$ rpki-client -vvf repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft File: B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft (raw, json) Hash identifier: Mb6AhxZQCCMd7briYpZ7EQjJzKr0NFkBxZZpK2VG2bg= Subject key identifier: 2A:33:A7:C4:AA:C9:3B:BB:7B:FB:6C:04:8F:64:47:32:90:37:AC:43 Authority key identifier: B9:21:DA:AB:B8:49:49:DD:C2:50:0D:4F:0A:6D:93:FA:0E:B3:84:E1 Certificate issuer: /CN=B921DAABB84949DDC2500D4F0A6D93FA0EB384E1 Certificate serial: 360008C5B19D9DF071CB57AE7D9A5892F82E1177 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft Manifest number: 0298 Signing time: Sat 06 Sep 2025 01:01:53 +0000 Manifest this update: Sat 06 Sep 2025 00:56:53 +0000 Manifest next update: Tue 09 Sep 2025 09:48:53 +0000 Files and hashes: 1: 3130332e33302e3232302e302f32342d3234203d3e203338313438.roa (hash: 5MfpBewFDSPuWTooHE8O1IkKqC/swjstgMNE2K+S+q4=) 2: 323430313a396230303a3a2f33322d3438203d3e203338313438.roa (hash: hc6ECrtKO1f8LRbUaOngruzuLZGjjKMcrVpSYHLGH+4=) 3: 3130332e33302e3232302e302f32322d3233203d3e203338313438.roa (hash: d/qApoJ7mr0vuB+K0fvN+XpOWjHSmWf3V1Wp1hQdcro=) 4: B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.crl (hash: nlVAI7UZj1VLRv1GL17CcgS5NzWhLoRW4VE68WHnKu0=) 5: 3130332e33302e3232322e302f32342d3234203d3e203338313438.roa (hash: ZPi+JZqMM8ZilEO1UdhpjL1kpie3JMIqiKeJGeN+nJU=) 6: 3130332e33302e3232332e302f32342d3234203d3e203338313438.roa (hash: 8BH7HUPp+qT0dOPwFMHWiAT720E6kg8wn1sWk04/fIM=) 7: 3132322e3230302e3134342e302f32312d3234203d3e203338313438.roa (hash: Q0JPOTRHz7S3KCYgxrzfh7sPXe85gqUb+g55+vjlzmE=) 8: 3130332e33302e3232312e302f32342d3234203d3e203338313438.roa (hash: w9cZPX/3pDPz2+LwzvjA2m3xBMWMxQj8fam9ODXwU7Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.crl rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 09:48:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:00:08:c5:b1:9d:9d:f0:71:cb:57:ae:7d:9a:58:92:f8:2e:11:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B921DAABB84949DDC2500D4F0A6D93FA0EB384E1 Validity Not Before: Sep 6 00:56:53 2025 GMT Not After : Sep 9 09:48:53 2025 GMT Subject: CN=2A33A7C4AAC93BBB7BFB6C048F6447329037AC43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:3b:9c:ac:29:cd:35:81:48:55:85:56:ea:71: af:a4:2c:40:00:34:45:62:bc:9a:b1:5a:3a:20:84: 67:e5:d9:82:0b:b8:1b:0c:5d:bf:b5:a9:7e:ff:22: bf:74:1e:a3:da:a1:1e:76:a4:e8:04:53:9e:e4:94: 88:80:47:a0:34:1d:73:a1:20:cb:4c:51:5d:fa:f1: 02:8b:56:4d:d3:32:59:f2:0d:80:87:6b:4f:ab:44: aa:97:fd:87:70:b5:27:41:0f:c3:0a:89:05:8f:9a: df:5c:70:6d:56:66:17:c6:87:49:e7:ee:6a:91:2c: 79:23:20:4d:6a:e1:42:cb:2f:1c:af:7f:2e:fd:7f: db:13:c2:81:f8:79:47:96:2c:01:35:d9:96:3c:2f: c2:64:c3:cc:5d:d7:4e:92:f2:be:0a:44:18:8a:26: 60:12:2a:53:4e:4e:9f:ba:86:b4:18:84:01:e8:56: 6f:26:86:e3:74:26:9a:2e:bf:03:d5:7f:6d:3d:c5: 4e:82:f5:93:f8:d5:da:31:e1:60:a0:c1:a9:27:2a: 01:f1:1d:62:8f:10:87:d5:06:49:4e:bf:b9:99:51: 76:bd:a1:5f:1f:ff:3f:0f:c5:57:1f:99:da:a3:b1: 19:10:b8:b2:36:06:c8:96:43:e5:f1:8a:05:54:43: 91:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:33:A7:C4:AA:C9:3B:BB:7B:FB:6C:04:8F:64:47:32:90:37:AC:43 X509v3 Authority Key Identifier: keyid:B9:21:DA:AB:B8:49:49:DD:C2:50:0D:4F:0A:6D:93:FA:0E:B3:84:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:35:2a:f0:21:0e:ee:f7:a5:c2:b2:d2:77:26:89:39:0f:c9: 8c:28:d4:13:f6:b0:b0:d4:11:4b:b6:61:f8:ce:99:cc:9c:7a: 2f:fe:35:22:8f:0b:4e:c0:6e:d5:dd:ea:91:f0:87:af:aa:9e: 72:e7:6b:6b:04:3e:2b:fd:6d:cc:22:1f:95:c1:f5:fa:32:b7: a8:4b:3d:3c:bb:39:eb:84:4f:b0:e2:81:94:d6:11:d7:ce:56: 37:3a:48:fc:29:d6:bc:8e:75:cd:26:cd:bb:ff:46:de:cf:1d: 92:7a:e6:0e:cc:88:8b:9d:c1:0b:1f:d2:f4:be:6c:ea:91:f5: aa:78:1f:62:40:74:e4:27:22:6c:81:c2:0a:a6:96:8f:19:89: f9:96:11:a4:78:f1:82:a1:ad:48:ca:26:ba:9e:aa:4c:12:07: a6:f4:b0:3d:f8:cf:66:fe:d5:36:17:85:26:8d:4d:15:3e:cc: 38:6c:35:53:1c:5b:f8:4a:ac:b4:6b:d2:66:0f:3c:30:0b:31: a2:e0:84:6a:e4:21:3e:23:f5:6f:d5:bc:77:97:c6:c8:d7:14: 4c:92:4e:17:73:d4:12:ff:d6:03:e5:62:1d:bd:c3:5b:75:b6: 79:7e:52:cd:17:be:18:43:b5:37:41:65:11:50:62:fd:98:d6: 90:23:73:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNgAIxbGdnfBxy1eufZpYkvguEXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkyMURBQUJCODQ5NDlEREMyNTAwRDRGMEE2RDkzRkEw RUIzODRFMTAeFw0yNTA5MDYwMDU2NTNaFw0yNTA5MDkwOTQ4NTNaMDMxMTAvBgNV BAMTKDJBMzNBN0M0QUFDOTNCQkI3QkZCNkMwNDhGNjQ0NzMyOTAzN0FDNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnO5ysKc01gUhVhVbqca+kLEAA NEVivJqxWjoghGfl2YILuBsMXb+1qX7/Ir90HqPaoR52pOgEU57klIiAR6A0HXOh IMtMUV368QKLVk3TMlnyDYCHa0+rRKqX/YdwtSdBD8MKiQWPmt9ccG1WZhfGh0nn 7mqRLHkjIE1q4ULLLxyvfy79f9sTwoH4eUeWLAE12ZY8L8Jkw8xd106S8r4KRBiK JmASKlNOTp+6hrQYhAHoVm8mhuN0JpouvwPVf209xU6C9ZP41dox4WCgwaknKgHx HWKPEIfVBklOv7mZUXa9oV8f/z8PxVcfmdqjsRkQuLI2BsiWQ+XxigVUQ5FVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKjOnxKrJO7t7+2wEj2RHMpA3rEMwHwYDVR0j BBgwFoAUuSHaq7hJSd3CUA1PCm2T+g6zhOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTkyYzI3NC0xMWRiLTQxMjctYmFiYi1hZWFlOTkyODRiMDAvMC9COTIxREFBQkI4 NDk0OUREQzI1MDBENEYwQTZEOTNGQTBFQjM4NEUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkyMURBQUJCODQ5NDlEREMyNTAwRDRGMEE2RDkzRkEwRUIz ODRFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTU5MmMyNzQtMTFkYi00MTI3LWJh YmItYWVhZTk5Mjg0YjAwLzAvQjkyMURBQUJCODQ5NDlEREMyNTAwRDRGMEE2RDkz RkEwRUIzODRFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACY1KvAhDu73pcKy0ncmiTkPyYwo1BP2sLDU EUu2YfjOmcycei/+NSKPC07AbtXd6pHwh6+qnnLna2sEPiv9bcwiH5XB9foyt6hL PTy7OeuET7DigZTWEdfOVjc6SPwp1ryOdc0mzbv/Rt7PHZJ65g7MiIudwQsf0vS+ bOqR9ap4H2JAdOQnImyBwgqmlo8ZifmWEaR48YKhrUjKJrqeqkwSB6b0sD34z2b+ 1TYXhSaNTRU+zDhsNVMcW/hKrLRr0mYPPDALMaLghGrkIT4j9W/VvHeXxsjXFEyS Thdz1BL/1gPlYh29w1t1tnl+Us0XvhhDtTdBZRFQYv2Y1pAjc5E= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:43 2025 by rpki-client