$ rpki-client -vvf repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft File: B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft (raw, json) Hash identifier: CLTZTpVvUaPmIOfQIxfjnhC0aKCSFS5O/jdCgIZ2OxA= Subject key identifier: 94:9D:14:D7:34:1B:A3:31:E1:3D:CA:46:F5:69:94:BC:83:DC:5E:E2 Authority key identifier: B2:A7:61:D6:1C:BF:02:4F:24:CD:3A:18:BE:96:E5:8F:7E:D6:C9:09 Certificate issuer: /CN=B2A761D61CBF024F24CD3A18BE96E58F7ED6C909 Certificate serial: 67BF8E98DEB13AA73D2308357F0BD31FE73B1E07 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft Manifest number: 04CD Signing time: Sun 07 Sep 2025 10:01:11 +0000 Manifest this update: Sun 07 Sep 2025 09:56:11 +0000 Manifest next update: Wed 10 Sep 2025 11:03:11 +0000 Files and hashes: 1: B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.crl (hash: LMfyX+ElShNzMnKSuCfR7YSoAtdKLgeCCmaIoBhwqGA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.crl rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:bf:8e:98:de:b1:3a:a7:3d:23:08:35:7f:0b:d3:1f:e7:3b:1e:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2A761D61CBF024F24CD3A18BE96E58F7ED6C909 Validity Not Before: Sep 7 09:56:11 2025 GMT Not After : Sep 10 11:03:11 2025 GMT Subject: CN=949D14D7341BA331E13DCA46F56994BC83DC5EE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:63:e6:90:cd:9b:cf:b8:1c:a5:d8:4d:db:b8: 06:e2:9a:a2:14:75:9d:75:0a:6a:cb:23:34:f1:8c: c1:b9:d5:16:83:ca:65:fd:d1:e1:b8:37:2d:17:80: 5e:8f:db:dd:6a:81:ff:56:5b:90:d6:77:e1:8b:aa: 67:1d:93:79:35:b2:7c:6f:ec:d3:af:a3:48:d0:e6: 49:f5:55:cb:ee:34:7a:47:23:25:f8:aa:e1:17:84: 6b:09:80:d4:f1:5c:13:0d:52:7f:0c:58:e8:ea:94: 5f:0f:5a:d6:50:e6:16:11:78:31:58:4b:f0:c5:7f: e7:52:9d:27:13:08:97:6e:a3:b7:bd:ea:80:1a:32: 23:65:73:e5:b8:d3:21:84:78:46:d3:04:15:0d:e0: cc:72:91:65:95:05:09:3f:94:ad:e6:c2:e8:5f:e0: 7a:c4:bc:f5:21:a7:73:0a:15:3a:89:f6:f6:1f:b7: c3:42:68:bf:c6:bc:7e:25:18:4b:dd:55:17:fc:13: f3:83:1a:2f:56:6f:7c:28:11:6f:cd:bf:ae:61:1f: eb:d3:5b:ec:99:73:5a:f9:b6:d8:98:81:fd:07:d7: ec:b9:3b:a2:65:ff:bd:d3:cd:0d:7a:39:8e:27:d2: 93:a8:d5:b3:25:3d:d3:e7:59:e3:ec:8c:8f:5e:8a: ac:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:9D:14:D7:34:1B:A3:31:E1:3D:CA:46:F5:69:94:BC:83:DC:5E:E2 X509v3 Authority Key Identifier: keyid:B2:A7:61:D6:1C:BF:02:4F:24:CD:3A:18:BE:96:E5:8F:7E:D6:C9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:6c:28:19:ea:4a:60:e5:1e:6f:41:13:e0:01:0e:b0:ad:72: 00:4a:e1:79:41:1c:cd:d8:e4:ce:0e:b1:c8:df:51:58:cb:ce: 0a:4c:09:08:05:9f:fc:e1:95:9b:66:95:92:8b:e2:e7:26:b9: 9b:65:84:70:4e:04:c5:14:91:23:9e:9c:1e:b6:6e:26:16:fa: 63:9d:5b:8e:f2:78:b7:20:94:44:a5:69:5a:36:cf:f2:20:84: 51:d7:9a:4f:6a:26:74:fe:16:ce:61:7b:55:20:e8:0a:12:23: 48:18:8c:c7:d7:ed:ee:a8:d7:d5:34:45:d3:55:e7:e1:62:0c: 5d:6c:a5:1d:90:28:3a:42:f9:5f:cd:ea:24:44:52:27:84:d7: 59:22:8b:d5:d6:9d:9e:57:df:cf:0a:72:1c:ea:0c:9f:e9:14: f8:81:1c:37:11:c2:28:20:11:29:9b:d3:1d:7d:52:8d:8b:c7: 76:b8:60:6d:e3:f6:be:8c:d1:f7:07:80:41:a6:17:15:e9:b1: 97:a5:f9:7c:c7:bf:c2:c2:b0:8a:06:c5:2e:0f:14:48:ff:0a: d6:f1:86:8d:3a:f0:1b:a5:86:27:e8:83:96:51:b3:1b:b0:4b: 4a:83:1e:7a:d1:4b:5d:8d:1a:5b:01:f1:8e:ae:90:42:ce:3f: 1e:0c:08:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ7+OmN6xOqc9Iwg1fwvTH+c7HgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJBNzYxRDYxQ0JGMDI0RjI0Q0QzQTE4QkU5NkU1OEY3 RUQ2QzkwOTAeFw0yNTA5MDcwOTU2MTFaFw0yNTA5MTAxMTAzMTFaMDMxMTAvBgNV BAMTKDk0OUQxNEQ3MzQxQkEzMzFFMTNEQ0E0NkY1Njk5NEJDODNEQzVFRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGY+aQzZvPuByl2E3buAbimqIU dZ11CmrLIzTxjMG51RaDymX90eG4Ny0XgF6P291qgf9WW5DWd+GLqmcdk3k1snxv 7NOvo0jQ5kn1VcvuNHpHIyX4quEXhGsJgNTxXBMNUn8MWOjqlF8PWtZQ5hYReDFY S/DFf+dSnScTCJduo7e96oAaMiNlc+W40yGEeEbTBBUN4MxykWWVBQk/lK3mwuhf 4HrEvPUhp3MKFTqJ9vYft8NCaL/GvH4lGEvdVRf8E/ODGi9Wb3woEW/Nv65hH+vT W+yZc1r5ttiYgf0H1+y5O6Jl/73TzQ16OY4n0pOo1bMlPdPnWePsjI9eiqwlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlJ0U1zQbozHhPcpG9WmUvIPcXuIwHwYDVR0j BBgwFoAUsqdh1hy/Ak8kzToYvpblj37WyQkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YmE5N2IwYi0zOWFlLTRjMmMtYjEzYi0wMWUzOTViN2EyNGIvMC9CMkE3NjFENjFD QkYwMjRGMjRDRDNBMThCRTk2RTU4RjdFRDZDOTA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJBNzYxRDYxQ0JGMDI0RjI0Q0QzQTE4QkU5NkU1OEY3RUQ2 QzkwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmJhOTdiMGItMzlhZS00YzJjLWIx M2ItMDFlMzk1YjdhMjRiLzAvQjJBNzYxRDYxQ0JGMDI0RjI0Q0QzQTE4QkU5NkU1 OEY3RUQ2QzkwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABdsKBnqSmDlHm9BE+ABDrCtcgBK4XlBHM3Y 5M4OscjfUVjLzgpMCQgFn/zhlZtmlZKL4ucmuZtlhHBOBMUUkSOenB62biYW+mOd W47yeLcglESlaVo2z/IghFHXmk9qJnT+Fs5he1Ug6AoSI0gYjMfX7e6o19U0RdNV 5+FiDF1spR2QKDpC+V/N6iREUieE11kii9XWnZ5X388KchzqDJ/pFPiBHDcRwigg ESmb0x19Uo2Lx3a4YG3j9r6M0fcHgEGmFxXpsZel+XzHv8LCsIoGxS4PFEj/Ctbx ho068Bulhifog5ZRsxuwS0qDHnrRS12NGlsB8Y6ukELOPx4MCNQ= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:52 2025 by rpki-client