$ rpki-client -vvf repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft File: B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft (raw, json) Hash identifier: 0/MaXMhVInKhEc6QkEo3gDK55W8in/fy9BlHelBte44= Subject key identifier: 59:CD:98:64:6C:B5:DE:51:9F:7B:04:97:B0:8A:80:E2:5B:09:06:C5 Authority key identifier: B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C Certificate issuer: /CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C Certificate serial: 55FAE40B807AF339D3734F606284746007D278F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft Manifest number: 0200 Signing time: Mon 21 Jul 2025 08:12:08 +0000 Manifest this update: Mon 21 Jul 2025 08:07:08 +0000 Manifest next update: Thu 24 Jul 2025 11:51:08 +0000 Files and hashes: 1: 3130332e3138362e3230332e302f32342d3234203d3e20313439373036.roa (hash: JgDdJ0VL4u8D8+wDznKBSlTRQ0p6opMwZGoPzapaaX4=) 2: 3130332e3138362e3230322e302f32332d3233203d3e20313439373036.roa (hash: YXcPTV7LyiaT/dlRqQiGxAGyQ4A0Km1DyhqBZdphgGs=) 3: 3130332e3138362e3230322e302f32342d3234203d3e20313439373036.roa (hash: k4Wn7QjCevaLRtjzpZzU9aujDNZ1W8N1HpzN16+qakY=) 4: B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl (hash: qzB/oIU+3F8t9f2abDl6fgezghl47dKdFXK33rfmSaY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 11:39:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:fa:e4:0b:80:7a:f3:39:d3:73:4f:60:62:84:74:60:07:d2:78:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C Validity Not Before: Jul 21 08:07:08 2025 GMT Not After : Jul 24 11:51:08 2025 GMT Subject: CN=59CD98646CB5DE519F7B0497B08A80E25B0906C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4f:fa:e3:ad:55:10:f1:df:53:31:6e:1b:19: 41:65:ea:96:7a:2c:3b:1b:9e:cc:da:81:a9:9b:5c: 82:14:c8:f4:07:72:54:50:5e:d1:3e:42:14:7d:7c: 96:be:9c:9c:20:a6:b9:91:e6:17:a9:fb:4a:59:b1: f1:b8:3a:bf:30:ec:d9:1b:18:f2:d6:02:16:16:de: bc:38:c1:61:fc:60:2e:64:0e:61:a1:97:88:f2:bc: e2:5e:d3:44:79:71:0e:a5:44:ab:24:79:a6:b6:64: 1f:7b:00:37:4f:ca:1d:c8:06:a9:6c:a6:09:a0:73: 69:e2:07:c0:56:89:b6:8d:60:a6:75:df:9c:00:b6: ab:2d:bc:79:2f:c5:69:06:39:59:19:ec:ff:38:78: 78:53:64:b0:9d:2d:ea:80:7e:2a:e8:f0:cd:5c:3a: 0b:9f:9b:c6:dd:ab:34:ac:a1:a8:c5:11:91:67:7b: a7:15:79:3d:70:85:e2:e9:f2:03:40:25:5d:a0:bf: ce:21:71:61:8c:42:34:c2:d2:4f:87:56:79:43:2b: 88:4e:ee:9a:47:a4:f3:5c:ad:13:d5:6d:55:79:be: cd:e2:2d:6c:3b:4e:0d:7f:be:82:0b:e5:ef:ed:1d: 56:0d:00:f0:fb:b0:d3:39:9a:22:8a:71:bc:66:c9: 7b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:CD:98:64:6C:B5:DE:51:9F:7B:04:97:B0:8A:80:E2:5B:09:06:C5 X509v3 Authority Key Identifier: keyid:B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:94:02:bd:cf:c9:a8:c2:44:ed:d5:b8:23:9d:c8:be:47:1a: 19:85:c1:da:47:48:ae:2b:56:2f:a2:10:e7:b2:34:9d:58:77: 7d:5a:b1:ea:58:93:84:83:b2:34:e7:33:8a:f0:a5:85:88:f6: 22:a1:27:27:da:9b:79:e4:ea:8a:52:15:cc:dd:0d:56:35:3d: 6a:73:64:56:b4:c6:b3:8f:70:f8:2a:50:cc:53:f5:ac:92:d7: 9a:79:b8:f6:b5:f9:e4:3b:d1:f9:71:7e:50:ea:72:25:5a:c2: 2b:2c:a9:16:69:17:dd:c3:09:e7:15:98:cf:48:09:0c:b2:b4: 7f:56:a7:18:3b:30:72:ef:a0:e5:72:97:b2:3d:1f:a0:94:cf: f7:5e:f9:e4:42:18:5c:2a:cc:40:68:06:92:00:44:1b:48:80: bf:16:da:22:62:08:ab:79:cd:1d:7e:57:bb:d3:f2:d6:3e:2e: 20:99:e8:4d:d4:51:8d:6e:f7:4b:e5:0b:ae:e3:80:ff:25:03: f2:ed:90:da:55:32:d2:af:b8:71:8d:59:c1:7d:42:5c:3d:b4: c0:01:60:c2:cf:be:aa:22:03:f9:4e:f4:50:2d:56:06:b6:0b: fb:3c:42:b1:23:d0:93:b2:69:96:42:5d:9d:50:df:7b:40:b3: 69:c2:94:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVfrkC4B68znTc09gYoR0YAfSePMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1RTlG RDIxRkE1QzAeFw0yNTA3MjEwODA3MDhaFw0yNTA3MjQxMTUxMDhaMDMxMTAvBgNV BAMTKDU5Q0Q5ODY0NkNCNURFNTE5RjdCMDQ5N0IwOEE4MEUyNUIwOTA2QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/T/rjrVUQ8d9TMW4bGUFl6pZ6 LDsbnszagambXIIUyPQHclRQXtE+QhR9fJa+nJwgprmR5hep+0pZsfG4Or8w7Nkb GPLWAhYW3rw4wWH8YC5kDmGhl4jyvOJe00R5cQ6lRKskeaa2ZB97ADdPyh3IBqls pgmgc2niB8BWibaNYKZ135wAtqstvHkvxWkGOVkZ7P84eHhTZLCdLeqAfiro8M1c Ogufm8bdqzSsoajFEZFne6cVeT1wheLp8gNAJV2gv84hcWGMQjTC0k+HVnlDK4hO 7ppHpPNcrRPVbVV5vs3iLWw7Tg1/voIL5e/tHVYNAPD7sNM5miKKcbxmyXvpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWc2YZGy13lGfewSXsIqA4lsJBsUwHwYDVR0j BBgwFoAUs0e7pr0Rv8XlX3/zNMFl6f0h+lwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTEwNjgyNy04NjZlLTRhYzMtOGY3OS1hNmUzMjBiMjBkZTcvMC9CMzQ3QkJBNkJE MTFCRkM1RTU1RjdGRjMzNEMxNjVFOUZEMjFGQTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1RTlGRDIx RkE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkxMDY4MjctODY2ZS00YWMzLThm NzktYTZlMzIwYjIwZGU3LzAvQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1 RTlGRDIxRkE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKGUAr3PyajCRO3VuCOdyL5HGhmFwdpHSK4r Vi+iEOeyNJ1Yd31asepYk4SDsjTnM4rwpYWI9iKhJyfam3nk6opSFczdDVY1PWpz ZFa0xrOPcPgqUMxT9ayS15p5uPa1+eQ70flxflDqciVawissqRZpF93DCecVmM9I CQyytH9Wpxg7MHLvoOVyl7I9H6CUz/de+eRCGFwqzEBoBpIARBtIgL8W2iJiCKt5 zR1+V7vT8tY+LiCZ6E3UUY1u90vlC67jgP8lA/LtkNpVMtKvuHGNWcF9Qlw9tMAB YMLPvqoiA/lO9FAtVga2C/s8QrEj0JOyaZZCXZ1Q33tAs2nClDc= -----END CERTIFICATE-----Generated at Mon Jul 21 10:29:32 2025 by rpki-client