$ rpki-client -vvf repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft File: B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft (raw, json) Hash identifier: 9ZL6sHQk+4vfZ8qM5bi8RPmkKDKOoGWKEr5+sMK6+YA= Subject key identifier: 14:F6:C1:AC:EB:BE:C0:7F:99:75:3D:99:88:09:E8:C1:77:F4:C4:11 Authority key identifier: B9:14:C6:1A:5D:B1:C6:5E:66:CE:5A:F6:4C:3E:20:C2:01:96:2B:5B Certificate issuer: /CN=B914C61A5DB1C65E66CE5AF64C3E20C201962B5B Certificate serial: 129F4128A18BD01238F8D203E6323CA50AE63BB5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft Manifest number: B2 Signing time: Sun 07 Sep 2025 08:01:42 +0000 Manifest this update: Sun 07 Sep 2025 07:56:42 +0000 Manifest next update: Wed 10 Sep 2025 14:49:42 +0000 Files and hashes: 1: 3135372e31302e3137392e302f32342d3234203d3e20313532333436.roa (hash: I8nLPluTJWLYyGtu9yBeYoUlVfCol4rqRzuAbdB/G2g=) 2: B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.crl (hash: GVkCEl0kk9t7zAyqIIeN/Cw9EtrAgdkx6gdtuI7VaaY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.crl rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 14:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:9f:41:28:a1:8b:d0:12:38:f8:d2:03:e6:32:3c:a5:0a:e6:3b:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B914C61A5DB1C65E66CE5AF64C3E20C201962B5B Validity Not Before: Sep 7 07:56:42 2025 GMT Not After : Sep 10 14:49:42 2025 GMT Subject: CN=14F6C1ACEBBEC07F99753D998809E8C177F4C411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a6:3f:b4:5f:8c:ec:36:f7:80:df:19:54:35: d3:54:31:6e:49:d3:29:18:ea:b7:48:34:0f:22:e9: ce:b2:99:27:62:15:69:89:de:9e:a1:bf:79:22:a2: c1:6f:01:37:35:f8:48:a9:72:96:ec:41:10:f7:9f: b9:d8:4c:0a:65:43:37:f3:2f:19:85:aa:50:72:82: 55:3a:d1:c4:8f:46:bc:dd:36:da:d2:24:9b:fc:3c: a9:c2:a1:9e:df:a0:4f:68:db:38:5e:6d:0e:6f:9a: 4e:c4:ca:13:9c:83:3d:90:71:b1:47:ee:33:b8:d9: 80:ca:0d:d2:fd:1e:ad:ad:96:14:36:ad:aa:a0:38: ae:92:94:08:a2:23:09:d0:e8:2a:09:0e:76:fc:f6: 43:8f:8c:dd:dd:49:5b:3b:4e:dc:d0:6f:29:d6:73: 8d:dc:e4:7f:30:dd:34:f2:5d:1d:fd:52:91:77:5d: 1f:e4:46:48:a4:91:29:1b:5d:5c:05:9a:10:ec:1b: ed:9b:9f:2c:ff:1d:7b:4b:52:9c:a0:e5:46:da:fe: eb:e0:8a:09:46:f3:8a:e1:be:ce:5d:2c:d2:ac:20: 31:54:d7:17:ae:46:5e:cd:eb:f0:a5:bd:5d:1e:68: cc:e6:53:82:10:9d:59:67:c5:62:d1:84:1e:27:6b: f6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F6:C1:AC:EB:BE:C0:7F:99:75:3D:99:88:09:E8:C1:77:F4:C4:11 X509v3 Authority Key Identifier: keyid:B9:14:C6:1A:5D:B1:C6:5E:66:CE:5A:F6:4C:3E:20:C2:01:96:2B:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:6a:8a:37:10:a9:68:df:88:20:3d:84:a1:6d:02:a3:be:2b: b7:ad:c2:c7:00:eb:0e:b0:ad:b2:62:1f:49:5e:bc:4d:98:92: 1c:31:99:d8:61:71:5c:b5:49:47:52:5e:b9:f6:24:3e:34:7a: 15:7e:d3:2b:b0:f7:fc:9b:0a:5f:3b:24:36:40:e0:df:a4:b3: 43:d0:d3:cb:3e:33:f1:5c:d6:2f:3c:ee:6c:0d:6b:2f:a1:ce: 16:fa:5a:68:f4:29:32:a6:32:e7:b8:2a:e3:cb:ba:d0:42:f9: 76:10:2b:c6:83:23:b5:a7:32:2d:28:71:78:a2:42:4b:7e:6d: 7d:c4:17:bd:1a:52:fd:21:1c:95:28:74:9b:35:49:4b:92:71: 6a:c6:07:8d:06:e7:f1:65:ff:0d:4b:85:53:ca:bf:5a:62:fa: 84:fc:a6:7e:78:78:c5:a8:39:04:8b:10:0d:f3:0a:17:a0:7e: a9:17:02:18:ca:d1:a3:f2:aa:5d:83:63:ad:e1:51:72:9f:95: df:d7:07:cf:c5:56:5d:64:3e:42:e7:33:ce:6d:eb:20:0b:3e: 50:12:02:58:51:d9:48:9f:13:5e:bb:72:d2:9f:21:1b:53:64: e7:52:21:84:4e:74:77:25:90:38:6b:dc:e8:7e:b5:bf:5a:6f: b0:5d:cf:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEp9BKKGL0BI4+NID5jI8pQrmO7UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkxNEM2MUE1REIxQzY1RTY2Q0U1QUY2NEMzRTIwQzIw MTk2MkI1QjAeFw0yNTA5MDcwNzU2NDJaFw0yNTA5MTAxNDQ5NDJaMDMxMTAvBgNV BAMTKDE0RjZDMUFDRUJCRUMwN0Y5OTc1M0Q5OTg4MDlFOEMxNzdGNEM0MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfpj+0X4zsNveA3xlUNdNUMW5J 0ykY6rdINA8i6c6ymSdiFWmJ3p6hv3kiosFvATc1+EipcpbsQRD3n7nYTAplQzfz LxmFqlByglU60cSPRrzdNtrSJJv8PKnCoZ7foE9o2zhebQ5vmk7EyhOcgz2QcbFH 7jO42YDKDdL9Hq2tlhQ2raqgOK6SlAiiIwnQ6CoJDnb89kOPjN3dSVs7TtzQbynW c43c5H8w3TTyXR39UpF3XR/kRkikkSkbXVwFmhDsG+2bnyz/HXtLUpyg5Uba/uvg iglG84rhvs5dLNKsIDFU1xeuRl7N6/ClvV0eaMzmU4IQnVlnxWLRhB4na/aZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFPbBrOu+wH+ZdT2ZiAnowXf0xBEwHwYDVR0j BBgwFoAUuRTGGl2xxl5mzlr2TD4gwgGWK1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OGRjMTNmZi01YjEwLTQ0YTYtYjZmMy04ZjAzNWU1ODk3ZDgvMC9COTE0QzYxQTVE QjFDNjVFNjZDRTVBRjY0QzNFMjBDMjAxOTYyQjVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjkxNEM2MUE1REIxQzY1RTY2Q0U1QUY2NEMzRTIwQzIwMTk2 MkI1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYThkYzEzZmYtNWIxMC00NGE2LWI2 ZjMtOGYwMzVlNTg5N2Q4LzAvQjkxNEM2MUE1REIxQzY1RTY2Q0U1QUY2NEMzRTIw QzIwMTk2MkI1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpqijcQqWjfiCA9hKFtAqO+K7etwscA6w6w rbJiH0levE2YkhwxmdhhcVy1SUdSXrn2JD40ehV+0yuw9/ybCl87JDZA4N+ks0PQ 08s+M/Fc1i887mwNay+hzhb6Wmj0KTKmMue4KuPLutBC+XYQK8aDI7WnMi0ocXii Qkt+bX3EF70aUv0hHJUodJs1SUuScWrGB40G5/Fl/w1LhVPKv1pi+oT8pn54eMWo OQSLEA3zChegfqkXAhjK0aPyql2DY63hUXKfld/XB8/FVl1kPkLnM85t6yALPlAS AlhR2UifE167ctKfIRtTZOdSIYROdHclkDhr3Oh+tb9ab7Bdz6g= -----END CERTIFICATE-----Generated at Mon Sep 8 05:09:03 2025 by rpki-client