$ rpki-client -vvf repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft File: B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft (raw, json) Hash identifier: F8X1f9/fx83DzY7F+FFgPGH5csejYNSEEwLti8f9Fmk= Subject key identifier: 75:13:16:B7:8E:66:1C:02:8E:EE:D1:BD:C0:5C:0C:27:71:64:78:32 Authority key identifier: B0:B4:D0:A5:FD:4E:58:D8:05:34:97:7B:02:7C:8B:C6:82:22:07:0F Certificate issuer: /CN=B0B4D0A5FD4E58D80534977B027C8BC68222070F Certificate serial: 23393527636384F758F28C73C77C38AC25099C82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft Manifest number: 037F Signing time: Wed 03 Sep 2025 10:11:22 +0000 Manifest this update: Wed 03 Sep 2025 10:06:22 +0000 Manifest next update: Sat 06 Sep 2025 15:02:22 +0000 Files and hashes: 1: 3130332e3136342e35362e302f32332d3233203d3e20313431393033.roa (hash: lmDaoh03D9rTDqDSAuHtSlsBls3g0dB3bSo5aCMqbVU=) 2: 3130332e3136342e35362e302f32342d3234203d3e20313431393033.roa (hash: BZ7IxyZHQ1xzeEJa2EscxaRyrE0WSeLJOeD3hu5iHH8=) 3: B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl (hash: E2fBryRmuCUGtYkxmfaC0hpSGIc4zV+KAMbQntzLmII=) 4: 3130332e3136342e35372e302f32342d3234203d3e20313431393033.roa (hash: QHTzNtrA62lCbap5pnLy6Afc1/3RNfZE7wu74tOUQBg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 15:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:39:35:27:63:63:84:f7:58:f2:8c:73:c7:7c:38:ac:25:09:9c:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0B4D0A5FD4E58D80534977B027C8BC68222070F Validity Not Before: Sep 3 10:06:22 2025 GMT Not After : Sep 6 15:02:22 2025 GMT Subject: CN=751316B78E661C028EEED1BDC05C0C2771647832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0a:4c:cf:52:c9:7e:5c:d7:44:26:df:d5:1c: 99:6f:ac:bf:b0:06:c4:85:5f:9b:6d:07:36:21:8c: 88:c9:19:28:5e:a7:aa:65:f6:9a:8d:70:79:81:b3: 49:92:22:e6:6f:2b:7a:3b:c4:4e:e6:ec:25:89:35: b5:45:51:cc:0e:ab:ae:f6:b9:9b:a7:0d:67:51:87: c3:b4:f6:b0:b6:87:ee:61:f8:ee:97:d4:88:65:cd: 22:43:14:d5:cd:bd:d7:70:e9:79:a9:86:33:e2:8b: be:91:74:1f:5e:99:ab:4e:6b:88:cf:0b:96:a5:f9: d2:2c:9c:14:e6:4b:51:98:eb:6d:82:8e:d1:5d:23: a3:57:b6:a9:46:32:6f:7d:e4:bb:a8:b8:31:5e:91: b1:41:d1:76:e5:ec:25:43:36:f8:df:71:b8:ea:a9: cb:45:42:5f:f3:14:c8:c5:af:e6:d2:56:0d:6e:e4: 3d:2a:03:b8:fe:f7:dc:f6:29:9d:cc:40:6b:23:40: 45:d3:bc:ed:c3:4b:f0:bf:eb:28:c9:4b:ab:3b:e6: f7:b8:d4:84:85:c8:fd:16:8d:c5:fb:be:7d:48:38: cf:3b:87:20:9a:ba:7b:d4:ac:73:4b:92:ff:f6:43: dd:c0:b6:fb:ec:8c:f7:fd:d1:76:d3:00:68:46:2f: 06:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:13:16:B7:8E:66:1C:02:8E:EE:D1:BD:C0:5C:0C:27:71:64:78:32 X509v3 Authority Key Identifier: keyid:B0:B4:D0:A5:FD:4E:58:D8:05:34:97:7B:02:7C:8B:C6:82:22:07:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:cc:93:d8:ab:00:ad:98:dc:6a:2f:ec:c3:75:9e:1a:e0:22: 77:b5:33:23:cb:a7:57:f5:a5:72:33:c7:95:f3:02:4b:87:6b: ec:83:a7:5d:25:9a:2b:c7:b6:48:6f:4c:6b:da:7d:bc:60:2f: 26:c7:de:4f:ab:fe:ed:f0:e3:a9:15:6b:63:32:9f:54:af:06: 1c:61:4a:2c:85:67:66:91:c8:e7:23:aa:4b:c8:8e:b8:25:2f: e1:c6:0b:43:b4:fd:86:7f:9a:82:d7:23:46:1b:f8:8a:b7:6b: ed:aa:f9:67:fb:1d:d9:62:cc:b2:10:c7:92:ea:58:fc:3d:05: 97:35:49:96:20:a0:7c:6d:a5:b0:e5:e9:49:05:49:c4:cd:dc: 62:be:ba:82:9f:53:5d:a9:3c:cd:09:9f:ad:27:66:b6:c5:1a: 7c:d6:7a:4a:f5:ba:fb:4a:c5:fe:69:98:3f:9f:ad:da:c7:db: 12:5c:2b:8c:b9:be:ad:aa:86:2e:03:03:2b:01:64:b6:be:1b: 4b:b2:4e:2a:6f:7a:30:65:96:16:21:ad:d9:b6:be:fe:1a:c0: 35:f3:34:4c:1d:6c:21:37:8c:f4:88:d8:68:56:db:47:f3:ee: c6:c8:6d:0c:5b:66:2f:24:02:a8:49:29:ed:00:a5:92:a1:e6: 82:9c:60:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIzk1J2NjhPdY8oxzx3w4rCUJnIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBCNEQwQTVGRDRFNThEODA1MzQ5NzdCMDI3QzhCQzY4 MjIyMDcwRjAeFw0yNTA5MDMxMDA2MjJaFw0yNTA5MDYxNTAyMjJaMDMxMTAvBgNV BAMTKDc1MTMxNkI3OEU2NjFDMDI4RUVFRDFCREMwNUMwQzI3NzE2NDc4MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4CkzPUsl+XNdEJt/VHJlvrL+w BsSFX5ttBzYhjIjJGShep6pl9pqNcHmBs0mSIuZvK3o7xE7m7CWJNbVFUcwOq672 uZunDWdRh8O09rC2h+5h+O6X1IhlzSJDFNXNvddw6XmphjPii76RdB9ematOa4jP C5al+dIsnBTmS1GY622CjtFdI6NXtqlGMm995LuouDFekbFB0Xbl7CVDNvjfcbjq qctFQl/zFMjFr+bSVg1u5D0qA7j+99z2KZ3MQGsjQEXTvO3DS/C/6yjJS6s75ve4 1ISFyP0WjcX7vn1IOM87hyCaunvUrHNLkv/2Q93AtvvsjPf90XbTAGhGLwbNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdRMWt45mHAKO7tG9wFwMJ3FkeDIwHwYDVR0j BBgwFoAUsLTQpf1OWNgFNJd7AnyLxoIiBw8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2NkNTExZi1hZmZmLTRmZWMtODcyNC1kNDExOWY4OTFkZjIvMC9CMEI0RDBBNUZE NEU1OEQ4MDUzNDk3N0IwMjdDOEJDNjgyMjIwNzBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjBCNEQwQTVGRDRFNThEODA1MzQ5NzdCMDI3QzhCQzY4MjIy MDcwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdjZDUxMWYtYWZmZi00ZmVjLTg3 MjQtZDQxMTlmODkxZGYyLzAvQjBCNEQwQTVGRDRFNThEODA1MzQ5NzdCMDI3QzhC QzY4MjIyMDcwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADTMk9irAK2Y3Gov7MN1nhrgIne1MyPLp1f1 pXIzx5XzAkuHa+yDp10lmivHtkhvTGvafbxgLybH3k+r/u3w46kVa2Myn1SvBhxh SiyFZ2aRyOcjqkvIjrglL+HGC0O0/YZ/moLXI0Yb+Iq3a+2q+Wf7HdlizLIQx5Lq WPw9BZc1SZYgoHxtpbDl6UkFScTN3GK+uoKfU12pPM0Jn60nZrbFGnzWekr1uvtK xf5pmD+frdrH2xJcK4y5vq2qhi4DAysBZLa+G0uyTipvejBllhYhrdm2vv4awDXz NEwdbCE3jPSI2GhW20fz7sbIbQxbZi8kAqhJKe0ApZKh5oKcYDk= -----END CERTIFICATE-----Generated at Fri Sep 5 10:31:52 2025 by rpki-client