$ rpki-client -vvf repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft File: B1F0A7585ED1882783C6AF802B826607ABB92671.mft (raw, json) Hash identifier: eZKrHhwWP78F6cmpRZyoQf9GczG/BE9TNw6q0cwE1zY= Subject key identifier: 94:00:E9:1E:1C:F2:DE:A1:AB:AB:81:67:11:E5:B2:BD:2C:0A:F6:03 Authority key identifier: B1:F0:A7:58:5E:D1:88:27:83:C6:AF:80:2B:82:66:07:AB:B9:26:71 Certificate issuer: /CN=B1F0A7585ED1882783C6AF802B826607ABB92671 Certificate serial: 7975E15E6E05EBC9FB0D60336C74177870A95218 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft Manifest number: 9D Signing time: Thu 28 Aug 2025 09:52:22 +0000 Manifest this update: Thu 28 Aug 2025 09:47:22 +0000 Manifest next update: Sun 31 Aug 2025 12:34:22 +0000 Files and hashes: 1: 3136302e3138372e33372e302f32342d3234203d3e20313533333237.roa (hash: 2s2hT2RFc51pEXZc8X5XI589aylunZVhY45QaHon1Ao=) 2: 3136302e3138372e33362e302f32342d3234203d3e20313533333237.roa (hash: VqrWW5xSvGuewi8vAHFbQ7GGTuJaYVxqsL6i06spXCU=) 3: B1F0A7585ED1882783C6AF802B826607ABB92671.crl (hash: vDJQrCNbvfOfTeII2Lca1SINfgDUz+urGDGLUWxkhuM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.crl rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 12:34:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:75:e1:5e:6e:05:eb:c9:fb:0d:60:33:6c:74:17:78:70:a9:52:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1F0A7585ED1882783C6AF802B826607ABB92671 Validity Not Before: Aug 28 09:47:22 2025 GMT Not After : Aug 31 12:34:22 2025 GMT Subject: CN=9400E91E1CF2DEA1ABAB816711E5B2BD2C0AF603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4a:76:fd:57:19:ba:62:97:ff:74:53:d2:0e: 99:76:b9:0f:73:00:cc:d9:23:54:a0:57:c0:54:a2: d5:c3:36:20:38:03:de:76:6e:2d:40:16:8a:ae:84: e8:f4:32:b4:74:06:bb:d5:13:0a:0b:09:1f:ce:44: 6c:f2:f1:f0:ba:d8:48:d6:af:d6:19:61:ee:79:22: 8e:8e:35:2f:8d:58:60:88:fd:61:41:0a:3a:70:ea: c1:92:fd:8b:48:c0:0f:20:dc:90:11:6b:fa:19:8e: 63:e3:43:07:fd:8e:35:9e:5b:af:c5:43:10:10:35: 5c:75:d6:fc:18:4f:b6:9e:57:84:e7:59:9a:b7:79: 14:7e:c7:4d:c4:2a:e5:26:86:49:2c:c9:2d:5e:03: 76:d6:a8:49:9e:d8:40:bf:b8:80:79:96:02:33:1b: c0:e9:0f:2b:da:ae:e7:e9:27:5d:bd:7c:a4:9f:7d: 78:a1:85:78:76:10:ec:24:45:55:f2:8a:61:cb:92: 43:9b:19:53:9e:2c:6a:f9:f0:32:ab:0e:81:6d:70: 5d:a6:47:9b:80:83:17:18:38:c8:6c:9f:19:02:39: 8c:bd:e9:33:3c:e3:20:dc:f8:d1:a2:5c:84:3d:e6: f4:dd:b7:9d:d0:55:8c:22:ec:f2:0b:d7:4a:20:d5: 30:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:00:E9:1E:1C:F2:DE:A1:AB:AB:81:67:11:E5:B2:BD:2C:0A:F6:03 X509v3 Authority Key Identifier: keyid:B1:F0:A7:58:5E:D1:88:27:83:C6:AF:80:2B:82:66:07:AB:B9:26:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:a4:5c:50:80:38:c1:34:d4:92:af:11:5d:a8:9f:e2:a0:87: b5:15:62:b6:d8:ae:2b:08:e0:54:11:0d:f0:34:ec:e4:f2:17: c4:0b:cc:57:24:89:af:6d:2f:60:0a:ab:0d:ed:fb:f0:6c:70: 54:f9:f4:ac:d5:af:73:10:82:3c:ac:a7:29:07:a0:4f:ce:76: bf:7b:0f:a0:a2:11:19:8d:53:a6:6a:a7:16:2b:dd:de:1b:10: e0:64:7b:2c:19:b8:f1:5b:cb:11:ad:f8:93:75:65:ba:4e:8b: 3d:6b:16:e5:4d:70:d5:85:65:09:dd:be:aa:67:df:a1:42:36: 75:8f:a9:54:7a:fa:6e:67:89:6e:8e:7b:8c:11:7e:97:05:34: 9b:b9:28:3d:c9:9a:73:c5:1a:b7:b6:eb:e9:96:f2:b8:09:c8: ae:cb:14:78:39:a0:49:8f:4d:03:9b:5a:40:8a:97:91:c6:2b: fe:e1:6d:2d:3c:50:76:25:27:f2:c5:23:1c:09:86:da:f1:62: 4e:7c:36:b0:84:92:e7:49:ed:85:2f:46:67:18:02:62:ea:39: e8:f7:a7:3f:57:32:af:b5:a6:1b:67:0d:1f:d1:d7:6f:9b:40: 68:04:a3:9f:91:b0:a9:61:fc:f8:bd:4c:b6:30:a6:12:30:08: d7:d8:55:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeXXhXm4F68n7DWAzbHQXeHCpUhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2MDdB QkI5MjY3MTAeFw0yNTA4MjgwOTQ3MjJaFw0yNTA4MzExMjM0MjJaMDMxMTAvBgNV BAMTKDk0MDBFOTFFMUNGMkRFQTFBQkFCODE2NzExRTVCMkJEMkMwQUY2MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Snb9Vxm6Ypf/dFPSDpl2uQ9z AMzZI1SgV8BUotXDNiA4A952bi1AFoquhOj0MrR0BrvVEwoLCR/ORGzy8fC62EjW r9YZYe55Io6ONS+NWGCI/WFBCjpw6sGS/YtIwA8g3JARa/oZjmPjQwf9jjWeW6/F QxAQNVx11vwYT7aeV4TnWZq3eRR+x03EKuUmhkksyS1eA3bWqEme2EC/uIB5lgIz G8DpDyvarufpJ129fKSffXihhXh2EOwkRVXyimHLkkObGVOeLGr58DKrDoFtcF2m R5uAgxcYOMhsnxkCOYy96TM84yDc+NGiXIQ95vTdt53QVYwi7PIL10og1TDbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlADpHhzy3qGrq4FnEeWyvSwK9gMwHwYDVR0j BBgwFoAUsfCnWF7RiCeDxq+AK4JmB6u5JnEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODkxMzg5My01ZjY0LTRhNWUtYThkMi01ZDUxZWJkZTQ3M2YvMC9CMUYwQTc1ODVF RDE4ODI3ODNDNkFGODAyQjgyNjYwN0FCQjkyNjcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2MDdBQkI5 MjY3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzg5MTM4OTMtNWY2NC00YTVlLWE4 ZDItNWQ1MWViZGU0NzNmLzAvQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2 MDdBQkI5MjY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJGkXFCAOME01JKvEV2on+Kgh7UVYrbYrisI 4FQRDfA07OTyF8QLzFckia9tL2AKqw3t+/BscFT59KzVr3MQgjyspykHoE/Odr97 D6CiERmNU6ZqpxYr3d4bEOBkeywZuPFbyxGt+JN1ZbpOiz1rFuVNcNWFZQndvqpn 36FCNnWPqVR6+m5niW6Oe4wRfpcFNJu5KD3JmnPFGre26+mW8rgJyK7LFHg5oEmP TQObWkCKl5HGK/7hbS08UHYlJ/LFIxwJhtrxYk58NrCEkudJ7YUvRmcYAmLqOej3 pz9XMq+1phtnDR/R12+bQGgEo5+RsKlh/Pi9TLYwphIwCNfYVcc= -----END CERTIFICATE-----Generated at Sat Aug 30 13:16:56 2025 by rpki-client