$ rpki-client -vvf repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft File: B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft (raw, json) Hash identifier: /65cySNjANLFkpAI4OZoFRMnUFVNBBOkq6LPgLJDbsA= Subject key identifier: F7:E0:39:C1:50:14:B5:98:11:94:08:4D:A2:AD:BB:40:23:D6:88:C7 Authority key identifier: B0:D6:73:B7:8D:BE:21:9F:1E:EE:F0:56:E3:E4:9F:B6:D5:8A:55:50 Certificate issuer: /CN=B0D673B78DBE219F1EEEF056E3E49FB6D58A5550 Certificate serial: 05F34DEAD938F55D21C3A858666F4814C3428995 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft Manifest number: CB Signing time: Sat 06 Sep 2025 12:40:52 +0000 Manifest this update: Sat 06 Sep 2025 12:35:52 +0000 Manifest next update: Tue 09 Sep 2025 21:08:52 +0000 Files and hashes: 1: 3136302e32322e32322e302f32332d3234203d3e20313532383032.roa (hash: 1cb+dRF1cCmzlK2LUqHDHTpgVi9SG86amprY/lPnWU4=) 2: B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl (hash: OtikfKS1FHMYbDs3kzwoLLCD33S+aUIQfRn0Avn7JAo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 21:08:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:f3:4d:ea:d9:38:f5:5d:21:c3:a8:58:66:6f:48:14:c3:42:89:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0D673B78DBE219F1EEEF056E3E49FB6D58A5550 Validity Not Before: Sep 6 12:35:52 2025 GMT Not After : Sep 9 21:08:52 2025 GMT Subject: CN=F7E039C15014B5981194084DA2ADBB4023D688C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:25:ed:34:47:1e:22:99:96:91:02:dc:c5:c9: c1:38:a5:31:c4:78:ee:69:ff:99:6a:ec:a5:2a:06: 5c:5d:96:a2:fd:ac:62:0c:11:dc:84:77:b4:ab:c7: 5a:b4:16:5a:23:7d:13:fe:a8:a1:f2:1b:b9:b1:50: 02:38:bd:3d:dd:8e:88:aa:60:cf:a2:9a:f4:c0:a4: 06:c8:a3:a2:a8:3d:d6:24:3e:5a:fb:83:20:c4:63: 01:fb:1e:e8:a3:c4:2f:16:b4:c3:f2:45:bc:e2:2f: cf:b6:a4:f2:f4:80:88:20:4e:51:fe:d3:8b:fc:a3: d0:2b:47:e3:28:7d:e2:b5:50:24:db:04:67:27:9f: f2:c9:07:80:be:93:d9:ca:e0:82:e6:4a:11:b7:4a: 16:ff:89:9f:5c:43:86:a6:37:23:c3:c1:8e:a5:b7: d0:1e:ef:00:3c:95:cf:ca:23:52:9e:32:d1:4f:b5: b1:42:97:22:9b:8b:41:25:38:99:36:90:ac:a2:76: 6a:59:2e:e3:0a:b8:8e:5d:ce:e5:de:de:c3:a6:90: 08:a8:2d:18:b0:e1:cc:c4:2d:86:77:93:59:b0:2c: 01:ae:1b:50:cb:e0:34:ae:9f:67:fa:87:94:b4:54: a9:42:19:2d:75:32:e3:d9:63:82:4a:e9:84:ad:8c: 0d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E0:39:C1:50:14:B5:98:11:94:08:4D:A2:AD:BB:40:23:D6:88:C7 X509v3 Authority Key Identifier: keyid:B0:D6:73:B7:8D:BE:21:9F:1E:EE:F0:56:E3:E4:9F:B6:D5:8A:55:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:14:78:b1:cd:15:73:3d:8c:83:7d:4d:bf:33:87:7f:2b:37: f7:69:8e:05:9d:ac:38:5f:23:43:87:02:17:d3:4d:f6:b0:89: 54:03:64:f7:6a:ca:94:24:a2:f7:75:a3:47:a7:a8:e7:98:63: 70:63:f5:b4:5c:80:da:8c:63:fc:56:4d:66:5e:b5:46:b4:9f: 8f:35:c4:72:d6:33:3e:0e:ec:b2:85:a7:c8:79:2b:a6:79:95: a1:7f:0b:8b:a6:f6:a4:26:30:42:29:18:c8:f7:83:89:f4:96: cc:e6:8c:cd:84:84:0f:93:5f:f3:c9:93:ba:db:52:16:31:f7: 13:7c:74:5c:7b:8e:1d:84:b4:3f:85:4f:ec:ad:e6:36:33:5c: 60:0e:6b:ff:01:9a:25:9c:b3:99:5a:49:86:b0:05:54:f7:e6: 94:e8:21:64:39:99:2e:26:58:db:86:81:7f:36:5d:e3:24:03: 86:2a:17:83:aa:6a:92:ed:6f:de:60:f0:32:e2:f4:0b:88:50: 09:e6:95:61:da:82:36:6d:ae:ca:49:c5:13:8e:76:a0:94:aa: dd:be:ef:f3:1c:a7:e5:5f:dc:e5:0f:1a:cb:12:61:38:77:d0: f8:d7:84:62:d0:68:65:a6:c2:8a:8b:cb:e7:b5:a6:62:12:47: 74:d6:c3:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBfNN6tk49V0hw6hYZm9IFMNCiZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBENjczQjc4REJFMjE5RjFFRUVGMDU2RTNFNDlGQjZE NThBNTU1MDAeFw0yNTA5MDYxMjM1NTJaFw0yNTA5MDkyMTA4NTJaMDMxMTAvBgNV BAMTKEY3RTAzOUMxNTAxNEI1OTgxMTk0MDg0REEyQURCQjQwMjNENjg4QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Je00Rx4imZaRAtzFycE4pTHE eO5p/5lq7KUqBlxdlqL9rGIMEdyEd7Srx1q0FlojfRP+qKHyG7mxUAI4vT3djoiq YM+imvTApAbIo6KoPdYkPlr7gyDEYwH7HuijxC8WtMPyRbziL8+2pPL0gIggTlH+ 04v8o9ArR+MofeK1UCTbBGcnn/LJB4C+k9nK4ILmShG3Shb/iZ9cQ4amNyPDwY6l t9Ae7wA8lc/KI1KeMtFPtbFClyKbi0ElOJk2kKyidmpZLuMKuI5dzuXe3sOmkAio LRiw4czELYZ3k1mwLAGuG1DL4DSun2f6h5S0VKlCGS11MuPZY4JK6YStjA2dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9+A5wVAUtZgRlAhNoq27QCPWiMcwHwYDVR0j BBgwFoAUsNZzt42+IZ8e7vBW4+SfttWKVVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjdkMjg5NC1jMDc3LTQyMWMtYmMxZC0zN2Q2ZjlkOTg5N2QvMC9CMEQ2NzNCNzhE QkUyMTlGMUVFRUYwNTZFM0U0OUZCNkQ1OEE1NTUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjBENjczQjc4REJFMjE5RjFFRUVGMDU2RTNFNDlGQjZENThB NTU1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY3ZDI4OTQtYzA3Ny00MjFjLWJj MWQtMzdkNmY5ZDk4OTdkLzAvQjBENjczQjc4REJFMjE5RjFFRUVGMDU2RTNFNDlG QjZENThBNTU1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALsUeLHNFXM9jIN9Tb8zh38rN/dpjgWdrDhf I0OHAhfTTfawiVQDZPdqypQkovd1o0enqOeYY3Bj9bRcgNqMY/xWTWZetUa0n481 xHLWMz4O7LKFp8h5K6Z5laF/C4um9qQmMEIpGMj3g4n0lszmjM2EhA+TX/PJk7rb UhYx9xN8dFx7jh2EtD+FT+yt5jYzXGAOa/8BmiWcs5laSYawBVT35pToIWQ5mS4m WNuGgX82XeMkA4YqF4OqapLtb95g8DLi9AuIUAnmlWHagjZtrspJxROOdqCUqt2+ 7/Mcp+Vf3OUPGssSYTh30PjXhGLQaGWmwoqLy+e1pmISR3TWw28= -----END CERTIFICATE-----Generated at Mon Sep 8 11:15:23 2025 by rpki-client