$ rpki-client -vvf repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.mft File: B94F48BCAB6D8B0A28B3955504975C159FAC076A.mft (raw, json) Hash identifier: +/Ik9Ry5p33QKau7RFRremHcpZGApHyeUy/u0j9eDfU= Subject key identifier: 4F:A9:52:C7:31:91:F1:10:B1:51:91:A6:65:AC:8E:28:97:1C:BA:CE Authority key identifier: B9:4F:48:BC:AB:6D:8B:0A:28:B3:95:55:04:97:5C:15:9F:AC:07:6A Certificate issuer: /CN=B94F48BCAB6D8B0A28B3955504975C159FAC076A Certificate serial: 3C3A5BB8ACABC3D4E02005F3B01E377A15B1E707 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B94F48BCAB6D8B0A28B3955504975C159FAC076A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.mft Manifest number: 0502 Signing time: Wed 03 Sep 2025 20:51:14 +0000 Manifest this update: Wed 03 Sep 2025 20:46:14 +0000 Manifest next update: Sat 06 Sep 2025 21:02:14 +0000 Files and hashes: 1: B94F48BCAB6D8B0A28B3955504975C159FAC076A.crl (hash: e9M/0lHp+iwhr9UQ5pnyyO7blJ33OP2xC5GG/h7IfbU=) 2: 3130332e3131392e3133392e302f32342d3234203d3e20313337333831.roa (hash: NXiX7VHYL2V/PG5eFGBukXkPCYGw4lMLoRT1ir2CDOE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.crl rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B94F48BCAB6D8B0A28B3955504975C159FAC076A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 21:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:3a:5b:b8:ac:ab:c3:d4:e0:20:05:f3:b0:1e:37:7a:15:b1:e7:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B94F48BCAB6D8B0A28B3955504975C159FAC076A Validity Not Before: Sep 3 20:46:14 2025 GMT Not After : Sep 6 21:02:14 2025 GMT Subject: CN=4FA952C73191F110B15191A665AC8E28971CBACE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f3:1d:b5:c3:0e:27:a9:56:ad:69:40:02:61: 69:d8:ca:b4:b0:99:04:c3:4b:a0:7e:a5:94:9c:df: 51:0e:45:3b:8e:f9:10:e0:76:85:6c:dc:b4:a6:eb: ef:6e:bb:7e:25:08:9b:ef:96:67:7a:6a:1a:90:f1: a4:06:c6:47:f9:5d:91:20:f6:7d:61:a5:08:f8:2f: ad:97:eb:9b:9d:64:bf:3d:b8:80:8a:f9:80:91:41: de:f9:c4:53:62:61:0e:55:c7:58:f9:78:5f:a8:4a: 7e:35:8c:96:4f:07:02:b6:1a:2f:dd:fb:99:df:af: 25:85:c7:a0:96:e2:fe:36:7a:7e:a2:58:2d:86:04: e0:76:bf:10:19:27:16:33:3c:36:f5:38:5d:0a:00: bf:48:af:f5:b3:3b:f6:aa:4c:ce:84:7f:e1:2c:26: 61:dc:6d:d4:eb:9a:0c:7a:20:a5:96:b9:e0:ff:84: 00:79:10:9b:8a:72:55:c0:76:c2:3c:5f:35:cc:43: dc:e3:ca:fb:8c:9d:a3:3b:df:17:6a:d3:6d:0d:9c: 01:57:62:67:9c:e0:c3:07:14:6c:1f:bf:95:93:d6: ec:1e:b4:ec:4c:be:e5:63:11:cf:c2:bd:ed:84:65: f2:3c:c2:eb:30:a0:46:41:50:64:56:66:b6:b4:06: 6c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A9:52:C7:31:91:F1:10:B1:51:91:A6:65:AC:8E:28:97:1C:BA:CE X509v3 Authority Key Identifier: keyid:B9:4F:48:BC:AB:6D:8B:0A:28:B3:95:55:04:97:5C:15:9F:AC:07:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B94F48BCAB6D8B0A28B3955504975C159FAC076A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:6e:11:d2:bb:e9:ed:eb:eb:2a:f8:2a:34:c8:43:0c:c8:84: cb:7a:68:a9:c7:88:2d:73:60:3b:00:fd:ab:dc:e2:d8:57:13: f8:1d:12:fd:3b:7f:54:4a:7a:cb:07:af:cd:61:61:68:d1:a1: 68:fb:6f:d4:22:5c:64:af:eb:c2:5b:b6:db:f1:f5:f7:95:9b: 8c:ac:e6:f4:a4:b0:46:e2:b9:48:5b:58:09:7f:7a:90:27:fe: af:a6:de:10:04:f6:ef:5c:be:6e:b3:7a:dc:8b:39:32:77:f0: 83:c1:72:4a:33:dd:b0:3d:52:1f:8b:5e:45:de:c9:98:f1:30: cc:36:5b:cb:80:88:13:3b:ed:d1:84:0f:d7:18:25:b0:e0:dc: fd:01:99:01:e2:34:fd:d4:e4:bf:11:77:70:9e:6c:7b:31:72: 41:a5:04:00:4b:d1:24:9e:ef:49:b5:f4:b8:af:85:37:c0:e3: e3:c9:0a:5e:d0:0e:d1:4b:cb:a8:4d:a5:12:40:1d:ac:dc:c9: 70:45:c6:e0:21:4f:5d:51:24:28:40:4e:23:0a:b9:fa:cf:9a: f8:5f:10:b1:b0:76:b3:ef:1c:4f:6b:2d:0d:6a:75:4d:5b:cc: 67:4e:a6:12:b5:d2:02:60:40:94:18:7b:a9:f6:53:f5:a2:f5: cd:f5:c9:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPDpbuKyrw9TgIAXzsB43ehWx5wcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk0RjQ4QkNBQjZEOEIwQTI4QjM5NTU1MDQ5NzVDMTU5 RkFDMDc2QTAeFw0yNTA5MDMyMDQ2MTRaFw0yNTA5MDYyMTAyMTRaMDMxMTAvBgNV BAMTKDRGQTk1MkM3MzE5MUYxMTBCMTUxOTFBNjY1QUM4RTI4OTcxQ0JBQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF8x21ww4nqVataUACYWnYyrSw mQTDS6B+pZSc31EORTuO+RDgdoVs3LSm6+9uu34lCJvvlmd6ahqQ8aQGxkf5XZEg 9n1hpQj4L62X65udZL89uICK+YCRQd75xFNiYQ5Vx1j5eF+oSn41jJZPBwK2Gi/d +5nfryWFx6CW4v42en6iWC2GBOB2vxAZJxYzPDb1OF0KAL9Ir/WzO/aqTM6Ef+Es JmHcbdTrmgx6IKWWueD/hAB5EJuKclXAdsI8XzXMQ9zjyvuMnaM73xdq020NnAFX Ymec4MMHFGwfv5WT1uwetOxMvuVjEc/Cve2EZfI8wuswoEZBUGRWZra0BmzHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT6lSxzGR8RCxUZGmZayOKJccus4wHwYDVR0j BBgwFoAUuU9IvKttiwoos5VVBJdcFZ+sB2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NjRjMzE1NS1jOGZmLTQyMDctYTJkYy01MWUwMDU1MzBiNTIvMC9COTRGNDhCQ0FC NkQ4QjBBMjhCMzk1NTUwNDk3NUMxNTlGQUMwNzZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjk0RjQ4QkNBQjZEOEIwQTI4QjM5NTU1MDQ5NzVDMTU5RkFD MDc2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODY0YzMxNTUtYzhmZi00MjA3LWEy ZGMtNTFlMDA1NTMwYjUyLzAvQjk0RjQ4QkNBQjZEOEIwQTI4QjM5NTU1MDQ5NzVD MTU5RkFDMDc2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACduEdK76e3r6yr4KjTIQwzIhMt6aKnHiC1z YDsA/avc4thXE/gdEv07f1RKessHr81hYWjRoWj7b9QiXGSv68Jbttvx9feVm4ys 5vSksEbiuUhbWAl/epAn/q+m3hAE9u9cvm6zetyLOTJ38IPBckoz3bA9Uh+LXkXe yZjxMMw2W8uAiBM77dGED9cYJbDg3P0BmQHiNP3U5L8Rd3CebHsxckGlBABL0SSe 70m19LivhTfA4+PJCl7QDtFLy6hNpRJAHazcyXBFxuAhT11RJChATiMKufrPmvhf ELGwdrPvHE9rLQ1qdU1bzGdOphK10gJgQJQYe6n2U/Wi9c31yTw= -----END CERTIFICATE-----Generated at Fri Sep 5 10:36:17 2025 by rpki-client