$ rpki-client -vvf repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft File: B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft (raw, json) Hash identifier: qWXZZ/Vpx9zMVFGfWDw/hDW2D07pPbjv8wqvMfY+gb0= Subject key identifier: D2:40:38:AF:CE:FE:99:43:96:C0:55:E6:E3:02:21:84:DF:73:91:30 Authority key identifier: B2:B2:F4:2B:F1:97:8A:D0:94:18:64:80:A7:DA:00:86:FD:7C:29:19 Certificate issuer: /CN=B2B2F42BF1978AD094186480A7DA0086FD7C2919 Certificate serial: 1C77644F7FB4C40CD555684A36C38B046C53FD17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft Manifest number: 018D Signing time: Fri 18 Jul 2025 22:51:32 +0000 Manifest this update: Fri 18 Jul 2025 22:46:32 +0000 Manifest next update: Tue 22 Jul 2025 08:13:32 +0000 Files and hashes: 1: 3130332e32332e39382e302f32332d3233203d3e20313530323435.roa (hash: 4vMfmSE2Nr1Jh9euWzmJY0IXJeyMyzfrb4vovMJmB9A=) 2: 3130332e32332e39382e302f32342d3234203d3e20313530323435.roa (hash: zfWwMyIyfYFsLYce6cLTwp+3PWwf0vu9ehqN4lOZ8SU=) 3: B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl (hash: yLB/fQvdGfA49UZRQvBPgCypKrjaMVuSxkBtmpeJQbw=) 4: 3130332e32332e39392e302f32342d3234203d3e20313530323435.roa (hash: 7tXNJtByPVAUWKN7rPTJrICa1r391Ty+571rFNCuCe4=) 5: 323030313a6466313a653034303a3a2f34382d3438203d3e20313530323435.roa (hash: gtOr9NwzW8Aa7fZGd03VkoCWA9Dhf88Ryc02CpBSPGY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 08:13:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:77:64:4f:7f:b4:c4:0c:d5:55:68:4a:36:c3:8b:04:6c:53:fd:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2B2F42BF1978AD094186480A7DA0086FD7C2919 Validity Not Before: Jul 18 22:46:32 2025 GMT Not After : Jul 22 08:13:32 2025 GMT Subject: CN=D24038AFCEFE994396C055E6E3022184DF739130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:53:7d:7f:7e:37:b6:67:b0:63:1a:81:eb:5f: c1:87:6b:68:44:10:88:15:f0:66:42:f1:5d:78:7c: 24:f5:6f:d0:fc:f9:8a:ca:ff:43:75:41:ad:0d:2d: 7c:6a:b8:f0:88:15:c7:25:25:80:e0:71:35:ed:b0: 4e:f1:d6:e2:b0:b5:fb:e2:f4:9c:02:56:77:cd:73: 5c:69:d0:62:5e:dd:d5:69:b0:ba:d8:9b:d6:be:f4: 17:b0:ce:e4:d7:8f:e0:34:06:b9:6e:78:7b:d8:2e: ae:03:d2:6a:a3:ec:fb:03:64:6f:fa:6b:d3:6b:29: 7f:b9:96:3e:0a:33:a1:8e:67:76:46:ba:cf:69:cf: 13:e2:6b:83:08:45:89:9f:14:8e:61:36:82:5e:12: bc:f4:95:76:69:4d:13:41:9a:09:a0:a7:82:ec:1a: 78:68:62:c3:93:3b:f7:9f:18:c3:71:e8:53:53:8e: 5a:f8:15:10:b8:0b:04:0a:86:47:f5:d6:a0:83:53: 07:75:35:ee:ee:3e:0c:45:24:ae:ec:24:b9:c9:f9: e7:f6:14:36:f8:c4:84:4b:a2:77:29:d8:47:bb:1f: 53:3b:17:48:1d:12:e2:3a:71:1b:2b:80:3d:ec:67: 33:d7:1d:09:4d:6c:0d:40:00:0a:d5:ab:97:ba:7a: 1c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:40:38:AF:CE:FE:99:43:96:C0:55:E6:E3:02:21:84:DF:73:91:30 X509v3 Authority Key Identifier: keyid:B2:B2:F4:2B:F1:97:8A:D0:94:18:64:80:A7:DA:00:86:FD:7C:29:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:05:4a:0b:d2:24:d1:dc:8b:c9:3f:94:f4:2e:c5:2b:65:20: 11:5d:72:fd:0a:d5:73:41:3b:0b:0e:2b:ad:ae:f9:9a:19:7e: 3c:0d:da:7a:f3:70:0b:5b:b7:55:70:e0:3d:67:6f:c7:91:b7: d2:3e:88:3c:f9:46:89:18:90:c4:f0:f6:21:00:42:ac:e4:e9: 5c:6c:93:43:85:0b:66:5d:55:86:ba:6e:df:1e:6b:30:63:73: 68:cc:19:91:7d:b1:78:7a:59:ad:6e:66:c4:f1:71:20:10:8a: 19:b9:cf:9a:e1:75:67:52:ae:05:c7:db:53:38:b4:5f:8b:a0: 4d:e7:3f:19:b2:f8:78:8f:55:5b:17:9c:b9:96:39:70:f0:50: 0f:84:62:70:3b:49:92:1c:83:5a:1f:2f:1c:b8:5f:22:cd:6a: 61:9b:19:36:7e:1f:e5:99:c9:88:15:be:34:8c:78:fd:2a:da: 63:9f:fa:70:94:30:e8:28:cc:d9:4e:c6:66:03:61:48:6f:82: 12:58:1c:97:9e:eb:98:6b:91:75:a1:10:f9:31:f6:99:0b:64: f3:db:ea:4f:93:5f:2d:d2:48:b2:4d:fb:b6:d3:ec:a2:87:a2: 16:36:45:c9:bb:18:4a:34:b9:fe:d2:17:76:a0:a8:b1:d2:9c: 50:c1:05:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHHdkT3+0xAzVVWhKNsOLBGxT/RcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJCMkY0MkJGMTk3OEFEMDk0MTg2NDgwQTdEQTAwODZG RDdDMjkxOTAeFw0yNTA3MTgyMjQ2MzJaFw0yNTA3MjIwODEzMzJaMDMxMTAvBgNV BAMTKEQyNDAzOEFGQ0VGRTk5NDM5NkMwNTVFNkUzMDIyMTg0REY3MzkxMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZU31/fje2Z7BjGoHrX8GHa2hE EIgV8GZC8V14fCT1b9D8+YrK/0N1Qa0NLXxquPCIFcclJYDgcTXtsE7x1uKwtfvi 9JwCVnfNc1xp0GJe3dVpsLrYm9a+9BewzuTXj+A0BrlueHvYLq4D0mqj7PsDZG/6 a9NrKX+5lj4KM6GOZ3ZGus9pzxPia4MIRYmfFI5hNoJeErz0lXZpTRNBmgmgp4Ls GnhoYsOTO/efGMNx6FNTjlr4FRC4CwQKhkf11qCDUwd1Ne7uPgxFJK7sJLnJ+ef2 FDb4xIRLoncp2Ee7H1M7F0gdEuI6cRsrgD3sZzPXHQlNbA1AAArVq5e6ehxfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0kA4r87+mUOWwFXm4wIhhN9zkTAwHwYDVR0j BBgwFoAUsrL0K/GXitCUGGSAp9oAhv18KRkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODQ2ZjQyMi1jMzAyLTQ0NjItYjU4NC03MDBlOTM0NmNhMDkvMC9CMkIyRjQyQkYx OTc4QUQwOTQxODY0ODBBN0RBMDA4NkZEN0MyOTE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJCMkY0MkJGMTk3OEFEMDk0MTg2NDgwQTdEQTAwODZGRDdD MjkxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg0NmY0MjItYzMwMi00NDYyLWI1 ODQtNzAwZTkzNDZjYTA5LzAvQjJCMkY0MkJGMTk3OEFEMDk0MTg2NDgwQTdEQTAw ODZGRDdDMjkxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEwFSgvSJNHci8k/lPQuxStlIBFdcv0K1XNB OwsOK62u+ZoZfjwN2nrzcAtbt1Vw4D1nb8eRt9I+iDz5RokYkMTw9iEAQqzk6Vxs k0OFC2ZdVYa6bt8eazBjc2jMGZF9sXh6Wa1uZsTxcSAQihm5z5rhdWdSrgXH21M4 tF+LoE3nPxmy+HiPVVsXnLmWOXDwUA+EYnA7SZIcg1ofLxy4XyLNamGbGTZ+H+WZ yYgVvjSMeP0q2mOf+nCUMOgozNlOxmYDYUhvghJYHJee65hrkXWhEPkx9pkLZPPb 6k+TXy3SSLJN+7bT7KKHohY2Rcm7GEo0uf7SF3agqLHSnFDBBaA= -----END CERTIFICATE-----Generated at Mon Jul 21 02:23:03 2025 by rpki-client