$ rpki-client -vvf repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.mft File: B2BCF7264F89246583B384F354CB350DF3B6AADB.mft (raw, json) Hash identifier: M14QIMlONC3s/nq8Qsr21Mo7s8VAwgiUn5+jfKO9gWg= Subject key identifier: C5:B7:AA:82:07:F7:DB:F7:EF:FB:9A:30:29:12:C5:EC:44:72:21:EB Authority key identifier: B2:BC:F7:26:4F:89:24:65:83:B3:84:F3:54:CB:35:0D:F3:B6:AA:DB Certificate issuer: /CN=B2BCF7264F89246583B384F354CB350DF3B6AADB Certificate serial: 2D79161116F936C4CF0A51F0309D4859B8F0ACE4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2BCF7264F89246583B384F354CB350DF3B6AADB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.mft Manifest number: 04EE Signing time: Sat 19 Jul 2025 03:02:05 +0000 Manifest this update: Sat 19 Jul 2025 02:57:05 +0000 Manifest next update: Tue 22 Jul 2025 12:10:05 +0000 Files and hashes: 1: 3230322e34372e39302e302f32332d3234203d3e203436303230.roa (hash: f31WSeSw8w1qVqSz7UZlMp3AZocd9nv655saAh7fViI=) 2: B2BCF7264F89246583B384F354CB350DF3B6AADB.crl (hash: VlZT9Yy1hUVf6+QGOYIZg9TxqstlFWDBVumZXy8qFhE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.crl rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2BCF7264F89246583B384F354CB350DF3B6AADB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 12:10:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:79:16:11:16:f9:36:c4:cf:0a:51:f0:30:9d:48:59:b8:f0:ac:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2BCF7264F89246583B384F354CB350DF3B6AADB Validity Not Before: Jul 19 02:57:05 2025 GMT Not After : Jul 22 12:10:05 2025 GMT Subject: CN=C5B7AA8207F7DBF7EFFB9A302912C5EC447221EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:70:b6:a4:91:1c:45:76:f3:d5:36:ce:44:9c: 2f:8a:93:7e:43:eb:8f:96:b5:c9:07:52:b7:59:1d: 7b:43:e1:9d:7f:d4:84:7e:a5:99:9a:d6:c2:6a:aa: e9:a9:9b:34:97:7f:6d:3d:3f:f6:34:f8:00:8a:b6: 98:4d:a4:8e:5e:6e:25:f7:fe:47:e5:c2:99:3f:d8: 85:6e:c7:3b:4b:6e:96:43:0c:07:6d:ba:f8:83:53: 50:96:9f:53:15:bc:1a:e9:e5:76:30:6f:b4:f1:80: b8:7b:dc:26:db:e4:7d:8a:aa:24:10:9f:9a:e9:7c: cd:77:20:26:d0:fd:84:7e:59:31:79:bf:f8:22:0f: 4d:32:15:3d:d2:3b:3d:9e:2b:ea:7c:6c:e5:97:9b: 0c:39:cf:fc:f7:95:dd:5e:87:0b:7d:e5:32:cc:75: d2:eb:04:a6:3d:12:4d:af:d2:54:86:81:a7:53:5a: d2:a5:ae:93:95:33:4d:51:c1:ae:4e:11:6a:14:c1: e8:1a:47:ca:aa:1d:c2:84:8f:32:43:e0:b0:d7:15: 9d:a7:59:0c:50:ca:17:3b:a8:f6:0c:51:80:e2:f3: 01:e3:2f:60:2f:13:f8:f1:8a:a9:65:ec:12:4a:ff: 02:e9:f9:7e:51:4c:82:0c:59:69:65:f8:32:ca:eb: ff:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B7:AA:82:07:F7:DB:F7:EF:FB:9A:30:29:12:C5:EC:44:72:21:EB X509v3 Authority Key Identifier: keyid:B2:BC:F7:26:4F:89:24:65:83:B3:84:F3:54:CB:35:0D:F3:B6:AA:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2BCF7264F89246583B384F354CB350DF3B6AADB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:aa:9b:ff:18:4a:cb:ae:7b:89:72:b8:40:9d:19:bc:d0:cb: 43:5b:22:d9:d7:33:e4:2f:d6:44:bf:f8:2e:d7:d8:65:ee:10: 37:d7:4a:ac:12:ee:26:1a:15:c6:89:38:2f:41:7e:96:b6:ed: 43:22:94:32:f2:00:c4:26:69:42:fd:d6:a4:4c:f6:34:ae:6d: cc:af:1b:ca:20:4e:3b:2d:61:5b:5f:c2:7b:56:50:c2:cd:4d: e6:4c:40:63:bd:2e:13:da:93:ac:a7:c9:62:e7:fe:ff:68:9e: e9:ce:3e:cb:1b:2e:9c:c6:d7:1e:5d:0d:46:19:ff:e6:68:77: 76:ed:21:b9:f1:c2:c3:db:53:a3:f3:4e:13:56:8e:01:6a:0d: 99:ee:c5:cb:33:50:83:e6:77:33:6c:97:64:af:84:1f:0e:b5: 86:49:4c:2e:43:7e:1a:0c:49:77:8d:a6:5a:30:5d:26:3e:66: 8f:d7:f9:1a:25:55:f2:6a:ff:72:e2:54:f4:ce:7b:ed:d9:a1: 86:d1:44:46:0f:a9:93:48:e2:9d:92:d5:dc:d6:62:c3:b7:3c: ad:95:da:6e:53:70:26:6f:3c:bc:a8:f6:8d:0b:da:69:7c:90: 84:92:77:89:8b:4f:2b:13:a6:56:91:f7:c0:f3:07:f3:ab:be: e4:9e:a5:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULXkWERb5NsTPClHwMJ1IWbjwrOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJCQ0Y3MjY0Rjg5MjQ2NTgzQjM4NEYzNTRDQjM1MERG M0I2QUFEQjAeFw0yNTA3MTkwMjU3MDVaFw0yNTA3MjIxMjEwMDVaMDMxMTAvBgNV BAMTKEM1QjdBQTgyMDdGN0RCRjdFRkZCOUEzMDI5MTJDNUVDNDQ3MjIxRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgcLakkRxFdvPVNs5EnC+Kk35D 64+WtckHUrdZHXtD4Z1/1IR+pZma1sJqqumpmzSXf209P/Y0+ACKtphNpI5ebiX3 /kflwpk/2IVuxztLbpZDDAdtuviDU1CWn1MVvBrp5XYwb7TxgLh73Cbb5H2KqiQQ n5rpfM13ICbQ/YR+WTF5v/giD00yFT3SOz2eK+p8bOWXmww5z/z3ld1ehwt95TLM ddLrBKY9Ek2v0lSGgadTWtKlrpOVM01Rwa5OEWoUwegaR8qqHcKEjzJD4LDXFZ2n WQxQyhc7qPYMUYDi8wHjL2AvE/jxiqll7BJK/wLp+X5RTIIMWWll+DLK6/8xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxbeqggf32/fv+5owKRLF7ERyIeswHwYDVR0j BBgwFoAUsrz3Jk+JJGWDs4TzVMs1DfO2qtswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmEwYTc3MS02MmQyLTQyMzgtYTQwNi03OTk5ZjIyNDg0OWMvMC9CMkJDRjcyNjRG ODkyNDY1ODNCMzg0RjM1NENCMzUwREYzQjZBQURCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJCQ0Y3MjY0Rjg5MjQ2NTgzQjM4NEYzNTRDQjM1MERGM0I2 QUFEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJhMGE3NzEtNjJkMi00MjM4LWE0 MDYtNzk5OWYyMjQ4NDljLzAvQjJCQ0Y3MjY0Rjg5MjQ2NTgzQjM4NEYzNTRDQjM1 MERGM0I2QUFEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIqqm/8YSsuue4lyuECdGbzQy0NbItnXM+Qv 1kS/+C7X2GXuEDfXSqwS7iYaFcaJOC9Bfpa27UMilDLyAMQmaUL91qRM9jSubcyv G8ogTjstYVtfwntWUMLNTeZMQGO9LhPak6ynyWLn/v9onunOPssbLpzG1x5dDUYZ /+Zod3btIbnxwsPbU6PzThNWjgFqDZnuxcszUIPmdzNsl2SvhB8OtYZJTC5DfhoM SXeNplowXSY+Zo/X+RolVfJq/3LiVPTOe+3ZoYbRREYPqZNI4p2S1dzWYsO3PK2V 2m5TcCZvPLyo9o0L2ml8kISSd4mLTysTplaR98DzB/OrvuSepdk= -----END CERTIFICATE-----Generated at Mon Jul 21 02:41:59 2025 by rpki-client