$ rpki-client -vvf repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft File: B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft (raw, json) Hash identifier: R/pFV3X49Ofk/UHT9BLBEPVBFClEhWdXypsBSnOfKpc= Subject key identifier: 23:A3:65:5D:09:D2:CA:A6:65:C0:29:3E:01:52:7C:43:A9:01:96:82 Authority key identifier: B0:D7:26:41:9F:BF:35:E7:C6:EB:43:7E:23:8F:3D:2A:3F:06:3B:4C Certificate issuer: /CN=B0D726419FBF35E7C6EB437E238F3D2A3F063B4C Certificate serial: 5FD71DDDECBBBF8F3CE972D22623B6F3FC16EF5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft Manifest number: B6 Signing time: Fri 29 Aug 2025 13:00:05 +0000 Manifest this update: Fri 29 Aug 2025 12:55:05 +0000 Manifest next update: Mon 01 Sep 2025 21:34:05 +0000 Files and hashes: 1: 3136302e32352e35382e302f32332d3234203d3e20313532383333.roa (hash: 7IuV0NhxXlp455EXe3FaAoXVfJrAOl6E2yru0xUglkI=) 2: B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.crl (hash: 7zvHBJ86P1KSKHn4fPJS6C5xEhLoG52TaXyD8KjRk+Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.crl rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Sep 2025 21:34:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:d7:1d:dd:ec:bb:bf:8f:3c:e9:72:d2:26:23:b6:f3:fc:16:ef:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0D726419FBF35E7C6EB437E238F3D2A3F063B4C Validity Not Before: Aug 29 12:55:05 2025 GMT Not After : Sep 1 21:34:05 2025 GMT Subject: CN=23A3655D09D2CAA665C0293E01527C43A9019682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:73:ff:cf:af:8c:e1:ed:cd:31:b4:29:55:71: 45:74:70:44:c8:be:ff:7a:e8:43:d1:af:1e:e2:9c: 21:1e:a4:7d:3f:97:d0:b6:28:d8:23:9e:47:8c:56: d5:fd:e9:07:a9:48:5d:6b:12:8d:9f:a7:92:27:d7: 9b:57:8b:d1:43:57:c0:13:d8:f8:75:ad:78:07:62: 66:02:4a:17:23:48:aa:7a:c3:d8:44:c7:4a:c5:a4: d3:e5:d7:cd:a8:e3:f8:a3:34:80:f9:7e:1f:cb:5b: 01:02:e2:60:ae:55:a7:a4:93:77:e5:8f:c3:9b:ba: bb:c7:aa:3f:a6:73:34:1f:ce:3d:8a:a9:bc:fd:9e: 57:a5:7d:92:4a:47:26:fe:0c:8e:19:f2:af:90:71: f6:1c:b4:ce:83:d3:06:fe:27:0a:af:e2:71:5b:f5: fe:58:36:f0:df:d1:cd:2e:da:dc:cf:c5:1b:be:a1: 70:82:96:89:b1:17:1b:fc:28:ff:f1:5d:4b:7d:d9: f5:fd:1c:f5:0c:2b:52:4a:e4:11:d0:9f:b9:5b:07: 10:fb:b3:a7:c7:48:2b:f3:c2:95:d0:05:b9:fb:de: 9e:39:e1:8a:2f:ee:07:a0:ab:f6:21:87:d7:9c:29: d5:64:0b:95:e1:70:d6:cb:36:a7:0f:2d:c8:43:0a: f0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A3:65:5D:09:D2:CA:A6:65:C0:29:3E:01:52:7C:43:A9:01:96:82 X509v3 Authority Key Identifier: keyid:B0:D7:26:41:9F:BF:35:E7:C6:EB:43:7E:23:8F:3D:2A:3F:06:3B:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:76:3e:68:76:a2:9a:9f:90:38:1d:16:af:e5:dc:4f:6a:27: 9e:45:4d:af:4d:dd:06:27:60:7b:d0:58:74:a1:30:77:3c:05: 41:be:1c:e4:b6:6f:08:1d:94:04:8e:7a:63:67:a8:60:96:8f: 41:54:04:9f:a9:56:15:48:6a:77:62:c0:6c:14:e0:cf:2b:00: 02:8d:ed:59:34:48:2b:a9:36:fe:94:9e:2f:3a:09:80:3d:ea: 6c:ae:b7:8d:f3:7f:7d:3a:f2:60:32:c7:fc:ca:92:ce:68:71: 05:6d:61:8e:a4:79:8a:11:48:75:8f:31:ff:78:69:30:a1:02: 62:81:1e:8c:b3:ae:8d:f3:7b:98:a6:02:62:05:3b:4a:11:7d: 4f:69:ef:fa:61:66:f9:22:3e:d9:8a:5b:82:36:6e:12:a3:70: ff:ea:a5:2e:ee:6d:92:7d:c0:a5:15:bb:b3:da:03:58:83:d7: 44:c8:cf:2e:b2:a7:92:69:a0:c3:1e:cc:af:a4:5a:47:4c:a9: 29:18:64:f1:58:d8:38:48:db:0d:78:3f:5d:a3:69:e6:83:40: 7a:19:13:b9:47:d5:a2:25:36:b1:ad:90:3c:99:3d:35:08:f2: fb:d9:e8:ad:91:b9:da:bf:ed:63:a5:3d:a9:1a:96:f2:c2:43: c8:71:60:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX9cd3ey7v4886XLSJiO28/wW714wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBENzI2NDE5RkJGMzVFN0M2RUI0MzdFMjM4RjNEMkEz RjA2M0I0QzAeFw0yNTA4MjkxMjU1MDVaFw0yNTA5MDEyMTM0MDVaMDMxMTAvBgNV BAMTKDIzQTM2NTVEMDlEMkNBQTY2NUMwMjkzRTAxNTI3QzQzQTkwMTk2ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYc//Pr4zh7c0xtClVcUV0cETI vv966EPRrx7inCEepH0/l9C2KNgjnkeMVtX96QepSF1rEo2fp5In15tXi9FDV8AT 2Ph1rXgHYmYCShcjSKp6w9hEx0rFpNPl182o4/ijNID5fh/LWwEC4mCuVaekk3fl j8OburvHqj+mczQfzj2Kqbz9nlelfZJKRyb+DI4Z8q+QcfYctM6D0wb+Jwqv4nFb 9f5YNvDf0c0u2tzPxRu+oXCClomxFxv8KP/xXUt92fX9HPUMK1JK5BHQn7lbBxD7 s6fHSCvzwpXQBbn73p454Yov7gegq/Yhh9ecKdVkC5XhcNbLNqcPLchDCvDDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI6NlXQnSyqZlwCk+AVJ8Q6kBloIwHwYDVR0j BBgwFoAUsNcmQZ+/NefG60N+I489Kj8GO0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MmRhYjQ2YS0wODVlLTQ0MzItOTgzMy03MWI4ZGIxNDRkOTQvMC9CMEQ3MjY0MTlG QkYzNUU3QzZFQjQzN0UyMzhGM0QyQTNGMDYzQjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjBENzI2NDE5RkJGMzVFN0M2RUI0MzdFMjM4RjNEMkEzRjA2 M0I0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDJkYWI0NmEtMDg1ZS00NDMyLTk4 MzMtNzFiOGRiMTQ0ZDk0LzAvQjBENzI2NDE5RkJGMzVFN0M2RUI0MzdFMjM4RjNE MkEzRjA2M0I0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALV2Pmh2opqfkDgdFq/l3E9qJ55FTa9N3QYn YHvQWHShMHc8BUG+HOS2bwgdlASOemNnqGCWj0FUBJ+pVhVIandiwGwU4M8rAAKN 7Vk0SCupNv6Uni86CYA96myut43zf3068mAyx/zKks5ocQVtYY6keYoRSHWPMf94 aTChAmKBHoyzro3ze5imAmIFO0oRfU9p7/phZvkiPtmKW4I2bhKjcP/qpS7ubZJ9 wKUVu7PaA1iD10TIzy6yp5JpoMMezK+kWkdMqSkYZPFY2DhI2w14P12jaeaDQHoZ E7lH1aIlNrGtkDyZPTUI8vvZ6K2Rudq/7WOlPakalvLCQ8hxYBo= -----END CERTIFICATE-----Generated at Sun Aug 31 11:41:08 2025 by rpki-client