$ rpki-client -vvf repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft File: B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft (raw, json) Hash identifier: 2B7P5787RRzFyhej8NRfr7kLNon4hiZKzpnK3zbqW/Q= Subject key identifier: AE:A4:CB:95:1A:5E:69:07:A3:21:84:14:38:E3:91:48:1B:D5:54:25 Authority key identifier: B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1 Certificate issuer: /CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1 Certificate serial: 0A90B837F8C5567CA948B0BD1B9ACC8E4AD40358 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft Manifest number: 022E Signing time: Wed 23 Jul 2025 17:52:18 +0000 Manifest this update: Wed 23 Jul 2025 17:47:18 +0000 Manifest next update: Sun 27 Jul 2025 00:45:18 +0000 Files and hashes: 1: 3130332e3136382e3138342e302f32342d3234203d3e20313432333231.roa (hash: YwiS5nlm2sACVNb5Xfq0EOTBtueDgKIv6RAnbgfUwRk=) 2: 3130332e3136382e3138352e302f32342d3234203d3e20313432333231.roa (hash: KAd16ldutYh48OLbDnroVNt1O/HTzAA/aCmbtAP1Odw=) 3: B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl (hash: 7f6O+JfniVi1bnHIpa1yZoA5HQgMYtKe3nLcJHUWjA4=) 4: 3130332e3136382e3138352e302f32342d3234203d3e203438343635.roa (hash: hum6PwDa+tJlyU75JQFBXd7LlyucqEnCFxIhwk7g/uE=) 5: 3130332e3136382e3138342e302f32342d3234203d3e203438343635.roa (hash: 1UJAHonWaadwHYuLef8BFUV8SSyJkucgr+FB5CesNHg=) 6: 3130332e3136382e3138342e302f32332d3233203d3e20313432333231.roa (hash: WwW9nUa1rmjUn7BCAW+1oX9KPadjU43XCXkkj1toOfQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 00:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:90:b8:37:f8:c5:56:7c:a9:48:b0:bd:1b:9a:cc:8e:4a:d4:03:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1 Validity Not Before: Jul 23 17:47:18 2025 GMT Not After : Jul 27 00:45:18 2025 GMT Subject: CN=AEA4CB951A5E6907A321841438E391481BD55425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ee:1f:e7:48:19:4f:46:df:0d:2a:ff:29:e4: 17:8f:d6:9e:79:0c:d4:9c:f8:5a:ad:a8:13:f0:ff: a7:f2:e8:7d:df:e0:29:f8:f4:9c:1c:d2:e2:e7:5c: 95:c6:d6:6a:e8:90:ec:e5:41:da:ea:7a:b4:51:80: d4:59:34:41:a4:e2:05:07:c1:76:7b:53:df:71:19: 4b:99:16:59:35:05:1a:f2:d2:cc:32:eb:43:7f:04: 00:e3:9a:58:55:1d:3c:30:65:da:01:aa:8f:a2:c3: 6f:fc:3e:7e:1e:e5:b4:86:44:59:bb:25:0f:60:8f: 42:c7:cc:6f:5f:b0:6d:c0:ce:f4:e5:d4:7f:3b:88: c7:4c:6e:3d:55:7a:71:47:8a:28:d4:5f:bb:ad:81: 37:56:1b:b3:9e:04:a3:39:40:48:1f:7d:20:ee:60: 15:25:e2:93:1b:bd:c8:39:ff:35:e3:65:60:d9:c4: c9:9b:c1:04:c3:a4:4a:6e:ee:fe:ae:20:3e:41:f6: 7c:82:a4:e2:10:98:64:70:c0:f9:5f:ea:6f:e0:4f: 67:3b:06:16:ac:c2:25:81:67:5b:ad:c0:47:dd:9a: 64:ae:87:77:16:7f:04:a2:88:46:62:43:a9:fe:73: 61:9b:d8:fb:63:3f:2e:d1:d1:7a:ad:12:bf:ec:ab: 53:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A4:CB:95:1A:5E:69:07:A3:21:84:14:38:E3:91:48:1B:D5:54:25 X509v3 Authority Key Identifier: keyid:B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:a5:45:9d:0b:1e:e5:9f:0e:00:ed:cf:2d:c9:26:91:c8:b5: bc:52:90:69:38:d9:fc:d4:2d:62:30:ac:00:32:fc:93:96:37: 89:ac:78:e8:f4:8c:0f:9c:4e:40:4a:ce:5f:65:d6:ff:ac:8c: 8e:8b:bc:73:42:d5:4f:47:58:75:f0:bd:88:ba:eb:b1:06:28: 6d:cb:81:1e:09:11:5b:49:53:7b:41:dc:9c:e4:3e:0c:00:80: c5:65:28:55:65:d5:45:1d:47:69:cd:37:ef:03:dc:ee:2e:d1: 73:99:77:d6:d7:08:22:2d:fb:42:b9:c9:6f:52:ac:6a:8f:c9: 40:11:9a:9e:3f:d3:d3:a2:d2:48:42:ab:27:7b:da:1c:71:3e: 31:2d:9e:82:48:19:ed:5a:a5:7d:cf:b8:3e:57:43:3c:d2:e3: 43:42:c8:29:8b:f3:07:9e:46:ab:6c:03:51:4a:87:10:df:9a: 72:0d:3c:5d:e5:d2:fb:4a:17:35:70:90:36:96:ce:bb:dc:5d: 6e:93:fc:82:d1:f2:3b:52:d9:fe:f8:c5:b7:9f:d5:f1:0f:ad: 7e:b3:c9:6a:7f:43:b1:33:65:76:e6:1c:ab:6e:9d:df:6e:b8: 92:70:78:61:4a:cc:e1:90:b3:f8:d2:68:16:23:b0:b8:c8:74: 26:83:9a:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCpC4N/jFVnypSLC9G5rMjkrUA1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFENEY1NDk1QkU0RjlEOTk1RUE5QzE1NDU0NjlDQTJC OTgzMzRGMTAeFw0yNTA3MjMxNzQ3MThaFw0yNTA3MjcwMDQ1MThaMDMxMTAvBgNV BAMTKEFFQTRDQjk1MUE1RTY5MDdBMzIxODQxNDM4RTM5MTQ4MUJENTU0MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK7h/nSBlPRt8NKv8p5BeP1p55 DNSc+FqtqBPw/6fy6H3f4Cn49Jwc0uLnXJXG1mrokOzlQdrqerRRgNRZNEGk4gUH wXZ7U99xGUuZFlk1BRry0swy60N/BADjmlhVHTwwZdoBqo+iw2/8Pn4e5bSGRFm7 JQ9gj0LHzG9fsG3AzvTl1H87iMdMbj1VenFHiijUX7utgTdWG7OeBKM5QEgffSDu YBUl4pMbvcg5/zXjZWDZxMmbwQTDpEpu7v6uID5B9nyCpOIQmGRwwPlf6m/gT2c7 BhaswiWBZ1utwEfdmmSuh3cWfwSiiEZiQ6n+c2Gb2PtjPy7R0XqtEr/sq1MVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrqTLlRpeaQejIYQUOOORSBvVVCUwHwYDVR0j BBgwFoAUsdT1SVvk+dmV6pwVRUacormDNPEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OGU3OGVlMC0wMDAyLTRhNjctYTczOS0zMDMzZDViNWJhNjEvMC9CMUQ0RjU0OTVC RTRGOUQ5OTVFQTlDMTU0NTQ2OUNBMkI5ODMzNEYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjFENEY1NDk1QkU0RjlEOTk1RUE5QzE1NDU0NjlDQTJCOTgz MzRGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzhlNzhlZTAtMDAwMi00YTY3LWE3 MzktMzAzM2Q1YjViYTYxLzAvQjFENEY1NDk1QkU0RjlEOTk1RUE5QzE1NDU0NjlD QTJCOTgzMzRGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADGlRZ0LHuWfDgDtzy3JJpHItbxSkGk42fzU LWIwrAAy/JOWN4mseOj0jA+cTkBKzl9l1v+sjI6LvHNC1U9HWHXwvYi667EGKG3L gR4JEVtJU3tB3JzkPgwAgMVlKFVl1UUdR2nNN+8D3O4u0XOZd9bXCCIt+0K5yW9S rGqPyUARmp4/09Oi0khCqyd72hxxPjEtnoJIGe1apX3PuD5XQzzS40NCyCmL8wee RqtsA1FKhxDfmnINPF3l0vtKFzVwkDaWzrvcXW6T/ILR8jtS2f74xbef1fEPrX6z yWp/Q7EzZXbmHKtund9uuJJweGFKzOGQs/jSaBYjsLjIdCaDmlo= -----END CERTIFICATE-----Generated at Thu Jul 24 12:01:18 2025 by rpki-client