$ rpki-client -vvf repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft File: B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft (raw, json) Hash identifier: Ghm3iYUi+2HyYcRQaPkF4i3p64OdDLezkc0hjwkfQv4= Subject key identifier: 66:7A:07:DE:27:4B:93:75:D1:F8:62:A9:4C:A4:51:3F:8D:AF:25:09 Authority key identifier: B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7 Certificate issuer: /CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7 Certificate serial: 0DAE9FBE1C9A804F2C81AC6139B7B7D6CB17A2D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft Manifest number: 0192 Signing time: Sat 06 Sep 2025 02:50:36 +0000 Manifest this update: Sat 06 Sep 2025 02:45:36 +0000 Manifest next update: Tue 09 Sep 2025 11:18:36 +0000 Files and hashes: 1: 3130332e3230392e3133312e302f32342d3234203d3e20313333333535.roa (hash: j+U4AErtYzwumrbJ7yEuFWr2i7wA+4c75xZyRtRhbQ4=) 2: B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl (hash: dWPVk2JPK7NToxb05aJha0qEAQ51NWc0319tw9FBz98=) 3: 3130332e3138352e3139372e302f32342d3234203d3e20313333333535.roa (hash: PjJ5xaEmVECnvYiFxtFmdeDestY/+54rJNs+3F7mqcY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 11:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ae:9f:be:1c:9a:80:4f:2c:81:ac:61:39:b7:b7:d6:cb:17:a2:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7 Validity Not Before: Sep 6 02:45:36 2025 GMT Not After : Sep 9 11:18:36 2025 GMT Subject: CN=667A07DE274B9375D1F862A94CA4513F8DAF2509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e6:fc:ca:fe:bb:6b:7e:53:47:05:52:11:6a: f0:82:f5:ee:24:c6:15:0f:71:60:16:23:f5:37:77: b5:d9:91:52:de:3e:2a:42:29:2c:2f:7e:7e:08:35: d9:67:15:9c:6d:d5:34:f8:86:a4:70:02:80:bf:9f: 83:9f:cc:49:73:c2:0e:73:aa:fd:28:e8:86:40:45: b0:25:eb:35:18:dc:1e:bf:59:41:f2:37:71:ad:fc: 53:e1:69:45:45:e5:37:b7:95:84:06:f2:94:e8:9b: fb:71:5a:65:c5:96:61:9f:89:4f:62:2f:64:d6:f0: 12:3f:90:ac:6f:01:d2:e0:f2:7f:2f:e8:7d:af:2e: f1:db:23:0f:f5:da:ff:31:b5:ad:ff:44:b9:eb:9c: d3:71:58:ff:bb:15:4a:a2:d9:45:b8:6e:35:af:ef: a9:fd:25:54:57:db:d3:e7:b9:30:d2:b7:8b:5f:13: 4c:01:75:9b:88:b6:df:dd:a1:40:ef:74:16:67:bb: 15:58:3b:23:2a:83:d2:d6:ce:c3:cf:25:4c:b8:70: f8:bc:ad:4d:2f:f9:8e:51:cb:c8:94:31:b4:0a:85: 64:bc:cb:5a:60:f7:52:d6:f4:a3:9c:c4:a4:72:ac: 9f:7d:1b:34:4b:0f:91:58:fe:6f:67:ee:98:85:81: f1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:7A:07:DE:27:4B:93:75:D1:F8:62:A9:4C:A4:51:3F:8D:AF:25:09 X509v3 Authority Key Identifier: keyid:B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:3c:7b:7b:45:ee:59:63:70:0a:c1:64:37:1c:77:83:14:96: 17:21:90:df:6c:25:b9:61:c9:bd:4e:25:b2:d0:f1:c3:ad:ea: 57:66:5a:1d:4b:dc:c0:8f:68:05:f2:78:08:9f:3a:06:ff:05: d9:75:6d:11:fc:84:f6:c8:ad:37:1a:20:36:0e:d8:77:af:e6: 1b:46:7c:9f:d7:d4:55:ca:f4:b3:7a:4e:62:97:46:72:01:d3: cc:7c:2b:b9:93:1a:a3:db:ec:14:54:7c:b4:a9:04:ac:88:00: 03:d6:9c:52:1a:09:c6:bb:bd:bd:b8:71:af:b7:c5:87:ab:7a: b7:de:87:c0:d1:af:18:7d:0d:85:30:4e:2f:8a:27:8b:da:33: 77:61:63:45:ba:87:e6:c3:14:af:1f:3f:4e:64:03:8d:1c:e4: 85:86:f2:14:50:bb:2c:75:4e:f2:af:8a:e6:a0:2d:15:f8:a2: 6c:30:b1:71:4a:6b:f4:f5:aa:57:47:24:14:e2:19:db:1c:16: 30:6f:2e:5a:5a:2d:60:b1:97:bb:bf:f8:cd:df:c6:3d:bc:28: 6d:9d:bc:93:7f:30:a8:f2:bc:91:cf:bf:10:60:9f:ba:a8:c5: de:3c:d8:15:89:67:17:4d:c3:c1:34:4c:ab:32:d0:c3:16:95: d8:d9:04:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDa6fvhyagE8sgaxhObe31ssXotUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYwQUYz QTgxRkZGNzAeFw0yNTA5MDYwMjQ1MzZaFw0yNTA5MDkxMTE4MzZaMDMxMTAvBgNV BAMTKDY2N0EwN0RFMjc0QjkzNzVEMUY4NjJBOTRDQTQ1MTNGOERBRjI1MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS5vzK/rtrflNHBVIRavCC9e4k xhUPcWAWI/U3d7XZkVLePipCKSwvfn4INdlnFZxt1TT4hqRwAoC/n4OfzElzwg5z qv0o6IZARbAl6zUY3B6/WUHyN3Gt/FPhaUVF5Te3lYQG8pTom/txWmXFlmGfiU9i L2TW8BI/kKxvAdLg8n8v6H2vLvHbIw/12v8xta3/RLnrnNNxWP+7FUqi2UW4bjWv 76n9JVRX29PnuTDSt4tfE0wBdZuItt/doUDvdBZnuxVYOyMqg9LWzsPPJUy4cPi8 rU0v+Y5Ry8iUMbQKhWS8y1pg91LW9KOcxKRyrJ99GzRLD5FY/m9n7piFgfFvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZnoH3idLk3XR+GKpTKRRP42vJQkwHwYDVR0j BBgwFoAUub62DNYiTUHzM6B+GCDwrzqB//cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MWY4N2Y1YS1mNmY5LTQ2OGQtODk1ZS0zMTQ0ODdmNWUyNWUvMC9COUJFQjYwQ0Q2 MjI0RDQxRjMzM0EwN0UxODIwRjBBRjNBODFGRkY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYwQUYzQTgx RkZGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjFmODdmNWEtZjZmOS00NjhkLTg5 NWUtMzE0NDg3ZjVlMjVlLzAvQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYw QUYzQTgxRkZGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHg8e3tF7lljcArBZDccd4MUlhchkN9sJblh yb1OJbLQ8cOt6ldmWh1L3MCPaAXyeAifOgb/Bdl1bRH8hPbIrTcaIDYO2Hev5htG fJ/X1FXK9LN6TmKXRnIB08x8K7mTGqPb7BRUfLSpBKyIAAPWnFIaCca7vb24ca+3 xYererfeh8DRrxh9DYUwTi+KJ4vaM3dhY0W6h+bDFK8fP05kA40c5IWG8hRQuyx1 TvKviuagLRX4omwwsXFKa/T1qldHJBTiGdscFjBvLlpaLWCxl7u/+M3fxj28KG2d vJN/MKjyvJHPvxBgn7qoxd482BWJZxdNw8E0TKsy0MMWldjZBBs= -----END CERTIFICATE-----Generated at Sun Sep 7 15:29:06 2025 by rpki-client