$ rpki-client -vvf repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft File: B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft (raw, json) Hash identifier: CuexPFf2ok0ZGodah1LofWRWhgBa/kTExCpLEF3goXI= Subject key identifier: C2:E7:52:53:7C:DC:C8:3A:28:A6:D5:A1:2D:AF:8B:D7:15:CF:71:06 Authority key identifier: B0:73:4A:32:D1:3A:96:FC:B3:FD:F9:82:C2:EE:C5:00:15:04:11:CA Certificate issuer: /CN=B0734A32D13A96FCB3FDF982C2EEC500150411CA Certificate serial: 7AF18FFDD23EFEE77FE379A8B5E0DF81EC5834D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft Manifest number: 01FC Signing time: Sat 19 Jul 2025 13:21:09 +0000 Manifest this update: Sat 19 Jul 2025 13:16:09 +0000 Manifest next update: Tue 22 Jul 2025 20:24:09 +0000 Files and hashes: 1: 3130332e3138372e3232362e302f32332d3234203d3e20313439373238.roa (hash: fcX6dDB/6jZr5p1excLhOSLezwfpNz/DNvOt6VHyTLo=) 2: B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl (hash: De5PJWDCrmwGuRc8E3Zc0Y4ozHl48GTg6zcynJEHyD0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 20:24:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:f1:8f:fd:d2:3e:fe:e7:7f:e3:79:a8:b5:e0:df:81:ec:58:34:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0734A32D13A96FCB3FDF982C2EEC500150411CA Validity Not Before: Jul 19 13:16:09 2025 GMT Not After : Jul 22 20:24:09 2025 GMT Subject: CN=C2E752537CDCC83A28A6D5A12DAF8BD715CF7106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1d:04:58:5b:70:68:19:5e:39:de:42:3c:b5: b5:5b:6e:fd:e0:52:06:d8:21:4b:06:ee:cd:ab:fa: 7e:9c:ab:69:77:95:69:5c:8d:28:80:ab:b1:96:aa: 98:4e:02:dc:af:da:fc:a3:c4:92:ff:5e:25:19:cf: 04:64:41:82:5a:37:49:92:33:2c:7c:e4:3d:24:3c: bc:b0:a2:3c:6b:ec:23:80:37:c6:3b:94:7e:3e:ff: 6d:43:a1:ae:e5:2b:d6:2c:66:57:83:d6:fc:d2:cb: a4:72:73:39:10:03:8c:6a:20:92:ec:d7:23:ca:24: 9f:0a:f7:f2:0c:47:51:f9:4b:08:3d:8d:53:ef:d7: a0:e5:6e:ad:7f:f4:ac:f6:67:bb:e6:30:30:f7:95: 36:01:4b:9d:47:0f:90:19:af:e0:6e:52:06:f3:d8: 02:07:d6:24:66:ae:32:92:6d:89:01:1e:47:2d:7e: 12:4e:00:75:67:a6:7e:df:0a:93:fe:13:b5:12:8e: 60:1b:5d:be:70:6d:4e:a1:f0:d2:7c:ab:ea:16:0f: 84:47:d5:2c:34:44:ce:d2:c4:3a:1f:5a:a7:ab:fe: ca:e7:76:9c:3d:f8:ab:89:f1:5f:d1:e4:eb:f2:3b: 1a:c1:f1:7b:8f:9e:23:26:0f:d6:3e:f8:d9:6e:20: 91:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:E7:52:53:7C:DC:C8:3A:28:A6:D5:A1:2D:AF:8B:D7:15:CF:71:06 X509v3 Authority Key Identifier: keyid:B0:73:4A:32:D1:3A:96:FC:B3:FD:F9:82:C2:EE:C5:00:15:04:11:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:e4:96:a5:28:24:65:bc:50:49:82:d0:06:91:32:65:3a:73: d0:2b:51:d9:b4:81:9b:33:46:33:f0:f9:ce:1a:52:9b:54:19: fd:63:cb:af:76:2b:a0:83:99:08:87:d7:27:61:cf:9f:ec:d2: 4c:64:de:d4:41:e5:e0:1c:d3:b9:c5:be:a9:1d:85:54:37:7a: 11:c4:b4:5b:ca:8b:84:ef:2a:06:1f:b2:02:e5:26:b2:d5:0c: b9:ab:ae:65:04:a8:ef:43:b0:94:70:21:52:01:14:03:4d:b1: 4a:e7:a4:d6:95:da:7c:5d:70:75:be:c7:0f:22:60:d1:e4:d6: ce:7d:af:0e:65:63:8b:52:eb:c8:aa:27:0c:3e:0c:37:11:43: 99:22:fc:14:55:20:3a:11:6c:ae:a0:a5:a8:7d:a1:3a:80:b5: cf:2b:5f:82:ea:a8:fc:97:b7:ba:e3:e3:f2:8f:ab:a5:a9:2c: 41:b8:a7:39:45:d8:12:c0:f0:87:fe:21:81:15:ec:27:25:61: 93:00:fb:ae:3a:fb:c1:2f:ce:0e:1a:64:bc:c3:01:af:96:a1: 42:66:f8:77:36:4a:c1:f5:cb:37:a3:67:d1:ff:b9:6c:f4:8f: 4b:6c:7d:98:80:8a:b1:7f:1b:9e:91:b0:2a:4d:ca:9d:2d:e8: c0:ca:8e:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUevGP/dI+/ud/43moteDfgexYNNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1MDAx NTA0MTFDQTAeFw0yNTA3MTkxMzE2MDlaFw0yNTA3MjIyMDI0MDlaMDMxMTAvBgNV BAMTKEMyRTc1MjUzN0NEQ0M4M0EyOEE2RDVBMTJEQUY4QkQ3MTVDRjcxMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjHQRYW3BoGV453kI8tbVbbv3g UgbYIUsG7s2r+n6cq2l3lWlcjSiAq7GWqphOAtyv2vyjxJL/XiUZzwRkQYJaN0mS Myx85D0kPLywojxr7COAN8Y7lH4+/21Doa7lK9YsZleD1vzSy6RyczkQA4xqIJLs 1yPKJJ8K9/IMR1H5Swg9jVPv16Dlbq1/9Kz2Z7vmMDD3lTYBS51HD5AZr+BuUgbz 2AIH1iRmrjKSbYkBHkctfhJOAHVnpn7fCpP+E7USjmAbXb5wbU6h8NJ8q+oWD4RH 1Sw0RM7SxDofWqer/srndpw9+KuJ8V/R5OvyOxrB8XuPniMmD9Y++NluIJEJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwudSU3zcyDooptWhLa+L1xXPcQYwHwYDVR0j BBgwFoAUsHNKMtE6lvyz/fmCwu7FABUEEcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjMwOTdmMC0zOTc4LTQ5Y2UtYjY5Yy00YjIwYjRkY2ZiN2UvMC9CMDczNEEzMkQx M0E5NkZDQjNGREY5ODJDMkVFQzUwMDE1MDQxMUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1MDAxNTA0 MTFDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzMDk3ZjAtMzk3OC00OWNlLWI2 OWMtNGIyMGI0ZGNmYjdlLzAvQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1 MDAxNTA0MTFDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALHklqUoJGW8UEmC0AaRMmU6c9ArUdm0gZsz RjPw+c4aUptUGf1jy692K6CDmQiH1ydhz5/s0kxk3tRB5eAc07nFvqkdhVQ3ehHE tFvKi4TvKgYfsgLlJrLVDLmrrmUEqO9DsJRwIVIBFANNsUrnpNaV2nxdcHW+xw8i YNHk1s59rw5lY4tS68iqJww+DDcRQ5ki/BRVIDoRbK6gpah9oTqAtc8rX4LqqPyX t7rj4/KPq6WpLEG4pzlF2BLA8If+IYEV7CclYZMA+646+8Evzg4aZLzDAa+WoUJm +Hc2SsH1yzejZ9H/uWz0j0tsfZiAirF/G56RsCpNyp0t6MDKjlA= -----END CERTIFICATE-----Generated at Mon Jul 21 08:36:52 2025 by rpki-client