$ rpki-client -vvf repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft File: B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft (raw, json) Hash identifier: st0+RTsUlZh9xQrmnsnuhSCaVOwExbkgBVCGJvL0E7Y= Subject key identifier: F2:3D:CE:04:5F:77:61:96:F0:96:04:67:36:F0:DB:02:06:25:36:BD Authority key identifier: B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94 Certificate issuer: /CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094 Certificate serial: 2472F5C3811D79410E9F52848184B36929AA9F8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft Manifest number: 01BA Signing time: Thu 04 Sep 2025 02:40:05 +0000 Manifest this update: Thu 04 Sep 2025 02:35:05 +0000 Manifest next update: Sun 07 Sep 2025 14:19:05 +0000 Files and hashes: 1: 3130332e312e35302e302f32332d3233203d3e20313432333532.roa (hash: Pk+CfBb09D2NLm+w/mIdTLsk/cAe1V1lpiWgoIeGFHc=) 2: 3130332e312e35302e302f32342d3234203d3e20313432333532.roa (hash: 13a296YbpXPKiDroOx9RoYtV5Gqcvos+cOx12thufiw=) 3: B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl (hash: ewU6krZNt5LXI++OU9wweb050fRa+Ut4KNQu4DagdYQ=) 4: 3130332e312e35312e302f32342d3234203d3e20313432333532.roa (hash: Lx6mbXqTbsqqqJEaZ6Ptl1cSIXULA4hNI34A7lM8ago=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 14:19:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:72:f5:c3:81:1d:79:41:0e:9f:52:84:81:84:b3:69:29:aa:9f:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094 Validity Not Before: Sep 4 02:35:05 2025 GMT Not After : Sep 7 14:19:05 2025 GMT Subject: CN=F23DCE045F776196F096046736F0DB02062536BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:28:e4:dd:34:6a:a3:05:09:eb:48:f6:fe:3e: 2d:b6:66:37:8c:1b:d1:3f:f2:16:12:9e:4e:80:6a: 28:88:85:97:7a:b1:80:ae:2d:7e:dc:3a:da:01:89: de:8d:fa:aa:73:51:ea:a0:9c:d8:cd:de:b4:7e:b7: 05:b4:86:5f:00:e9:5f:c4:6e:97:1c:cb:2d:54:f7: e3:36:4f:87:96:44:3b:6e:70:35:be:db:57:dd:98: 22:7f:45:84:df:8e:3d:0f:51:a9:54:60:ef:45:64: 09:92:61:01:2a:68:da:4c:c6:b0:13:2d:fe:b5:2e: 9d:e6:8f:d6:2f:cf:aa:c6:73:20:28:58:b8:1e:f9: a6:ff:76:41:59:7e:b8:43:19:89:44:3f:85:c0:11: 01:b2:fa:92:7e:60:42:76:ad:2d:23:74:34:60:e2: 9e:d9:5c:2d:ce:95:01:9a:0c:57:a4:3d:30:21:ef: 66:6c:5e:b3:36:ab:c2:22:7c:28:fa:26:b9:04:dd: 49:15:2c:a7:fe:c7:11:45:54:6e:ee:83:6b:30:87: b8:1d:9d:70:8e:b3:9a:4a:9f:57:f1:bf:f4:9f:71: 4b:aa:5b:0d:2d:4e:fb:fd:ea:b0:fc:d3:5e:ce:e5: c0:44:d3:8c:f7:1f:d4:87:d2:24:e4:d1:a0:f4:97: 0e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3D:CE:04:5F:77:61:96:F0:96:04:67:36:F0:DB:02:06:25:36:BD X509v3 Authority Key Identifier: keyid:B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:53:02:e2:43:99:f5:c3:8e:6a:f5:9b:1e:27:d5:ed:b7:30: 92:b3:35:2b:7c:cf:2c:66:5d:4a:fb:5f:3a:1f:5a:39:77:ac: a5:84:54:87:ae:40:a6:1e:e0:45:75:1c:60:f8:18:0c:5f:a4: 10:c3:75:74:b0:b0:5f:8e:01:65:d7:34:ad:5a:fe:52:df:ce: e6:01:be:57:98:60:84:f3:f8:98:d9:30:62:d4:b5:5c:df:72: 9f:98:40:75:c5:a9:bf:85:a2:5b:22:78:4e:79:d9:f6:d6:dc: a1:8b:86:a0:ce:36:9a:7a:8e:6c:4f:2a:4a:9f:00:18:91:18: a1:c0:74:68:7b:93:ba:73:dc:52:91:06:a8:84:25:4b:90:12: 85:d7:9a:18:75:1c:a7:1d:85:4b:1c:7c:a0:d8:8a:db:c7:a9: dc:6a:8b:f8:4e:6f:cf:84:70:74:54:a9:21:f8:7b:cd:07:58: 03:6c:ff:55:64:6d:78:08:b1:cf:8d:4a:c3:32:d2:70:20:25: 7c:1e:12:fa:d0:31:27:3a:37:9d:ec:d7:ba:4d:59:9a:4b:06: 63:5d:25:2d:6d:c0:07:ff:d4:32:15:35:49:19:c2:ef:94:ab: d1:74:1d:e3:d9:b3:10:6c:78:ff:41:c7:01:16:c4:11:87:a0: 9b:49:30:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJHL1w4EdeUEOn1KEgYSzaSmqn4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1RDJB MDk5MzA5NDAeFw0yNTA5MDQwMjM1MDVaFw0yNTA5MDcxNDE5MDVaMDMxMTAvBgNV BAMTKEYyM0RDRTA0NUY3NzYxOTZGMDk2MDQ2NzM2RjBEQjAyMDYyNTM2QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+KOTdNGqjBQnrSPb+Pi22ZjeM G9E/8hYSnk6AaiiIhZd6sYCuLX7cOtoBid6N+qpzUeqgnNjN3rR+twW0hl8A6V/E bpccyy1U9+M2T4eWRDtucDW+21fdmCJ/RYTfjj0PUalUYO9FZAmSYQEqaNpMxrAT Lf61Lp3mj9Yvz6rGcyAoWLge+ab/dkFZfrhDGYlEP4XAEQGy+pJ+YEJ2rS0jdDRg 4p7ZXC3OlQGaDFekPTAh72ZsXrM2q8IifCj6JrkE3UkVLKf+xxFFVG7ug2swh7gd nXCOs5pKn1fxv/SfcUuqWw0tTvv96rD8017O5cBE04z3H9SH0iTk0aD0lw55AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8j3OBF93YZbwlgRnNvDbAgYlNr0wHwYDVR0j BBgwFoAUtINF9/n7TxT//ovFt0aF0qCZMJQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjUyYmY5Yy02MzRiLTQwYjktYWMwYy1hODdiNDdkNTlmOTEvMC9CNDgzNDVGN0Y5 RkI0RjE0RkZGRThCQzVCNzQ2ODVEMkEwOTkzMDk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1RDJBMDk5 MzA5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY1MmJmOWMtNjM0Yi00MGI5LWFj MGMtYTg3YjQ3ZDU5ZjkxLzAvQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1 RDJBMDk5MzA5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ5TAuJDmfXDjmr1mx4n1e23MJKzNSt8zyxm XUr7XzofWjl3rKWEVIeuQKYe4EV1HGD4GAxfpBDDdXSwsF+OAWXXNK1a/lLfzuYB vleYYITz+JjZMGLUtVzfcp+YQHXFqb+FolsieE552fbW3KGLhqDONpp6jmxPKkqf ABiRGKHAdGh7k7pz3FKRBqiEJUuQEoXXmhh1HKcdhUscfKDYitvHqdxqi/hOb8+E cHRUqSH4e80HWANs/1VkbXgIsc+NSsMy0nAgJXweEvrQMSc6N53s17pNWZpLBmNd JS1twAf/1DIVNUkZwu+Uq9F0HePZsxBseP9BxwEWxBGHoJtJMCw= -----END CERTIFICATE-----Generated at Fri Sep 5 10:17:28 2025 by rpki-client