:40:1d: c9:c8:53:9c:98:77:d6:18:e1:3f:42:26:02:69:09:f9:40:71: 44:0d:59:dd:4d:05:f2:82:c8:db:26:8d:e9:ac:b4:7e:20:3e: 5c:36:3e:98:b1:e4:1e:d6:62:7e:60:00:e1:fe:69:79:fa:2e: f6:96:e2:5b:b0:30:b3:91:61:90:2c:50:62:67:6c:a9:c3:e4: 53:ef:fd:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQNoLVPviECxnScj898uixB0v0bswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDNDNkQ3 MjNGNjBFMjAeFw0yNTA4MDQyMjI2MzdaFw0yNTA4MDgwNjEwMzdaMDMxMTAvBgNV BAMTKEZDMjZENUU0Njk3OEY3MEYxNjc0MEUyRDg5QkZCQTlEOURDREJFQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPfF1+bQu7Wu9tMFHHoA2baKME Wm6a5Kjyy48xUieiAa/afWSVVWfAEyvPR/swWmi7peBiGabLXd9DLliv2domHMgk Hyh/eZYbfKby7C+e9Xt0SmYluqhPVGhS+0cU64fWhDnji1sSXua41rXodfkkrTO6 XWiHC13PY+O9XDea2X4bgxB3hmoim7HAz4jF7xFiwOZ2b5rdxCnG2x+D58TtnGjX UBrnRojPv/J797PaX3NMCs8fcjM4pstWAnql7/sK8qzMKMrtTV0ipJb/nkRhhkF8 g0bvqzEtq0vPtXsug506kCRwHOHRbOrUB4PPkuB27s2fixz9WWVt42IhGBxtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/CbV5Gl49w8WdA4tib+6nZ3NvrswHwYDVR0j BBgwFoAUuS8Ps+FB1S7Spx+kg+08bXI/YOIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWZjYmZiYi1iYTNmLTRkNTMtYTA0Zi0xNGQ2ZjRiZTBjYjEvMS9COTJGMEZCM0Ux NDFENTJFRDJBNzFGQTQ4M0VEM0M2RDcyM0Y2MEUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDNDNkQ3MjNG NjBFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzEvQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDND NkQ3MjNGNjBFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJhSTPHkLeVaZzLPeS1VqO/gQo8fVod2IF2t M4bgCaWkoq1Pjar6J45pHQQFtvbJQS0JBaPmSB+4WJcpXERhAi5PovN8bJbOqxb3 rxDoKsoe28eh/Qgi7yhFTJ6EFYdUGeW7dNJEODAijRLRLypguh3q4Bfc2uUihvou QLUs6iwa3iHbipBHr3rIpwOkGFnJ4Y91WpJaPZqqm8p+09X2E2ttP0k70DqPD54u c9KuG5iHnRpAHcnIU5yYd9YY4T9CJgJpCflAcUQNWd1NBfKCyNsmjemstH4gPlw2 Ppix5B7WYn5gAOH+aXn6LvaW4luwMLORYZAsUGJnbKnD5FPv/RA= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:49 2025 by rpki-client