$ rpki-client -vvf repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft File: B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft (raw, json) Hash identifier: N2GWBI5zCYllTLtPsixm8MpB8WzCtS8KOFFbKlHcInI= Subject key identifier: 3B:C2:DF:17:79:40:FD:6B:C0:E0:BD:9F:EF:17:C7:6B:17:C0:10:75 Authority key identifier: B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4 Certificate issuer: /CN=B877CD1C542C3DE2CBB8EF151F179B857E9376E4 Certificate serial: 094940061DCB65078E0B1B903DB2E384106B2E37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft Manifest number: 016D Signing time: Mon 21 Jul 2025 18:42:14 +0000 Manifest this update: Mon 21 Jul 2025 18:37:14 +0000 Manifest next update: Fri 25 Jul 2025 02:32:14 +0000 Files and hashes: 1: 3130332e3133302e3139382e302f32332d3234203d3e20313338303737.roa (hash: Mwvu/CaE5deApG/isN7cjUZhnbfHoZ3qdsbJEM4tty0=) 2: 3136302e32302e3232322e302f32342d3234203d3e20313338303737.roa (hash: Khtj9hE0U7S7GxsTQLAztRkAFMW84uHyWmMZ0EjXpnw=) 3: 3131372e3130332e3131362e302f32342d3234203d3e20313339333838.roa (hash: SSiq3G+RuqOFkkVg6s948sz9LneDSoc/8S7pdjqZm9U=) 4: B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl (hash: FihasZVF+mPoFKgB1yUP6T0B/sHHNC1dmgJnIy1d1Kg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 02:32:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:49:40:06:1d:cb:65:07:8e:0b:1b:90:3d:b2:e3:84:10:6b:2e:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B877CD1C542C3DE2CBB8EF151F179B857E9376E4 Validity Not Before: Jul 21 18:37:14 2025 GMT Not After : Jul 25 02:32:14 2025 GMT Subject: CN=3BC2DF177940FD6BC0E0BD9FEF17C76B17C01075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c7:60:a9:0c:99:73:ac:a7:d9:0e:8e:7a:3a: c3:e8:eb:d3:f1:54:29:6a:46:ef:4b:33:0d:13:d6: 94:12:55:77:11:85:66:fc:45:6a:93:6f:ba:5d:1e: 63:e3:f7:d4:5d:fc:46:1f:ae:aa:f3:37:4d:ac:59: 57:b5:ec:93:15:1d:2a:b3:65:d6:34:3b:b8:7a:f3: db:36:69:0d:59:72:15:9a:64:5a:fa:3d:ae:b1:83: fa:9b:ee:0e:75:2b:71:73:1c:92:48:c7:38:4f:b7: 0c:50:f4:01:d2:be:cc:36:bf:e1:ae:22:98:ef:ee: a5:51:15:8a:7e:90:c4:ee:8a:c0:47:f5:d9:df:71: aa:4f:22:d9:c8:23:8f:6e:5d:5b:5b:22:e5:e6:47: b0:bf:da:bf:b0:9c:1d:fd:03:29:aa:5c:be:26:cf: bd:a0:b9:63:6a:28:b8:ed:99:38:11:62:39:39:10: 43:8a:32:aa:d1:b9:53:92:b0:11:36:cd:66:a5:fb: 90:12:bd:66:7b:50:ad:5a:56:53:46:29:9c:1d:a2: a5:4b:ab:62:0d:f2:4f:18:4d:db:0e:bf:80:5f:bb: 3a:9d:ff:39:86:74:17:a6:27:8b:17:dd:af:37:09: 38:01:85:c0:14:6a:84:cc:be:eb:5a:1a:af:92:d3: 1c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C2:DF:17:79:40:FD:6B:C0:E0:BD:9F:EF:17:C7:6B:17:C0:10:75 X509v3 Authority Key Identifier: keyid:B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:81:7a:55:9d:96:5f:f2:b2:98:ed:74:20:18:41:2b:c7:0d: 0b:24:5b:13:62:60:e8:94:44:1f:28:f6:de:fe:66:40:2e:f0: 22:a3:bc:4e:a0:cb:39:e7:3b:c5:76:cb:3c:c5:37:6a:87:14: 62:76:6f:0e:f1:81:d6:2b:58:14:93:a7:88:1d:c2:c3:6f:c3: 75:c4:c1:7e:e7:60:e3:71:c2:af:ba:75:79:7b:62:fa:41:02: 7b:ad:d5:2c:bf:bf:05:89:24:0d:67:7a:ec:86:85:c3:82:42: f5:b1:03:7c:66:3b:f7:a4:87:e1:76:b7:10:2b:c1:f3:a0:73: 83:ef:e5:36:0b:56:4a:8b:9b:ed:8f:4f:b2:77:ab:52:0a:6c: af:61:15:88:d3:a3:d4:9f:8a:8f:f9:33:74:e7:b5:f8:26:ce: c7:36:b0:19:e5:60:66:aa:4d:ed:14:db:ad:10:cf:b5:1c:55: 8a:28:3f:0c:0d:40:a8:e6:20:50:e3:d1:5b:e2:a6:d4:38:50: c1:87:de:d3:8e:64:82:8c:62:04:ab:e2:ee:0c:e4:96:2b:8e: 47:7f:2d:21:81:77:ee:8d:59:8c:bc:1f:7d:52:c4:4d:66:a7: e9:39:89:88:4b:f6:86:c1:20:cf:b8:89:92:96:35:c6:a5:ca: 26:e5:76:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCUlABh3LZQeOCxuQPbLjhBBrLjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg3N0NEMUM1NDJDM0RFMkNCQjhFRjE1MUYxNzlCODU3 RTkzNzZFNDAeFw0yNTA3MjExODM3MTRaFw0yNTA3MjUwMjMyMTRaMDMxMTAvBgNV BAMTKDNCQzJERjE3Nzk0MEZENkJDMEUwQkQ5RkVGMTdDNzZCMTdDMDEwNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4x2CpDJlzrKfZDo56OsPo69Px VClqRu9LMw0T1pQSVXcRhWb8RWqTb7pdHmPj99Rd/EYfrqrzN02sWVe17JMVHSqz ZdY0O7h689s2aQ1ZchWaZFr6Pa6xg/qb7g51K3FzHJJIxzhPtwxQ9AHSvsw2v+Gu Ipjv7qVRFYp+kMTuisBH9dnfcapPItnII49uXVtbIuXmR7C/2r+wnB39AymqXL4m z72guWNqKLjtmTgRYjk5EEOKMqrRuVOSsBE2zWal+5ASvWZ7UK1aVlNGKZwdoqVL q2IN8k8YTdsOv4Bfuzqd/zmGdBemJ4sX3a83CTgBhcAUaoTMvutaGq+S0xyBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO8LfF3lA/WvA4L2f7xfHaxfAEHUwHwYDVR0j BBgwFoAUuHfNHFQsPeLLuO8VHxebhX6TduQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjZkMTg1ZS1kNGY0LTQ4MjAtYjRiNi03OThjMzA3YWQ3ZTUvMC9CODc3Q0QxQzU0 MkMzREUyQ0JCOEVGMTUxRjE3OUI4NTdFOTM3NkU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg3N0NEMUM1NDJDM0RFMkNCQjhFRjE1MUYxNzlCODU3RTkz NzZFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWY2ZDE4NWUtZDRmNC00ODIwLWI0 YjYtNzk4YzMwN2FkN2U1LzAvQjg3N0NEMUM1NDJDM0RFMkNCQjhFRjE1MUYxNzlC ODU3RTkzNzZFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ+BelWdll/yspjtdCAYQSvHDQskWxNiYOiU RB8o9t7+ZkAu8CKjvE6gyznnO8V2yzzFN2qHFGJ2bw7xgdYrWBSTp4gdwsNvw3XE wX7nYONxwq+6dXl7YvpBAnut1Sy/vwWJJA1neuyGhcOCQvWxA3xmO/ekh+F2txAr wfOgc4Pv5TYLVkqLm+2PT7J3q1IKbK9hFYjTo9Sfio/5M3Tntfgmzsc2sBnlYGaq Te0U260Qz7UcVYooPwwNQKjmIFDj0VviptQ4UMGH3tOOZIKMYgSr4u4M5JYrjkd/ LSGBd+6NWYy8H31SxE1mp+k5iYhL9obBIM+4iZKWNcalyibldic= -----END CERTIFICATE-----Generated at Wed Jul 23 04:09:52 2025 by rpki-client