$ rpki-client -vvf repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft File: B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft (raw, json) Hash identifier: n+2mxSTT51b5XsIDOKQJhZ8TOZAAAM/lbWsL7Dn+AoA= Subject key identifier: 6E:EF:CF:17:24:F9:2A:30:30:69:D9:43:4B:69:EE:79:16:E8:98:F1 Authority key identifier: B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16 Certificate issuer: /CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416 Certificate serial: 7C5743BDAF3ECD2875B5B366FAF55DAE2F74C145 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft Manifest number: 0215 Signing time: Thu 04 Sep 2025 01:10:49 +0000 Manifest this update: Thu 04 Sep 2025 01:05:49 +0000 Manifest next update: Sun 07 Sep 2025 09:42:49 +0000 Files and hashes: 1: 3130332e36382e3133372e302f32342d3234203d3e203338353131.roa (hash: JVkCLbeZDJdwzZ2v3iR22hauCUbtGIEz6OcbZ/e1uz8=) 2: 3130332e36382e3133362e302f32332d3233203d3e203338353131.roa (hash: YKEJ6xXEXwkPYNOCuZQFtX9Ji/2UDJQxeQnbNUcl++Q=) 3: 323030313a6466333a313230303a3a2f34382d3438203d3e20313335343535.roa (hash: PbwEzJXRFcDlg8qq7i8GVSnaGAPkcyZUmZy35AgEFf0=) 4: 3130332e36382e3133362e302f32332d3234203d3e20313335343535.roa (hash: 3shwJ2AKcESaufbVwJ1tBPOkyd6LqDrGvkFRzpot0c8=) 5: 3130332e36382e3133372e302f32342d3234203d3e20313335343535.roa (hash: B/Oe9y1prQPdwN9dHWS523CLyIs4euOM6VNMTv5PS6I=) 6: 3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa (hash: Vqh39P+3nWLH6GpYM+8FhU68z1hzASxU3wAlgsuT274=) 7: 3130332e36382e3133362e302f32342d3234203d3e203338353131.roa (hash: /3OF733rpM3jdRT3EkKeOCDNT6qwcGILSfVrlznc0RM=) 8: B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl (hash: 1GZPeBVCrObnu6gYKO6oUyywhUNVp8U9mJ4qNAOhBHo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 09:42:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:57:43:bd:af:3e:cd:28:75:b5:b3:66:fa:f5:5d:ae:2f:74:c1:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416 Validity Not Before: Sep 4 01:05:49 2025 GMT Not After : Sep 7 09:42:49 2025 GMT Subject: CN=6EEFCF1724F92A303069D9434B69EE7916E898F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6e:3f:88:4d:e5:c9:d3:c4:0e:46:44:19:e8: b2:0d:f5:71:0f:40:52:c1:11:40:97:a2:89:2c:8f: d4:13:c5:9e:24:3c:f6:d5:e0:71:fe:f5:f6:f9:96: 77:d9:ea:5f:13:f8:d6:10:95:66:0e:ff:9d:56:60: e5:94:d0:ce:fd:ff:62:6e:53:96:ab:90:b1:82:7c: f3:3a:a4:aa:8d:c0:9a:a6:7f:1c:e0:db:b8:de:66: d2:45:56:10:c1:ac:ff:70:7d:bf:0e:02:93:ad:a8: 62:68:cb:02:02:b0:25:25:de:6d:94:c5:93:a4:cb: 36:ab:12:ce:18:b4:6e:2f:cc:fd:22:5b:cb:59:ae: 1a:53:b0:24:f2:11:0f:c1:f2:83:87:8d:77:79:0e: 8a:c4:36:fc:72:f2:d8:db:f9:b6:d9:a9:62:38:9c: 10:ed:61:5e:fa:68:a8:6f:4e:2a:32:d6:f1:db:23: 33:54:38:8c:f1:ad:fa:70:6f:5c:05:bb:d5:e1:be: 96:61:be:a5:8a:e0:9d:20:53:b4:2c:df:b4:2b:7f: e4:d7:0c:4e:df:ab:9f:ed:15:52:ab:19:46:88:d7: b0:a0:76:62:70:7b:37:d1:e3:0c:25:7b:0f:97:57: f1:fb:4c:12:bb:19:91:d7:98:35:79:a5:2e:85:94: 6b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:EF:CF:17:24:F9:2A:30:30:69:D9:43:4B:69:EE:79:16:E8:98:F1 X509v3 Authority Key Identifier: keyid:B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:6b:56:3d:cc:6f:e2:7f:70:cc:3e:2a:91:d4:e4:47:a7:a9: b8:30:f6:7f:76:6d:30:0d:e2:08:05:3b:e4:bc:67:e3:45:fc: e6:15:3b:ac:c1:88:6b:eb:68:5b:08:dd:5e:52:22:cd:0c:ea: a9:10:bd:9c:47:02:32:87:a9:d1:32:4b:f9:c2:37:93:ea:82: af:8b:be:4e:e6:cd:6c:ec:87:bf:77:8c:b3:54:1b:de:99:d6: b7:9e:9f:e1:f9:cd:6b:3f:50:24:94:51:b4:dd:91:5c:74:d1: 12:7e:00:2e:93:c8:77:89:e9:e1:80:88:b4:41:35:18:f1:31: 8b:26:89:29:c6:59:c0:b1:0e:4d:21:a5:38:36:db:95:3d:35: e5:91:23:4b:a2:b9:c4:d4:aa:a0:02:2c:e9:f1:26:e3:5b:88: a1:2f:b0:3d:ab:e7:f9:70:06:2d:47:11:2b:b4:2d:fb:99:29: fc:92:3c:1d:11:45:80:9e:a0:94:3a:c9:b0:5f:8b:34:78:c3: 25:90:e5:c3:59:b6:92:be:6e:90:66:f2:de:ee:be:13:4c:d4: bf:ce:0c:58:99:92:20:c1:d9:c8:08:48:00:f5:3b:b9:1c:5d: 82:e0:88:7c:34:f1:cb:2a:c0:32:74:dd:70:0e:98:68:27:b3: 47:92:60:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfFdDva8+zSh1tbNm+vVdri90wUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJDMThFMTFDODUzMEJERjRFRTMzM0Y1REVCRDBCMDU1 RjlEQTQxNjAeFw0yNTA5MDQwMTA1NDlaFw0yNTA5MDcwOTQyNDlaMDMxMTAvBgNV BAMTKDZFRUZDRjE3MjRGOTJBMzAzMDY5RDk0MzRCNjlFRTc5MTZFODk4RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRbj+ITeXJ08QORkQZ6LIN9XEP QFLBEUCXooksj9QTxZ4kPPbV4HH+9fb5lnfZ6l8T+NYQlWYO/51WYOWU0M79/2Ju U5arkLGCfPM6pKqNwJqmfxzg27jeZtJFVhDBrP9wfb8OApOtqGJoywICsCUl3m2U xZOkyzarEs4YtG4vzP0iW8tZrhpTsCTyEQ/B8oOHjXd5DorENvxy8tjb+bbZqWI4 nBDtYV76aKhvTioy1vHbIzNUOIzxrfpwb1wFu9XhvpZhvqWK4J0gU7Qs37Qrf+TX DE7fq5/tFVKrGUaI17CgdmJwezfR4wwlew+XV/H7TBK7GZHXmDV5pS6FlGvhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbu/PFyT5KjAwadlDS2nueRbomPEwHwYDVR0j BBgwFoAUssGOEchTC99O4zP13r0LBV+dpBYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 M2RjMWIwNS0yYTY5LTQ1YjAtOGM0NC02MjY3NzIyNzZiZDkvMC9CMkMxOEUxMUM4 NTMwQkRGNEVFMzMzRjVERUJEMEIwNTVGOURBNDE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJDMThFMTFDODUzMEJERjRFRTMzM0Y1REVCRDBCMDU1RjlE QTQxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTNkYzFiMDUtMmE2OS00NWIwLThj NDQtNjI2NzcyMjc2YmQ5LzAvQjJDMThFMTFDODUzMEJERjRFRTMzM0Y1REVCRDBC MDU1RjlEQTQxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKRrVj3Mb+J/cMw+KpHU5Eenqbgw9n92bTAN 4ggFO+S8Z+NF/OYVO6zBiGvraFsI3V5SIs0M6qkQvZxHAjKHqdEyS/nCN5Pqgq+L vk7mzWzsh793jLNUG96Z1reen+H5zWs/UCSUUbTdkVx00RJ+AC6TyHeJ6eGAiLRB NRjxMYsmiSnGWcCxDk0hpTg225U9NeWRI0uiucTUqqACLOnxJuNbiKEvsD2r5/lw Bi1HESu0LfuZKfySPB0RRYCeoJQ6ybBfizR4wyWQ5cNZtpK+bpBm8t7uvhNM1L/O DFiZkiDB2cgISAD1O7kcXYLgiHw08csqwDJ03XAOmGgns0eSYGo= -----END CERTIFICATE-----Generated at Fri Sep 5 10:34:28 2025 by rpki-client