$ rpki-client -vvf repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft File: B2D1CBD015A419010845E6F56D8385C8647B5390.mft (raw, json) Hash identifier: EFlJW1xhuhlZFNX89IED147Wj6Bxv5dyzB0MzTdBgyI= Subject key identifier: 46:C0:A3:1D:62:17:57:FE:32:47:E2:1E:40:31:88:22:A5:68:54:10 Authority key identifier: B2:D1:CB:D0:15:A4:19:01:08:45:E6:F5:6D:83:85:C8:64:7B:53:90 Certificate issuer: /CN=B2D1CBD015A419010845E6F56D8385C8647B5390 Certificate serial: 5F46A62951C2896B422DF253549A3850773CC111 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft Manifest number: 02A7 Signing time: Mon 04 Aug 2025 23:12:08 +0000 Manifest this update: Mon 04 Aug 2025 23:07:08 +0000 Manifest next update: Fri 08 Aug 2025 10:13:08 +0000 Files and hashes: 1: 3130332e3135332e3133342e302f32342d3234203d3e20313430343634.roa (hash: cW/9D7f3rSD1Wd+uYOFJYajDwTDUi1FLo5623123rGc=) 2: 3130332e3135332e3133352e302f32342d3234203d3e20313430343634.roa (hash: WsmI0rdfXmL0fWdst11niyZhvNmKpEwJDzCH1ijVhS8=) 3: 3130332e3135332e3133342e302f32332d3233203d3e20313430343634.roa (hash: cPwdxx5hPy0Al9znnfs7+/9F2Ic938FTNbuxG5Z3xhY=) 4: 323430363a343534303a3a2f33322d3332203d3e20313430343634.roa (hash: zD3MmvWg8/hnp1isGEqEx8GCf/Gya3epsj8OBSoizYQ=) 5: B2D1CBD015A419010845E6F56D8385C8647B5390.crl (hash: zSKqSw493hrY2QEbTafWnylQyz9nJAs48aetF9fMNT4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.crl rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 10:13:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:46:a6:29:51:c2:89:6b:42:2d:f2:53:54:9a:38:50:77:3c:c1:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2D1CBD015A419010845E6F56D8385C8647B5390 Validity Not Before: Aug 4 23:07:08 2025 GMT Not After : Aug 8 10:13:08 2025 GMT Subject: CN=46C0A31D621757FE3247E21E40318822A5685410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:47:4a:da:93:4c:3b:23:09:04:e5:9c:af:a1: c1:5e:36:12:1a:d6:a3:25:04:82:17:b8:8e:ee:15: 98:fd:64:78:4b:4b:0d:2e:77:67:c7:ba:71:4b:19: 11:5a:2a:75:1d:e9:2a:40:7a:3c:a7:d2:0e:50:55: f6:aa:6c:f4:62:9a:2f:14:be:00:a5:a0:20:06:9f: 0f:2a:e3:79:a8:5f:48:7d:66:28:25:19:8f:4e:10: 1f:de:10:60:2c:29:b7:e7:3b:6f:7a:94:2e:cd:19: be:d7:56:e0:7e:03:4e:54:e9:73:a8:cb:89:5b:48: 06:d0:2e:af:a5:d5:e3:14:15:f0:a1:81:99:5d:f0: 86:51:6d:92:e4:e2:a0:3f:3d:94:49:97:86:d0:48: 6b:41:d0:8a:0b:ad:a4:ca:8a:d6:6c:8d:35:97:07: e6:26:43:1e:ce:19:37:73:08:25:c8:3f:7b:37:a3: 67:e0:ff:34:2f:5d:2a:ca:c6:8b:8a:78:f2:15:ae: d1:21:69:6c:03:71:8e:33:64:1d:d4:08:38:84:19: 55:21:39:45:c4:8a:70:68:69:1f:4c:f8:91:55:0c: 7d:7c:a5:fe:3a:ef:78:6f:a7:0f:8f:bd:14:55:8e: e9:17:3f:83:33:fd:3f:b7:d9:77:c6:ce:a9:0e:1c: 0c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C0:A3:1D:62:17:57:FE:32:47:E2:1E:40:31:88:22:A5:68:54:10 X509v3 Authority Key Identifier: keyid:B2:D1:CB:D0:15:A4:19:01:08:45:E6:F5:6D:83:85:C8:64:7B:53:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:d6:b1:9d:15:3f:c4:e6:84:bd:46:05:07:02:6c:cc:c4:7c: 59:40:70:49:e1:fa:cc:73:00:0f:c6:00:6c:bb:79:27:76:9f: 05:f4:d0:b3:f1:9e:b4:4b:fb:bc:24:bf:bd:9b:97:e1:4c:f5: 24:8a:b2:94:a8:47:a2:99:e5:53:c3:6f:63:8a:f3:9d:25:31: 93:8d:02:d0:c5:72:2f:44:5e:6c:71:63:d5:5e:7f:54:fb:a7: fe:e4:14:20:0c:82:f9:8d:65:ae:34:6d:75:22:df:08:21:40: 90:2c:5c:ce:d4:86:36:2b:a0:45:58:3b:f6:fe:20:d7:19:bd: 4c:3b:ad:bd:98:b0:c2:28:f9:f9:a5:3c:5c:47:ab:9c:45:f8: 76:50:f0:fe:a1:c0:63:47:a9:44:dd:c7:c8:fc:e4:87:51:b4: 33:da:74:b0:29:0c:3f:15:ab:98:01:e9:bd:a4:85:e6:02:9c: 4e:73:05:16:d7:3e:af:29:8e:64:cf:4d:0a:12:d6:62:bb:5e: 16:4f:eb:c9:f2:94:a5:a2:27:aa:13:e4:99:29:03:b5:b1:54: e9:e9:6b:94:cb:be:9d:e2:01:be:11:a7:ef:da:c7:32:cd:08: 66:44:64:6f:ed:19:d9:6b:9f:e6:e5:36:12:bf:4a:2e:bf:5c: 3e:00:b9:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX0amKVHCiWtCLfJTVJo4UHc8wREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1Qzg2 NDdCNTM5MDAeFw0yNTA4MDQyMzA3MDhaFw0yNTA4MDgxMDEzMDhaMDMxMTAvBgNV BAMTKDQ2QzBBMzFENjIxNzU3RkUzMjQ3RTIxRTQwMzE4ODIyQTU2ODU0MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiR0rak0w7IwkE5ZyvocFeNhIa 1qMlBIIXuI7uFZj9ZHhLSw0ud2fHunFLGRFaKnUd6SpAejyn0g5QVfaqbPRimi8U vgCloCAGnw8q43moX0h9ZiglGY9OEB/eEGAsKbfnO296lC7NGb7XVuB+A05U6XOo y4lbSAbQLq+l1eMUFfChgZld8IZRbZLk4qA/PZRJl4bQSGtB0IoLraTKitZsjTWX B+YmQx7OGTdzCCXIP3s3o2fg/zQvXSrKxouKePIVrtEhaWwDcY4zZB3UCDiEGVUh OUXEinBoaR9M+JFVDH18pf4673hvpw+PvRRVjukXP4Mz/T+32XfGzqkOHAxjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURsCjHWIXV/4yR+IeQDGIIqVoVBAwHwYDVR0j BBgwFoAUstHL0BWkGQEIReb1bYOFyGR7U5AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjhiZTkwNS1mMjk2LTQ1ZDEtYTg3OS00YTRkZTUyY2IyZDYvMC9CMkQxQ0JEMDE1 QTQxOTAxMDg0NUU2RjU2RDgzODVDODY0N0I1MzkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1Qzg2NDdC NTM5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4YmU5MDUtZjI5Ni00NWQxLWE4 NzktNGE0ZGU1MmNiMmQ2LzAvQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1 Qzg2NDdCNTM5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAbWsZ0VP8TmhL1GBQcCbMzEfFlAcEnh+sxz AA/GAGy7eSd2nwX00LPxnrRL+7wkv72bl+FM9SSKspSoR6KZ5VPDb2OK850lMZON AtDFci9EXmxxY9Vef1T7p/7kFCAMgvmNZa40bXUi3wghQJAsXM7UhjYroEVYO/b+ INcZvUw7rb2YsMIo+fmlPFxHq5xF+HZQ8P6hwGNHqUTdx8j85IdRtDPadLApDD8V q5gB6b2kheYCnE5zBRbXPq8pjmTPTQoS1mK7XhZP68nylKWiJ6oT5JkpA7WxVOnp a5TLvp3iAb4Rp+/axzLNCGZEZG/tGdlrn+blNhK/Si6/XD4AuTQ= -----END CERTIFICATE-----Generated at Thu Aug 7 11:10:22 2025 by rpki-client