$ rpki-client -vvf repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft File: B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft (raw, json) Hash identifier: a8krSOYLYk5ss5nXNBQW9ddaRmc2esuI5IDtjsS8NsA= Subject key identifier: DC:55:98:9C:61:17:01:35:A2:93:4C:4D:1D:D1:24:2F:A6:C6:3F:41 Authority key identifier: B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C Certificate issuer: /CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C Certificate serial: 04FDD2CD500AC8B591CEF12F4B043CC93C65AC78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft Manifest number: 0207 Signing time: Tue 05 Aug 2025 12:22:09 +0000 Manifest this update: Tue 05 Aug 2025 12:17:09 +0000 Manifest next update: Fri 08 Aug 2025 19:17:09 +0000 Files and hashes: 1: 3130332e3138362e3230322e302f32332d3233203d3e20313439373036.roa (hash: YXcPTV7LyiaT/dlRqQiGxAGyQ4A0Km1DyhqBZdphgGs=) 2: B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl (hash: wL4333LeqQLdUJGNEjZyUt/ov7pbkA05BoRqWmqSdH4=) 3: 3130332e3138362e3230322e302f32342d3234203d3e20313439373036.roa (hash: k4Wn7QjCevaLRtjzpZzU9aujDNZ1W8N1HpzN16+qakY=) 4: 3130332e3138362e3230332e302f32342d3234203d3e20313439373036.roa (hash: JgDdJ0VL4u8D8+wDznKBSlTRQ0p6opMwZGoPzapaaX4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 19:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:fd:d2:cd:50:0a:c8:b5:91:ce:f1:2f:4b:04:3c:c9:3c:65:ac:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C Validity Not Before: Aug 5 12:17:09 2025 GMT Not After : Aug 8 19:17:09 2025 GMT Subject: CN=DC55989C61170135A2934C4D1DD1242FA6C63F41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:72:d6:27:04:fb:66:95:62:51:a3:1f:7d:53: 08:83:ff:d0:4e:a5:11:d7:bb:7f:5c:dd:7a:1f:b5: 90:52:8f:da:be:5f:c9:5b:fa:7d:5f:f5:10:c4:a0: a2:45:95:3c:fd:1a:49:af:b4:42:ce:91:b3:3e:7c: e8:67:8a:60:0d:f6:74:d0:57:96:a4:9a:f2:b5:73: e1:cc:13:c2:9a:8f:fa:0f:49:75:6f:11:6f:c0:90: 0c:55:c9:32:44:27:5b:0b:0a:b8:e7:26:61:58:0b: 2e:ac:27:8d:ea:6f:be:15:9e:ef:79:a3:07:df:28: 70:b8:f2:6a:f1:d3:02:2a:9a:9f:80:22:16:eb:ce: a2:0b:dd:66:b6:79:b6:92:6d:17:b1:b2:31:64:fb: 41:96:f1:aa:a3:56:8d:3a:26:48:58:88:aa:1b:8a: 71:f9:59:fe:9d:9f:f6:ae:fa:ae:21:4f:33:24:38: 50:75:b4:34:2e:e2:4d:30:1b:a0:7d:a6:af:46:a4: 52:89:a0:cd:1a:4e:e3:ea:9c:2b:f6:3c:ad:d0:c7: 97:bb:7c:27:0e:3d:f1:80:36:46:45:a6:80:5c:1f: 9b:55:76:ae:c3:34:39:08:6a:c7:fb:a3:36:5c:a1: f6:09:d9:eb:1a:e3:1c:2c:58:5a:10:ea:3e:bb:28: 8e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:55:98:9C:61:17:01:35:A2:93:4C:4D:1D:D1:24:2F:A6:C6:3F:41 X509v3 Authority Key Identifier: keyid:B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:0d:6a:f1:2f:df:fd:19:66:63:3c:fd:8e:93:22:35:1f:db: e8:43:e8:bf:a6:5c:55:4b:90:c2:cf:93:f2:16:b5:a7:d3:07: df:32:de:79:8f:a6:bb:d7:df:5e:80:07:d6:c7:d2:5c:32:07: 4a:09:55:59:15:b0:40:84:dc:87:87:0f:55:50:0c:ba:16:7a: 62:1a:1b:a1:0e:74:f6:7c:4e:a4:0c:bd:2c:e4:41:63:61:fb: cb:72:2a:14:75:f2:a6:6f:79:f5:78:7e:dd:11:99:ec:cd:72: e7:22:6f:61:95:c5:b4:6b:ca:87:7b:0b:87:e8:5a:a5:35:4b: fc:c4:66:dc:10:a5:bf:f7:a6:4c:cd:b8:62:7f:25:53:49:7f: 99:d9:64:30:fb:33:69:4e:18:85:ae:69:19:84:85:50:75:fa: c2:04:8a:4f:71:3a:c8:ab:08:bc:65:1e:51:39:79:91:bb:26: 80:f7:35:63:b1:b5:64:56:37:8e:32:0b:31:e7:72:3d:f6:2e: 20:c7:4f:9e:81:fe:5c:7f:75:b8:6e:2b:a6:7d:45:70:db:bf: d5:fb:81:8e:5c:3a:ab:c2:7d:9a:27:96:16:e3:b1:05:53:bd: 79:62:73:9a:c0:a7:e2:1b:75:21:bd:f0:c2:15:cd:9f:e8:74: 07:87:3a:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBP3SzVAKyLWRzvEvSwQ8yTxlrHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1RTlG RDIxRkE1QzAeFw0yNTA4MDUxMjE3MDlaFw0yNTA4MDgxOTE3MDlaMDMxMTAvBgNV BAMTKERDNTU5ODlDNjExNzAxMzVBMjkzNEM0RDFERDEyNDJGQTZDNjNGNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXctYnBPtmlWJRox99UwiD/9BO pRHXu39c3XoftZBSj9q+X8lb+n1f9RDEoKJFlTz9GkmvtELOkbM+fOhnimAN9nTQ V5akmvK1c+HME8Kaj/oPSXVvEW/AkAxVyTJEJ1sLCrjnJmFYCy6sJ43qb74Vnu95 owffKHC48mrx0wIqmp+AIhbrzqIL3Wa2ebaSbRexsjFk+0GW8aqjVo06JkhYiKob inH5Wf6dn/au+q4hTzMkOFB1tDQu4k0wG6B9pq9GpFKJoM0aTuPqnCv2PK3Qx5e7 fCcOPfGANkZFpoBcH5tVdq7DNDkIasf7ozZcofYJ2esa4xwsWFoQ6j67KI7VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3FWYnGEXATWik0xNHdEkL6bGP0EwHwYDVR0j BBgwFoAUs0e7pr0Rv8XlX3/zNMFl6f0h+lwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTEwNjgyNy04NjZlLTRhYzMtOGY3OS1hNmUzMjBiMjBkZTcvMC9CMzQ3QkJBNkJE MTFCRkM1RTU1RjdGRjMzNEMxNjVFOUZEMjFGQTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1RTlGRDIx RkE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkxMDY4MjctODY2ZS00YWMzLThm NzktYTZlMzIwYjIwZGU3LzAvQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1 RTlGRDIxRkE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0NavEv3/0ZZmM8/Y6TIjUf2+hD6L+mXFVL kMLPk/IWtafTB98y3nmPprvX316AB9bH0lwyB0oJVVkVsECE3IeHD1VQDLoWemIa G6EOdPZ8TqQMvSzkQWNh+8tyKhR18qZvefV4ft0RmezNcucib2GVxbRryod7C4fo WqU1S/zEZtwQpb/3pkzNuGJ/JVNJf5nZZDD7M2lOGIWuaRmEhVB1+sIEik9xOsir CLxlHlE5eZG7JoD3NWOxtWRWN44yCzHncj32LiDHT56B/lx/dbhuK6Z9RXDbv9X7 gY5cOqvCfZonlhbjsQVTvXlic5rAp+IbdSG98MIVzZ/odAeHOgo= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:11 2025 by rpki-client