$ rpki-client -vvf repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft File: B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft (raw, json) Hash identifier: eBSyv/3IOOLDi7TJy4qrDi7ST9S859NKSh1m/DETJN0= Subject key identifier: 15:D5:0C:06:BC:39:AB:17:68:C1:3F:DA:E8:C0:97:76:54:F7:3D:57 Authority key identifier: B9:37:59:B1:9E:4C:1F:8F:FB:6E:9D:1E:2E:67:4E:4E:31:7D:7E:94 Certificate issuer: /CN=B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94 Certificate serial: 1C6CFDD7B702729470C398078F860C5B6048C5B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft Manifest number: 01FA Signing time: Thu 04 Sep 2025 06:52:18 +0000 Manifest this update: Thu 04 Sep 2025 06:47:18 +0000 Manifest next update: Sun 07 Sep 2025 09:51:18 +0000 Files and hashes: 1: 3130332e3135302e3135382e302f32342d3234203d3e20313430333937.roa (hash: XFDD1vzbK3fH2oVTZT7/I8pF/szQ/Q1UsEfrzMZOTGI=) 2: B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.crl (hash: NWV4/kJmvhjuUD1hJdnia+6ZHSI0ZN7qxiUZVA3wqIg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.crl rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 09:51:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:6c:fd:d7:b7:02:72:94:70:c3:98:07:8f:86:0c:5b:60:48:c5:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94 Validity Not Before: Sep 4 06:47:18 2025 GMT Not After : Sep 7 09:51:18 2025 GMT Subject: CN=15D50C06BC39AB1768C13FDAE8C0977654F73D57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:bc:cd:39:2e:e8:99:76:ee:fb:fe:71:ca:78: fe:0b:88:8a:df:89:30:16:c7:0d:3c:2e:63:35:10: f9:06:a3:0c:9f:17:76:36:13:69:2f:28:a2:ef:38: 17:ef:6d:0e:4a:e3:1b:74:6f:01:b7:67:b2:30:8b: 54:43:32:f5:ee:7b:5a:48:1a:94:32:4b:38:76:16: be:59:0d:9b:25:71:34:79:70:39:a5:3e:e9:75:e4: 5d:c5:c7:b3:ab:1d:c1:f5:03:8b:0f:17:9f:89:79: 3a:eb:16:e8:f6:d9:c8:dd:15:c4:19:2e:80:e3:26: f5:70:53:f6:03:49:52:b4:7d:ba:a9:9f:2b:96:5f: b7:2c:f2:30:b5:a3:4f:00:6f:29:c2:cc:5e:b1:66: b0:f3:93:84:fe:30:28:d9:48:c6:64:b6:b7:97:fd: 67:b3:f6:6b:98:6b:41:58:fa:81:4a:b5:8c:8d:0d: 6a:cf:f6:19:34:e9:54:7b:9d:6b:f8:9b:74:ba:3a: 94:07:77:40:03:d3:2e:d2:9b:fb:97:b8:f7:13:59: 72:56:cf:45:27:57:e9:14:84:31:a2:77:94:e3:27: b5:6f:e7:70:2a:f9:40:61:a4:20:e2:c7:34:67:f9: 43:c3:9e:03:4e:5a:62:62:16:5d:67:df:bc:ff:7f: 93:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:D5:0C:06:BC:39:AB:17:68:C1:3F:DA:E8:C0:97:76:54:F7:3D:57 X509v3 Authority Key Identifier: keyid:B9:37:59:B1:9E:4C:1F:8F:FB:6E:9D:1E:2E:67:4E:4E:31:7D:7E:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3360f078-8a20-48d1-82b8-e1f50a155201/0/B93759B19E4C1F8FFB6E9D1E2E674E4E317D7E94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:cd:11:a3:cf:c8:2e:0d:29:5a:a2:fe:17:64:fc:f8:bb:3e: 97:a9:f3:ea:84:ba:5e:d2:57:cb:38:cf:be:be:e5:8d:e4:bc: ed:04:e1:ed:63:5c:65:e8:ce:49:1b:e7:0b:0f:45:80:c8:ee: a6:24:6a:9f:a2:20:38:f0:d8:a0:57:e3:b5:f0:9f:8f:4d:01: 2f:fc:78:a4:0c:fa:c9:aa:af:a2:b7:1e:e4:70:a1:62:4e:81: 5c:e9:98:d8:55:d2:8e:ab:62:8f:ae:49:fc:dd:f1:ac:8b:ac: 8d:fd:e0:e6:1b:54:e7:98:29:79:af:26:48:e3:88:38:cf:61: 40:ca:f7:49:28:c9:59:f9:30:10:a5:19:f4:58:37:e0:6e:8c: a3:64:1b:4d:6f:06:f2:1b:68:19:ad:7e:97:fe:c6:3c:e1:0d: 5d:d0:13:49:52:eb:09:92:93:00:1b:f9:76:83:78:71:44:53: 89:8f:9c:27:6b:7b:a5:02:18:75:54:d6:f2:44:9b:96:b2:0b: 8f:3f:71:5f:68:ca:0d:30:ea:10:e5:36:ea:c2:65:d4:56:99: 4f:c1:b8:5f:a6:68:a0:ab:f3:d8:9d:d3:f0:7c:4b:48:94:36: 29:9c:e7:d2:79:c9:2d:ad:05:69:6c:8a:1e:6d:ac:b8:4f:b2: 13:41:15:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHGz917cCcpRww5gHj4YMW2BIxbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkzNzU5QjE5RTRDMUY4RkZCNkU5RDFFMkU2NzRFNEUz MTdEN0U5NDAeFw0yNTA5MDQwNjQ3MThaFw0yNTA5MDcwOTUxMThaMDMxMTAvBgNV BAMTKDE1RDUwQzA2QkMzOUFCMTc2OEMxM0ZEQUU4QzA5Nzc2NTRGNzNENTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcvM05LuiZdu77/nHKeP4LiIrf iTAWxw08LmM1EPkGowyfF3Y2E2kvKKLvOBfvbQ5K4xt0bwG3Z7Iwi1RDMvXue1pI GpQySzh2Fr5ZDZslcTR5cDmlPul15F3Fx7OrHcH1A4sPF5+JeTrrFuj22cjdFcQZ LoDjJvVwU/YDSVK0fbqpnyuWX7cs8jC1o08AbynCzF6xZrDzk4T+MCjZSMZktreX /Wez9muYa0FY+oFKtYyNDWrP9hk06VR7nWv4m3S6OpQHd0AD0y7Sm/uXuPcTWXJW z0UnV+kUhDGid5TjJ7Vv53Aq+UBhpCDixzRn+UPDngNOWmJiFl1n37z/f5OPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFdUMBrw5qxdowT/a6MCXdlT3PVcwHwYDVR0j BBgwFoAUuTdZsZ5MH4/7bp0eLmdOTjF9fpQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzYwZjA3OC04YTIwLTQ4ZDEtODJiOC1lMWY1MGExNTUyMDEvMC9COTM3NTlCMTlF NEMxRjhGRkI2RTlEMUUyRTY3NEU0RTMxN0Q3RTk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkzNzU5QjE5RTRDMUY4RkZCNkU5RDFFMkU2NzRFNEUzMTdE N0U5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM2MGYwNzgtOGEyMC00OGQxLTgy YjgtZTFmNTBhMTU1MjAxLzAvQjkzNzU5QjE5RTRDMUY4RkZCNkU5RDFFMkU2NzRF NEUzMTdEN0U5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjNEaPPyC4NKVqi/hdk/Pi7Ppep8+qEul7S V8s4z76+5Y3kvO0E4e1jXGXozkkb5wsPRYDI7qYkap+iIDjw2KBX47Xwn49NAS/8 eKQM+smqr6K3HuRwoWJOgVzpmNhV0o6rYo+uSfzd8ayLrI394OYbVOeYKXmvJkjj iDjPYUDK90koyVn5MBClGfRYN+BujKNkG01vBvIbaBmtfpf+xjzhDV3QE0lS6wmS kwAb+XaDeHFEU4mPnCdre6UCGHVU1vJEm5ayC48/cV9oyg0w6hDlNurCZdRWmU/B uF+maKCr89id0/B8S0iUNimc59J5yS2tBWlsih5trLhPshNBFWI= -----END CERTIFICATE-----Generated at Fri Sep 5 10:34:35 2025 by rpki-client