$ rpki-client -vvf repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft File: B392381083372148D0977D0066CFF38FD5A32CDB.mft (raw, json) Hash identifier: d1adROVw5WE6FK1pp/7D1ZvaF+q5DCl3zdRD3pXfxJw= Subject key identifier: A8:15:1A:9B:9F:22:35:83:66:46:F0:6C:76:E2:EE:57:C7:97:66:1A Authority key identifier: B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB Certificate issuer: /CN=B392381083372148D0977D0066CFF38FD5A32CDB Certificate serial: 59AA717527B2F2ADD78A7D2B71CA96FE19C98F00 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft Manifest number: 0230 Signing time: Sat 06 Sep 2025 21:11:56 +0000 Manifest this update: Sat 06 Sep 2025 21:06:56 +0000 Manifest next update: Tue 09 Sep 2025 22:28:56 +0000 Files and hashes: 1: 3130332e3138352e38322e302f32332d3234203d3e203538383230.roa (hash: HSEFfxxLTR9pPfTqUIYx4lI4vavTZEpGUjc26Y26XRA=) 2: B392381083372148D0977D0066CFF38FD5A32CDB.crl (hash: dBbRol2BwpPVwUBSR36aDf89Y8hyK3MSP8zEhjOeNKM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.crl rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 22:28:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:aa:71:75:27:b2:f2:ad:d7:8a:7d:2b:71:ca:96:fe:19:c9:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B392381083372148D0977D0066CFF38FD5A32CDB Validity Not Before: Sep 6 21:06:56 2025 GMT Not After : Sep 9 22:28:56 2025 GMT Subject: CN=A8151A9B9F2235836646F06C76E2EE57C797661A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:99:8b:b4:93:78:2f:75:d0:51:3c:85:1c:d1: 88:9d:a2:a5:ac:db:d6:b3:97:4a:80:ce:4b:3e:f0: 01:3d:55:41:3e:34:0b:4d:73:0f:02:6b:be:59:2b: 20:11:27:23:43:40:7f:8d:5e:b4:23:9b:d9:f9:ce: f6:aa:39:ee:3e:94:b4:c5:d0:72:5b:5c:07:25:de: 8f:da:04:be:88:41:2f:db:75:9d:30:3a:26:92:e0: 61:a0:60:91:2a:01:be:46:68:b1:cb:ff:39:02:64: 67:be:fd:84:62:98:57:24:73:02:e6:ca:c8:b7:02: 0d:c8:c6:45:27:20:2a:b5:9f:76:bb:f3:f2:ae:6b: df:ee:00:07:58:e9:fc:0a:59:fc:c8:47:e3:f4:81: cf:24:4c:dc:78:96:a7:cb:89:4e:40:b9:be:39:98: f7:53:43:df:36:5d:73:0b:f9:b3:d4:b6:e1:20:19: 28:b0:33:d3:9e:aa:20:f0:df:a1:7a:09:80:dc:f1: 16:5c:f9:4e:73:a9:eb:3c:8d:03:17:8c:f4:8a:49: e5:1f:d5:a7:1d:50:fd:fe:72:08:99:ab:ea:be:b9: 7d:2b:95:db:28:79:c6:e8:56:05:76:8f:21:66:59: 82:38:6c:f1:0f:7e:48:7e:eb:0a:e7:4b:44:99:ed: 45:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:15:1A:9B:9F:22:35:83:66:46:F0:6C:76:E2:EE:57:C7:97:66:1A X509v3 Authority Key Identifier: keyid:B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:bf:32:c6:6c:ee:2e:87:4c:c6:7f:d2:a6:c2:b1:40:c3:0d: 93:f6:8b:ee:2d:c6:21:90:13:9b:20:52:dd:77:e2:5b:9d:48: 4d:d8:0a:57:d8:03:34:9e:32:fd:11:8a:e4:c6:9d:e8:67:2c: fc:62:9e:12:81:d9:a6:d0:53:cf:1a:a2:ab:76:2f:75:30:59: 0a:56:f4:3a:24:ec:54:f1:52:df:65:7d:09:53:37:38:a1:90: 08:6b:8e:85:59:4f:df:ae:4b:00:00:c4:e2:41:8b:6c:35:f1: 2d:0e:2d:d2:32:ff:b4:8e:ad:f1:b7:73:8d:35:d1:9e:f6:86: 96:b1:bd:53:5d:c1:28:ad:ab:ec:16:45:b5:0f:2f:1f:78:3e: 49:e1:e7:ed:42:a0:66:39:5e:ce:a0:06:ba:ad:26:3b:14:f2: ff:95:3d:f2:d0:10:66:83:31:05:51:2e:9b:fa:f6:75:f1:51: ab:6b:e5:74:7d:9a:2a:b3:85:70:b9:9f:4a:3f:62:ff:9a:ae: 94:65:92:d2:47:f8:b3:62:77:34:f7:6e:22:de:08:e8:cb:dc: d3:43:fc:4a:89:2e:78:29:5e:e3:5d:91:36:2b:17:39:76:65: 61:26:b9:48:1d:54:b7:ce:e3:e9:ff:43:8c:0c:67:48:a3:34: 14:fd:19:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWapxdSey8q3Xin0rccqW/hnJjwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM5MjM4MTA4MzM3MjE0OEQwOTc3RDAwNjZDRkYzOEZE NUEzMkNEQjAeFw0yNTA5MDYyMTA2NTZaFw0yNTA5MDkyMjI4NTZaMDMxMTAvBgNV BAMTKEE4MTUxQTlCOUYyMjM1ODM2NjQ2RjA2Qzc2RTJFRTU3Qzc5NzY2MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWmYu0k3gvddBRPIUc0YidoqWs 29azl0qAzks+8AE9VUE+NAtNcw8Ca75ZKyARJyNDQH+NXrQjm9n5zvaqOe4+lLTF 0HJbXAcl3o/aBL6IQS/bdZ0wOiaS4GGgYJEqAb5GaLHL/zkCZGe+/YRimFckcwLm ysi3Ag3IxkUnICq1n3a78/Kua9/uAAdY6fwKWfzIR+P0gc8kTNx4lqfLiU5Aub45 mPdTQ982XXML+bPUtuEgGSiwM9OeqiDw36F6CYDc8RZc+U5zqes8jQMXjPSKSeUf 1acdUP3+cgiZq+q+uX0rldsoecboVgV2jyFmWYI4bPEPfkh+6wrnS0SZ7UXJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqBUam58iNYNmRvBsduLuV8eXZhowHwYDVR0j BBgwFoAUs5I4EIM3IUjQl30AZs/zj9WjLNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmYyY2YwMy1mOWY5LTRiY2EtOGMyYy02MDczMjgwZGZlYTgvMC9CMzkyMzgxMDgz MzcyMTQ4RDA5NzdEMDA2NkNGRjM4RkQ1QTMyQ0RCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjM5MjM4MTA4MzM3MjE0OEQwOTc3RDAwNjZDRkYzOEZENUEz MkNEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJmMmNmMDMtZjlmOS00YmNhLThj MmMtNjA3MzI4MGRmZWE4LzAvQjM5MjM4MTA4MzM3MjE0OEQwOTc3RDAwNjZDRkYz OEZENUEzMkNEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJW/MsZs7i6HTMZ/0qbCsUDDDZP2i+4txiGQ E5sgUt134ludSE3YClfYAzSeMv0RiuTGnehnLPxinhKB2abQU88aoqt2L3UwWQpW 9Dok7FTxUt9lfQlTNzihkAhrjoVZT9+uSwAAxOJBi2w18S0OLdIy/7SOrfG3c401 0Z72hpaxvVNdwSitq+wWRbUPLx94Pknh5+1CoGY5Xs6gBrqtJjsU8v+VPfLQEGaD MQVRLpv69nXxUatr5XR9miqzhXC5n0o/Yv+arpRlktJH+LNidzT3biLeCOjL3NND /EqJLngpXuNdkTYrFzl2ZWEmuUgdVLfO4+n/Q4wMZ0ijNBT9Gcw= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:06 2025 by rpki-client