$ rpki-client -vvf repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft File: B9A55DD123C2F224C4E245856905F78F2F354D92.mft (raw, json) Hash identifier: c2W2rt7AJL0njncHg4F8NHtbYPS2sXNMlgC5dnDWVaA= Subject key identifier: 68:3F:8E:62:29:A8:C4:7E:3F:DC:1F:0C:6E:F2:EB:A7:E6:F0:BA:12 Authority key identifier: B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92 Certificate issuer: /CN=B9A55DD123C2F224C4E245856905F78F2F354D92 Certificate serial: 40A795D85864450B40AB113FE61680B8F2304095 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft Manifest number: D2 Signing time: Fri 29 Aug 2025 08:30:59 +0000 Manifest this update: Fri 29 Aug 2025 08:25:59 +0000 Manifest next update: Mon 01 Sep 2025 19:44:59 +0000 Files and hashes: 1: B9A55DD123C2F224C4E245856905F78F2F354D92.crl (hash: YEjaNv9nMEBImggQtSkBpbyszueSHB+vdmCrkfMq0tk=) 2: 3135372e31302e39372e302f32342d3234203d3e203538383231.roa (hash: UPR5y8V0jVDX7lorT6sk4sYb0YCh+EKPNMakCdOkBwI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.crl rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Sep 2025 19:44:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:a7:95:d8:58:64:45:0b:40:ab:11:3f:e6:16:80:b8:f2:30:40:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9A55DD123C2F224C4E245856905F78F2F354D92 Validity Not Before: Aug 29 08:25:59 2025 GMT Not After : Sep 1 19:44:59 2025 GMT Subject: CN=683F8E6229A8C47E3FDC1F0C6EF2EBA7E6F0BA12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:3a:c7:27:be:59:c5:f0:5a:40:d5:d7:ba:f6: c0:84:50:dd:ca:ae:fe:47:1f:9a:ff:4a:2a:c5:06: 88:7c:c8:da:58:9c:ea:90:4f:de:81:69:ad:d2:aa: 0b:8a:0c:99:b2:3c:97:4a:3c:d6:e8:bb:ca:a7:52: 09:76:46:8a:0c:86:19:91:71:80:7b:8c:e2:68:cc: d1:9e:14:bd:02:af:20:ef:9c:cf:49:b1:1f:2c:9a: e1:56:3a:19:ca:c8:8a:10:03:94:a5:ec:5f:b0:c4: 83:7b:7f:91:47:c5:e7:50:af:12:54:b0:d6:21:b0: 15:4c:4e:3e:2e:a0:f0:7c:1d:20:30:e6:6d:00:65: 27:fe:a7:f0:21:69:34:92:7e:46:40:53:b6:42:38: ef:4a:74:f5:ca:e7:8e:a0:8d:44:eb:6a:66:9e:f1: f4:ae:87:a4:7e:54:31:51:05:31:6b:93:c3:36:a7: 26:8e:d7:d2:12:0e:a9:e0:53:9f:4b:83:a3:0b:aa: 21:e1:2a:ee:25:d6:9a:6c:1f:4f:a2:1a:cc:3b:da: 63:e7:1e:c3:d5:12:b7:fa:7f:a2:69:f7:2d:b5:27: 0e:fa:58:4b:0f:e2:d3:d1:59:82:53:d4:b5:48:a5: cf:e3:0f:a0:87:4a:18:6d:c2:0f:0f:06:fd:bc:00: 54:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:3F:8E:62:29:A8:C4:7E:3F:DC:1F:0C:6E:F2:EB:A7:E6:F0:BA:12 X509v3 Authority Key Identifier: keyid:B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:c2:34:fd:15:89:f0:cf:d4:6a:41:5c:f5:13:9c:bf:50:87: 33:50:43:3b:ab:89:15:da:da:86:35:c2:75:3a:a7:d5:28:e2: 48:e6:27:d9:ea:d2:4e:34:4e:fa:6c:ed:3f:fd:ab:c0:ee:40: b4:33:0b:9b:8e:45:a1:c8:41:70:2c:46:1d:f4:ac:f2:eb:c9: cf:20:97:fd:17:04:d8:2d:eb:63:59:b3:81:e0:46:6a:f9:2c: 97:0b:11:8f:81:fd:83:95:f9:00:11:ed:f7:4f:96:e4:ee:7d: f9:f0:5b:1e:b6:75:45:d7:72:09:c9:cc:9c:a6:3b:20:d7:bd: 53:c0:81:02:b3:f5:b4:1e:f7:eb:4a:93:66:99:f1:f2:75:0e: d5:84:da:da:c3:63:37:fb:df:a5:0c:9e:2a:0b:d3:a7:b3:e5: 1f:e4:c6:b1:02:08:91:29:4a:bf:24:09:b5:82:2f:4e:58:f8: aa:67:c4:19:55:98:f1:be:fd:59:2a:80:b5:cf:d5:9b:2f:2f: ac:1e:e7:9a:46:ae:7b:bf:d0:83:87:eb:43:93:60:05:84:36: 00:26:4b:82:15:89:ec:a5:e1:4b:c2:1d:1c:d6:2d:17:76:05: 31:d6:69:94:79:b0:5d:9a:67:89:0f:d8:a6:ce:cf:ac:d9:cb: 49:5f:54:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQKeV2FhkRQtAqxE/5haAuPIwQJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3OEYy RjM1NEQ5MjAeFw0yNTA4MjkwODI1NTlaFw0yNTA5MDExOTQ0NTlaMDMxMTAvBgNV BAMTKDY4M0Y4RTYyMjlBOEM0N0UzRkRDMUYwQzZFRjJFQkE3RTZGMEJBMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqOscnvlnF8FpA1de69sCEUN3K rv5HH5r/SirFBoh8yNpYnOqQT96Baa3SqguKDJmyPJdKPNbou8qnUgl2RooMhhmR cYB7jOJozNGeFL0CryDvnM9JsR8smuFWOhnKyIoQA5Sl7F+wxIN7f5FHxedQrxJU sNYhsBVMTj4uoPB8HSAw5m0AZSf+p/AhaTSSfkZAU7ZCOO9KdPXK546gjUTramae 8fSuh6R+VDFRBTFrk8M2pyaO19ISDqngU59Lg6MLqiHhKu4l1ppsH0+iGsw72mPn HsPVErf6f6Jp9y21Jw76WEsP4tPRWYJT1LVIpc/jD6CHShhtwg8PBv28AFSzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaD+OYimoxH4/3B8MbvLrp+bwuhIwHwYDVR0j BBgwFoAUuaVd0SPC8iTE4kWFaQX3jy81TZIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZjJmNjRjYS1mYTU0LTQ5OWUtYmMzMy00ODYyZGNhNzk0ZjcvMC9COUE1NUREMTIz QzJGMjI0QzRFMjQ1ODU2OTA1Rjc4RjJGMzU0RDkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3OEYyRjM1 NEQ5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWYyZjY0Y2EtZmE1NC00OTllLWJj MzMtNDg2MmRjYTc5NGY3LzAvQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3 OEYyRjM1NEQ5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE7CNP0VifDP1GpBXPUTnL9QhzNQQzuriRXa 2oY1wnU6p9Uo4kjmJ9nq0k40Tvps7T/9q8DuQLQzC5uORaHIQXAsRh30rPLryc8g l/0XBNgt62NZs4HgRmr5LJcLEY+B/YOV+QAR7fdPluTuffnwWx62dUXXcgnJzJym OyDXvVPAgQKz9bQe9+tKk2aZ8fJ1DtWE2trDYzf736UMnioL06ez5R/kxrECCJEp Sr8kCbWCL05Y+KpnxBlVmPG+/VkqgLXP1ZsvL6we55pGrnu/0IOH60OTYAWENgAm S4IVieyl4UvCHRzWLRd2BTHWaZR5sF2aZ4kP2KbOz6zZy0lfVM0= -----END CERTIFICATE-----Generated at Sun Aug 31 15:11:43 2025 by rpki-client