$ rpki-client -vvf repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft File: B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft (raw, json) Hash identifier: yUtMoz6vcxpnGYJ9YGjLIldJ1/pErRxowC2ZxsdzbK4= Subject key identifier: 73:E0:BC:26:53:24:DF:72:3C:4F:DD:33:6A:EB:75:05:43:C4:53:65 Authority key identifier: B2:07:7B:9B:AF:0B:F3:E5:FC:B8:45:13:B1:D7:44:5E:30:CE:65:82 Certificate issuer: /CN=B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582 Certificate serial: 69D64966E48B1ACE5668016BD30AB9C474BD122D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft Manifest number: 047B Signing time: Sat 06 Sep 2025 17:52:04 +0000 Manifest this update: Sat 06 Sep 2025 17:47:04 +0000 Manifest next update: Tue 09 Sep 2025 19:07:04 +0000 Files and hashes: 1: B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl (hash: d3x/oGUH0C2aat0LtDlR91XBkiUdVGIP/G3G39qaHlM=) 2: 3130332e3135372e362e302f32342d3234203d3e20313431313036.roa (hash: 2XQOc628Et0oqO8CO0VRKDq3/7F6VNJ+Q07NK/QPZuc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 19:07:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:d6:49:66:e4:8b:1a:ce:56:68:01:6b:d3:0a:b9:c4:74:bd:12:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582 Validity Not Before: Sep 6 17:47:04 2025 GMT Not After : Sep 9 19:07:04 2025 GMT Subject: CN=73E0BC265324DF723C4FDD336AEB750543C45365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:88:db:d5:47:80:05:dc:97:6b:cc:4f:cd:12: 79:46:6c:99:89:b0:9b:3d:35:9d:cf:d8:11:2d:8d: 2f:d3:ae:12:f7:56:f2:21:65:35:5a:09:f1:78:ce: 9d:ec:30:d6:d8:c3:c9:e2:23:ff:eb:16:eb:1f:d7: 1f:8e:e4:16:32:56:48:51:3e:9c:14:50:6a:11:a9: ab:32:c1:e1:c6:ef:a2:f9:06:c7:f4:6a:0c:bd:a0: 38:33:55:10:2f:a1:8a:e3:fb:b8:74:6f:f0:94:13: 1f:da:e9:f3:af:e7:43:89:13:5f:38:ff:a7:f2:12: a9:c1:84:5d:69:37:c8:0c:d2:94:4e:c2:6e:f9:fa: 59:0c:75:95:53:2a:1e:4a:a1:95:6e:02:71:8e:ef: 9a:3a:0a:cb:c8:99:c1:a5:a3:56:0a:8c:2d:2b:38: a5:ee:31:96:0d:60:3a:44:c4:eb:ba:48:b9:40:17: 52:47:06:1b:57:de:9e:2c:e9:f6:0f:ff:bc:d6:fd: bb:80:2d:19:e7:bc:00:aa:5e:97:f2:6f:5b:10:39: 53:24:aa:1e:76:3e:90:3f:20:a9:57:28:c8:75:0b: 47:28:7f:3e:cb:59:8d:18:e8:a7:bf:60:cd:ba:cb: 24:7e:34:ea:b3:fe:22:67:15:82:e0:c1:dc:90:a8: 49:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E0:BC:26:53:24:DF:72:3C:4F:DD:33:6A:EB:75:05:43:C4:53:65 X509v3 Authority Key Identifier: keyid:B2:07:7B:9B:AF:0B:F3:E5:FC:B8:45:13:B1:D7:44:5E:30:CE:65:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:52:ca:f4:d9:f8:dc:2f:31:8f:5b:87:45:08:ed:b8:97:5b: de:82:37:2b:af:4e:a6:04:24:9d:df:96:55:4f:4a:1f:ec:ef: e6:d8:56:55:36:c8:75:86:f1:75:6b:33:d5:0e:51:e7:6d:d4: bb:33:ad:49:64:68:b6:5b:08:c6:b6:72:ec:3a:bd:34:de:d4: 7d:3d:14:5b:c3:f2:ba:0a:03:b7:71:e3:97:dd:af:36:7f:e2: ff:f9:ff:0d:a7:50:2a:41:71:7d:1f:f0:7c:dd:0d:a0:b1:d4: 87:72:0b:40:39:88:e8:b9:37:5d:f0:91:33:58:02:12:19:35: e9:9c:f1:89:bc:0f:c0:42:fc:65:e1:d0:23:d8:9d:71:1a:48: 7d:f7:20:3c:98:f3:69:b5:19:bc:f4:8e:1c:8e:f8:0f:62:70: f1:3d:82:70:4d:9e:90:e0:32:72:90:9d:d9:5d:ee:15:9e:37: 8b:77:46:68:8b:9d:f2:38:3e:16:51:5c:53:a1:9b:e7:fc:d4: 53:ea:89:75:af:90:fe:1e:b9:e5:db:7b:41:23:36:f4:c6:1c: 6d:9c:53:f5:8d:20:37:9d:46:58:5a:d9:31:e6:4e:0e:af:9e: c0:7e:e1:18:fb:c4:10:04:07:e3:59:a2:c4:b2:61:ee:64:ba: 9f:1d:b6:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUadZJZuSLGs5WaAFr0wq5xHS9Ei0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0NUUz MENFNjU4MjAeFw0yNTA5MDYxNzQ3MDRaFw0yNTA5MDkxOTA3MDRaMDMxMTAvBgNV BAMTKDczRTBCQzI2NTMyNERGNzIzQzRGREQzMzZBRUI3NTA1NDNDNDUzNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJiNvVR4AF3JdrzE/NEnlGbJmJ sJs9NZ3P2BEtjS/TrhL3VvIhZTVaCfF4zp3sMNbYw8niI//rFusf1x+O5BYyVkhR PpwUUGoRqasyweHG76L5Bsf0agy9oDgzVRAvoYrj+7h0b/CUEx/a6fOv50OJE184 /6fyEqnBhF1pN8gM0pROwm75+lkMdZVTKh5KoZVuAnGO75o6CsvImcGlo1YKjC0r OKXuMZYNYDpExOu6SLlAF1JHBhtX3p4s6fYP/7zW/buALRnnvACqXpfyb1sQOVMk qh52PpA/IKlXKMh1C0cofz7LWY0Y6Ke/YM26yyR+NOqz/iJnFYLgwdyQqEmPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc+C8JlMk33I8T90zaut1BUPEU2UwHwYDVR0j BBgwFoAUsgd7m68L8+X8uEUTsddEXjDOZYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWRkNGYxNi01NzBlLTRjOGMtYTk5Mi1kYjg5ZWEzYmFkMzYvMC9CMjA3N0I5QkFG MEJGM0U1RkNCODQ1MTNCMUQ3NDQ1RTMwQ0U2NTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0NUUzMENF NjU4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVkZDRmMTYtNTcwZS00YzhjLWE5 OTItZGI4OWVhM2JhZDM2LzAvQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0 NUUzMENFNjU4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJlSyvTZ+NwvMY9bh0UI7biXW96CNyuvTqYE JJ3fllVPSh/s7+bYVlU2yHWG8XVrM9UOUedt1LszrUlkaLZbCMa2cuw6vTTe1H09 FFvD8roKA7dx45fdrzZ/4v/5/w2nUCpBcX0f8HzdDaCx1IdyC0A5iOi5N13wkTNY AhIZNemc8Ym8D8BC/GXh0CPYnXEaSH33IDyY82m1Gbz0jhyO+A9icPE9gnBNnpDg MnKQndld7hWeN4t3RmiLnfI4PhZRXFOhm+f81FPqiXWvkP4eueXbe0EjNvTGHG2c U/WNIDedRlha2THmTg6vnsB+4Rj7xBAEB+NZosSyYe5kup8dto0= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:22 2025 by rpki-client