$ rpki-client -vvf repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.mft File: B152586AE46FCAB640629D941147319E05FCF34B.mft (raw, json) Hash identifier: oDpsqX+bXKEMb+rIGepnhxYIIeK175hn2EXvKr7KN5k= Subject key identifier: A7:E9:DD:F9:11:DE:08:97:94:CD:9B:48:23:F1:B3:7D:8B:F4:8C:88 Authority key identifier: B1:52:58:6A:E4:6F:CA:B6:40:62:9D:94:11:47:31:9E:05:FC:F3:4B Certificate issuer: /CN=B152586AE46FCAB640629D941147319E05FCF34B Certificate serial: 7BB7A16C5074F1D6809960BD6C5D2A428D1A8112 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B152586AE46FCAB640629D941147319E05FCF34B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.mft Manifest number: 0222 Signing time: Mon 21 Jul 2025 17:41:00 +0000 Manifest this update: Mon 21 Jul 2025 17:36:00 +0000 Manifest next update: Fri 25 Jul 2025 01:48:00 +0000 Files and hashes: 1: B152586AE46FCAB640629D941147319E05FCF34B.crl (hash: SJBJhbNF8xU5JuPQHHmWGFcbsECfIilnlH7gjm13pQY=) 2: 323030313a6466303a376334303a3a2f34382d3438203d3e20313437313534.roa (hash: y0s8YGn9mHg2T9EeIiu21b9Ye25qY26dsfL13en5ZUs=) 3: 3130332e3137362e3232372e302f32342d3234203d3e20313437313534.roa (hash: 6c26JZWNMMIKbz8QiOgDDGQqpXGJuiNocLMDMSpKyVk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.crl rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B152586AE46FCAB640629D941147319E05FCF34B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 01:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:b7:a1:6c:50:74:f1:d6:80:99:60:bd:6c:5d:2a:42:8d:1a:81:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B152586AE46FCAB640629D941147319E05FCF34B Validity Not Before: Jul 21 17:36:00 2025 GMT Not After : Jul 25 01:48:00 2025 GMT Subject: CN=A7E9DDF911DE089794CD9B4823F1B37D8BF48C88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f4:be:34:fa:14:d5:4d:f0:be:df:1f:fa:54: 88:ea:d6:9d:7b:7b:72:df:8c:5f:fc:a5:1d:96:7f: d1:af:09:19:e0:c2:82:60:b9:1a:18:64:80:34:52: 1c:63:83:c9:01:ce:5f:49:51:55:24:2e:6e:3e:9c: 1d:f6:c1:d7:84:c0:d1:c0:a6:d6:ba:7a:f9:a2:a9: 94:7a:66:19:0d:f1:41:f9:0f:24:d0:7b:32:7c:27: 70:f3:9f:04:00:74:9d:9f:9d:a3:8c:bc:ae:6e:df: 3c:14:d8:81:c2:09:02:ec:5f:a1:9d:19:5f:2a:e7: 03:08:31:47:d5:a4:31:9b:1b:3c:d7:fa:fa:51:94: 73:3e:5c:37:58:16:0e:a3:e9:96:bc:6e:b6:92:7f: c0:6a:c0:4a:4d:75:3c:a8:00:ae:3a:0c:23:c5:c5: 6c:4a:e7:ef:a7:4b:f6:d8:6e:37:5e:e8:70:0a:de: 9d:59:68:87:c3:38:b2:48:7a:b8:45:0e:7c:78:0b: e5:00:8c:86:30:ff:dd:fc:87:84:9e:e6:f4:92:a8: 9b:77:64:da:89:09:bf:45:cb:60:43:bd:4f:78:64: fd:35:08:0f:40:bf:c4:de:10:b9:06:bc:ba:e6:0f: 83:1c:6f:72:a9:8c:6d:8f:bf:a5:66:08:8c:b7:a4: 63:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E9:DD:F9:11:DE:08:97:94:CD:9B:48:23:F1:B3:7D:8B:F4:8C:88 X509v3 Authority Key Identifier: keyid:B1:52:58:6A:E4:6F:CA:B6:40:62:9D:94:11:47:31:9E:05:FC:F3:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B152586AE46FCAB640629D941147319E05FCF34B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:ad:b7:6f:77:8b:1d:41:3b:31:d8:59:2d:b7:1f:02:82:07: 4e:10:b9:68:5e:ac:18:ae:5d:2d:b5:3d:50:3f:ca:9b:77:ca: 2f:a3:31:2c:e8:d2:75:22:0e:f1:35:f7:8c:80:08:49:4a:71: 89:0a:b8:7c:a7:d8:47:f3:01:08:01:0d:64:20:77:cc:28:22: f3:a7:97:2c:7f:c6:06:0b:6f:eb:ee:d7:78:ad:24:bf:16:ac: 06:62:46:3e:40:1b:4b:ee:4b:d4:a5:3a:fa:fb:69:cb:86:06: e3:79:3a:b1:36:32:c7:40:bc:d9:c9:2a:56:83:90:bf:dc:64: 96:6a:bf:38:e4:51:93:e8:a2:37:c3:42:65:11:db:1e:d1:cd: 85:b2:d8:0d:92:0b:73:0e:f7:92:55:f1:f2:4c:d8:f2:f8:17: 00:9d:87:05:50:1f:0d:05:94:1c:65:b6:ba:bf:26:13:a9:59: e7:a9:b4:e7:fc:73:8d:a8:f5:f8:d7:eb:cf:98:cd:87:84:67: 7d:c4:db:96:01:ce:ca:24:40:03:f2:76:e6:38:51:0c:c7:9d: 4f:cf:15:a5:d9:33:dc:30:a2:af:99:05:51:4c:4d:c0:be:ea: 28:ac:f6:45:08:74:68:fb:cc:ea:94:85:b3:92:97:86:69:fd: a4:9c:98:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe7ehbFB08daAmWC9bF0qQo0agRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE1MjU4NkFFNDZGQ0FCNjQwNjI5RDk0MTE0NzMxOUUw NUZDRjM0QjAeFw0yNTA3MjExNzM2MDBaFw0yNTA3MjUwMTQ4MDBaMDMxMTAvBgNV BAMTKEE3RTlEREY5MTFERTA4OTc5NENEOUI0ODIzRjFCMzdEOEJGNDhDODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx9L40+hTVTfC+3x/6VIjq1p17 e3LfjF/8pR2Wf9GvCRngwoJguRoYZIA0Uhxjg8kBzl9JUVUkLm4+nB32wdeEwNHA pta6evmiqZR6ZhkN8UH5DyTQezJ8J3DznwQAdJ2fnaOMvK5u3zwU2IHCCQLsX6Gd GV8q5wMIMUfVpDGbGzzX+vpRlHM+XDdYFg6j6Za8braSf8BqwEpNdTyoAK46DCPF xWxK5++nS/bYbjde6HAK3p1ZaIfDOLJIerhFDnx4C+UAjIYw/938h4Se5vSSqJt3 ZNqJCb9Fy2BDvU94ZP01CA9Av8TeELkGvLrmD4Mcb3KpjG2Pv6VmCIy3pGPLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp+nd+RHeCJeUzZtII/GzfYv0jIgwHwYDVR0j BBgwFoAUsVJYauRvyrZAYp2UEUcxngX880swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YTllMjg5OC0wMjNiLTQ3NDEtODczNS1hMDcxOGNjNmNmMmIvMC9CMTUyNTg2QUU0 NkZDQUI2NDA2MjlEOTQxMTQ3MzE5RTA1RkNGMzRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE1MjU4NkFFNDZGQ0FCNjQwNjI5RDk0MTE0NzMxOUUwNUZD RjM0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmE5ZTI4OTgtMDIzYi00NzQxLTg3 MzUtYTA3MThjYzZjZjJiLzAvQjE1MjU4NkFFNDZGQ0FCNjQwNjI5RDk0MTE0NzMx OUUwNUZDRjM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGGtt293ix1BOzHYWS23HwKCB04QuWherBiu XS21PVA/ypt3yi+jMSzo0nUiDvE194yACElKcYkKuHyn2EfzAQgBDWQgd8woIvOn lyx/xgYLb+vu13itJL8WrAZiRj5AG0vuS9SlOvr7acuGBuN5OrE2MsdAvNnJKlaD kL/cZJZqvzjkUZPoojfDQmUR2x7RzYWy2A2SC3MO95JV8fJM2PL4FwCdhwVQHw0F lBxltrq/JhOpWeeptOf8c42o9fjX68+YzYeEZ33E25YBzsokQAPyduY4UQzHnU/P FaXZM9wwoq+ZBVFMTcC+6iis9kUIdGj7zOqUhbOSl4Zp/aScmAA= -----END CERTIFICATE-----Generated at Wed Jul 23 02:30:18 2025 by rpki-client