$ rpki-client -vvf repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft File: B956E5764D9917A7389654D67836D02779ED9E22.mft (raw, json) Hash identifier: lDxa3/+Kmif7ZgXuIPxz8XjLZp/GeQZR7jHISMGUKuw= Subject key identifier: 14:45:97:84:E4:B1:2B:86:D5:FF:F7:24:9E:2C:31:28:1C:6C:C6:09 Authority key identifier: B9:56:E5:76:4D:99:17:A7:38:96:54:D6:78:36:D0:27:79:ED:9E:22 Certificate issuer: /CN=B956E5764D9917A7389654D67836D02779ED9E22 Certificate serial: 4930CA59BA50589036EC32CF3FAD23BCFF8E1551 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft Manifest number: 01D6 Signing time: Mon 21 Jul 2025 14:41:09 +0000 Manifest this update: Mon 21 Jul 2025 14:36:09 +0000 Manifest next update: Fri 25 Jul 2025 00:36:09 +0000 Files and hashes: 1: B956E5764D9917A7389654D67836D02779ED9E22.crl (hash: ks77rmvX4aqYEHlqrpj3pr+0Y5yhBUnJs0o0qRa7yvQ=) 2: 3130332e34342e31392e302f32342d3234203d3e20313530313931.roa (hash: xRSXhth5RPLQDUpDjvFyriqelwPeLnjETcyxKSf1xt8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.crl rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 00:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:30:ca:59:ba:50:58:90:36:ec:32:cf:3f:ad:23:bc:ff:8e:15:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B956E5764D9917A7389654D67836D02779ED9E22 Validity Not Before: Jul 21 14:36:09 2025 GMT Not After : Jul 25 00:36:09 2025 GMT Subject: CN=14459784E4B12B86D5FFF7249E2C31281C6CC609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ea:70:c3:94:88:ca:07:1f:8a:b6:8b:b8:5a: e0:94:33:18:7f:f8:38:15:ff:e5:eb:7b:0f:76:dc: b2:be:81:3e:f2:49:80:74:be:e0:ee:d1:9e:4f:be: 7c:73:73:b0:97:2f:64:50:e4:d5:67:28:7a:c1:69: 0b:f5:3a:3f:9e:4c:21:e5:7b:1e:bc:7f:f5:e7:73: 8b:43:a3:be:35:83:42:50:96:80:91:c0:08:3f:e5: 40:77:3b:c7:d4:8a:e6:0d:af:a9:17:94:1f:e2:ea: a0:d3:7e:12:9b:38:75:59:d4:95:b2:b0:25:f9:d0: 0b:19:ea:6f:b8:31:c9:ef:10:60:a5:81:da:dc:8d: 36:87:7e:c3:9a:3c:ad:11:5c:6a:a9:34:f7:ca:d5: f0:14:ed:1c:e3:0d:be:24:3f:f4:24:29:ae:a1:a6: 84:37:7e:8d:7c:74:ca:9a:4f:94:6c:91:f9:dd:26: 2f:70:94:57:90:e3:d8:c9:37:86:ac:ef:c2:3f:6b: 43:ab:96:ee:1c:55:75:2d:69:73:7e:ec:19:8c:04: bf:06:ec:44:ab:2d:04:c1:97:b9:11:ec:81:1a:cb: ba:5e:da:80:e5:5d:64:e6:18:62:7e:56:4b:86:59: e9:da:d5:1f:eb:c5:77:0d:46:17:3e:19:c5:05:ac: 92:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:45:97:84:E4:B1:2B:86:D5:FF:F7:24:9E:2C:31:28:1C:6C:C6:09 X509v3 Authority Key Identifier: keyid:B9:56:E5:76:4D:99:17:A7:38:96:54:D6:78:36:D0:27:79:ED:9E:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:fd:a7:33:d8:ea:cd:af:2c:51:fa:52:e0:c3:68:a9:5c:a9: 1c:4d:cd:c8:80:f6:4b:45:a1:02:21:e1:4d:90:44:e9:c0:62: 96:54:0a:b2:16:b1:4e:8b:9a:b0:a5:8f:5c:e6:b2:96:1d:a8: ae:e2:75:8e:85:f3:62:fb:8b:ab:a3:e2:52:25:19:f3:2d:29: 5a:1c:ea:4b:26:8a:be:b9:c6:f2:28:34:17:74:a0:72:86:14: 38:bb:f2:3c:64:83:6d:62:14:a5:f3:02:14:99:9c:49:0b:19: fb:42:41:fb:00:af:d5:e1:3d:c0:c1:f8:43:6f:8a:33:7f:46: f1:1b:69:13:4d:5d:45:91:d2:23:b4:19:7f:a8:b8:96:62:e5: cb:04:bc:ef:b2:39:bc:2e:81:86:79:11:8a:73:73:d7:d2:d9: 93:e9:f9:d8:54:cc:11:17:2a:85:76:73:94:36:73:80:88:25: 37:8d:26:64:a8:e3:45:d8:a4:59:a8:05:8e:d5:b4:61:ad:bd: a6:8a:7f:80:c4:47:d9:ed:d0:ed:a9:ae:c9:e4:82:8b:d8:4f: 9c:a0:33:ae:87:9d:2e:b1:3f:cd:00:fe:12:5c:b2:5d:ef:64: e2:99:fd:2a:ce:66:16:1d:48:9c:49:26:1a:d9:99:16:1e:1f: 5f:a2:f3:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSTDKWbpQWJA27DLPP60jvP+OFVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk1NkU1NzY0RDk5MTdBNzM4OTY1NEQ2NzgzNkQwMjc3 OUVEOUUyMjAeFw0yNTA3MjExNDM2MDlaFw0yNTA3MjUwMDM2MDlaMDMxMTAvBgNV BAMTKDE0NDU5Nzg0RTRCMTJCODZENUZGRjcyNDlFMkMzMTI4MUM2Q0M2MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg6nDDlIjKBx+Ktou4WuCUMxh/ +DgV/+Xrew923LK+gT7ySYB0vuDu0Z5Pvnxzc7CXL2RQ5NVnKHrBaQv1Oj+eTCHl ex68f/Xnc4tDo741g0JQloCRwAg/5UB3O8fUiuYNr6kXlB/i6qDTfhKbOHVZ1JWy sCX50AsZ6m+4McnvEGClgdrcjTaHfsOaPK0RXGqpNPfK1fAU7RzjDb4kP/QkKa6h poQ3fo18dMqaT5RskfndJi9wlFeQ49jJN4as78I/a0Orlu4cVXUtaXN+7BmMBL8G 7ESrLQTBl7kR7IEay7pe2oDlXWTmGGJ+VkuGWena1R/rxXcNRhc+GcUFrJIVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFEWXhOSxK4bV//ckniwxKBxsxgkwHwYDVR0j BBgwFoAUuVbldk2ZF6c4llTWeDbQJ3ntniIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODExN2NhOC1iNGU1LTQ2N2EtODhhOC1hNGI2M2U0MGMzZWQvMC9COTU2RTU3NjRE OTkxN0E3Mzg5NjU0RDY3ODM2RDAyNzc5RUQ5RTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjk1NkU1NzY0RDk5MTdBNzM4OTY1NEQ2NzgzNkQwMjc3OUVE OUUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjgxMTdjYTgtYjRlNS00NjdhLTg4 YTgtYTRiNjNlNDBjM2VkLzAvQjk1NkU1NzY0RDk5MTdBNzM4OTY1NEQ2NzgzNkQw Mjc3OUVEOUUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIH9pzPY6s2vLFH6UuDDaKlcqRxNzciA9ktF oQIh4U2QROnAYpZUCrIWsU6LmrClj1zmspYdqK7idY6F82L7i6uj4lIlGfMtKVoc 6ksmir65xvIoNBd0oHKGFDi78jxkg21iFKXzAhSZnEkLGftCQfsAr9XhPcDB+ENv ijN/RvEbaRNNXUWR0iO0GX+ouJZi5csEvO+yObwugYZ5EYpzc9fS2ZPp+dhUzBEX KoV2c5Q2c4CIJTeNJmSo40XYpFmoBY7VtGGtvaaKf4DER9nt0O2prsnkgovYT5yg M66HnS6xP80A/hJcsl3vZOKZ/SrOZhYdSJxJJhrZmRYeH1+i878= -----END CERTIFICATE-----Generated at Wed Jul 23 12:11:48 2025 by rpki-client