$ rpki-client -vvf repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft File: B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft (raw, json) Hash identifier: pCYPqwQHCjOoh8FKsSHTEpjHfKcO9pXaCGxBIJWJPAU= Subject key identifier: 05:4A:38:0D:00:FC:A1:BB:5B:C8:35:19:A6:8B:F6:D7:FD:45:4E:62 Authority key identifier: B0:73:4A:32:D1:3A:96:FC:B3:FD:F9:82:C2:EE:C5:00:15:04:11:CA Certificate issuer: /CN=B0734A32D13A96FCB3FDF982C2EEC500150411CA Certificate serial: 2FB41FDEE704FB66176BEA67DC49832872ED5A53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft Manifest number: 0211 Signing time: Thu 04 Sep 2025 08:21:10 +0000 Manifest this update: Thu 04 Sep 2025 08:16:10 +0000 Manifest next update: Sun 07 Sep 2025 18:52:10 +0000 Files and hashes: 1: B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl (hash: 4y1n7FbOOpeESozS5QMjxqF1F65ZcN2ouITLgn0B6B0=) 2: 3130332e3138372e3232362e302f32332d3234203d3e20313439373238.roa (hash: fcX6dDB/6jZr5p1excLhOSLezwfpNz/DNvOt6VHyTLo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 18:52:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:b4:1f:de:e7:04:fb:66:17:6b:ea:67:dc:49:83:28:72:ed:5a:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0734A32D13A96FCB3FDF982C2EEC500150411CA Validity Not Before: Sep 4 08:16:10 2025 GMT Not After : Sep 7 18:52:10 2025 GMT Subject: CN=054A380D00FCA1BB5BC83519A68BF6D7FD454E62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:04:eb:14:39:6f:ca:9a:a3:f3:cb:52:fb:82: b5:c7:7c:39:a2:4b:2f:74:44:4e:6a:5a:e5:bd:3d: d1:df:77:42:f6:97:5a:b3:e8:07:34:6c:da:03:05: 96:b9:5a:2f:a6:a4:13:de:dd:8d:6d:8f:41:bb:ae: b0:1a:7f:34:1e:60:64:78:85:5c:f1:4d:83:0c:ec: 1f:b6:79:4b:54:7e:8f:32:1e:5a:43:79:3e:4a:a8: 58:55:ce:1a:40:cd:e3:11:9a:af:5e:54:79:e2:94: f7:9b:54:e6:7d:17:65:3c:05:8d:58:00:a4:bc:1a: 72:5b:95:33:49:16:4c:e7:6d:35:5b:d3:a2:22:cb: 14:7a:41:80:09:1e:45:f2:34:8a:3a:16:5e:02:f6: eb:02:ce:bb:93:f7:f0:8c:28:3e:9e:59:72:31:ec: de:61:0d:45:b4:19:92:30:31:11:9f:23:c8:4c:3b: 92:a4:d5:7a:47:96:58:35:f6:cd:5e:f3:d5:79:27: 85:65:f3:8e:d4:d7:97:1a:3c:f6:e0:7d:d8:fe:ef: 44:ff:96:0f:85:fc:f9:1e:74:4d:33:7b:73:fc:11: 32:ee:fe:c0:93:15:e3:1f:24:0a:fa:5b:e3:28:8f: c4:4d:43:92:fe:44:de:6d:a6:28:b6:be:a0:44:8f: 93:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:4A:38:0D:00:FC:A1:BB:5B:C8:35:19:A6:8B:F6:D7:FD:45:4E:62 X509v3 Authority Key Identifier: keyid:B0:73:4A:32:D1:3A:96:FC:B3:FD:F9:82:C2:EE:C5:00:15:04:11:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:85:7e:d7:d4:63:aa:b7:37:73:e5:ff:63:28:a8:df:0b:3e: e7:4d:9c:20:bd:23:9d:0c:63:07:a5:93:53:ec:67:2d:e5:93: 36:51:bc:f6:50:34:c3:b0:15:61:75:bf:41:a7:27:52:ec:9f: 02:10:c7:5f:c6:66:74:4a:ca:2b:19:06:38:b3:b8:32:84:55: ea:14:24:5b:cb:ae:3a:5b:6a:7c:92:04:56:28:bb:25:80:2b: 56:38:be:47:cc:ad:eb:c5:6d:30:ae:1b:0e:80:ae:92:ab:d3: 50:44:3f:1a:e1:05:b9:1a:9c:29:dd:c8:51:c6:56:f5:5e:b7: 12:de:54:cb:29:d6:b1:9e:59:91:27:de:d0:90:6e:b6:42:27: af:9a:38:db:82:7f:d2:ae:d9:e8:fc:f4:7f:f8:8d:9e:65:3a: 96:ff:9f:bf:60:91:9e:56:e4:49:30:86:9b:bd:4e:48:44:ed: 30:f3:9d:e9:f0:74:a5:28:b9:ff:96:de:54:dd:6e:20:37:23: f2:cd:85:78:d5:b6:a6:40:c8:bf:7b:f8:4d:ae:5a:83:39:89: 36:b7:54:47:3c:56:02:69:21:3a:aa:7c:a8:96:b9:81:f1:6e: 3a:df:6b:3c:90:75:bf:ee:df:ce:d4:2f:3e:81:e2:a0:6b:c0: ba:af:7b:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL7Qf3ucE+2YXa+pn3EmDKHLtWlMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1MDAx NTA0MTFDQTAeFw0yNTA5MDQwODE2MTBaFw0yNTA5MDcxODUyMTBaMDMxMTAvBgNV BAMTKDA1NEEzODBEMDBGQ0ExQkI1QkM4MzUxOUE2OEJGNkQ3RkQ0NTRFNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5BOsUOW/KmqPzy1L7grXHfDmi Sy90RE5qWuW9PdHfd0L2l1qz6Ac0bNoDBZa5Wi+mpBPe3Y1tj0G7rrAafzQeYGR4 hVzxTYMM7B+2eUtUfo8yHlpDeT5KqFhVzhpAzeMRmq9eVHnilPebVOZ9F2U8BY1Y AKS8GnJblTNJFkznbTVb06IiyxR6QYAJHkXyNIo6Fl4C9usCzruT9/CMKD6eWXIx 7N5hDUW0GZIwMRGfI8hMO5Kk1XpHllg19s1e89V5J4Vl847U15caPPbgfdj+70T/ lg+F/PkedE0ze3P8ETLu/sCTFeMfJAr6W+Moj8RNQ5L+RN5tpii2vqBEj5MnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBUo4DQD8obtbyDUZpov21/1FTmIwHwYDVR0j BBgwFoAUsHNKMtE6lvyz/fmCwu7FABUEEcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjMwOTdmMC0zOTc4LTQ5Y2UtYjY5Yy00YjIwYjRkY2ZiN2UvMC9CMDczNEEzMkQx M0E5NkZDQjNGREY5ODJDMkVFQzUwMDE1MDQxMUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1MDAxNTA0 MTFDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzMDk3ZjAtMzk3OC00OWNlLWI2 OWMtNGIyMGI0ZGNmYjdlLzAvQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1 MDAxNTA0MTFDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABKFftfUY6q3N3Pl/2MoqN8LPudNnCC9I50M Ywelk1PsZy3lkzZRvPZQNMOwFWF1v0GnJ1LsnwIQx1/GZnRKyisZBjizuDKEVeoU JFvLrjpbanySBFYouyWAK1Y4vkfMrevFbTCuGw6ArpKr01BEPxrhBbkanCndyFHG VvVetxLeVMsp1rGeWZEn3tCQbrZCJ6+aONuCf9Ku2ej89H/4jZ5lOpb/n79gkZ5W 5Ekwhpu9TkhE7TDznenwdKUouf+W3lTdbiA3I/LNhXjVtqZAyL97+E2uWoM5iTa3 VEc8VgJpITqqfKiWuYHxbjrfazyQdb/u387ULz6B4qBrwLqve4s= -----END CERTIFICATE-----Generated at Fri Sep 5 10:14:56 2025 by rpki-client