$ rpki-client -vvf repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.mft File: B88116E180F32C03362804A81CB0CF2EB0C261B6.mft (raw, json) Hash identifier: Lex5ABp1NO9EO72jX82Vt/sugJR9FYY4p8pnT6cuGcM= Subject key identifier: BC:7F:20:63:AD:EF:5B:C9:FE:D5:14:39:00:46:0B:9C:08:A9:64:DE Authority key identifier: B8:81:16:E1:80:F3:2C:03:36:28:04:A8:1C:B0:CF:2E:B0:C2:61:B6 Certificate issuer: /CN=B88116E180F32C03362804A81CB0CF2EB0C261B6 Certificate serial: 05C3075A540D4165C88FB6C858EE0CB6F26C7F6B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.mft Manifest number: 0163 Signing time: Thu 04 Sep 2025 02:02:05 +0000 Manifest this update: Thu 04 Sep 2025 01:57:05 +0000 Manifest next update: Sun 07 Sep 2025 08:01:05 +0000 Files and hashes: 1: 3130332e3133322e35322e302f32322d3234203d3e20313338313233.roa (hash: pzNE22UpG1Jt2+Owlsq87q7swwQXq2gUn384QTqpP2M=) 2: 3130332e3133322e35332e302f32342d3234203d3e20313338313233.roa (hash: 0WXWQlb4tMBzSZgjns1zengdeTcdVp1QSefZx39KHLE=) 3: 3130332e3133322e35322e302f32342d3234203d3e20313338313233.roa (hash: 61PqzbefMCe104GH4tvsaNnjc51GZYX3PE2lw6vf/AE=) 4: 3130332e3133322e35342e302f32342d3234203d3e20313338313233.roa (hash: xRhm+ztLVPsT2+vuoKMwBZMT/FF6d5r60ZpTwX3FlUw=) 5: B88116E180F32C03362804A81CB0CF2EB0C261B6.crl (hash: kYlUmd2JfIXi/Q7ukEfCnBzauz4Ub8nFh4xJ3QFsZRM=) 6: 3130332e3133322e35352e302f32342d3234203d3e20313338313233.roa (hash: CIgXNrGi+SDH5ijMaMYNAYeOpi7DzjTKmeB4Y5/uAfQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.crl rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 08:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:c3:07:5a:54:0d:41:65:c8:8f:b6:c8:58:ee:0c:b6:f2:6c:7f:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B88116E180F32C03362804A81CB0CF2EB0C261B6 Validity Not Before: Sep 4 01:57:05 2025 GMT Not After : Sep 7 08:01:05 2025 GMT Subject: CN=BC7F2063ADEF5BC9FED5143900460B9C08A964DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:21:15:54:2f:6e:e7:3b:6f:fa:bb:db:43:95: 13:b3:07:a9:a8:3c:50:e0:5e:59:e2:f8:b9:76:b6: f6:d9:ef:b3:8b:bc:4d:6d:12:9d:5d:57:f7:02:c9: d8:97:e3:ce:e4:88:b7:a4:e0:4b:cf:d5:8e:3d:6c: ec:10:1d:06:8e:f2:56:bb:d1:29:36:a0:30:8b:bc: 3c:3c:91:cf:6d:dd:18:89:7b:90:57:d8:ca:88:99: a8:df:df:3e:73:32:8a:0d:16:54:40:dc:69:7b:f2: bd:2d:2c:41:6f:98:24:a4:02:98:67:eb:79:42:2d: 60:17:40:33:51:62:13:66:90:e4:7f:0b:e4:a8:49: a8:2f:c0:53:a3:87:ab:28:aa:0d:90:03:0b:dd:9a: a8:0f:e9:56:cb:0b:21:d9:ea:77:25:fc:0c:25:c8: e4:02:d8:61:8a:51:cf:84:f0:fd:15:14:3f:80:95: ee:c3:06:a9:b0:84:2d:d5:45:4a:43:25:ca:68:ee: 20:45:63:3c:e7:7c:e2:11:0e:d5:c9:7c:9d:f9:dd: a4:2e:3c:fe:3d:1e:75:42:65:74:52:96:d0:08:20: 8f:53:93:ea:7e:b1:c0:7d:9d:76:70:27:47:4a:fc: b5:55:61:1f:a5:96:c8:29:24:fd:c3:47:4c:ba:eb: 57:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:7F:20:63:AD:EF:5B:C9:FE:D5:14:39:00:46:0B:9C:08:A9:64:DE X509v3 Authority Key Identifier: keyid:B8:81:16:E1:80:F3:2C:03:36:28:04:A8:1C:B0:CF:2E:B0:C2:61:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:47:fa:d2:30:ee:8d:4f:1d:f5:6b:1e:b9:27:ed:e7:13:b4: 0f:fc:8d:95:02:87:14:7f:d7:b9:a4:10:e4:34:21:34:16:1d: d0:23:29:1f:ae:30:54:6a:22:9f:0a:86:5e:99:74:77:6c:fe: 2e:f4:a3:12:33:d8:90:46:11:c8:e2:ed:07:87:f8:07:f0:64: a5:30:bb:0c:47:ae:0f:a9:e5:09:d9:6a:54:5a:c4:11:74:b1: 9b:ea:0b:9f:9d:0b:1d:b2:82:c0:c3:df:ad:43:6e:76:bb:16: 4d:30:0d:b0:a4:b1:0d:e4:4b:c8:00:b6:c5:a9:bb:c2:36:7c: 3f:31:2d:76:04:81:8e:b7:de:ad:20:20:49:06:70:93:4c:04: 51:5e:8b:77:e0:08:2d:d1:71:03:be:70:36:26:39:b8:08:02: a0:db:1d:ac:82:bb:89:7b:60:79:3d:1d:1b:97:a4:61:a3:e1: 30:56:e2:eb:13:bf:9c:3f:73:87:d6:73:59:2b:77:de:47:5d: c3:48:9a:f3:63:97:14:68:53:9d:0b:34:b2:5c:01:5b:f8:80: c0:98:4b:bb:d8:23:45:01:d2:0f:a9:99:9f:21:a9:59:82:c7: 75:10:27:c6:89:0d:86:a8:c4:4f:ee:b2:80:a5:71:00:7f:a6: 46:85:96:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBcMHWlQNQWXIj7bIWO4MtvJsf2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg4MTE2RTE4MEYzMkMwMzM2MjgwNEE4MUNCMENGMkVC MEMyNjFCNjAeFw0yNTA5MDQwMTU3MDVaFw0yNTA5MDcwODAxMDVaMDMxMTAvBgNV BAMTKEJDN0YyMDYzQURFRjVCQzlGRUQ1MTQzOTAwNDYwQjlDMDhBOTY0REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPIRVUL27nO2/6u9tDlROzB6mo PFDgXlni+Ll2tvbZ77OLvE1tEp1dV/cCydiX487kiLek4EvP1Y49bOwQHQaO8la7 0Sk2oDCLvDw8kc9t3RiJe5BX2MqImajf3z5zMooNFlRA3Gl78r0tLEFvmCSkAphn 63lCLWAXQDNRYhNmkOR/C+SoSagvwFOjh6soqg2QAwvdmqgP6VbLCyHZ6ncl/Awl yOQC2GGKUc+E8P0VFD+Ale7DBqmwhC3VRUpDJcpo7iBFYzznfOIRDtXJfJ353aQu PP49HnVCZXRSltAIII9Tk+p+scB9nXZwJ0dK/LVVYR+llsgpJP3DR0y661d5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvH8gY63vW8n+1RQ5AEYLnAipZN4wHwYDVR0j BBgwFoAUuIEW4YDzLAM2KASoHLDPLrDCYbYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTk2ZWQ4OS0yYTE2LTQxNTEtYmY4My01OWRjZTU2MTQ2MGMvMC9CODgxMTZFMTgw RjMyQzAzMzYyODA0QTgxQ0IwQ0YyRUIwQzI2MUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg4MTE2RTE4MEYzMkMwMzM2MjgwNEE4MUNCMENGMkVCMEMy NjFCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU5NmVkODktMmExNi00MTUxLWJm ODMtNTlkY2U1NjE0NjBjLzAvQjg4MTE2RTE4MEYzMkMwMzM2MjgwNEE4MUNCMENG MkVCMEMyNjFCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1H+tIw7o1PHfVrHrkn7ecTtA/8jZUChxR/ 17mkEOQ0ITQWHdAjKR+uMFRqIp8Khl6ZdHds/i70oxIz2JBGEcji7QeH+AfwZKUw uwxHrg+p5QnZalRaxBF0sZvqC5+dCx2ygsDD361Dbna7Fk0wDbCksQ3kS8gAtsWp u8I2fD8xLXYEgY633q0gIEkGcJNMBFFei3fgCC3RcQO+cDYmObgIAqDbHayCu4l7 YHk9HRuXpGGj4TBW4usTv5w/c4fWc1krd95HXcNImvNjlxRoU50LNLJcAVv4gMCY S7vYI0UB0g+pmZ8hqVmCx3UQJ8aJDYaoxE/usoClcQB/pkaFlqg= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:42 2025 by rpki-client