$ rpki-client -vvf repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft File: B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft (raw, json) Hash identifier: +cr1DJqccodzNkqRy1dBRu15bYQ7BDwm2NIdH57JDCA= Subject key identifier: 2B:D5:19:FB:72:BE:0E:D0:D5:6C:D2:CF:7D:03:05:31:D5:E4:48:02 Authority key identifier: B7:6C:EE:66:CD:32:9E:4E:DD:33:E6:D3:45:2A:33:FB:BE:00:D7:41 Certificate issuer: /CN=B76CEE66CD329E4EDD33E6D3452A33FBBE00D741 Certificate serial: 1705C2E747F83D361F344264ABFC10604EAEB1BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft Manifest number: 0212 Signing time: Tue 05 Aug 2025 06:20:52 +0000 Manifest this update: Tue 05 Aug 2025 06:15:52 +0000 Manifest next update: Fri 08 Aug 2025 18:10:52 +0000 Files and hashes: 1: B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.crl (hash: HtqdmA5QfGo4BP+5PJKzRdNT5pVc5/nztTD35cpcmgA=) 2: 3130332e3138362e39342e302f32332d3234203d3e20313439373430.roa (hash: 36f1oVCDIma5/edGeBmPtM2U4zeHtnBlVDsNRr5sez8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.crl rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 18:10:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:05:c2:e7:47:f8:3d:36:1f:34:42:64:ab:fc:10:60:4e:ae:b1:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B76CEE66CD329E4EDD33E6D3452A33FBBE00D741 Validity Not Before: Aug 5 06:15:52 2025 GMT Not After : Aug 8 18:10:52 2025 GMT Subject: CN=2BD519FB72BE0ED0D56CD2CF7D030531D5E44802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:04:31:ee:db:a1:a5:b3:87:db:45:ed:fe:76: af:c0:e7:9c:ad:54:5a:d1:cf:24:ff:9a:b3:fc:52: f2:41:5c:04:fb:69:a8:6d:72:cf:aa:89:b0:ad:59: 7a:34:e2:5f:ad:8c:29:b6:c4:10:3b:3b:1a:97:d6: 9e:13:8a:b2:9b:24:bf:b5:25:cd:91:a3:e9:38:15: 1b:1d:04:cd:98:56:8f:33:e6:cd:cc:c4:d3:86:3f: 41:8c:4e:4d:5a:dd:df:28:cd:17:6e:79:42:71:5d: 26:2e:30:37:02:eb:4f:eb:59:d6:c2:b4:d7:28:3e: f6:64:7c:3a:52:52:b5:0a:4a:cb:d7:ef:d3:18:97: f1:71:6e:da:70:86:53:d1:e6:35:4c:d1:56:0d:df: 69:64:8a:51:41:7a:d0:56:b2:ad:67:e5:3d:a6:a2: b3:c4:e8:69:c3:ad:52:8e:8e:7c:19:ca:10:77:ae: b1:38:c4:78:ce:19:a6:ac:13:10:16:32:cc:16:34: 91:c4:02:07:7a:2c:f5:99:0a:7d:83:ad:e0:30:90: 4e:90:13:d7:b2:af:d5:02:1f:24:19:e9:a7:f4:6f: 51:7d:b5:20:7b:08:7b:81:81:d2:7a:0f:34:6c:87: ae:66:03:4f:72:05:70:2a:56:cb:cc:11:1e:df:ad: 10:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D5:19:FB:72:BE:0E:D0:D5:6C:D2:CF:7D:03:05:31:D5:E4:48:02 X509v3 Authority Key Identifier: keyid:B7:6C:EE:66:CD:32:9E:4E:DD:33:E6:D3:45:2A:33:FB:BE:00:D7:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:67:fe:c0:dc:bd:4b:17:79:c0:8c:44:0f:62:d3:d8:aa:77: 31:f7:49:9d:c7:ec:23:13:f3:e3:50:b7:f4:b5:14:65:0f:ca: a5:f1:38:e2:05:5c:66:53:56:75:00:87:72:7b:e2:4f:60:31: a0:31:a9:42:85:5d:b0:00:c6:75:cc:3d:89:8a:82:5c:e2:34: 73:76:7d:ed:49:78:e2:d7:1c:f9:46:c6:68:56:d8:1f:54:2a: fb:4f:86:cf:5d:c8:27:76:db:74:3e:4c:96:56:3b:6d:ad:77: 74:aa:15:c8:89:a8:36:1c:cb:b7:d3:e4:1e:b0:60:54:c2:5e: 1f:24:5c:74:5b:12:f7:40:6b:82:e0:cb:a9:25:78:cf:f2:60: 8f:2c:d7:a1:01:f4:b0:73:b6:e0:e1:d3:8f:7c:1e:22:8e:fb: ac:30:cf:37:69:11:cd:e4:24:55:9c:37:df:29:de:06:e5:13: f6:47:64:5c:ca:fe:0a:90:dd:0e:81:2d:21:8e:bd:95:72:0b: 2d:8d:1a:2b:ae:7d:1f:3d:3c:46:f7:0b:e7:78:c3:f4:ce:0f: 6c:87:94:d1:43:83:eb:10:b7:ea:cb:d9:b4:06:90:bc:7d:cd: 8d:e3:99:aa:de:26:a3:61:0c:2e:35:7c:6b:49:8e:06:ae:fe: 33:8f:28:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFwXC50f4PTYfNEJkq/wQYE6usbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc2Q0VFNjZDRDMyOUU0RUREMzNFNkQzNDUyQTMzRkJC RTAwRDc0MTAeFw0yNTA4MDUwNjE1NTJaFw0yNTA4MDgxODEwNTJaMDMxMTAvBgNV BAMTKDJCRDUxOUZCNzJCRTBFRDBENTZDRDJDRjdEMDMwNTMxRDVFNDQ4MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHBDHu26Gls4fbRe3+dq/A55yt VFrRzyT/mrP8UvJBXAT7aahtcs+qibCtWXo04l+tjCm2xBA7OxqX1p4TirKbJL+1 Jc2Ro+k4FRsdBM2YVo8z5s3MxNOGP0GMTk1a3d8ozRdueUJxXSYuMDcC60/rWdbC tNcoPvZkfDpSUrUKSsvX79MYl/FxbtpwhlPR5jVM0VYN32lkilFBetBWsq1n5T2m orPE6GnDrVKOjnwZyhB3rrE4xHjOGaasExAWMswWNJHEAgd6LPWZCn2DreAwkE6Q E9eyr9UCHyQZ6af0b1F9tSB7CHuBgdJ6DzRsh65mA09yBXAqVsvMER7frRDnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK9UZ+3K+DtDVbNLPfQMFMdXkSAIwHwYDVR0j BBgwFoAUt2zuZs0ynk7dM+bTRSoz+74A10EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjdiNzY3Ny02MjA0LTQwNWYtOGJhMi1lNzE0MzI0YzE1ZDcvMC9CNzZDRUU2NkNE MzI5RTRFREQzM0U2RDM0NTJBMzNGQkJFMDBENzQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjc2Q0VFNjZDRDMyOUU0RUREMzNFNkQzNDUyQTMzRkJCRTAw RDc0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y3Yjc2NzctNjIwNC00MDVmLThi YTItZTcxNDMyNGMxNWQ3LzAvQjc2Q0VFNjZDRDMyOUU0RUREMzNFNkQzNDUyQTMz RkJCRTAwRDc0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKBn/sDcvUsXecCMRA9i09iqdzH3SZ3H7CMT 8+NQt/S1FGUPyqXxOOIFXGZTVnUAh3J74k9gMaAxqUKFXbAAxnXMPYmKglziNHN2 fe1JeOLXHPlGxmhW2B9UKvtPhs9dyCd223Q+TJZWO22td3SqFciJqDYcy7fT5B6w YFTCXh8kXHRbEvdAa4Lgy6kleM/yYI8s16EB9LBztuDh0498HiKO+6wwzzdpEc3k JFWcN98p3gblE/ZHZFzK/gqQ3Q6BLSGOvZVyCy2NGiuufR89PEb3C+d4w/TOD2yH lNFDg+sQt+rL2bQGkLx9zY3jmareJqNhDC41fGtJjgau/jOPKCg= -----END CERTIFICATE-----Generated at Thu Aug 7 03:15:12 2025 by rpki-client