$ rpki-client -vvf repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft File: B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft (raw, json) Hash identifier: OC5UFVVvFViKnTgM26B12nHK8H2dE7kZB9/T4rN5Pxc= Subject key identifier: F8:6B:A3:26:40:87:C2:DF:14:AD:D2:E2:16:03:51:2A:D4:16:59:AF Authority key identifier: B9:21:DA:AB:B8:49:49:DD:C2:50:0D:4F:0A:6D:93:FA:0E:B3:84:E1 Certificate issuer: /CN=B921DAABB84949DDC2500D4F0A6D93FA0EB384E1 Certificate serial: 7E0220D117B5E902D936E7C2331C9287E6B32AB4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft Manifest number: 0283 Signing time: Sat 19 Jul 2025 20:22:01 +0000 Manifest this update: Sat 19 Jul 2025 20:17:01 +0000 Manifest next update: Wed 23 Jul 2025 05:44:01 +0000 Files and hashes: 1: B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.crl (hash: oHxlVn4f1MCVbWQnvm1LsJWZX/gLkMxXJDBsV5b+2Ks=) 2: 3130332e33302e3232332e302f32342d3234203d3e203338313438.roa (hash: 8BH7HUPp+qT0dOPwFMHWiAT720E6kg8wn1sWk04/fIM=) 3: 3130332e33302e3232302e302f32322d3233203d3e203338313438.roa (hash: d/qApoJ7mr0vuB+K0fvN+XpOWjHSmWf3V1Wp1hQdcro=) 4: 3130332e33302e3232302e302f32342d3234203d3e203338313438.roa (hash: 5MfpBewFDSPuWTooHE8O1IkKqC/swjstgMNE2K+S+q4=) 5: 3132322e3230302e3134342e302f32312d3234203d3e203338313438.roa (hash: Q0JPOTRHz7S3KCYgxrzfh7sPXe85gqUb+g55+vjlzmE=) 6: 3130332e33302e3232322e302f32342d3234203d3e203338313438.roa (hash: ZPi+JZqMM8ZilEO1UdhpjL1kpie3JMIqiKeJGeN+nJU=) 7: 3130332e33302e3232312e302f32342d3234203d3e203338313438.roa (hash: w9cZPX/3pDPz2+LwzvjA2m3xBMWMxQj8fam9ODXwU7Y=) 8: 323430313a396230303a3a2f33322d3438203d3e203338313438.roa (hash: hc6ECrtKO1f8LRbUaOngruzuLZGjjKMcrVpSYHLGH+4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.crl rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 05:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:02:20:d1:17:b5:e9:02:d9:36:e7:c2:33:1c:92:87:e6:b3:2a:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B921DAABB84949DDC2500D4F0A6D93FA0EB384E1 Validity Not Before: Jul 19 20:17:01 2025 GMT Not After : Jul 23 05:44:01 2025 GMT Subject: CN=F86BA3264087C2DF14ADD2E21603512AD41659AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7e:ae:29:77:41:a2:c1:94:8b:f6:b3:9a:8d: 9e:5b:89:2b:33:d3:01:9c:c7:fe:bd:11:e3:e4:b5: 67:1f:77:4c:af:0d:a9:c3:d6:32:f1:91:5a:7e:ec: 48:29:e4:78:74:a8:39:d8:cb:7b:62:be:5a:1a:89: 1e:3c:da:a8:c5:03:d7:39:38:20:ed:0d:9c:a2:df: f6:64:71:ed:13:c1:35:38:14:7f:78:82:e7:1e:88: 86:f8:02:bd:d2:50:97:2e:61:1f:f1:1a:df:2e:03: c1:1a:f8:43:6f:1c:81:1e:f9:ab:a0:9b:aa:b2:6e: 12:b2:e6:21:62:30:40:7e:76:21:34:ad:72:e1:d3: 30:03:ce:b0:e9:37:49:72:d9:89:c3:e7:95:6f:f7: ee:5d:d9:6c:a5:2a:66:aa:0c:e0:18:f4:20:2d:31: 88:18:95:44:ea:1c:7f:36:12:85:35:8e:bb:a4:ca: b4:9d:29:62:d5:65:2d:90:8c:1e:69:40:0c:0d:23: a0:e1:96:50:f7:7c:d4:eb:cd:ff:61:ce:78:4e:96: 23:ec:e1:16:95:c8:3d:58:95:54:a6:6f:80:e5:3e: 43:63:0d:c4:ab:52:aa:f1:21:c2:16:a4:c6:b8:02: d0:fa:b9:0a:02:72:81:b7:41:29:22:1d:c0:31:fe: 69:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:6B:A3:26:40:87:C2:DF:14:AD:D2:E2:16:03:51:2A:D4:16:59:AF X509v3 Authority Key Identifier: keyid:B9:21:DA:AB:B8:49:49:DD:C2:50:0D:4F:0A:6D:93:FA:0E:B3:84:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:9a:3f:82:85:02:2b:92:8d:2d:81:d7:59:e2:fe:d9:84:09: 73:e6:16:18:c6:f4:79:10:17:49:a8:ca:09:50:c5:cf:35:9d: 41:42:16:92:41:4a:d1:76:75:71:e3:39:e7:b0:45:a0:3d:39: e0:07:d9:f5:d0:be:f9:af:b2:b1:92:05:bd:3e:48:b8:ab:55: 1b:46:cc:f6:3d:05:48:36:f8:52:ea:a8:8c:b3:a8:57:d1:ea: 7e:28:a6:89:9e:e9:ee:a1:08:d6:ca:f4:69:28:30:ac:bc:ae: 43:1c:e3:e2:b1:9e:14:39:1a:a4:48:a6:9b:d3:a3:65:6e:a7: b4:fc:5e:c0:80:0f:2b:b3:b4:5f:76:1f:15:1b:30:d3:a2:fd: ac:e2:8c:e0:36:09:76:f4:4c:f5:f7:31:23:c4:e0:5b:58:33: a8:cf:58:b2:6c:50:71:33:08:57:92:df:42:5a:22:ce:24:65: 0f:22:e0:57:4f:b8:a0:30:07:73:59:d4:82:2d:75:1b:1a:60: 1a:99:ef:90:2f:bf:e6:c0:48:83:50:9f:95:27:c8:95:a4:5b: 98:2c:ad:5f:6f:32:b3:24:76:65:91:15:40:92:e8:f6:24:da: 4a:d0:95:d1:e1:f1:4b:7d:50:24:01:53:cd:28:18:83:0d:46: e5:58:23:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfgIg0Re16QLZNufCMxySh+azKrQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkyMURBQUJCODQ5NDlEREMyNTAwRDRGMEE2RDkzRkEw RUIzODRFMTAeFw0yNTA3MTkyMDE3MDFaFw0yNTA3MjMwNTQ0MDFaMDMxMTAvBgNV BAMTKEY4NkJBMzI2NDA4N0MyREYxNEFERDJFMjE2MDM1MTJBRDQxNjU5QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCofq4pd0GiwZSL9rOajZ5biSsz 0wGcx/69EePktWcfd0yvDanD1jLxkVp+7Egp5Hh0qDnYy3tivloaiR482qjFA9c5 OCDtDZyi3/Zkce0TwTU4FH94guceiIb4Ar3SUJcuYR/xGt8uA8Ea+ENvHIEe+aug m6qybhKy5iFiMEB+diE0rXLh0zADzrDpN0ly2YnD55Vv9+5d2WylKmaqDOAY9CAt MYgYlUTqHH82EoU1jrukyrSdKWLVZS2QjB5pQAwNI6DhllD3fNTrzf9hznhOliPs 4RaVyD1YlVSmb4DlPkNjDcSrUqrxIcIWpMa4AtD6uQoCcoG3QSkiHcAx/mkHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+GujJkCHwt8UrdLiFgNRKtQWWa8wHwYDVR0j BBgwFoAUuSHaq7hJSd3CUA1PCm2T+g6zhOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTkyYzI3NC0xMWRiLTQxMjctYmFiYi1hZWFlOTkyODRiMDAvMC9COTIxREFBQkI4 NDk0OUREQzI1MDBENEYwQTZEOTNGQTBFQjM4NEUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkyMURBQUJCODQ5NDlEREMyNTAwRDRGMEE2RDkzRkEwRUIz ODRFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTU5MmMyNzQtMTFkYi00MTI3LWJh YmItYWVhZTk5Mjg0YjAwLzAvQjkyMURBQUJCODQ5NDlEREMyNTAwRDRGMEE2RDkz RkEwRUIzODRFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAICaP4KFAiuSjS2B11ni/tmECXPmFhjG9HkQ F0moyglQxc81nUFCFpJBStF2dXHjOeewRaA9OeAH2fXQvvmvsrGSBb0+SLirVRtG zPY9BUg2+FLqqIyzqFfR6n4opome6e6hCNbK9GkoMKy8rkMc4+KxnhQ5GqRIppvT o2Vup7T8XsCADyuztF92HxUbMNOi/azijOA2CXb0TPX3MSPE4FtYM6jPWLJsUHEz CFeS30JaIs4kZQ8i4FdPuKAwB3NZ1IItdRsaYBqZ75Avv+bASINQn5UnyJWkW5gs rV9vMrMkdmWRFUCS6PYk2krQldHh8Ut9UCQBU80oGIMNRuVYI5g= -----END CERTIFICATE-----Generated at Mon Jul 21 23:25:06 2025 by rpki-client