$ rpki-client -vvf repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft File: B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft (raw, json) Hash identifier: hDVlrKSdhvFKTvQVwmZrngtBX1DOIGx6QuxEnZ9raMk= Subject key identifier: 78:B2:D4:00:EF:DA:D1:1B:73:DB:22:CD:03:C8:F9:EA:68:C2:98:93 Authority key identifier: B2:07:7B:9B:AF:0B:F3:E5:FC:B8:45:13:B1:D7:44:5E:30:CE:65:82 Certificate issuer: /CN=B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582 Certificate serial: 6752D287342F40DC83D08C3B4F3FC4482D2EEF20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft Manifest number: 0466 Signing time: Sun 20 Jul 2025 13:52:02 +0000 Manifest this update: Sun 20 Jul 2025 13:47:01 +0000 Manifest next update: Wed 23 Jul 2025 17:45:01 +0000 Files and hashes: 1: B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl (hash: t6m76ZboAP3qC3kqhpTWOcdTRiuykE1y39j0PizLmio=) 2: 3130332e3135372e362e302f32342d3234203d3e20313431313036.roa (hash: /7z2+JC7qoPzUqAK7WiZ8hM8Bf1dEmgOqji6pvEw+hI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 17:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:52:d2:87:34:2f:40:dc:83:d0:8c:3b:4f:3f:c4:48:2d:2e:ef:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582 Validity Not Before: Jul 20 13:47:01 2025 GMT Not After : Jul 23 17:45:01 2025 GMT Subject: CN=78B2D400EFDAD11B73DB22CD03C8F9EA68C29893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0d:71:17:f5:80:da:15:c8:14:10:eb:cf:e0: 38:8b:66:e1:81:79:a9:50:f5:d1:31:d6:46:bd:9b: d0:64:5f:90:a2:f6:94:0b:34:d4:40:c4:6e:b9:67: bd:2c:a3:22:5a:c8:09:f8:ca:7c:f2:0d:1e:f2:81: 02:87:72:c8:1f:a7:76:ed:64:4b:19:b8:42:92:91: 3a:7e:40:7b:66:a9:ac:29:50:fc:27:36:5f:78:12: f3:22:ec:cd:17:92:89:53:ff:97:ff:33:4d:a6:24: 99:c4:34:a5:5e:0f:9d:b7:2c:43:65:e0:75:ee:df: 20:9a:e4:8a:e6:ef:a3:50:bb:25:d4:2a:90:18:ca: ec:8e:e2:28:09:80:1e:87:b3:20:a2:66:98:27:b6: c3:98:0e:2a:ca:3d:89:a3:61:78:7e:ed:83:c6:52: 1a:4c:a7:58:2f:aa:16:7e:05:7d:93:60:1a:57:71: 0e:3f:33:3a:09:12:b7:ac:bc:42:20:5d:d6:00:75: 6b:4c:78:a7:05:38:4d:20:ef:ef:79:10:c5:23:fb: 9c:eb:b1:0a:e0:95:3b:f2:3d:01:e7:73:58:24:09: 80:cf:d3:92:46:4a:b1:2b:e2:36:ae:20:15:09:b9: d0:09:eb:38:2f:7a:92:52:8f:6c:ca:c4:0d:00:d5: 38:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:B2:D4:00:EF:DA:D1:1B:73:DB:22:CD:03:C8:F9:EA:68:C2:98:93 X509v3 Authority Key Identifier: keyid:B2:07:7B:9B:AF:0B:F3:E5:FC:B8:45:13:B1:D7:44:5E:30:CE:65:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:e3:f3:63:2e:1e:99:33:67:48:4d:c4:76:76:56:92:d5:f2: 59:62:3c:77:3c:63:b8:26:ff:91:04:f9:03:05:9c:0b:bb:7e: cb:fc:aa:68:b2:e8:91:bc:4d:a8:74:82:ba:26:a2:9c:bc:e8: 11:d6:70:d6:e8:6c:50:f8:2b:ad:a8:43:8f:00:c2:b2:08:a2: 42:d9:d0:3a:ac:3a:7e:aa:29:ac:55:27:98:b5:f4:36:f3:9e: e9:7b:45:26:99:cc:d7:cd:8f:6d:a1:f5:97:23:ad:9b:81:48: 48:60:75:a7:a5:55:48:6f:3b:74:63:12:0c:06:c9:21:0b:5a: 01:f9:62:2f:b2:7d:4a:e2:fe:ce:eb:a2:87:75:7f:04:e5:2c: 6b:41:66:ed:b3:1a:33:55:3c:d5:90:11:d9:27:5a:ff:a3:a5: 0a:9b:ec:9a:39:f6:1d:a7:10:e9:9d:ee:26:f8:4d:1d:c3:fc: 18:c6:ff:a6:31:d0:3c:f9:67:ea:e4:a3:3d:71:b7:c4:ed:2e: 68:10:b3:cd:76:8c:50:4d:77:a1:52:b2:31:a4:b7:c4:e6:b1: b8:e1:60:91:82:31:0f:90:9b:3f:7e:ed:5c:68:aa:de:01:a8: 12:f2:8d:02:be:7f:6c:1b:01:df:c4:9a:50:e8:f1:b2:32:bb: 6d:d9:45:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ1LShzQvQNyD0Iw7Tz/ESC0u7yAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0NUUz MENFNjU4MjAeFw0yNTA3MjAxMzQ3MDFaFw0yNTA3MjMxNzQ1MDFaMDMxMTAvBgNV BAMTKDc4QjJENDAwRUZEQUQxMUI3M0RCMjJDRDAzQzhGOUVBNjhDMjk4OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiDXEX9YDaFcgUEOvP4DiLZuGB ealQ9dEx1ka9m9BkX5Ci9pQLNNRAxG65Z70soyJayAn4ynzyDR7ygQKHcsgfp3bt ZEsZuEKSkTp+QHtmqawpUPwnNl94EvMi7M0XkolT/5f/M02mJJnENKVeD523LENl 4HXu3yCa5Irm76NQuyXUKpAYyuyO4igJgB6HsyCiZpgntsOYDirKPYmjYXh+7YPG UhpMp1gvqhZ+BX2TYBpXcQ4/MzoJEresvEIgXdYAdWtMeKcFOE0g7+95EMUj+5zr sQrglTvyPQHnc1gkCYDP05JGSrEr4jauIBUJudAJ6zgvepJSj2zKxA0A1TgJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeLLUAO/a0Rtz2yLNA8j56mjCmJMwHwYDVR0j BBgwFoAUsgd7m68L8+X8uEUTsddEXjDOZYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWRkNGYxNi01NzBlLTRjOGMtYTk5Mi1kYjg5ZWEzYmFkMzYvMC9CMjA3N0I5QkFG MEJGM0U1RkNCODQ1MTNCMUQ3NDQ1RTMwQ0U2NTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0NUUzMENF NjU4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVkZDRmMTYtNTcwZS00YzhjLWE5 OTItZGI4OWVhM2JhZDM2LzAvQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0 NUUzMENFNjU4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFLj82MuHpkzZ0hNxHZ2VpLV8lliPHc8Y7gm /5EE+QMFnAu7fsv8qmiy6JG8Tah0gromopy86BHWcNbobFD4K62oQ48AwrIIokLZ 0DqsOn6qKaxVJ5i19Dbznul7RSaZzNfNj22h9ZcjrZuBSEhgdaelVUhvO3RjEgwG ySELWgH5Yi+yfUri/s7rood1fwTlLGtBZu2zGjNVPNWQEdknWv+jpQqb7Jo59h2n EOmd7ib4TR3D/BjG/6Yx0Dz5Z+rkoz1xt8TtLmgQs812jFBNd6FSsjGkt8Tmsbjh YJGCMQ+Qmz9+7Vxoqt4BqBLyjQK+f2wbAd/EmlDo8bIyu23ZRRc= -----END CERTIFICATE-----Generated at Mon Jul 21 09:00:43 2025 by rpki-client