$ rpki-client -vvf repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft File: B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft (raw, json) Hash identifier: /D9j7I3xeRpCDyGIzQoQvGt8vGLWXChBMKF3oTKKtek= Subject key identifier: 46:37:49:33:4C:33:83:DD:BB:07:D2:69:B7:99:9C:6A:BA:C6:0A:1C Authority key identifier: B2:A7:61:D6:1C:BF:02:4F:24:CD:3A:18:BE:96:E5:8F:7E:D6:C9:09 Certificate issuer: /CN=B2A761D61CBF024F24CD3A18BE96E58F7ED6C909 Certificate serial: 7F032C6A69E594306BA654ECA9F9F2433C77A251 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft Manifest number: 04B8 Signing time: Mon 21 Jul 2025 02:31:11 +0000 Manifest this update: Mon 21 Jul 2025 02:26:11 +0000 Manifest next update: Thu 24 Jul 2025 13:39:11 +0000 Files and hashes: 1: B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.crl (hash: WSXY3PQ60t2DgHwkWxbS/KogaqyTwtLbg7lRTtiR7qY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.crl rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 13:39:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:03:2c:6a:69:e5:94:30:6b:a6:54:ec:a9:f9:f2:43:3c:77:a2:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2A761D61CBF024F24CD3A18BE96E58F7ED6C909 Validity Not Before: Jul 21 02:26:11 2025 GMT Not After : Jul 24 13:39:11 2025 GMT Subject: CN=463749334C3383DDBB07D269B7999C6ABAC60A1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:56:99:2d:8c:bf:b2:e3:65:c0:24:6b:18:1a: d2:f7:3c:f8:46:49:fc:0f:87:4b:90:8e:84:ff:8e: e6:1f:90:76:1e:0a:d3:7d:2a:79:d3:9f:ae:07:49: 4e:df:85:a3:99:10:e2:c2:24:17:3e:77:68:73:0c: 4e:d5:1c:28:80:50:1b:13:db:45:f8:9d:24:2d:04: 07:67:a6:f6:24:37:b7:fd:64:d3:3d:ad:68:df:7b: 02:72:76:63:89:0f:12:03:2f:26:2c:a7:bc:9a:f5: ac:26:c8:34:cf:6e:d9:6d:00:64:f8:b8:16:28:3f: c8:00:e0:e4:5b:b3:d4:46:01:19:28:ee:14:0a:18: a3:84:1e:3e:50:c7:c2:bb:be:5b:da:86:56:95:66: 36:14:33:51:4f:fa:51:c9:b9:da:13:c7:23:24:29: 5d:08:f8:28:f8:f4:bd:c9:b8:48:b6:fa:69:8b:dd: f9:26:ae:8a:16:aa:82:85:35:d1:c5:e0:ea:e8:70: d9:f2:57:c3:b6:86:11:15:96:d6:70:10:2c:9d:70: 05:19:43:a9:c6:93:34:1d:4e:b0:ad:c0:9e:01:0d: 2b:10:7d:3a:09:a4:bb:10:75:bf:1e:fc:2a:d5:de: 36:db:45:15:34:78:ee:c5:86:17:f5:7e:ba:6d:18: b4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:37:49:33:4C:33:83:DD:BB:07:D2:69:B7:99:9C:6A:BA:C6:0A:1C X509v3 Authority Key Identifier: keyid:B2:A7:61:D6:1C:BF:02:4F:24:CD:3A:18:BE:96:E5:8F:7E:D6:C9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:11:42:45:97:5f:ef:0d:64:0d:8d:f3:0c:a4:fc:52:32:5c: c0:29:17:50:23:19:23:ff:2d:56:95:b0:45:89:3d:ad:a4:bc: b2:e5:e9:03:07:de:38:65:13:33:2b:14:07:29:eb:16:c8:40: 5d:ef:54:c2:97:e2:43:ad:6f:fe:75:7f:1f:cf:8f:6c:4d:02: f7:ce:d4:2c:2e:63:8a:ec:88:c4:c2:ba:4c:5e:b9:7c:b5:a3: 05:c0:4d:c9:46:46:6e:b0:bb:d7:74:a9:22:ab:40:d3:b0:b0: f7:3f:86:bc:cb:77:cb:ef:e1:97:8f:08:1d:31:5e:59:ac:92: f9:93:22:07:a6:57:54:27:8a:e3:21:e7:21:d3:e3:8a:9f:e1: ba:02:0d:34:08:32:0f:e2:c7:a1:74:94:f1:af:e9:d4:ce:9c: 99:5d:83:6b:4d:3c:80:89:71:72:30:14:42:94:b7:67:93:d9: 90:44:60:a8:aa:f8:0b:8d:b2:ac:10:ce:21:5c:ed:1e:1f:46: a3:65:a4:1b:84:1c:47:55:01:bd:fa:86:df:6a:8a:b4:2c:a0: c8:9b:df:3f:3f:5b:75:6f:20:8a:9f:3b:88:84:0f:75:4a:57: 14:48:63:49:9c:cd:38:89:ab:64:f5:6e:e3:cd:3a:93:97:dc: aa:5b:2e:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfwMsamnllDBrplTsqfnyQzx3olEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJBNzYxRDYxQ0JGMDI0RjI0Q0QzQTE4QkU5NkU1OEY3 RUQ2QzkwOTAeFw0yNTA3MjEwMjI2MTFaFw0yNTA3MjQxMzM5MTFaMDMxMTAvBgNV BAMTKDQ2Mzc0OTMzNEMzMzgzRERCQjA3RDI2OUI3OTk5QzZBQkFDNjBBMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiVpktjL+y42XAJGsYGtL3PPhG SfwPh0uQjoT/juYfkHYeCtN9KnnTn64HSU7fhaOZEOLCJBc+d2hzDE7VHCiAUBsT 20X4nSQtBAdnpvYkN7f9ZNM9rWjfewJydmOJDxIDLyYsp7ya9awmyDTPbtltAGT4 uBYoP8gA4ORbs9RGARko7hQKGKOEHj5Qx8K7vlvahlaVZjYUM1FP+lHJudoTxyMk KV0I+Cj49L3JuEi2+mmL3fkmrooWqoKFNdHF4OrocNnyV8O2hhEVltZwECydcAUZ Q6nGkzQdTrCtwJ4BDSsQfToJpLsQdb8e/CrV3jbbRRU0eO7Fhhf1frptGLT1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURjdJM0wzg927B9Jpt5mcarrGChwwHwYDVR0j BBgwFoAUsqdh1hy/Ak8kzToYvpblj37WyQkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YmE5N2IwYi0zOWFlLTRjMmMtYjEzYi0wMWUzOTViN2EyNGIvMC9CMkE3NjFENjFD QkYwMjRGMjRDRDNBMThCRTk2RTU4RjdFRDZDOTA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJBNzYxRDYxQ0JGMDI0RjI0Q0QzQTE4QkU5NkU1OEY3RUQ2 QzkwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmJhOTdiMGItMzlhZS00YzJjLWIx M2ItMDFlMzk1YjdhMjRiLzAvQjJBNzYxRDYxQ0JGMDI0RjI0Q0QzQTE4QkU5NkU1 OEY3RUQ2QzkwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKIRQkWXX+8NZA2N8wyk/FIyXMApF1AjGSP/ LVaVsEWJPa2kvLLl6QMH3jhlEzMrFAcp6xbIQF3vVMKX4kOtb/51fx/Pj2xNAvfO 1CwuY4rsiMTCukxeuXy1owXATclGRm6wu9d0qSKrQNOwsPc/hrzLd8vv4ZePCB0x XlmskvmTIgemV1QniuMh5yHT44qf4boCDTQIMg/ix6F0lPGv6dTOnJldg2tNPICJ cXIwFEKUt2eT2ZBEYKiq+AuNsqwQziFc7R4fRqNlpBuEHEdVAb36ht9qirQsoMib 3z8/W3VvIIqfO4iED3VKVxRIY0mczTiJq2T1buPNOpOX3KpbLlk= -----END CERTIFICATE-----Generated at Mon Jul 21 18:04:29 2025 by rpki-client