$ rpki-client -vvf repo-rpki.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/0BB4E952789AC502FA0CFB95C2E03F434497BFE3.mft File: 0BB4E952789AC502FA0CFB95C2E03F434497BFE3.mft (raw, json) Hash identifier: mB9I7tfNC9gkgBQ2/HdxddFtPObF8wAoGKcqvfqrg/g= Subject key identifier: 64:B1:59:FC:64:1C:14:49:7C:87:B6:BE:E6:25:7A:0D:99:36:60:7B Authority key identifier: 0B:B4:E9:52:78:9A:C5:02:FA:0C:FB:95:C2:E0:3F:43:44:97:BF:E3 Certificate issuer: /CN=0BB4E952789AC502FA0CFB95C2E03F434497BFE3 Certificate serial: 15E5A1E408152C7BFBA2BF3DBA1B3D0C5B560750 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB4E952789AC502FA0CFB95C2E03F434497BFE3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/0BB4E952789AC502FA0CFB95C2E03F434497BFE3.mft Manifest number: B5 Signing time: Sun 07 Sep 2025 14:52:02 +0000 Manifest this update: Sun 07 Sep 2025 14:47:02 +0000 Manifest next update: Thu 11 Sep 2025 00:54:02 +0000 Files and hashes: 1: 3130332e3134382e38382e302f32332d3233203d3e20313430343231.roa (hash: l6is4dO0R0PbZ70dLKCH7MsIvztrQYbYg8s+N5j55/w=) 2: 323030313a6466323a633938303a3a2f34382d3438203d3e20313430343231.roa (hash: S9qtO6NNat29VwWXnPO9Ad1pn0XLAWnDz3QkqSTjTbI=) 3: 3130332e3134382e38382e302f32342d3234203d3e20313430343231.roa (hash: neEFe0w5kAvbktE6GbOUZcC2jhb5+07V2Dgm04kOOSQ=) 4: 0BB4E952789AC502FA0CFB95C2E03F434497BFE3.crl (hash: tfRhzbtHKy7c+HjGOdDU9oVmPQ3MEATkpit8/LYarrw=) 5: 3130332e3134382e38392e302f32342d3234203d3e20313430343231.roa (hash: TZoglv4gVSEGVdYtRZ4lgIJlzz7UT43dp4O+n8rkNNY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/0BB4E952789AC502FA0CFB95C2E03F434497BFE3.crl rsync://repo-rpki.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/0BB4E952789AC502FA0CFB95C2E03F434497BFE3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB4E952789AC502FA0CFB95C2E03F434497BFE3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 00:54:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:e5:a1:e4:08:15:2c:7b:fb:a2:bf:3d:ba:1b:3d:0c:5b:56:07:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BB4E952789AC502FA0CFB95C2E03F434497BFE3 Validity Not Before: Sep 7 14:47:02 2025 GMT Not After : Sep 11 00:54:02 2025 GMT Subject: CN=64B159FC641C14497C87B6BEE6257A0D9936607B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d3:2c:36:1f:05:d4:7d:6c:d7:99:7f:e8:19: ca:a3:30:69:ed:1b:85:18:6d:e3:fa:de:d3:6e:54: b8:fc:41:4f:2f:bf:e7:c8:92:57:9d:5e:0d:63:07: 79:6b:6f:25:c7:16:28:47:c5:07:95:e6:6d:cc:ea: 8e:61:3b:df:19:05:30:c0:04:4f:6b:52:52:91:c2: 8b:b6:06:42:44:fa:b9:b1:23:ba:fe:27:66:1d:8b: 0a:f6:71:b5:19:c7:de:fc:85:87:99:31:c4:84:3f: fa:10:65:c6:5e:11:0c:88:cd:ca:d2:22:ed:af:62: 72:87:6b:79:1c:5d:b9:f6:1a:28:0c:7b:a5:32:a0: 4b:cc:c1:c6:f9:d2:5f:6c:9c:a6:76:34:a2:27:00: fd:14:cf:dc:cf:a8:1a:c5:53:17:1a:fb:8f:42:c0: 25:f3:bd:27:93:b0:43:88:4e:a1:e9:a2:b5:79:9a: c3:4b:1c:fd:d5:35:72:2b:e3:b1:5c:9e:10:c9:b1: b9:1c:27:b7:8a:37:68:1e:e6:63:bb:b4:bf:f6:54: 79:f9:89:0e:c8:21:39:ce:12:bf:15:7e:2e:9e:bf: ea:89:43:a1:de:73:19:5d:bd:7a:ec:fa:c3:3a:28: 45:d3:18:f9:09:f0:5c:09:fa:8d:6f:21:33:53:dd: e5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B1:59:FC:64:1C:14:49:7C:87:B6:BE:E6:25:7A:0D:99:36:60:7B X509v3 Authority Key Identifier: keyid:0B:B4:E9:52:78:9A:C5:02:FA:0C:FB:95:C2:E0:3F:43:44:97:BF:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/0BB4E952789AC502FA0CFB95C2E03F434497BFE3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB4E952789AC502FA0CFB95C2E03F434497BFE3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b72eca4-73ad-4e0b-a6a6-7a65698b73be/0/0BB4E952789AC502FA0CFB95C2E03F434497BFE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:2d:37:c6:14:91:32:3d:91:98:94:34:0e:58:40:21:09:2c: f2:b6:05:0a:96:78:07:62:fd:53:66:92:ae:9c:98:36:89:66: 7c:9d:8c:6b:ca:f8:56:71:a6:c0:ed:f1:4a:b7:d1:ac:2a:7d: 60:fc:bb:8e:5d:e2:b1:ce:c0:24:49:e9:d5:1f:f5:a2:92:89: b5:dd:8f:57:5c:0b:51:26:20:cc:cb:61:b0:b3:e0:54:9f:ef: b1:6c:18:c7:a1:f6:e0:58:91:d1:c1:51:a5:c6:29:76:b2:d4: 1e:85:fd:47:df:4f:16:f1:07:93:1c:86:2a:70:68:ec:2b:d5: 99:3e:c7:79:f9:b0:60:e5:59:fd:9d:77:bd:f1:3a:0a:82:a9: b8:06:74:cc:3d:cb:aa:5e:59:aa:62:b2:f7:ea:b7:90:95:8d: ed:cf:e9:1b:a2:fe:1f:f2:fb:c2:e1:32:d3:27:42:c8:3a:1c: 43:1b:c7:d6:fc:39:6d:f8:e0:c1:24:a7:f6:6b:18:20:36:58: 2d:62:af:60:39:8f:1c:cb:7d:6f:14:69:01:64:26:95:d7:82: 07:45:3e:79:47:53:10:f7:f9:4b:de:03:7e:56:fe:84:63:2f: 27:5e:18:40:a4:7c:46:6b:f2:94:d1:d5:ae:db:55:9c:b0:49: e4:b2:d3:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFeWh5AgVLHv7or89uhs9DFtWB1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJCNEU5NTI3ODlBQzUwMkZBMENGQjk1QzJFMDNGNDM0 NDk3QkZFMzAeFw0yNTA5MDcxNDQ3MDJaFw0yNTA5MTEwMDU0MDJaMDMxMTAvBgNV BAMTKDY0QjE1OUZDNjQxQzE0NDk3Qzg3QjZCRUU2MjU3QTBEOTkzNjYwN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT0yw2HwXUfWzXmX/oGcqjMGnt G4UYbeP63tNuVLj8QU8vv+fIkledXg1jB3lrbyXHFihHxQeV5m3M6o5hO98ZBTDA BE9rUlKRwou2BkJE+rmxI7r+J2Ydiwr2cbUZx978hYeZMcSEP/oQZcZeEQyIzcrS Iu2vYnKHa3kcXbn2GigMe6UyoEvMwcb50l9snKZ2NKInAP0Uz9zPqBrFUxca+49C wCXzvSeTsEOITqHporV5msNLHP3VNXIr47FcnhDJsbkcJ7eKN2ge5mO7tL/2VHn5 iQ7IITnOEr8Vfi6ev+qJQ6HecxldvXrs+sM6KEXTGPkJ8FwJ+o1vITNT3eXjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZLFZ/GQcFEl8h7a+5iV6DZk2YHswHwYDVR0j BBgwFoAUC7TpUniaxQL6DPuVwuA/Q0SXv+MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjcyZWNhNC03M2FkLTRlMGItYTZhNi03YTY1Njk4YjczYmUvMC8wQkI0RTk1Mjc4 OUFDNTAyRkEwQ0ZCOTVDMkUwM0Y0MzQ0OTdCRkUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEJCNEU5NTI3ODlBQzUwMkZBMENGQjk1QzJFMDNGNDM0NDk3 QkZFMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGI3MmVjYTQtNzNhZC00ZTBiLWE2 YTYtN2E2NTY5OGI3M2JlLzAvMEJCNEU5NTI3ODlBQzUwMkZBMENGQjk1QzJFMDNG NDM0NDk3QkZFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADctN8YUkTI9kZiUNA5YQCEJLPK2BQqWeAdi /VNmkq6cmDaJZnydjGvK+FZxpsDt8Uq30awqfWD8u45d4rHOwCRJ6dUf9aKSibXd j1dcC1EmIMzLYbCz4FSf77FsGMeh9uBYkdHBUaXGKXay1B6F/UffTxbxB5Mchipw aOwr1Zk+x3n5sGDlWf2dd73xOgqCqbgGdMw9y6peWapisvfqt5CVje3P6Rui/h/y +8LhMtMnQsg6HEMbx9b8OW344MEkp/ZrGCA2WC1ir2A5jxzLfW8UaQFkJpXXggdF PnlHUxD3+UveA35W/oRjLydeGECkfEZr8pTR1a7bVZywSeSy06w= -----END CERTIFICATE-----Generated at Mon Sep 8 13:54:48 2025 by rpki-client