$ rpki-client -vvf repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft File: B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft (raw, json) Hash identifier: uc72ZmGFtpRyraTMauytyZ2RefNo4S45bJS+O7zHvnw= Subject key identifier: 96:C4:A5:84:02:0C:CD:CB:B6:72:BE:4F:E9:0F:F5:48:F4:96:58:49 Authority key identifier: B9:11:D3:4F:2E:80:14:0D:63:AE:02:F4:CB:E7:19:E7:D9:72:C6:F6 Certificate issuer: /CN=B911D34F2E80140D63AE02F4CBE719E7D972C6F6 Certificate serial: 5FBCF30290F20858D3A5AA7305F847118162770A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft Manifest number: A6 Signing time: Tue 22 Jul 2025 08:51:09 +0000 Manifest this update: Tue 22 Jul 2025 08:46:09 +0000 Manifest next update: Fri 25 Jul 2025 13:04:09 +0000 Files and hashes: 1: B911D34F2E80140D63AE02F4CBE719E7D972C6F6.crl (hash: VvRIgf2S5meAoOmy/nWXyrfqlJ1GUDr8d8Yr8leq1YY=) 2: 3130332e3135302e32322e302f32342d3234203d3e20313430333938.roa (hash: obby+PvQrLWYC3NU3QI0xYtZDC2hJcWlETHv+KWDEWM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.crl rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 13:04:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:bc:f3:02:90:f2:08:58:d3:a5:aa:73:05:f8:47:11:81:62:77:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B911D34F2E80140D63AE02F4CBE719E7D972C6F6 Validity Not Before: Jul 22 08:46:09 2025 GMT Not After : Jul 25 13:04:09 2025 GMT Subject: CN=96C4A584020CCDCBB672BE4FE90FF548F4965849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:91:66:d2:b5:4e:53:59:d1:3b:ae:7a:4c:a6: 73:40:4d:a2:1f:68:a5:5d:1d:0f:a6:c1:ee:8c:92: 53:0c:9f:03:0e:0e:ba:0e:d9:4b:55:d7:77:be:00: c9:de:d1:cb:db:19:8c:d6:a7:c1:ff:28:03:a7:ac: c7:28:a0:86:c5:0a:28:47:66:81:e9:5f:4d:b5:4c: 5d:d5:ba:97:73:0d:bd:11:54:23:f6:39:77:65:9c: 38:17:21:aa:0b:78:17:c2:3e:6f:c1:8d:8f:8e:2e: 0f:a5:d9:70:24:1d:65:07:fa:2b:d9:65:9f:52:fe: ab:61:e5:65:ef:da:36:5b:83:64:32:32:cc:5c:cd: 9f:2a:f0:c7:95:14:36:ba:5a:30:03:98:e6:3f:f3: 87:1a:8d:68:5d:31:3c:9b:14:b5:7b:f1:21:f8:cd: 5d:4d:01:13:5e:a2:f6:1c:93:93:4b:8c:9f:f8:f1: 90:c9:25:4b:bf:0a:80:97:2f:09:ee:f8:4b:3a:e7: cc:44:08:4e:a3:fa:78:df:5d:ad:4c:15:86:35:6a: 61:71:ec:a1:96:c1:70:e5:87:e1:46:75:b7:b8:4c: ad:88:73:20:8f:0d:7f:7a:ab:d0:fd:46:56:82:dd: 9a:be:21:39:86:c7:ee:91:4f:4e:e3:e4:ac:70:90: 31:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C4:A5:84:02:0C:CD:CB:B6:72:BE:4F:E9:0F:F5:48:F4:96:58:49 X509v3 Authority Key Identifier: keyid:B9:11:D3:4F:2E:80:14:0D:63:AE:02:F4:CB:E7:19:E7:D9:72:C6:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:56:3a:ba:7e:34:3e:c2:fe:e2:da:ca:5c:f7:42:e2:03:1a: 7a:c3:60:0f:3d:fa:13:93:47:3c:08:38:9d:18:05:cc:cd:f2: 1f:39:8c:3a:d9:ef:43:2d:ef:e8:05:5d:70:a3:1a:80:fd:b6: 0a:3e:c0:d6:e3:19:60:7b:55:50:14:e3:fb:3e:77:f9:23:fc: a5:80:b0:87:73:fd:0d:95:52:8e:35:c6:6b:78:0b:48:34:6d: 58:00:77:b8:6a:fd:15:e7:ed:e4:d4:66:2b:7b:fe:d8:f3:5e: 84:16:68:1f:a7:47:1d:07:b3:2c:db:fe:df:75:cd:3b:ea:74: 6a:4b:80:b1:ec:f7:ad:4a:c7:f3:96:09:5c:cb:d4:e4:81:f7: 9b:7f:33:9a:fe:eb:85:2f:da:a8:11:a9:f1:63:17:09:38:78: fd:97:04:fc:b7:16:66:e3:09:f6:b2:b0:6f:fd:cc:c6:49:2b: 12:69:d2:95:69:d2:50:99:0e:7e:86:6d:e7:a2:92:b0:43:ab: 6a:fd:ab:d6:40:81:73:58:6d:f7:65:13:9e:f2:26:c2:ab:1d: 1d:76:10:42:85:fc:32:40:0e:75:47:fd:fa:68:7a:11:40:26: 73:29:d8:4e:5b:3a:07:b3:98:a2:58:38:b9:50:c8:a1:bc:79: 92:c6:49:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX7zzApDyCFjTpapzBfhHEYFidwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkxMUQzNEYyRTgwMTQwRDYzQUUwMkY0Q0JFNzE5RTdE OTcyQzZGNjAeFw0yNTA3MjIwODQ2MDlaFw0yNTA3MjUxMzA0MDlaMDMxMTAvBgNV BAMTKDk2QzRBNTg0MDIwQ0NEQ0JCNjcyQkU0RkU5MEZGNTQ4RjQ5NjU4NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrkWbStU5TWdE7rnpMpnNATaIf aKVdHQ+mwe6MklMMnwMODroO2UtV13e+AMne0cvbGYzWp8H/KAOnrMcooIbFCihH ZoHpX021TF3VupdzDb0RVCP2OXdlnDgXIaoLeBfCPm/BjY+OLg+l2XAkHWUH+ivZ ZZ9S/qth5WXv2jZbg2QyMsxczZ8q8MeVFDa6WjADmOY/84cajWhdMTybFLV78SH4 zV1NARNeovYck5NLjJ/48ZDJJUu/CoCXLwnu+Es658xECE6j+njfXa1MFYY1amFx 7KGWwXDlh+FGdbe4TK2IcyCPDX96q9D9RlaC3Zq+ITmGx+6RT07j5KxwkDH3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlsSlhAIMzcu2cr5P6Q/1SPSWWEkwHwYDVR0j BBgwFoAUuRHTTy6AFA1jrgL0y+cZ59lyxvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NmE4NGRlNS02MWQxLTQ2MTgtOWZiNC00M2Y2MzFhMTI4OWEvMC9COTExRDM0RjJF ODAxNDBENjNBRTAyRjRDQkU3MTlFN0Q5NzJDNkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkxMUQzNEYyRTgwMTQwRDYzQUUwMkY0Q0JFNzE5RTdEOTcy QzZGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDZhODRkZTUtNjFkMS00NjE4LTlm YjQtNDNmNjMxYTEyODlhLzAvQjkxMUQzNEYyRTgwMTQwRDYzQUUwMkY0Q0JFNzE5 RTdEOTcyQzZGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALlWOrp+ND7C/uLaylz3QuIDGnrDYA89+hOT RzwIOJ0YBczN8h85jDrZ70Mt7+gFXXCjGoD9tgo+wNbjGWB7VVAU4/s+d/kj/KWA sIdz/Q2VUo41xmt4C0g0bVgAd7hq/RXn7eTUZit7/tjzXoQWaB+nRx0Hsyzb/t91 zTvqdGpLgLHs961Kx/OWCVzL1OSB95t/M5r+64Uv2qgRqfFjFwk4eP2XBPy3Fmbj CfaysG/9zMZJKxJp0pVp0lCZDn6GbeeikrBDq2r9q9ZAgXNYbfdlE57yJsKrHR12 EEKF/DJADnVH/fpoehFAJnMp2E5bOgezmKJYOLlQyKG8eZLGSSU= -----END CERTIFICATE-----Generated at Wed Jul 23 02:01:25 2025 by rpki-client